城市(city): unknown
省份(region): unknown
国家(country): China
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 122.4.47.131
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 54853
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;122.4.47.131. IN A
;; AUTHORITY SECTION:
. 600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021300 1800 900 604800 86400
;; Query time: 72 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 13 14:16:09 CST 2022
;; MSG SIZE rcvd: 105131.47.4.122.in-addr.arpa domain name pointer 131.47.4.122.broad.jn.sd.dynamic.163data.com.cn.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
131.47.4.122.in-addr.arpa name = 131.47.4.122.broad.jn.sd.dynamic.163data.com.cn.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 92.118.38.82 | attackspam | Apr 8 18:44:45 relay postfix/smtpd\[4442\]: warning: unknown\[92.118.38.82\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Apr 8 18:44:55 relay postfix/smtpd\[13829\]: warning: unknown\[92.118.38.82\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Apr 8 18:45:19 relay postfix/smtpd\[4547\]: warning: unknown\[92.118.38.82\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Apr 8 18:45:29 relay postfix/smtpd\[18407\]: warning: unknown\[92.118.38.82\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Apr 8 18:45:53 relay postfix/smtpd\[4442\]: warning: unknown\[92.118.38.82\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2020-04-09 00:52:55 |
| 139.59.89.180 | attackspambots | 2020-04-07 16:44:05 server sshd[6864]: Failed password for invalid user deploy from 139.59.89.180 port 55458 ssh2 |
2020-04-09 00:24:49 |
| 220.142.193.137 | attack | 20/4/8@08:40:33: FAIL: Alarm-Intrusion address from=220.142.193.137 ... |
2020-04-09 00:25:18 |
| 212.47.232.66 | attackbotsspam | Too many connections or unauthorized access detected from Arctic banned ip |
2020-04-09 01:19:22 |
| 106.75.7.111 | attack | Lines containing failures of 106.75.7.111 Apr 8 12:50:08 ticdesk sshd[14401]: Did not receive identification string from 106.75.7.111 port 58622 Apr 8 13:50:08 commu-intern sshd[25451]: Did not receive identification string from 106.75.7.111 port 39640 Apr 8 13:50:08 cloud sshd[14491]: Did not receive identification string from 106.75.7.111 port 56502 Apr 8 13:50:08 www sshd[23880]: Did not receive identification string from 106.75.7.111 port 59392 Apr 8 13:50:08 commu sshd[19873]: Did not receive identification string from 106.75.7.111 port 41664 Apr 8 13:50:09 desktop sshd[6182]: Did not receive identification string from 106.75.7.111 port 47634 Apr 8 13:50:09 meet sshd[10984]: Did not receive identification string from 106.75.7.111 port 58630 Apr 8 13:55:48 edughostname sshd[739294]: Unable to negotiate whostnameh 106.75.7.111 port 41560: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-h........ ------------------------------ |
2020-04-09 00:49:52 |
| 222.186.173.180 | attackbots | Apr 8 19:05:51 vmanager6029 sshd\[25027\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.180 user=root Apr 8 19:05:55 vmanager6029 sshd\[25025\]: error: PAM: Authentication failure for root from 222.186.173.180 Apr 8 19:05:56 vmanager6029 sshd\[25074\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.180 user=root |
2020-04-09 01:08:56 |
| 159.203.30.50 | attack | Apr 8 12:24:48 ws26vmsma01 sshd[209384]: Failed password for mysql from 159.203.30.50 port 36302 ssh2 ... |
2020-04-09 00:56:23 |
| 61.145.213.172 | attack | SSH brute force attempt @ 2020-04-08 14:07:32 |
2020-04-09 00:55:58 |
| 119.193.27.90 | attackbots | Apr 8 12:35:10 ip-172-31-61-156 sshd[1595]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.193.27.90 Apr 8 12:35:10 ip-172-31-61-156 sshd[1595]: Invalid user codserver from 119.193.27.90 Apr 8 12:35:12 ip-172-31-61-156 sshd[1595]: Failed password for invalid user codserver from 119.193.27.90 port 18033 ssh2 Apr 8 12:39:43 ip-172-31-61-156 sshd[2107]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.193.27.90 user=root Apr 8 12:39:45 ip-172-31-61-156 sshd[2107]: Failed password for root from 119.193.27.90 port 29028 ssh2 ... |
2020-04-09 01:12:07 |
| 212.83.175.114 | attackspam | Automatic report - Port Scan Attack |
2020-04-09 00:43:37 |
| 180.168.141.246 | attackspam | Brute-force attempt banned |
2020-04-09 00:26:37 |
| 195.182.129.173 | attack | 2020-04-08T16:54:22.148229ns386461 sshd\[14014\]: Invalid user steam1 from 195.182.129.173 port 56012 2020-04-08T16:54:22.152800ns386461 sshd\[14014\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip-195-182-129-173.clients.cmk.ru 2020-04-08T16:54:24.074500ns386461 sshd\[14014\]: Failed password for invalid user steam1 from 195.182.129.173 port 56012 ssh2 2020-04-08T17:05:22.128348ns386461 sshd\[24208\]: Invalid user ubuntu from 195.182.129.173 port 50625 2020-04-08T17:05:22.133041ns386461 sshd\[24208\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip-195-182-129-173.clients.cmk.ru ... |
2020-04-09 01:10:20 |
| 2001:470:dfa9:10ff:0:242:ac11:20 | attack | Port scan |
2020-04-09 01:02:00 |
| 118.70.113.1 | attack | Unauthorized connection attempt detected from IP address 118.70.113.1 to port 2849 [T] |
2020-04-09 00:44:43 |
| 91.199.118.137 | attackbotsspam | ET CINS Active Threat Intelligence Poor Reputation IP group 86 - port: 82 proto: TCP cat: Misc Attack |
2020-04-09 00:53:16 |