城市(city): unknown
省份(region): unknown
国家(country): China
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 119.27.200.214
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 6026
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;119.27.200.214. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022200 1800 900 604800 86400
;; Query time: 37 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 23 00:25:44 CST 2025
;; MSG SIZE rcvd: 107
Host 214.200.27.119.in-addr.arpa not found: 2(SERVFAIL)
;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server: 183.60.82.98
Address: 183.60.82.98#53
** server can't find 214.200.27.119.in-addr.arpa: SERVFAIL
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 151.69.170.146 | attackbots | Feb 12 00:46:12 legacy sshd[13320]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=151.69.170.146 Feb 12 00:46:14 legacy sshd[13320]: Failed password for invalid user addie from 151.69.170.146 port 48250 ssh2 Feb 12 00:49:43 legacy sshd[13595]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=151.69.170.146 ... |
2020-02-12 08:58:47 |
| 120.132.3.65 | attack | Feb 11 22:51:36 h2177944 kernel: \[4655892.363202\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=120.132.3.65 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=232 ID=27773 PROTO=TCP SPT=40243 DPT=3306 WINDOW=1024 RES=0x00 SYN URGP=0 Feb 11 22:51:36 h2177944 kernel: \[4655892.363219\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=120.132.3.65 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=232 ID=27773 PROTO=TCP SPT=40243 DPT=3306 WINDOW=1024 RES=0x00 SYN URGP=0 Feb 11 23:23:58 h2177944 kernel: \[4657833.648754\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=120.132.3.65 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=232 ID=42084 PROTO=TCP SPT=53603 DPT=888 WINDOW=1024 RES=0x00 SYN URGP=0 Feb 11 23:23:58 h2177944 kernel: \[4657833.648768\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=120.132.3.65 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=232 ID=42084 PROTO=TCP SPT=53603 DPT=888 WINDOW=1024 RES=0x00 SYN URGP=0 Feb 11 23:25:47 h2177944 kernel: \[4657942.939109\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=120.132.3.65 DST=85.214.117.9 LEN=40 |
2020-02-12 08:48:52 |
| 61.175.237.186 | attackspambots | 1581460006 - 02/11/2020 23:26:46 Host: 61.175.237.186/61.175.237.186 Port: 445 TCP Blocked |
2020-02-12 08:49:40 |
| 142.93.181.214 | attackbotsspam | Feb 12 00:12:45 v22018076622670303 sshd\[6462\]: Invalid user 12345qwert from 142.93.181.214 port 32808 Feb 12 00:12:45 v22018076622670303 sshd\[6462\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.181.214 Feb 12 00:12:46 v22018076622670303 sshd\[6462\]: Failed password for invalid user 12345qwert from 142.93.181.214 port 32808 ssh2 ... |
2020-02-12 08:55:06 |
| 194.106.245.16 | attackspambots | Tried sshing with brute force. |
2020-02-12 08:57:54 |
| 49.236.203.163 | attackspambots | Feb 12 00:01:35 srv-ubuntu-dev3 sshd[112925]: Invalid user test from 49.236.203.163 Feb 12 00:01:35 srv-ubuntu-dev3 sshd[112925]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.236.203.163 Feb 12 00:01:35 srv-ubuntu-dev3 sshd[112925]: Invalid user test from 49.236.203.163 Feb 12 00:01:37 srv-ubuntu-dev3 sshd[112925]: Failed password for invalid user test from 49.236.203.163 port 50316 ssh2 Feb 12 00:04:48 srv-ubuntu-dev3 sshd[113494]: Invalid user ryen from 49.236.203.163 Feb 12 00:04:48 srv-ubuntu-dev3 sshd[113494]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.236.203.163 Feb 12 00:04:48 srv-ubuntu-dev3 sshd[113494]: Invalid user ryen from 49.236.203.163 Feb 12 00:04:50 srv-ubuntu-dev3 sshd[113494]: Failed password for invalid user ryen from 49.236.203.163 port 50678 ssh2 Feb 12 00:07:58 srv-ubuntu-dev3 sshd[113743]: Invalid user rizky from 49.236.203.163 ... |
2020-02-12 08:34:47 |
| 111.230.25.204 | attackspambots | Feb 11 12:49:31 sachi sshd\[14015\]: Invalid user bl from 111.230.25.204 Feb 11 12:49:31 sachi sshd\[14015\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.230.25.204 Feb 11 12:49:33 sachi sshd\[14015\]: Failed password for invalid user bl from 111.230.25.204 port 58458 ssh2 Feb 11 12:50:38 sachi sshd\[14160\]: Invalid user ark from 111.230.25.204 Feb 11 12:50:38 sachi sshd\[14160\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.230.25.204 |
2020-02-12 08:48:01 |
| 222.186.30.35 | attackbots | 12.02.2020 00:36:18 SSH access blocked by firewall |
2020-02-12 08:52:59 |
| 122.180.48.29 | attackbots | Feb 12 01:12:44 legacy sshd[15658]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.180.48.29 Feb 12 01:12:46 legacy sshd[15658]: Failed password for invalid user data1234 from 122.180.48.29 port 51040 ssh2 Feb 12 01:16:43 legacy sshd[16000]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.180.48.29 ... |
2020-02-12 09:06:43 |
| 190.56.229.42 | attackbots | Feb 11 13:39:17 sachi sshd\[20023\]: Invalid user konrad from 190.56.229.42 Feb 11 13:39:17 sachi sshd\[20023\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.56.229.42 Feb 11 13:39:19 sachi sshd\[20023\]: Failed password for invalid user konrad from 190.56.229.42 port 51200 ssh2 Feb 11 13:40:42 sachi sshd\[20190\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.56.229.42 user=root Feb 11 13:40:44 sachi sshd\[20190\]: Failed password for root from 190.56.229.42 port 33100 ssh2 |
2020-02-12 08:49:18 |
| 119.29.134.163 | attackspam | $f2bV_matches |
2020-02-12 08:42:04 |
| 206.189.171.204 | attackbots | Feb 11 14:48:35 web1 sshd\[16296\]: Invalid user otrs123 from 206.189.171.204 Feb 11 14:48:35 web1 sshd\[16296\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.171.204 Feb 11 14:48:38 web1 sshd\[16296\]: Failed password for invalid user otrs123 from 206.189.171.204 port 32976 ssh2 Feb 11 14:51:58 web1 sshd\[16616\]: Invalid user sonso from 206.189.171.204 Feb 11 14:51:58 web1 sshd\[16616\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.171.204 |
2020-02-12 09:03:18 |
| 123.207.142.31 | attack | Feb 12 02:20:05 silence02 sshd[13520]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.207.142.31 Feb 12 02:20:07 silence02 sshd[13520]: Failed password for invalid user sandie from 123.207.142.31 port 44189 ssh2 Feb 12 02:23:27 silence02 sshd[13824]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.207.142.31 |
2020-02-12 09:24:07 |
| 201.18.21.181 | attackspam | Unauthorized connection attempt detected from IP address 201.18.21.181 to port 445 |
2020-02-12 09:00:32 |
| 151.80.61.103 | attack | $f2bV_matches_ltvn |
2020-02-12 08:57:30 |