城市(city): unknown
省份(region): unknown
国家(country): China
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 120.68.159.50
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 39106
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;120.68.159.50. IN A
;; AUTHORITY SECTION:
. 257 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022031102 1800 900 604800 86400
;; Query time: 59 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Mar 12 12:44:41 CST 2022
;; MSG SIZE rcvd: 106
Host 50.159.68.120.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 50.159.68.120.in-addr.arpa: NXDOMAIN
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 49.232.171.28 | attackspambots | Unauthorized connection attempt detected from IP address 49.232.171.28 to port 2220 [J] |
2020-02-06 08:23:46 |
| 109.116.196.174 | attackbotsspam | Feb 5 13:58:38 hpm sshd\[23382\]: Invalid user fip from 109.116.196.174 Feb 5 13:58:38 hpm sshd\[23382\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.116.196.174 Feb 5 13:58:40 hpm sshd\[23382\]: Failed password for invalid user fip from 109.116.196.174 port 37730 ssh2 Feb 5 14:02:04 hpm sshd\[23818\]: Invalid user ptk from 109.116.196.174 Feb 5 14:02:04 hpm sshd\[23818\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.116.196.174 |
2020-02-06 08:28:02 |
| 218.92.0.168 | attackspam | 2020-02-05T19:18:15.701343xentho-1 sshd[27880]: Failed password for root from 218.92.0.168 port 11705 ssh2 2020-02-05T19:18:09.709730xentho-1 sshd[27880]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.168 user=root 2020-02-05T19:18:11.934882xentho-1 sshd[27880]: Failed password for root from 218.92.0.168 port 11705 ssh2 2020-02-05T19:18:15.701343xentho-1 sshd[27880]: Failed password for root from 218.92.0.168 port 11705 ssh2 2020-02-05T19:18:20.325253xentho-1 sshd[27880]: Failed password for root from 218.92.0.168 port 11705 ssh2 2020-02-05T19:18:09.709730xentho-1 sshd[27880]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.168 user=root 2020-02-05T19:18:11.934882xentho-1 sshd[27880]: Failed password for root from 218.92.0.168 port 11705 ssh2 2020-02-05T19:18:15.701343xentho-1 sshd[27880]: Failed password for root from 218.92.0.168 port 11705 ssh2 2020-02-05T19:18:20.325253xentho-1 ssh ... |
2020-02-06 08:22:51 |
| 198.27.80.123 | attackbots | Trawling for compromised websites |
2020-02-06 07:46:18 |
| 41.59.82.183 | attack | Feb 6 01:26:01 server sshd\[2537\]: Invalid user seq from 41.59.82.183 Feb 6 01:26:01 server sshd\[2537\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.59.82.183 Feb 6 01:26:03 server sshd\[2537\]: Failed password for invalid user seq from 41.59.82.183 port 24250 ssh2 Feb 6 01:34:08 server sshd\[3847\]: Invalid user rpj from 41.59.82.183 Feb 6 01:34:08 server sshd\[3847\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.59.82.183 ... |
2020-02-06 07:46:37 |
| 198.199.84.154 | attack | Feb 5 22:35:11 l02a sshd[27279]: Invalid user dnq from 198.199.84.154 Feb 5 22:35:11 l02a sshd[27279]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.199.84.154 Feb 5 22:35:11 l02a sshd[27279]: Invalid user dnq from 198.199.84.154 Feb 5 22:35:13 l02a sshd[27279]: Failed password for invalid user dnq from 198.199.84.154 port 59823 ssh2 |
2020-02-06 07:53:54 |
