城市(city): unknown
省份(region): unknown
国家(country): None
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 116.20.242.20
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11476
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;116.20.242.20. IN A
;; AUTHORITY SECTION:
. 318 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022030400 1800 900 604800 86400
;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Mar 04 18:56:24 CST 2022
;; MSG SIZE rcvd: 106
Host 20.242.20.116.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 20.242.20.116.in-addr.arpa: NXDOMAIN
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 49.88.112.67 | attack | Aug 12 18:02:55 firewall sshd[1229]: Failed password for root from 49.88.112.67 port 42183 ssh2 Aug 12 18:02:58 firewall sshd[1229]: Failed password for root from 49.88.112.67 port 42183 ssh2 Aug 12 18:03:01 firewall sshd[1229]: Failed password for root from 49.88.112.67 port 42183 ssh2 ... |
2020-08-13 06:08:22 |
| 67.54.159.145 | attackspam | Aug 13 00:02:15 takio sshd[23089]: Invalid user pi from 67.54.159.145 port 56164 Aug 13 00:02:22 takio sshd[23092]: Invalid user pi from 67.54.159.145 port 59536 Aug 13 00:02:29 takio sshd[23094]: Invalid user pi from 67.54.159.145 port 34606 |
2020-08-13 06:37:00 |
| 51.255.47.133 | attackbots | Fail2Ban |
2020-08-13 06:20:20 |
| 193.228.91.123 | attackspambots | 2020-08-12T22:20:39.201262vps1033 sshd[9891]: Failed password for root from 193.228.91.123 port 45068 ssh2 2020-08-12T22:20:59.636817vps1033 sshd[10589]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.228.91.123 user=root 2020-08-12T22:21:01.773161vps1033 sshd[10589]: Failed password for root from 193.228.91.123 port 44408 ssh2 2020-08-12T22:21:22.064102vps1033 sshd[11482]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.228.91.123 user=root 2020-08-12T22:21:23.688847vps1033 sshd[11482]: Failed password for root from 193.228.91.123 port 43854 ssh2 ... |
2020-08-13 06:24:29 |
| 222.87.198.62 | attackbots | Automated report (2020-08-13T05:02:24+08:00). Faked user agent detected. |
2020-08-13 06:41:50 |
| 49.232.132.10 | attackspam | Brute force attempt |
2020-08-13 06:21:56 |
| 77.93.46.38 | attackbotsspam | Unauthorized connection attempt from IP address 77.93.46.38 on Port 445(SMB) |
2020-08-13 06:44:45 |
| 192.99.31.122 | attackbots | 192.99.31.122 - - [12/Aug/2020:23:16:06 +0200] "GET /wp-login.php HTTP/1.1" 200 6310 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 192.99.31.122 - - [12/Aug/2020:23:16:07 +0200] "POST /wp-login.php HTTP/1.1" 200 6561 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 192.99.31.122 - - [12/Aug/2020:23:16:08 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-08-13 06:08:36 |
| 202.90.198.154 | attackspambots | Unauthorized connection attempt from IP address 202.90.198.154 on Port 445(SMB) |
2020-08-13 06:34:53 |
| 69.13.205.101 | attackspambots | Lines containing failures of 69.13.205.101 Aug 12 00:01:22 linuxrulz sshd[3139]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.13.205.101 user=r.r Aug 12 00:01:24 linuxrulz sshd[3139]: Failed password for r.r from 69.13.205.101 port 58992 ssh2 Aug 12 00:01:25 linuxrulz sshd[3139]: Received disconnect from 69.13.205.101 port 58992:11: Bye Bye [preauth] Aug 12 00:01:25 linuxrulz sshd[3139]: Disconnected from authenticating user r.r 69.13.205.101 port 58992 [preauth] Aug 12 00:14:35 linuxrulz sshd[4589]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.13.205.101 user=r.r Aug 12 00:14:38 linuxrulz sshd[4589]: Failed password for r.r from 69.13.205.101 port 39742 ssh2 Aug 12 00:14:38 linuxrulz sshd[4589]: Received disconnect from 69.13.205.101 port 39742:11: Bye Bye [preauth] Aug 12 00:14:38 linuxrulz sshd[4589]: Disconnected from authenticating user r.r 69.13.205.101 port 39742 [preauth........ ------------------------------ |
2020-08-13 06:10:01 |
| 141.98.9.137 | attack | 2020-08-12T09:04:11.433208correo.[domain] sshd[21669]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.98.9.137 2020-08-12T09:04:11.425704correo.[domain] sshd[21669]: Invalid user support from 141.98.9.137 port 47500 2020-08-12T09:04:13.926599correo.[domain] sshd[21669]: Failed password for invalid user support from 141.98.9.137 port 47500 ssh2 ... |
2020-08-13 06:19:33 |
| 194.135.10.85 | attackbots | Unauthorized connection attempt from IP address 194.135.10.85 on Port 445(SMB) |
2020-08-13 06:26:05 |
| 190.60.70.106 | attackspambots | Unauthorized connection attempt from IP address 190.60.70.106 on Port 445(SMB) |
2020-08-13 06:46:24 |
| 195.54.160.228 | attackspambots | Multiport scan : 9 ports scanned 3385(x2) 3387 3392 3396 3398(x2) 3489 3893 4444 5389 |
2020-08-13 06:29:08 |
| 61.221.64.4 | attackspambots | Aug 13 00:05:11 jane sshd[4677]: Failed password for root from 61.221.64.4 port 52036 ssh2 ... |
2020-08-13 06:25:41 |