城市(city): unknown
省份(region): unknown
国家(country): Korea (the Republic of)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 114.53.30.20
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 45869
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;114.53.30.20. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025010602 1800 900 604800 86400
;; Query time: 70 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jan 07 12:34:19 CST 2025
;; MSG SIZE rcvd: 105
Host 20.30.53.114.in-addr.arpa not found: 2(SERVFAIL)
;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server: 183.60.82.98
Address: 183.60.82.98#53
** server can't find 20.30.53.114.in-addr.arpa: SERVFAIL
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 96.94.162.38 | attackbots | DATE:2020-09-12 18:58:02, IP:96.94.162.38, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc) |
2020-09-13 05:54:59 |
| 47.254.178.40 | attackbots |
|
2020-09-13 06:23:03 |
| 37.53.24.101 | attack | Icarus honeypot on github |
2020-09-13 06:04:21 |
| 112.94.22.76 | attack | 2020-09-12T21:57:44.172146ns386461 sshd\[2904\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.94.22.76 user=root 2020-09-12T21:57:45.698627ns386461 sshd\[2904\]: Failed password for root from 112.94.22.76 port 47962 ssh2 2020-09-12T22:07:55.456993ns386461 sshd\[11919\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.94.22.76 user=root 2020-09-12T22:07:57.530369ns386461 sshd\[11919\]: Failed password for root from 112.94.22.76 port 50098 ssh2 2020-09-12T22:11:01.881553ns386461 sshd\[14890\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.94.22.76 user=root ... |
2020-09-13 06:02:39 |
| 195.54.160.180 | attackbotsspam | 2020-09-12T21:55:32.546564shield sshd\[14287\]: Invalid user admln from 195.54.160.180 port 53760 2020-09-12T21:55:32.658586shield sshd\[14287\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.54.160.180 2020-09-12T21:55:34.832736shield sshd\[14287\]: Failed password for invalid user admln from 195.54.160.180 port 53760 ssh2 2020-09-12T21:55:35.679941shield sshd\[14305\]: Invalid user helpdesk from 195.54.160.180 port 2316 2020-09-12T21:55:35.796802shield sshd\[14305\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.54.160.180 |
2020-09-13 06:03:08 |
| 61.141.252.106 | attack | 20 attempts against mh-ssh on hail |
2020-09-13 05:52:46 |
| 125.220.214.62 | attackbots | Sep 12 22:38:19 rocket sshd[8728]: Failed password for root from 125.220.214.62 port 34480 ssh2 Sep 12 22:45:12 rocket sshd[9996]: Failed password for root from 125.220.214.62 port 45960 ssh2 ... |
2020-09-13 05:50:26 |
| 94.102.49.109 | attackspambots | Sep 12 23:04:38 *hidden* kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:28:99:3a:4d:23:91:08:00 SRC=94.102.49.109 DST=173.212.244.83 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=4698 PROTO=TCP SPT=45855 DPT=2865 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 12 23:38:08 *hidden* kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:28:99:3a:4d:23:91:08:00 SRC=94.102.49.109 DST=173.212.244.83 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=58396 PROTO=TCP SPT=45855 DPT=2883 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 13 00:05:43 *hidden* kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:28:99:3a:4d:23:91:08:00 SRC=94.102.49.109 DST=173.212.244.83 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=47512 PROTO=TCP SPT=45855 DPT=2825 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 13 00:15:33 *hidden* kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:28:99:3a:4d:23:91:08:00 SRC=94.102.49.109 DST=173.212.244.83 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=38682 PROTO=TCP SPT=45855 DPT=2889 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 13 00:15:41 *hidd ... |
2020-09-13 06:21:02 |
| 180.251.191.13 | attackbotsspam | Brute-Force,SSH |
2020-09-13 05:51:51 |
| 152.136.213.72 | attack | 2020-09-12 16:55:50.950448-0500 localhost sshd[86021]: Failed password for invalid user newadmin from 152.136.213.72 port 51902 ssh2 |
2020-09-13 06:17:57 |
| 104.50.180.85 | attackbots | 2020-09-12T16:48:47.455259abusebot-8.cloudsearch.cf sshd[5775]: Invalid user root123 from 104.50.180.85 port 41096 2020-09-12T16:48:47.459641abusebot-8.cloudsearch.cf sshd[5775]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104-50-180-85.lightspeed.elpstx.sbcglobal.net 2020-09-12T16:48:47.455259abusebot-8.cloudsearch.cf sshd[5775]: Invalid user root123 from 104.50.180.85 port 41096 2020-09-12T16:48:49.619142abusebot-8.cloudsearch.cf sshd[5775]: Failed password for invalid user root123 from 104.50.180.85 port 41096 ssh2 2020-09-12T16:57:48.229670abusebot-8.cloudsearch.cf sshd[5861]: Invalid user ubuntu from 104.50.180.85 port 58098 2020-09-12T16:57:48.234324abusebot-8.cloudsearch.cf sshd[5861]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104-50-180-85.lightspeed.elpstx.sbcglobal.net 2020-09-12T16:57:48.229670abusebot-8.cloudsearch.cf sshd[5861]: Invalid user ubuntu from 104.50.180.85 port 58098 2020-0 ... |
2020-09-13 06:00:51 |
| 218.92.0.251 | attackspam | Sep 12 23:59:22 nextcloud sshd\[5846\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.251 user=root Sep 12 23:59:24 nextcloud sshd\[5846\]: Failed password for root from 218.92.0.251 port 22153 ssh2 Sep 12 23:59:37 nextcloud sshd\[5846\]: Failed password for root from 218.92.0.251 port 22153 ssh2 |
2020-09-13 06:01:35 |
| 46.218.85.69 | attackbotsspam | Sep 12 23:55:49 sip sshd[1578136]: Failed password for invalid user glassfish from 46.218.85.69 port 57294 ssh2 Sep 13 00:00:05 sip sshd[1578181]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.218.85.69 user=root Sep 13 00:00:07 sip sshd[1578181]: Failed password for root from 46.218.85.69 port 35736 ssh2 ... |
2020-09-13 06:15:07 |
| 201.216.120.59 | attackbotsspam | Sep 12 11:57:13 mailman postfix/smtpd[12159]: warning: unknown[201.216.120.59]: SASL PLAIN authentication failed: authentication failure |
2020-09-13 06:18:43 |
| 2.57.122.186 | attack |
|
2020-09-13 06:09:21 |