城市(city): unknown
省份(region): unknown
国家(country): China
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 121.230.55.50
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 61285
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;121.230.55.50. IN A
;; AUTHORITY SECTION:
. 569 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022030800 1800 900 604800 86400
;; Query time: 135 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Mar 08 20:26:32 CST 2022
;; MSG SIZE rcvd: 106Host 50.55.230.121.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 50.55.230.121.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 2001:41d0:1:8268::1 | attackspambots | SS5,WP GET /wp-login.php |
2020-06-04 20:32:35 |
| 163.172.187.114 | attackspambots | Jun 1 14:36:09 pl3server sshd[31009]: Did not receive identification string from 163.172.187.114 port 56604 Jun 1 14:37:19 pl3server sshd[31189]: Did not receive identification string from 163.172.187.114 port 40816 Jun 1 14:37:41 pl3server sshd[31316]: Did not receive identification string from 163.172.187.114 port 40858 Jun 1 14:37:49 pl3server sshd[31382]: Did not receive identification string from 163.172.187.114 port 55976 Jun 1 14:38:18 pl3server sshd[31571]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.187.114 user=r.r Jun 1 14:38:19 pl3server sshd[31571]: Failed password for r.r from 163.172.187.114 port 38292 ssh2 Jun 1 14:38:19 pl3server sshd[31571]: Received disconnect from 163.172.187.114 port 38292:11: Normal Shutdown, Thank you for playing [preauth] Jun 1 14:38:19 pl3server sshd[31571]: Disconnected from 163.172.187.114 port 38292 [preauth] Jun 1 14:38:39 pl3server sshd[31694]: pam_unix(sshd:auth........ ------------------------------- |
2020-06-04 20:23:25 |
| 123.206.64.111 | attack | Jun 4 14:16:21 ns37 sshd[31577]: Failed password for root from 123.206.64.111 port 40142 ssh2 Jun 4 14:18:39 ns37 sshd[31777]: Failed password for root from 123.206.64.111 port 43974 ssh2 |
2020-06-04 20:48:48 |
| 222.186.175.148 | attack | 2020-06-04T15:38:52.261365afi-git.jinr.ru sshd[13528]: Failed password for root from 222.186.175.148 port 25668 ssh2 2020-06-04T15:38:56.063842afi-git.jinr.ru sshd[13528]: Failed password for root from 222.186.175.148 port 25668 ssh2 2020-06-04T15:38:59.431791afi-git.jinr.ru sshd[13528]: Failed password for root from 222.186.175.148 port 25668 ssh2 2020-06-04T15:38:59.431915afi-git.jinr.ru sshd[13528]: error: maximum authentication attempts exceeded for root from 222.186.175.148 port 25668 ssh2 [preauth] 2020-06-04T15:38:59.431943afi-git.jinr.ru sshd[13528]: Disconnecting: Too many authentication failures [preauth] ... |
2020-06-04 20:40:18 |
| 218.92.0.145 | attack | Jun 4 14:54:02 home sshd[18122]: Failed password for root from 218.92.0.145 port 14032 ssh2 Jun 4 14:54:15 home sshd[18122]: error: maximum authentication attempts exceeded for root from 218.92.0.145 port 14032 ssh2 [preauth] Jun 4 14:54:23 home sshd[18144]: Failed password for root from 218.92.0.145 port 38200 ssh2 ... |
2020-06-04 21:01:50 |
| 175.137.215.95 | attack | Jun 1 16:31:39 UTC__SANYALnet-Labs__lste sshd[13955]: Connection from 175.137.215.95 port 50294 on 192.168.1.10 port 22 Jun 1 16:31:41 UTC__SANYALnet-Labs__lste sshd[13955]: User r.r from 175.137.215.95 not allowed because not listed in AllowUsers Jun 1 16:31:41 UTC__SANYALnet-Labs__lste sshd[13955]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.137.215.95 user=r.r Jun 1 16:31:44 UTC__SANYALnet-Labs__lste sshd[13955]: Failed password for invalid user r.r from 175.137.215.95 port 50294 ssh2 Jun 1 16:31:44 UTC__SANYALnet-Labs__lste sshd[13955]: Received disconnect from 175.137.215.95 port 50294:11: Bye Bye [preauth] Jun 1 16:31:44 UTC__SANYALnet-Labs__lste sshd[13955]: Disconnected from 175.137.215.95 port 50294 [preauth] Jun 1 16:45:54 UTC__SANYALnet-Labs__lste sshd[14382]: Connection from 175.137.215.95 port 52224 on 192.168.1.10 port 22 Jun 1 16:45:55 UTC__SANYALnet-Labs__lste sshd[14382]: User r.r from 175.137.215........ ------------------------------- |
