城市(city): unknown
省份(region): unknown
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 12.189.124.20
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 54517
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;12.189.124.20. IN A
;; AUTHORITY SECTION:
. 85 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022022601 1800 900 604800 86400
;; Query time: 344 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 27 11:25:04 CST 2022
;; MSG SIZE rcvd: 106Host 20.124.189.12.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 20.124.189.12.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 194.152.206.93 | attack | Dec 27 10:20:53 [host] sshd[11030]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.152.206.93 user=root Dec 27 10:20:56 [host] sshd[11030]: Failed password for root from 194.152.206.93 port 54839 ssh2 Dec 27 10:24:41 [host] sshd[11099]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.152.206.93 user=root |
2019-12-27 17:47:59 |
| 58.210.180.162 | attack | Dec 27 06:26:28 ip-172-31-62-245 sshd\[22944\]: Failed password for root from 58.210.180.162 port 42884 ssh2\ Dec 27 06:26:33 ip-172-31-62-245 sshd\[22946\]: Failed password for root from 58.210.180.162 port 47738 ssh2\ Dec 27 06:26:36 ip-172-31-62-245 sshd\[22948\]: Failed password for root from 58.210.180.162 port 52348 ssh2\ Dec 27 06:26:41 ip-172-31-62-245 sshd\[22950\]: Failed password for root from 58.210.180.162 port 55730 ssh2\ Dec 27 06:26:46 ip-172-31-62-245 sshd\[22954\]: Failed password for root from 58.210.180.162 port 34060 ssh2\ |
2019-12-27 17:48:29 |
| 134.209.11.199 | attackspambots | Dec 27 07:23:09 minden010 sshd[27604]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.11.199 Dec 27 07:23:12 minden010 sshd[27604]: Failed password for invalid user georgiana from 134.209.11.199 port 60906 ssh2 Dec 27 07:26:08 minden010 sshd[28657]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.11.199 ... |
2019-12-27 18:12:57 |
| 162.248.52.82 | attackbots | Dec 27 06:23:39 pi sshd\[17020\]: Invalid user barbara from 162.248.52.82 port 53222 Dec 27 06:23:39 pi sshd\[17020\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.248.52.82 Dec 27 06:23:41 pi sshd\[17020\]: Failed password for invalid user barbara from 162.248.52.82 port 53222 ssh2 Dec 27 06:26:31 pi sshd\[17188\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.248.52.82 user=root Dec 27 06:26:33 pi sshd\[17188\]: Failed password for root from 162.248.52.82 port 54170 ssh2 ... |
2019-12-27 17:57:03 |
| 200.29.106.65 | attack | Dec 27 07:25:52 localhost sshd\[17239\]: Invalid user guest123456788 from 200.29.106.65 port 56764 Dec 27 07:25:52 localhost sshd\[17239\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.29.106.65 Dec 27 07:25:54 localhost sshd\[17239\]: Failed password for invalid user guest123456788 from 200.29.106.65 port 56764 ssh2 |
2019-12-27 18:21:06 |
| 47.56.147.15 | attack | Host Scan |
2019-12-27 18:07:10 |
| 92.119.160.143 | attack | Dec 27 09:07:10 h2177944 kernel: \[632745.066403\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.119.160.143 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=14331 PROTO=TCP SPT=48764 DPT=63616 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 27 09:07:10 h2177944 kernel: \[632745.066417\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.119.160.143 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=14331 PROTO=TCP SPT=48764 DPT=63616 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 27 09:11:43 h2177944 kernel: \[633018.494373\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.119.160.143 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=39460 PROTO=TCP SPT=48764 DPT=34460 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 27 09:11:43 h2177944 kernel: \[633018.494391\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.119.160.143 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=39460 PROTO=TCP SPT=48764 DPT=34460 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 27 09:23:04 h2177944 kernel: \[633699.458272\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.119.160.143 DST=85.214.1 |
2019-12-27 17:52:42 |
| 162.241.182.29 | attackbotsspam | Dec 27 08:28:08 minden010 sshd[1412]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.241.182.29 Dec 27 08:28:10 minden010 sshd[1412]: Failed password for invalid user temp from 162.241.182.29 port 58414 ssh2 Dec 27 08:30:26 minden010 sshd[3333]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.241.182.29 ... |
2019-12-27 18:20:03 |
| 191.125.40.183 | attack | Port 22 Scan, PTR: None |
2019-12-27 18:07:33 |
| 94.53.53.47 | attackspam | Port 22 Scan, PTR: None |
2019-12-27 18:04:52 |
| 109.201.155.16 | attack | Invalid user guest from 109.201.155.16 port 50434 |
2019-12-27 18:22:51 |
| 51.15.95.127 | attackspam | SSH Brute Force, server-1 sshd[572]: Failed password for root from 51.15.95.127 port 45966 ssh2 |
2019-12-27 17:59:24 |
| 218.92.0.172 | attackbotsspam | Dec 27 10:30:52 ns3042688 sshd\[19604\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.172 user=root Dec 27 10:30:54 ns3042688 sshd\[19604\]: Failed password for root from 218.92.0.172 port 52081 ssh2 Dec 27 10:30:56 ns3042688 sshd\[19604\]: Failed password for root from 218.92.0.172 port 52081 ssh2 Dec 27 10:31:00 ns3042688 sshd\[19604\]: Failed password for root from 218.92.0.172 port 52081 ssh2 Dec 27 10:31:03 ns3042688 sshd\[19604\]: Failed password for root from 218.92.0.172 port 52081 ssh2 ... |
2019-12-27 17:43:39 |
| 198.1.73.228 | attackbots | Dec 27 09:05:27 l02a.shelladdress.co.uk proftpd[5986] 127.0.0.1 (::ffff:198.1.73.228[::ffff:198.1.73.228]): USER admin@revolverworld.com: no such user found from ::ffff:198.1.73.228 [::ffff:198.1.73.228] to ::ffff:185.47.61.71:21 Dec 27 09:05:28 l02a.shelladdress.co.uk proftpd[5988] 127.0.0.1 (::ffff:198.1.73.228[::ffff:198.1.73.228]): USER revolverworld.com: no such user found from ::ffff:198.1.73.228 [::ffff:198.1.73.228] to ::ffff:185.47.61.71:21 Dec 27 09:05:30 l02a.shelladdress.co.uk proftpd[5990] 127.0.0.1 (::ffff:198.1.73.228[::ffff:198.1.73.228]): USER revolverworld: no such user found from ::ffff:198.1.73.228 [::ffff:198.1.73.228] to ::ffff:185.47.61.71:21 |
2019-12-27 18:00:24 |
| 49.235.198.74 | attack | Host Scan |
2019-12-27 18:01:35 |