城市(city): unknown
省份(region): unknown
国家(country): United States of America (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 108.139.242.24
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 4844
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;108.139.242.24. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025013001 1800 900 604800 86400
;; Query time: 41 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jan 31 12:47:40 CST 2025
;; MSG SIZE rcvd: 10724.242.139.108.in-addr.arpa domain name pointer server-108-139-242-24.mxp63.r.cloudfront.net.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
24.242.139.108.in-addr.arpa name = server-108-139-242-24.mxp63.r.cloudfront.net.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 191.35.225.24 | attackbots | Lines containing failures of 191.35.225.24 Sep 19 18:48:23 mx-in-02 sshd[15780]: Invalid user zc from 191.35.225.24 port 49738 Sep 19 18:48:23 mx-in-02 sshd[15780]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.35.225.24 Sep 19 18:48:25 mx-in-02 sshd[15780]: Failed password for invalid user zc from 191.35.225.24 port 49738 ssh2 Sep 19 18:48:26 mx-in-02 sshd[15780]: Received disconnect from 191.35.225.24 port 49738:11: Bye Bye [preauth] Sep 19 18:48:26 mx-in-02 sshd[15780]: Disconnected from invalid user zc 191.35.225.24 port 49738 [preauth] Sep 19 19:32:04 mx-in-02 sshd[19413]: Invalid user aree from 191.35.225.24 port 21446 Sep 19 19:32:04 mx-in-02 sshd[19413]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.35.225.24 Sep 19 19:32:06 mx-in-02 sshd[19413]: Failed password for invalid user aree from 191.35.225.24 port 21446 ssh2 Sep 19 19:32:08 mx-in-02 sshd[19413]: Received discon........ ------------------------------ |
2019-09-20 04:36:14 |
| 46.61.104.232 | attackbotsspam | Admin Joomla Attack |
2019-09-20 04:37:12 |
| 24.241.233.170 | attackspam | Sep 19 21:35:20 rpi sshd[15765]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=24.241.233.170 Sep 19 21:35:22 rpi sshd[15765]: Failed password for invalid user ubnt from 24.241.233.170 port 49828 ssh2 |
2019-09-20 04:05:41 |
| 157.230.115.27 | attack | Sep 19 10:22:53 hpm sshd\[21254\]: Invalid user cd123 from 157.230.115.27 Sep 19 10:22:53 hpm sshd\[21254\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.115.27 Sep 19 10:22:55 hpm sshd\[21254\]: Failed password for invalid user cd123 from 157.230.115.27 port 48668 ssh2 Sep 19 10:27:16 hpm sshd\[21763\]: Invalid user asteriskasterisk from 157.230.115.27 Sep 19 10:27:16 hpm sshd\[21763\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.115.27 |
2019-09-20 04:30:02 |
| 69.229.0.17 | attackbots | Sep 19 20:59:21 garuda sshd[324094]: Invalid user planeacion from 69.229.0.17 Sep 19 20:59:21 garuda sshd[324094]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.229.0.17 Sep 19 20:59:23 garuda sshd[324094]: Failed password for invalid user planeacion from 69.229.0.17 port 16042 ssh2 Sep 19 20:59:23 garuda sshd[324094]: Received disconnect from 69.229.0.17: 11: Bye Bye [preauth] Sep 19 21:14:13 garuda sshd[327814]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.229.0.17 user=nagios Sep 19 21:14:14 garuda sshd[327814]: Failed password for nagios from 69.229.0.17 port 30258 ssh2 Sep 19 21:14:15 garuda sshd[327814]: Received disconnect from 69.229.0.17: 11: Bye Bye [preauth] Sep 19 21:18:13 garuda sshd[328903]: Invalid user dy from 69.229.0.17 Sep 19 21:18:13 garuda sshd[328903]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.229.0.17 Sep 1........ ------------------------------- |
2019-09-20 04:15:42 |
| 190.119.190.122 | attackbots | Sep 19 13:41:26 home sshd[25489]: Invalid user user from 190.119.190.122 port 47864 Sep 19 13:41:26 home sshd[25489]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.119.190.122 Sep 19 13:41:26 home sshd[25489]: Invalid user user from 190.119.190.122 port 47864 Sep 19 13:41:28 home sshd[25489]: Failed password for invalid user user from 190.119.190.122 port 47864 ssh2 Sep 19 13:48:45 home sshd[25518]: Invalid user user from 190.119.190.122 port 55518 Sep 19 13:48:46 home sshd[25518]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.119.190.122 Sep 19 13:48:45 home sshd[25518]: Invalid user user from 190.119.190.122 port 55518 Sep 19 13:48:47 home sshd[25518]: Failed password for invalid user user from 190.119.190.122 port 55518 ssh2 Sep 19 13:52:57 home sshd[25530]: Invalid user inactive from 190.119.190.122 port 39444 Sep 19 13:52:57 home sshd[25530]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=s |
2019-09-20 04:24:44 |
