城市(city): unknown
省份(region): unknown
国家(country): China
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 111.31.7.117
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 38666
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;111.31.7.117. IN A
;; AUTHORITY SECTION:
. 328 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022040400 1800 900 604800 86400
;; Query time: 19 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Apr 04 15:56:06 CST 2022
;; MSG SIZE rcvd: 105Host 117.7.31.111.in-addr.arpa not found: 2(SERVFAIL)
;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server: 183.60.82.98
Address: 183.60.82.98#53
** server can't find 117.7.31.111.in-addr.arpa: SERVFAIL| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 92.119.160.52 | attackbots | Sep 29 05:42:13 mc1 kernel: \[1014962.887270\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=92.119.160.52 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=957 PROTO=TCP SPT=52658 DPT=61800 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 29 05:50:19 mc1 kernel: \[1015449.563360\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=92.119.160.52 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=21599 PROTO=TCP SPT=52658 DPT=34265 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 29 05:51:50 mc1 kernel: \[1015540.727638\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=92.119.160.52 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=20189 PROTO=TCP SPT=52658 DPT=52025 WINDOW=1024 RES=0x00 SYN URGP=0 ... |
2019-09-29 15:38:30 |
| 219.156.130.255 | attackspam | Unauthorised access (Sep 29) SRC=219.156.130.255 LEN=40 TTL=49 ID=49392 TCP DPT=8080 WINDOW=27995 SYN Unauthorised access (Sep 29) SRC=219.156.130.255 LEN=40 TTL=49 ID=29050 TCP DPT=8080 WINDOW=35771 SYN |
2019-09-29 15:38:01 |
| 178.62.234.122 | attack | Sep 29 09:10:33 mail sshd\[16370\]: Invalid user 20150602 from 178.62.234.122 port 42402 Sep 29 09:10:33 mail sshd\[16370\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.234.122 Sep 29 09:10:34 mail sshd\[16370\]: Failed password for invalid user 20150602 from 178.62.234.122 port 42402 ssh2 Sep 29 09:14:31 mail sshd\[16726\]: Invalid user 123 from 178.62.234.122 port 54806 Sep 29 09:14:31 mail sshd\[16726\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.234.122 |
2019-09-29 15:20:54 |
| 115.238.236.74 | attackbotsspam | 2019-09-29T09:43:56.194986tmaserv sshd\[13978\]: Invalid user ji from 115.238.236.74 port 2673 2019-09-29T09:43:56.199076tmaserv sshd\[13978\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.238.236.74 2019-09-29T09:43:58.459736tmaserv sshd\[13978\]: Failed password for invalid user ji from 115.238.236.74 port 2673 ssh2 2019-09-29T09:55:39.555929tmaserv sshd\[14443\]: Invalid user dnslog from 115.238.236.74 port 21782 2019-09-29T09:55:39.560836tmaserv sshd\[14443\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.238.236.74 2019-09-29T09:55:41.999075tmaserv sshd\[14443\]: Failed password for invalid user dnslog from 115.238.236.74 port 21782 ssh2 ... |
2019-09-29 15:07:39 |
| 115.114.111.94 | attackspambots | 2019-09-29T08:02:46.124994 sshd[7562]: Invalid user admin from 115.114.111.94 port 57960 2019-09-29T08:02:46.140061 sshd[7562]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.114.111.94 2019-09-29T08:02:46.124994 sshd[7562]: Invalid user admin from 115.114.111.94 port 57960 2019-09-29T08:02:48.312011 sshd[7562]: Failed password for invalid user admin from 115.114.111.94 port 57960 ssh2 2019-09-29T08:07:07.158012 sshd[7600]: Invalid user vyatta from 115.114.111.94 port 41884 ... |
2019-09-29 14:58:06 |
| 18.140.165.118 | attackbots | 2019-09-28T23:43:07.5756801495-001 sshd\[36885\]: Failed password for invalid user permit from 18.140.165.118 port 44374 ssh2 2019-09-28T23:54:28.2400961495-001 sshd\[37752\]: Invalid user 123 from 18.140.165.118 port 43182 2019-09-28T23:54:28.2476071495-001 sshd\[37752\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ec2-18-140-165-118.ap-southeast-1.compute.amazonaws.com 2019-09-28T23:54:30.2889731495-001 sshd\[37752\]: Failed password for invalid user 123 from 18.140.165.118 port 43182 ssh2 2019-09-29T00:00:14.6106771495-001 sshd\[38228\]: Invalid user splashmc123 from 18.140.165.118 port 58498 2019-09-29T00:00:14.6180931495-001 sshd\[38228\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ec2-18-140-165-118.ap-southeast-1.compute.amazonaws.com ... |