2020-06-04 20:42:18 |
| 222.186.42.7 | attackspambots | Jun 4 15:43:33 server2 sshd\[4636\]: User root from 222.186.42.7 not allowed because not listed in AllowUsers Jun 4 15:49:45 server2 sshd\[5067\]: User root from 222.186.42.7 not allowed because not listed in AllowUsers Jun 4 15:52:43 server2 sshd\[5317\]: User root from 222.186.42.7 not allowed because not listed in AllowUsers Jun 4 15:52:44 server2 sshd\[5319\]: User root from 222.186.42.7 not allowed because not listed in AllowUsers Jun 4 15:52:46 server2 sshd\[5321\]: User root from 222.186.42.7 not allowed because not listed in AllowUsers Jun 4 15:52:52 server2 sshd\[5323\]: User root from 222.186.42.7 not allowed because not listed in AllowUsers |
2020-06-04 20:53:48 |
| 222.186.175.23 | attackbotsspam | 2020-06-04T14:26:46.382598vps773228.ovh.net sshd[23769]: Failed password for root from 222.186.175.23 port 15675 ssh2 2020-06-04T14:26:48.054452vps773228.ovh.net sshd[23769]: Failed password for root from 222.186.175.23 port 15675 ssh2 2020-06-04T14:26:50.335035vps773228.ovh.net sshd[23769]: Failed password for root from 222.186.175.23 port 15675 ssh2 2020-06-04T14:26:52.419612vps773228.ovh.net sshd[23771]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.23 user=root 2020-06-04T14:26:54.326720vps773228.ovh.net sshd[23771]: Failed password for root from 222.186.175.23 port 34040 ssh2 ... |
2020-06-04 20:31:41 |
| 106.12.160.220 | attack | 2020-06-04 14:09:20,151 fail2ban.actions: WARNING [ssh] Ban 106.12.160.220 |
2020-06-04 20:58:29 |
| 118.186.2.18 | attackspambots | Jun 4 14:37:13 server sshd[32676]: Failed password for root from 118.186.2.18 port 35858 ssh2 Jun 4 14:39:41 server sshd[660]: Failed password for root from 118.186.2.18 port 48743 ssh2 ... |
2020-06-04 20:55:33 |
| 62.210.139.12 | attackspam | Unauthorized access detected from black listed ip! |
2020-06-04 20:26:33 |
| 51.75.125.16 | attackspam | Lines containing failures of 51.75.125.16 Jun 2 00:44:54 shared02 sshd[12413]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.125.16 user=r.r Jun 2 00:44:56 shared02 sshd[12413]: Failed password for r.r from 51.75.125.16 port 53616 ssh2 Jun 2 00:44:56 shared02 sshd[12413]: Received disconnect from 51.75.125.16 port 53616:11: Bye Bye [preauth] Jun 2 00:44:56 shared02 sshd[12413]: Disconnected from authenticating user r.r 51.75.125.16 port 53616 [preauth] Jun 2 00:55:38 shared02 sshd[16228]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.125.16 user=r.r Jun 2 00:55:40 shared02 sshd[16228]: Failed password for r.r from 51.75.125.16 port 54258 ssh2 Jun 2 00:55:40 shared02 sshd[16228]: Received disconnect from 51.75.125.16 port 54258:11: Bye Bye [preauth] Jun 2 00:55:40 shared02 sshd[16228]: Disconnected from authenticating user r.r 51.75.125.16 port 54258 [preauth] Jun 2 ........ ------------------------------ |
2020-06-04 21:00:28 |
| 87.246.7.70 | attack | Jun 4 14:54:54 v22019058497090703 postfix/smtpd[28700]: warning: unknown[87.246.7.70]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jun 4 14:55:42 v22019058497090703 postfix/smtpd[28700]: warning: unknown[87.246.7.70]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jun 4 14:56:30 v22019058497090703 postfix/smtpd[28700]: warning: unknown[87.246.7.70]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2020-06-04 21:03:29 |
| 62.210.180.146 | attackspam | Unauthorized access detected from black listed ip! |
2020-06-04 20:26:13 |
| 220.132.193.252 | attack | Port Scan detected! ... |
2020-06-04 20:43:05 |