城市(city): unknown
省份(region): unknown
国家(country): China
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 117.66.143.107
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 58068
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;117.66.143.107. IN A
;; AUTHORITY SECTION:
. 447 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022030400 1800 900 604800 86400
;; Query time: 73 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Mar 04 22:05:53 CST 2022
;; MSG SIZE rcvd: 107Host 107.143.66.117.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 107.143.66.117.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 92.207.166.44 | attack | 2019-09-19 09:14:28,786 fail2ban.actions \[946\]: NOTICE \[sshd\] Ban 92.207.166.44 2019-09-19 09:45:47,764 fail2ban.actions \[946\]: NOTICE \[sshd\] Ban 92.207.166.44 2019-09-19 10:15:57,849 fail2ban.actions \[946\]: NOTICE \[sshd\] Ban 92.207.166.44 2019-09-19 10:46:04,593 fail2ban.actions \[946\]: NOTICE \[sshd\] Ban 92.207.166.44 2019-09-19 11:16:35,311 fail2ban.actions \[946\]: NOTICE \[sshd\] Ban 92.207.166.44 ... |
2019-09-22 22:27:24 |
| 187.139.234.195 | attackspam | Attempt to attack host OS, exploiting network vulnerabilities, on 22-09-2019 13:45:24. |
2019-09-22 22:53:28 |
| 61.161.209.134 | attackbotsspam | [munged]::443 61.161.209.134 - - [22/Sep/2019:14:45:25 +0200] "POST /[munged]: HTTP/1.1" 200 4052 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0" [munged]::443 61.161.209.134 - - [22/Sep/2019:14:45:26 +0200] "POST /[munged]: HTTP/1.1" 200 4052 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0" [munged]::443 61.161.209.134 - - [22/Sep/2019:14:45:27 +0200] "POST /[munged]: HTTP/1.1" 200 4052 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0" [munged]::443 61.161.209.134 - - [22/Sep/2019:14:45:29 +0200] "POST /[munged]: HTTP/1.1" 200 4052 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0" [munged]::443 61.161.209.134 - - [22/Sep/2019:14:45:30 +0200] "POST /[munged]: HTTP/1.1" 200 4052 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0" [munged]::443 61.161.209.134 - - [22/Sep/2019:14: |
2019-09-22 22:43:14 |
| 180.248.56.153 | attackbotsspam | Attempt to attack host OS, exploiting network vulnerabilities, on 22-09-2019 13:45:23. |
2019-09-22 22:56:03 |
| 114.143.139.38 | attack | Sep 22 16:19:02 SilenceServices sshd[3864]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.143.139.38 Sep 22 16:19:04 SilenceServices sshd[3864]: Failed password for invalid user ccccc from 114.143.139.38 port 35808 ssh2 Sep 22 16:22:59 SilenceServices sshd[5281]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.143.139.38 |
2019-09-22 22:38:03 |
| 106.12.86.240 | attackspam | Sep 22 16:02:19 mail sshd\[4285\]: Invalid user pi from 106.12.86.240 port 47720 Sep 22 16:02:19 mail sshd\[4285\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.86.240 Sep 22 16:02:21 mail sshd\[4285\]: Failed password for invalid user pi from 106.12.86.240 port 47720 ssh2 Sep 22 16:09:45 mail sshd\[5290\]: Invalid user dwsp from 106.12.86.240 port 58876 Sep 22 16:09:45 mail sshd\[5290\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.86.240 |
2019-09-22 22:22:38 |
| 189.181.212.63 | attackspam | Lines containing failures of 189.181.212.63 Sep 21 20:22:29 *** sshd[72691]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.181.212.63 user=mail Sep 21 20:22:31 *** sshd[72691]: Failed password for mail from 189.181.212.63 port 51260 ssh2 Sep 21 20:22:31 *** sshd[72691]: Received disconnect from 189.181.212.63 port 51260:11: Bye Bye [preauth] Sep 21 20:22:31 *** sshd[72691]: Disconnected from authenticating user mail 189.181.212.63 port 51260 [preauth] Sep 21 20:26:25 *** sshd[72925]: Invalid user ey from 189.181.212.63 port 4237 Sep 21 20:26:25 *** sshd[72925]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.181.212.63 Sep 21 20:26:27 *** sshd[72925]: Failed password for invalid user ey from 189.181.212.63 port 4237 ssh2 Sep 21 20:26:27 *** sshd[72925]: Received disconnect from 189.181.212.63 port 4237:11: Bye Bye [preauth] Sep 21 20:26:27 *** sshd[72925]: Disconnected from invalid........ ------------------------------ |
2019-09-22 22:43:33 |
| 109.169.65.194 | attackbotsspam | SMB Server BruteForce Attack |
2019-09-22 22:35:44 |
| 45.142.195.5 | attackspambots | Sep 22 16:15:32 mail postfix/smtpd\[29107\]: warning: unknown\[45.142.195.5\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 22 16:16:24 mail postfix/smtpd\[2464\]: warning: unknown\[45.142.195.5\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 22 16:17:18 mail postfix/smtpd\[29832\]: warning: unknown\[45.142.195.5\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 |
2019-09-22 22:25:40 |
| 14.245.4.122 | attackspam | Attempt to attack host OS, exploiting network vulnerabilities, on 22-09-2019 13:45:22. |
2019-09-22 22:58:35 |
| 62.234.66.50 | attack | Sep 22 16:26:47 vps691689 sshd[15096]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.66.50 Sep 22 16:26:49 vps691689 sshd[15096]: Failed password for invalid user pushousi from 62.234.66.50 port 46523 ssh2 Sep 22 16:31:56 vps691689 sshd[15209]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.66.50 ... |
2019-09-22 22:38:16 |
| 94.233.242.7 | attackspambots | Attempt to attack host OS, exploiting network vulnerabilities, on 22-09-2019 13:45:29. |
2019-09-22 22:47:00 |
| 92.222.88.30 | attackbots | Sep 22 16:15:06 MK-Soft-VM7 sshd[2536]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.222.88.30 Sep 22 16:15:08 MK-Soft-VM7 sshd[2536]: Failed password for invalid user vk from 92.222.88.30 port 54928 ssh2 ... |
2019-09-22 22:17:00 |
| 49.213.167.47 | attack | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/49.213.167.47/ TW - 1H : (20) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : TW NAME ASN : ASN18049 IP : 49.213.167.47 CIDR : 49.213.160.0/20 PREFIX COUNT : 142 UNIQUE IP COUNT : 255744 WYKRYTE ATAKI Z ASN18049 : 1H - 1 3H - 1 6H - 1 12H - 1 24H - 4 INFO : SYN Flood DDoS Attack Denial-of-Service Attack (DoS) Detected and Blocked by ADMIN - data recovery |
2019-09-22 22:17:28 |
| 139.199.168.184 | attackspambots | Sep 22 14:19:41 localhost sshd\[15792\]: Invalid user east from 139.199.168.184 port 34518 Sep 22 14:19:41 localhost sshd\[15792\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.168.184 Sep 22 14:19:44 localhost sshd\[15792\]: Failed password for invalid user east from 139.199.168.184 port 34518 ssh2 Sep 22 14:24:54 localhost sshd\[15897\]: Invalid user postgres from 139.199.168.184 port 37560 Sep 22 14:24:54 localhost sshd\[15897\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.168.184 ... |
2019-09-22 22:37:36 |