| 178.210.69.23 | attack | plussize.fitness 178.210.69.23 \[19/Sep/2019:21:55:38 +0200\] "POST /wp-login.php HTTP/1.1" 200 5629 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" plussize.fitness 178.210.69.23 \[19/Sep/2019:21:55:39 +0200\] "POST /wp-login.php HTTP/1.1" 200 5582 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" |
2019-09-20 04:05:57 |
| 37.187.12.126 | attack | Sep 19 20:03:56 localhost sshd\[127113\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.12.126 user=root Sep 19 20:03:57 localhost sshd\[127113\]: Failed password for root from 37.187.12.126 port 37724 ssh2 Sep 19 20:07:59 localhost sshd\[127302\]: Invalid user app from 37.187.12.126 port 51930 Sep 19 20:07:59 localhost sshd\[127302\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.12.126 Sep 19 20:08:01 localhost sshd\[127302\]: Failed password for invalid user app from 37.187.12.126 port 51930 ssh2 ... |
2019-09-20 04:22:27 |
| 49.232.33.89 | attack | Sep 19 18:29:54 zn013 sshd[30760]: Invalid user Abbott from 49.232.33.89 Sep 19 18:29:54 zn013 sshd[30760]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.232.33.89 Sep 19 18:29:55 zn013 sshd[30760]: Failed password for invalid user Abbott from 49.232.33.89 port 33492 ssh2 Sep 19 18:29:56 zn013 sshd[30760]: Received disconnect from 49.232.33.89: 11: Bye Bye [preauth] Sep 19 18:46:00 zn013 sshd[31377]: Invalid user advantage from 49.232.33.89 Sep 19 18:46:00 zn013 sshd[31377]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.232.33.89 Sep 19 18:46:02 zn013 sshd[31377]: Failed password for invalid user advantage from 49.232.33.89 port 37177 ssh2 Sep 19 18:46:02 zn013 sshd[31377]: Received disconnect from 49.232.33.89: 11: Bye Bye [preauth] Sep 19 18:51:23 zn013 sshd[31571]: Invalid user wanker from 49.232.33.89 Sep 19 18:51:23 zn013 sshd[31571]: pam_unix(sshd:auth): authentication fail........ ------------------------------- |
2019-09-20 04:30:47 |
| 91.228.153.116 | attackbotsspam | 2019-09-19T21:31:06.926554 sshd[8735]: Invalid user jj123 from 91.228.153.116 port 46534 2019-09-19T21:31:06.941720 sshd[8735]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.228.153.116 2019-09-19T21:31:06.926554 sshd[8735]: Invalid user jj123 from 91.228.153.116 port 46534 2019-09-19T21:31:09.169561 sshd[8735]: Failed password for invalid user jj123 from 91.228.153.116 port 46534 ssh2 2019-09-19T21:35:20.724913 sshd[8798]: Invalid user password from 91.228.153.116 port 33212 ... |
2019-09-20 04:07:36 |
| 51.15.180.145 | attackspam | Sep 19 18:06:18 zn013 sshd[30243]: Address 51.15.180.145 maps to 51-15-180-145.rev.poneytelecom.eu, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Sep 19 18:06:18 zn013 sshd[30243]: Invalid user steve from 51.15.180.145 Sep 19 18:06:18 zn013 sshd[30243]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.15.180.145 Sep 19 18:06:20 zn013 sshd[30243]: Failed password for invalid user steve from 51.15.180.145 port 49758 ssh2 Sep 19 18:06:20 zn013 sshd[30243]: Received disconnect from 51.15.180.145: 11: Bye Bye [preauth] Sep 19 18:20:49 zn013 sshd[30529]: Address 51.15.180.145 maps to 51-15-180-145.rev.poneytelecom.eu, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Sep 19 18:20:49 zn013 sshd[30529]: Invalid user oracle from 51.15.180.145 Sep 19 18:20:49 zn013 sshd[30529]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.15.180.145 Sep 19 18:20:........ ------------------------------- |
2019-09-20 04:04:42 |
| 162.247.73.192 | attackspam | Sep 19 21:35:20 cvbmail sshd\[4047\]: Invalid user a1 from 162.247.73.192 Sep 19 21:35:20 cvbmail sshd\[4047\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.247.73.192 Sep 19 21:35:21 cvbmail sshd\[4047\]: Failed password for invalid user a1 from 162.247.73.192 port 57454 ssh2 |
2019-09-20 04:06:22 |
| 96.127.158.234 | attackspambots | 3389BruteforceFW23 |
2019-09-20 04:02:17 |
| 103.200.4.20 | attackbots | Sep 19 21:35:27 vps01 sshd[8529]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.200.4.20 Sep 19 21:35:28 vps01 sshd[8529]: Failed password for invalid user xxx from 103.200.4.20 port 37690 ssh2 |
2019-09-20 04:00:22 |
| 181.110.240.194 | attackspambots | Sep 19 21:41:29 h2177944 sshd\[23456\]: Invalid user joomla from 181.110.240.194 port 41412 Sep 19 21:41:29 h2177944 sshd\[23456\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.110.240.194 Sep 19 21:41:31 h2177944 sshd\[23456\]: Failed password for invalid user joomla from 181.110.240.194 port 41412 ssh2 Sep 19 21:46:56 h2177944 sshd\[23678\]: Invalid user gmodserver from 181.110.240.194 port 56290 ... |
2019-09-20 03:58:57 |