城市(city): unknown
省份(region): unknown
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.20.24.134
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 52804
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.20.24.134. IN A
;; AUTHORITY SECTION:
. 119 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022040301 1800 900 604800 86400
;; Query time: 72 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Apr 04 14:04:45 CST 2022
;; MSG SIZE rcvd: 106Host 134.24.20.104.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 134.24.20.104.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 216.218.206.116 | attack | Port scan denied |
2020-08-03 03:08:48 |
| 77.76.205.132 | attackbots | fail2ban - Attack against Apache (too many 404s) |
2020-08-03 03:14:42 |
| 68.183.89.147 | attackbots | (sshd) Failed SSH login from 68.183.89.147 (IN/India/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Aug 2 16:49:24 srv sshd[32411]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.89.147 user=root Aug 2 16:49:26 srv sshd[32411]: Failed password for root from 68.183.89.147 port 46330 ssh2 Aug 2 16:58:02 srv sshd[32525]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.89.147 user=root Aug 2 16:58:03 srv sshd[32525]: Failed password for root from 68.183.89.147 port 47720 ssh2 Aug 2 17:02:46 srv sshd[32603]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.89.147 user=root |
2020-08-03 03:43:28 |
| 159.65.174.29 | attackspam | Port scanning [2 denied] |
2020-08-03 03:09:06 |
| 223.199.31.35 | attackbots | Brute force attempt |
2020-08-03 03:25:23 |
| 123.191.35.158 | attack | Aug 2 11:44:02 XXX sshd[21008]: Invalid user admin from 123.191.35.158 Aug 2 11:44:03 XXX sshd[21008]: Received disconnect from 123.191.35.158: 11: Bye Bye [preauth] Aug 2 11:44:05 XXX sshd[21163]: User r.r from 123.191.35.158 not allowed because none of user's groups are listed in AllowGroups Aug 2 11:44:06 XXX sshd[21163]: Received disconnect from 123.191.35.158: 11: Bye Bye [preauth] Aug 2 11:44:08 XXX sshd[21187]: Invalid user admin from 123.191.35.158 Aug 2 11:44:09 XXX sshd[21187]: Received disconnect from 123.191.35.158: 11: Bye Bye [preauth] Aug 2 11:44:11 XXX sshd[21189]: Invalid user admin from 123.191.35.158 Aug 2 11:44:12 XXX sshd[21189]: Received disconnect from 123.191.35.158: 11: Bye Bye [preauth] Aug 2 11:44:14 XXX sshd[21193]: Invalid user admin from 123.191.35.158 Aug 2 11:44:14 XXX sshd[21193]: Received disconnect from 123.191.35.158: 11: Bye Bye [preauth] Aug 2 11:44:17 XXX sshd[21195]: Invalid user apache from 123.191.35.158 ........ ------------------------------------------ |
2020-08-03 03:43:59 |
| 216.218.206.108 | attack | MultiHost/MultiPort Probe, Scan, Hack - |
2020-08-03 03:22:07 |
| 118.126.105.120 | attackspambots |
|
2020-08-03 03:45:57 |
| 39.42.114.212 | attack | Automatic report - Port Scan Attack |
2020-08-03 03:38:38 |
| 182.122.7.244 | attackspam | Aug 2 15:04:20 carla sshd[6498]: reveeclipse mapping checking getaddrinfo for hn.kd.ny.adsl [182.122.7.244] failed - POSSIBLE BREAK-IN ATTEMPT! Aug 2 15:04:20 carla sshd[6498]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.122.7.244 user=r.r Aug 2 15:04:22 carla sshd[6498]: Failed password for r.r from 182.122.7.244 port 19310 ssh2 Aug 2 15:04:22 carla sshd[6499]: Received disconnect from 182.122.7.244: 11: Bye Bye Aug 2 15:10:01 carla sshd[6504]: reveeclipse mapping checking getaddrinfo for hn.kd.ny.adsl [182.122.7.244] failed - POSSIBLE BREAK-IN ATTEMPT! Aug 2 15:10:01 carla sshd[6504]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.122.7.244 user=r.r Aug 2 15:10:04 carla sshd[6504]: Failed password for r.r from 182.122.7.244 port 24838 ssh2 Aug 2 15:10:04 carla sshd[6505]: Received disconnect from 182.122.7.244: 11: Bye Bye Aug 2 15:14:07 carla sshd[6512]: reveeclips........ ------------------------------- |
2020-08-03 03:16:54 |
| 60.2.10.190 | attackbotsspam | prod11 ... |
2020-08-03 03:24:06 |
| 106.124.140.36 | attackspam | 2020-08-02T13:55:26.127037vps751288.ovh.net sshd\[24609\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.124.140.36 user=root 2020-08-02T13:55:28.483266vps751288.ovh.net sshd\[24609\]: Failed password for root from 106.124.140.36 port 55329 ssh2 2020-08-02T13:59:54.090173vps751288.ovh.net sshd\[24641\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.124.140.36 user=root 2020-08-02T13:59:55.904425vps751288.ovh.net sshd\[24641\]: Failed password for root from 106.124.140.36 port 51627 ssh2 2020-08-02T14:04:27.044614vps751288.ovh.net sshd\[24709\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.124.140.36 user=root |
2020-08-03 03:27:20 |
| 124.167.226.214 | attackspam | 2020-08-02T02:19:47.652987hostname sshd[25625]: Failed password for root from 124.167.226.214 port 55941 ssh2 ... |
2020-08-03 03:37:47 |
| 178.165.99.208 | attackbotsspam | Aug 2 08:15:49 ny01 sshd[26132]: Failed password for root from 178.165.99.208 port 36508 ssh2 Aug 2 08:19:51 ny01 sshd[26697]: Failed password for root from 178.165.99.208 port 46328 ssh2 |
2020-08-03 03:45:26 |
| 218.0.60.235 | attackspam | "fail2ban match" |
2020-08-03 03:14:27 |