2019-09-29 15:24:20 |
| 106.13.115.197 | attack | Sep 29 07:08:28 venus sshd\[16411\]: Invalid user sabra from 106.13.115.197 port 50151 Sep 29 07:08:28 venus sshd\[16411\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.115.197 Sep 29 07:08:30 venus sshd\[16411\]: Failed password for invalid user sabra from 106.13.115.197 port 50151 ssh2 ... |
2019-09-29 15:14:06 |
| 5.196.7.123 | attackbotsspam | Sep 28 18:04:26 hpm sshd\[29454\]: Invalid user sqsysop from 5.196.7.123 Sep 28 18:04:26 hpm sshd\[29454\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.ip-5-196-7.eu Sep 28 18:04:28 hpm sshd\[29454\]: Failed password for invalid user sqsysop from 5.196.7.123 port 49906 ssh2 Sep 28 18:08:31 hpm sshd\[29808\]: Invalid user grassi from 5.196.7.123 Sep 28 18:08:31 hpm sshd\[29808\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.ip-5-196-7.eu |
2019-09-29 15:24:52 |
| 182.61.166.179 | attack | Sep 29 09:02:30 lnxded64 sshd[5689]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.166.179 Sep 29 09:02:32 lnxded64 sshd[5689]: Failed password for invalid user deepti from 182.61.166.179 port 47078 ssh2 Sep 29 09:06:35 lnxded64 sshd[6722]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.166.179 |
2019-09-29 15:33:21 |
| 192.144.132.172 | attack | Sep 29 10:12:24 server sshd\[32680\]: User root from 192.144.132.172 not allowed because listed in DenyUsers Sep 29 10:12:24 server sshd\[32680\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.144.132.172 user=root Sep 29 10:12:26 server sshd\[32680\]: Failed password for invalid user root from 192.144.132.172 port 49590 ssh2 Sep 29 10:18:12 server sshd\[28591\]: User root from 192.144.132.172 not allowed because listed in DenyUsers Sep 29 10:18:12 server sshd\[28591\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.144.132.172 user=root |
2019-09-29 15:39:59 |
| 106.12.116.185 | attack | Sep 29 02:41:30 ny01 sshd[13872]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.116.185 Sep 29 02:41:32 ny01 sshd[13872]: Failed password for invalid user sj from 106.12.116.185 port 59022 ssh2 Sep 29 02:47:10 ny01 sshd[14947]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.116.185 |
2019-09-29 15:04:56 |
| 132.232.104.35 | attackspambots | Sep 28 20:59:01 web9 sshd\[2818\]: Invalid user mktg1 from 132.232.104.35 Sep 28 20:59:01 web9 sshd\[2818\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.104.35 Sep 28 20:59:02 web9 sshd\[2818\]: Failed password for invalid user mktg1 from 132.232.104.35 port 36642 ssh2 Sep 28 21:04:46 web9 sshd\[3841\]: Invalid user camel from 132.232.104.35 Sep 28 21:04:46 web9 sshd\[3841\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.104.35 |
2019-09-29 15:06:09 |
| 188.131.200.191 | attackbots | Sep 29 06:44:10 ip-172-31-1-72 sshd\[19762\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.131.200.191 user=root Sep 29 06:44:12 ip-172-31-1-72 sshd\[19762\]: Failed password for root from 188.131.200.191 port 38877 ssh2 Sep 29 06:49:59 ip-172-31-1-72 sshd\[19867\]: Invalid user admin from 188.131.200.191 Sep 29 06:49:59 ip-172-31-1-72 sshd\[19867\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.131.200.191 Sep 29 06:50:02 ip-172-31-1-72 sshd\[19867\]: Failed password for invalid user admin from 188.131.200.191 port 58757 ssh2 |
2019-09-29 14:59:16 |
| 103.97.124.200 | attackspam | Sep 29 04:21:02 vtv3 sshd\[27102\]: Invalid user webmaster from 103.97.124.200 port 58206 Sep 29 04:21:02 vtv3 sshd\[27102\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.97.124.200 Sep 29 04:21:03 vtv3 sshd\[27102\]: Failed password for invalid user webmaster from 103.97.124.200 port 58206 ssh2 Sep 29 04:28:32 vtv3 sshd\[30736\]: Invalid user changeme from 103.97.124.200 port 34208 Sep 29 04:28:32 vtv3 sshd\[30736\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.97.124.200 Sep 29 04:39:21 vtv3 sshd\[4152\]: Invalid user cox-sftp from 103.97.124.200 port 52980 Sep 29 04:39:21 vtv3 sshd\[4152\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.97.124.200 Sep 29 04:39:23 vtv3 sshd\[4152\]: Failed password for invalid user cox-sftp from 103.97.124.200 port 52980 ssh2 Sep 29 04:44:18 vtv3 sshd\[6630\]: Invalid user hms from 103.97.124.200 port 34098 Sep 29 04:44:18 vtv3 |
2019-09-29 15:05:13 |
| 184.105.139.67 | attackspambots | 09/29/2019-07:18:13.932476 184.105.139.67 Protocol: 17 GPL SNMP public access udp |
2019-09-29 15:19:52 |