城市(city): unknown
省份(region): unknown
国家(country): Republic of China (ROC)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 111.242.57.49
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 33594
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;111.242.57.49. IN A
;; AUTHORITY SECTION:
. 233 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022022800 1800 900 604800 86400
;; Query time: 64 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 28 21:56:19 CST 2022
;; MSG SIZE rcvd: 10649.57.242.111.in-addr.arpa domain name pointer 111-242-57-49.dynamic-ip.hinet.net.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
49.57.242.111.in-addr.arpa name = 111-242-57-49.dynamic-ip.hinet.net.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 157.245.103.15 | attackspam | Oct 18 23:11:16 server sshd\[874\]: Invalid user guest from 157.245.103.15 port 59414 Oct 18 23:11:16 server sshd\[874\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.103.15 Oct 18 23:11:18 server sshd\[874\]: Failed password for invalid user guest from 157.245.103.15 port 59414 ssh2 Oct 18 23:15:47 server sshd\[28438\]: User root from 157.245.103.15 not allowed because listed in DenyUsers Oct 18 23:15:47 server sshd\[28438\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.103.15 user=root |
2019-10-19 04:18:50 |
| 51.75.70.30 | attackspambots | Oct 18 21:44:42 ns381471 sshd[31918]: Failed password for root from 51.75.70.30 port 58161 ssh2 Oct 18 21:49:09 ns381471 sshd[32033]: Failed password for root from 51.75.70.30 port 50032 ssh2 |
2019-10-19 04:08:44 |
| 111.230.157.219 | attackspambots | Oct 18 20:44:49 vps58358 sshd\[2216\]: Invalid user zaqxswcdevfr from 111.230.157.219Oct 18 20:44:52 vps58358 sshd\[2216\]: Failed password for invalid user zaqxswcdevfr from 111.230.157.219 port 45432 ssh2Oct 18 20:49:20 vps58358 sshd\[2252\]: Invalid user wuyan1976 from 111.230.157.219Oct 18 20:49:22 vps58358 sshd\[2252\]: Failed password for invalid user wuyan1976 from 111.230.157.219 port 54452 ssh2Oct 18 20:53:58 vps58358 sshd\[2308\]: Invalid user yoko123 from 111.230.157.219Oct 18 20:54:00 vps58358 sshd\[2308\]: Failed password for invalid user yoko123 from 111.230.157.219 port 35250 ssh2 ... |
2019-10-19 03:56:36 |
| 202.131.231.210 | attackspambots | Oct 18 19:48:35 localhost sshd\[1404\]: Invalid user 1 from 202.131.231.210 port 52682 Oct 18 19:48:35 localhost sshd\[1404\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.131.231.210 Oct 18 19:48:37 localhost sshd\[1404\]: Failed password for invalid user 1 from 202.131.231.210 port 52682 ssh2 Oct 18 19:53:30 localhost sshd\[1571\]: Invalid user lena123 from 202.131.231.210 port 36222 Oct 18 19:53:30 localhost sshd\[1571\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.131.231.210 ... |
2019-10-19 04:15:03 |
| 191.54.105.152 | attack | 191.54.105.152 - - [18/Oct/2019:15:53:41 -0400] "GET /?page=products&action=view&manufacturerID=61&productID=../etc/passwd&linkID=16812 HTTP/1.1" 302 - "https://exitdevice.com/?page=products&action=view&manufacturerID=61&productID=../etc/passwd&linkID=16812" "Mozilla/5.0 (Windows NT 10.0; WOW64; Rv:50.0) Gecko/20100101 Firefox/50.0" ... |
2019-10-19 04:03:39 |
| 72.221.196.149 | attackbotsspam | [munged]::443 72.221.196.149 - - [18/Oct/2019:21:53:22 +0200] "POST /[munged]: HTTP/1.1" 200 7962 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0" [munged]::443 72.221.196.149 - - [18/Oct/2019:21:53:24 +0200] "POST /[munged]: HTTP/1.1" 200 4369 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0" [munged]::443 72.221.196.149 - - [18/Oct/2019:21:53:25 +0200] "POST /[munged]: HTTP/1.1" 200 4369 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0" [munged]::443 72.221.196.149 - - [18/Oct/2019:21:53:28 +0200] "POST /[munged]: HTTP/1.1" 200 4369 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0" [munged]::443 72.221.196.149 - - [18/Oct/2019:21:53:30 +0200] "POST /[munged]: HTTP/1.1" 200 4369 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0" [munged]::443 72.221.196.149 - - [18/Oct/2019:21: |
