城市(city): unknown
省份(region): unknown
国家(country): unknown
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 119.42.85.20
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 32358
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;119.42.85.20. IN A
;; AUTHORITY SECTION:
. 592 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022030900 1800 900 604800 86400
;; Query time: 15 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 15:04:12 CST 2022
;; MSG SIZE rcvd: 105Host 20.85.42.119.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 20.85.42.119.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 106.13.35.87 | attack | srv02 Mass scanning activity detected Target: 28619 .. |
2020-07-07 16:45:42 |
| 166.175.60.37 | attackspam | Brute forcing email accounts |
2020-07-07 16:35:26 |
| 213.230.74.125 | attackspambots | SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: 125.64.uzpak.uz. |
2020-07-07 17:08:11 |
| 196.52.43.128 | attackspam |
|
2020-07-07 16:49:40 |
| 218.92.0.145 | attackspam | Jul 7 08:48:13 124388 sshd[13520]: Failed password for root from 218.92.0.145 port 62111 ssh2 Jul 7 08:48:16 124388 sshd[13520]: Failed password for root from 218.92.0.145 port 62111 ssh2 Jul 7 08:48:19 124388 sshd[13520]: Failed password for root from 218.92.0.145 port 62111 ssh2 Jul 7 08:48:22 124388 sshd[13520]: Failed password for root from 218.92.0.145 port 62111 ssh2 Jul 7 08:48:22 124388 sshd[13520]: error: maximum authentication attempts exceeded for root from 218.92.0.145 port 62111 ssh2 [preauth] |
2020-07-07 16:55:23 |
| 14.116.222.146 | attackbots | serveres are UTC -0400 Lines containing failures of 14.116.222.146 Jul 6 19:27:05 tux2 sshd[12357]: Failed password for r.r from 14.116.222.146 port 46564 ssh2 Jul 6 19:27:06 tux2 sshd[12357]: Received disconnect from 14.116.222.146 port 46564:11: Bye Bye [preauth] Jul 6 19:27:06 tux2 sshd[12357]: Disconnected from authenticating user r.r 14.116.222.146 port 46564 [preauth] Jul 6 19:42:06 tux2 sshd[13159]: Failed password for r.r from 14.116.222.146 port 48832 ssh2 Jul 6 19:42:07 tux2 sshd[13159]: Received disconnect from 14.116.222.146 port 48832:11: Bye Bye [preauth] Jul 6 19:42:07 tux2 sshd[13159]: Disconnected from authenticating user r.r 14.116.222.146 port 48832 [preauth] Jul 6 19:46:39 tux2 sshd[13437]: Failed password for r.r from 14.116.222.146 port 37072 ssh2 Jul 6 19:46:39 tux2 sshd[13437]: Received disconnect from 14.116.222.146 port 37072:11: Bye Bye [preauth] Jul 6 19:46:39 tux2 sshd[13437]: Disconnected from authenticating user r.r 14.116.222.146 ........ ------------------------------ |
2020-07-07 16:40:04 |
| 36.26.118.136 | attack | Mail system brute-force attack |
2020-07-07 16:47:18 |
| 156.96.56.122 | attack | SMTP brute-force |
2020-07-07 16:52:51 |
| 42.119.80.131 | attackbots | 20/7/7@01:36:35: FAIL: Alarm-Network address from=42.119.80.131 ... |
2020-07-07 16:56:44 |
| 116.196.81.216 | attack | Jul 7 08:54:32 ajax sshd[21642]: Failed password for root from 116.196.81.216 port 44104 ssh2 Jul 7 08:56:12 ajax sshd[22274]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.196.81.216 |
2020-07-07 16:47:01 |
| 123.206.7.96 | attackspam | Jul 7 06:31:14 buvik sshd[11113]: Invalid user prueba from 123.206.7.96 Jul 7 06:31:14 buvik sshd[11113]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.206.7.96 Jul 7 06:31:16 buvik sshd[11113]: Failed password for invalid user prueba from 123.206.7.96 port 47510 ssh2 ... |
2020-07-07 16:44:10 |
| 192.35.169.17 | attackspambots | [MySQL inject/portscan] tcp/3306 *(RWIN=1024)(07071112) |
2020-07-07 16:47:48 |
| 41.45.126.123 | attack | xmlrpc attack |
2020-07-07 16:57:55 |
| 190.144.79.157 | attack | Jul 7 09:23:10 h1745522 sshd[27961]: Invalid user ernesto from 190.144.79.157 port 50228 Jul 7 09:23:10 h1745522 sshd[27961]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.144.79.157 Jul 7 09:23:10 h1745522 sshd[27961]: Invalid user ernesto from 190.144.79.157 port 50228 Jul 7 09:23:11 h1745522 sshd[27961]: Failed password for invalid user ernesto from 190.144.79.157 port 50228 ssh2 Jul 7 09:28:54 h1745522 sshd[28131]: Invalid user kir from 190.144.79.157 port 50150 Jul 7 09:28:54 h1745522 sshd[28131]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.144.79.157 Jul 7 09:28:54 h1745522 sshd[28131]: Invalid user kir from 190.144.79.157 port 50150 Jul 7 09:28:56 h1745522 sshd[28131]: Failed password for invalid user kir from 190.144.79.157 port 50150 ssh2 Jul 7 09:31:43 h1745522 sshd[28217]: Invalid user ftpdata from 190.144.79.157 port 34586 ... |
2020-07-07 16:42:05 |
| 185.39.11.55 | attackspam |
|
2020-07-07 16:50:40 |