城市(city): unknown
省份(region): unknown
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.20.49.112
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 31216
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.20.49.112. IN A
;; AUTHORITY SECTION:
. 175 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022032801 1800 900 604800 86400
;; Query time: 29 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Mar 29 12:22:35 CST 2022
;; MSG SIZE rcvd: 106Host 112.49.20.104.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 112.49.20.104.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 39.96.194.104 | attack | MultiHost/MultiPort Probe, Scan, Hack - |
2019-10-25 12:24:08 |
| 45.136.110.48 | attackbots | Oct 25 05:55:49 mc1 kernel: \[3262091.069194\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=45.136.110.48 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=12666 PROTO=TCP SPT=51874 DPT=9262 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 25 05:56:44 mc1 kernel: \[3262145.925084\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=45.136.110.48 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=32741 PROTO=TCP SPT=51874 DPT=9492 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 25 05:57:05 mc1 kernel: \[3262166.525892\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=45.136.110.48 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=64958 PROTO=TCP SPT=51874 DPT=9453 WINDOW=1024 RES=0x00 SYN URGP=0 ... |
2019-10-25 12:25:54 |
| 41.208.150.114 | attack | Oct 25 00:10:34 ny01 sshd[29576]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.208.150.114 Oct 25 00:10:37 ny01 sshd[29576]: Failed password for invalid user password from 41.208.150.114 port 59127 ssh2 Oct 25 00:14:59 ny01 sshd[29999]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.208.150.114 |
2019-10-25 12:41:36 |
| 140.143.200.251 | attackspambots | Oct 25 06:13:47 legacy sshd[26696]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.200.251 Oct 25 06:13:49 legacy sshd[26696]: Failed password for invalid user cssserver from 140.143.200.251 port 40358 ssh2 Oct 25 06:21:15 legacy sshd[26948]: Failed password for root from 140.143.200.251 port 48236 ssh2 ... |
2019-10-25 12:30:55 |
| 92.118.38.38 | attack | Oct 25 05:55:36 webserver postfix/smtpd\[18984\]: warning: unknown\[92.118.38.38\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 25 05:56:13 webserver postfix/smtpd\[20578\]: warning: unknown\[92.118.38.38\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 25 05:56:49 webserver postfix/smtpd\[19323\]: warning: unknown\[92.118.38.38\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 25 05:57:25 webserver postfix/smtpd\[20578\]: warning: unknown\[92.118.38.38\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 25 05:58:01 webserver postfix/smtpd\[19323\]: warning: unknown\[92.118.38.38\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2019-10-25 12:04:04 |
| 103.206.81.7 | attackbots | Website administration hacking try |
2019-10-25 12:16:18 |
| 159.65.239.48 | attackbots | Oct 25 00:53:56 firewall sshd[24494]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.239.48 user=root Oct 25 00:53:58 firewall sshd[24494]: Failed password for root from 159.65.239.48 port 43330 ssh2 Oct 25 00:57:29 firewall sshd[24596]: Invalid user testmail from 159.65.239.48 ... |
2019-10-25 12:08:06 |
| 50.67.178.164 | attackspam | Oct 25 05:50:28 lnxweb62 sshd[12100]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=50.67.178.164 Oct 25 05:50:30 lnxweb62 sshd[12100]: Failed password for invalid user jukebox from 50.67.178.164 port 41838 ssh2 Oct 25 05:57:34 lnxweb62 sshd[15982]: Failed password for root from 50.67.178.164 port 52158 ssh2 |
2019-10-25 12:06:25 |
| 14.160.26.57 | attack | Unauthorised access (Oct 25) SRC=14.160.26.57 LEN=52 TTL=115 ID=2294 DF TCP DPT=445 WINDOW=8192 SYN |
2019-10-25 12:15:56 |
| 222.186.175.155 | attack | Triggered by Fail2Ban at Ares web server |
2019-10-25 12:35:12 |
| 200.169.223.98 | attackbotsspam | 2019-10-24T22:03:59.4258351495-001 sshd\[34905\]: Invalid user Cisco from 200.169.223.98 port 46278 2019-10-24T22:03:59.4330011495-001 sshd\[34905\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.169.223.98 2019-10-24T22:04:01.3528591495-001 sshd\[34905\]: Failed password for invalid user Cisco from 200.169.223.98 port 46278 ssh2 2019-10-24T23:43:14.3890811495-001 sshd\[38481\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.169.223.98 user=root 2019-10-24T23:43:16.4935871495-001 sshd\[38481\]: Failed password for root from 200.169.223.98 port 60888 ssh2 2019-10-24T23:47:42.7253171495-001 sshd\[38691\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.169.223.98 user=root ... |
2019-10-25 12:03:15 |
| 79.7.241.94 | attackspam | 2019-10-25T04:31:24.878070abusebot-8.cloudsearch.cf sshd\[696\]: Invalid user 1q2w3e!Q@W from 79.7.241.94 port 61050 |
2019-10-25 12:45:09 |
| 95.47.230.161 | attackspam | " " |
2019-10-25 12:10:50 |
| 51.68.251.201 | attack | Oct 25 05:57:32 [snip] sshd[23280]: Invalid user apotre from 51.68.251.201 port 35162 Oct 25 05:57:32 [snip] sshd[23280]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.251.201 Oct 25 05:57:35 [snip] sshd[23280]: Failed password for invalid user apotre from 51.68.251.201 port 35162 ssh2[...] |
2019-10-25 12:05:52 |
| 146.164.21.68 | attack | 2019-10-24T21:49:32.2850491495-001 sshd\[34349\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=pharma.pharma.ufrj.br user=mysql 2019-10-24T21:49:34.3009121495-001 sshd\[34349\]: Failed password for mysql from 146.164.21.68 port 38907 ssh2 2019-10-24T23:41:55.7385451495-001 sshd\[38443\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=pharma.pharma.ufrj.br user=root 2019-10-24T23:41:57.3318001495-001 sshd\[38443\]: Failed password for root from 146.164.21.68 port 46815 ssh2 2019-10-24T23:46:24.3665761495-001 sshd\[38615\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=pharma.pharma.ufrj.br user=root 2019-10-24T23:46:26.2259031495-001 sshd\[38615\]: Failed password for root from 146.164.21.68 port 37696 ssh2 ... |
2019-10-25 12:47:13 |