2019-10-19 04:08:28 |
| 216.218.134.12 | attackspambots | Oct 18 21:53:30 rotator sshd\[2212\]: Address 216.218.134.12 maps to tor-exit.altsci.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!Oct 18 21:53:31 rotator sshd\[2212\]: Failed password for root from 216.218.134.12 port 45833 ssh2Oct 18 21:53:34 rotator sshd\[2212\]: Failed password for root from 216.218.134.12 port 45833 ssh2Oct 18 21:53:36 rotator sshd\[2212\]: Failed password for root from 216.218.134.12 port 45833 ssh2Oct 18 21:53:39 rotator sshd\[2212\]: Failed password for root from 216.218.134.12 port 45833 ssh2Oct 18 21:53:42 rotator sshd\[2212\]: Failed password for root from 216.218.134.12 port 45833 ssh2 ... |
2019-10-19 04:05:18 |
| 104.248.159.69 | attack | Oct 18 09:45:44 php1 sshd\[23513\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.159.69 user=root Oct 18 09:45:46 php1 sshd\[23513\]: Failed password for root from 104.248.159.69 port 47898 ssh2 Oct 18 09:49:51 php1 sshd\[24262\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.159.69 user=root Oct 18 09:49:53 php1 sshd\[24262\]: Failed password for root from 104.248.159.69 port 57452 ssh2 Oct 18 09:53:52 php1 sshd\[24763\]: Invalid user melissa from 104.248.159.69 |
2019-10-19 04:00:16 |
| 51.75.202.218 | attack | 2019-10-18T20:05:17.166199shield sshd\[9791\]: Invalid user sundance1 from 51.75.202.218 port 58046 2019-10-18T20:05:17.170724shield sshd\[9791\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.ip-51-75-202.eu 2019-10-18T20:05:19.545630shield sshd\[9791\]: Failed password for invalid user sundance1 from 51.75.202.218 port 58046 ssh2 2019-10-18T20:09:22.665541shield sshd\[10919\]: Invalid user P@ssword from 51.75.202.218 port 45202 2019-10-18T20:09:22.669718shield sshd\[10919\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.ip-51-75-202.eu |
2019-10-19 04:16:34 |
| 212.32.230.212 | attack | [portscan] Port scan |
2019-10-19 04:09:38 |
| 106.12.202.181 | attackbots | Oct 18 15:59:08 firewall sshd[20608]: Invalid user officina from 106.12.202.181 Oct 18 15:59:10 firewall sshd[20608]: Failed password for invalid user officina from 106.12.202.181 port 54521 ssh2 Oct 18 16:03:10 firewall sshd[20725]: Invalid user qpalzm123 from 106.12.202.181 ... |
2019-10-19 03:53:36 |
| 27.71.209.238 | attackbotsspam | 27.71.209.238 - - [18/Oct/2019:07:32:09 -0400] "GET /?page=..%2f..%2fetc%2fpasswd&action=view&manufacturerID=143&productID=9300&linkID=7489&duplicate=0 HTTP/1.1" 200 16655 "https://exitdevice.com/?page=..%2f..%2fetc%2fpasswd&action=view&manufacturerID=143&productID=9300&linkID=7489&duplicate=0" "Mozilla/5.0 (Windows NT 10.0; WOW64; Rv:50.0) Gecko/20100101 Firefox/50.0" ... |
2019-10-19 03:51:56 |
| 167.71.56.82 | attackbots | Oct 18 18:19:39 unicornsoft sshd\[16547\]: User root from 167.71.56.82 not allowed because not listed in AllowUsers Oct 18 18:19:39 unicornsoft sshd\[16547\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.56.82 user=root Oct 18 18:19:41 unicornsoft sshd\[16547\]: Failed password for invalid user root from 167.71.56.82 port 46542 ssh2 |
2019-10-19 03:44:51 |
| 202.29.220.186 | attackspam | SSH Scan |
2019-10-19 03:44:22 |
| 170.244.99.61 | attackspambots | Unauthorized connection attempt from IP address 170.244.99.61 on Port 445(SMB) |
2019-10-19 03:41:49 |