| 37.49.231.163 | attackbotsspam | *Port Scan* detected from 37.49.231.163 (NL/Netherlands/-). 4 hits in the last 276 seconds |
2020-02-06 07:43:38 |
| 49.12.4.131 | attackspambots | Feb 3 16:21:47 garuda sshd[105205]: Invalid user musicbot1 from 49.12.4.131 Feb 3 16:21:49 garuda sshd[105205]: Failed password for invalid user musicbot1 from 49.12.4.131 port 57830 ssh2 Feb 3 16:21:49 garuda sshd[105205]: Received disconnect from 49.12.4.131: 11: Bye Bye [preauth] Feb 3 16:36:08 garuda sshd[109989]: Invalid user ghostname from 49.12.4.131 Feb 3 16:36:10 garuda sshd[109989]: Failed password for invalid user ghostname from 49.12.4.131 port 57596 ssh2 Feb 3 16:36:10 garuda sshd[109989]: Received disconnect from 49.12.4.131: 11: Bye Bye [preauth] Feb 3 16:38:50 garuda sshd[110503]: Invalid user test from 49.12.4.131 Feb 3 16:38:53 garuda sshd[110503]: Failed password for invalid user test from 49.12.4.131 port 57124 ssh2 Feb 3 16:38:53 garuda sshd[110503]: Received disconnect from 49.12.4.131: 11: Bye Bye [preauth] Feb 3 16:43:23 garuda sshd[112537]: Invalid user test from 49.12.4.131 Feb 3 16:43:25 garuda sshd[112537]: Failed password for inva........ ------------------------------- |
2020-02-06 08:01:06 |
| 106.54.16.96 | attackspam | Unauthorized connection attempt detected from IP address 106.54.16.96 to port 2220 [J] |
2020-02-06 08:25:16 |
| 200.146.246.192 | attack | 2020-02-05T23:25:02.482142v2202001112644107466 sshd[26628]: Invalid user pi from 200.146.246.192 port 56644 2020-02-05T23:25:02.494163v2202001112644107466 sshd[26629]: Invalid user pi from 200.146.246.192 port 56646 ... |
2020-02-06 07:44:56 |
| 36.153.0.228 | attack | Feb 6 04:34:19 gw1 sshd[8905]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.153.0.228 Feb 6 04:34:21 gw1 sshd[8905]: Failed password for invalid user eaq from 36.153.0.228 port 60309 ssh2 ... |
2020-02-06 07:53:40 |
| 106.12.85.146 | attack | Unauthorized connection attempt detected from IP address 106.12.85.146 to port 2220 [J] |
2020-02-06 08:21:40 |
| 94.102.49.65 | attackspambots | ET DROP Dshield Block Listed Source group 1 - port: 44499 proto: TCP cat: Misc Attack |
2020-02-06 08:23:23 |
| 35.182.38.96 | attackbots | serveres are UTC Lines containing failures of 35.182.38.96 Feb 3 17:42:33 tux2 sshd[25279]: Failed password for r.r from 35.182.38.96 port 34390 ssh2 Feb 3 17:42:33 tux2 sshd[25279]: Received disconnect from 35.182.38.96 port 34390:11: Bye Bye [preauth] Feb 3 17:42:33 tux2 sshd[25279]: Disconnected from authenticating user r.r 35.182.38.96 port 34390 [preauth] Feb 3 17:46:43 tux2 sshd[25511]: Invalid user romani from 35.182.38.96 port 43524 Feb 3 17:46:43 tux2 sshd[25511]: Failed password for invalid user romani from 35.182.38.96 port 43524 ssh2 Feb 3 17:46:43 tux2 sshd[25511]: Received disconnect from 35.182.38.96 port 43524:11: Bye Bye [preauth] Feb 3 17:46:43 tux2 sshd[25511]: Disconnected from invalid user romani 35.182.38.96 port 43524 [preauth] Feb 3 17:51:58 tux2 sshd[25806]: Invalid user spider from 35.182.38.96 port 45746 Feb 3 17:51:58 tux2 sshd[25806]: Failed password for invalid user spider from 35.182.38.96 port 45746 ssh2 Feb 3 17:51:58 tux2 sshd........ ------------------------------ |
2020-02-06 08:20:58 |
| 78.187.138.207 | attack | Automatic report - Banned IP Access |
2020-02-06 08:28:52 |