城市(city): unknown
省份(region): unknown
国家(country): United States of America (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 130.150.113.21
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 46883
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;130.150.113.21. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025011101 1800 900 604800 86400
;; Query time: 37 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jan 12 12:11:39 CST 2025
;; MSG SIZE rcvd: 107Host 21.113.150.130.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 21.113.150.130.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 49.235.69.80 | attack | Aug 12 14:30:33 Ubuntu-1404-trusty-64-minimal sshd\[6829\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.69.80 user=root Aug 12 14:30:34 Ubuntu-1404-trusty-64-minimal sshd\[6829\]: Failed password for root from 49.235.69.80 port 50990 ssh2 Aug 12 14:41:34 Ubuntu-1404-trusty-64-minimal sshd\[16308\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.69.80 user=root Aug 12 14:41:36 Ubuntu-1404-trusty-64-minimal sshd\[16308\]: Failed password for root from 49.235.69.80 port 38664 ssh2 Aug 12 14:43:06 Ubuntu-1404-trusty-64-minimal sshd\[17077\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.69.80 user=root |
2020-08-12 21:48:12 |
| 123.207.218.163 | attackspambots | Aug 12 14:40:42 * sshd[25200]: Failed password for root from 123.207.218.163 port 50798 ssh2 |
2020-08-12 21:32:44 |
| 197.162.249.40 | attackspam | Fail2Ban - SSH Bruteforce Attempt |
2020-08-12 21:20:56 |
| 103.59.53.34 | attackspambots | Unauthorised access (Aug 12) SRC=103.59.53.34 LEN=40 TOS=0x08 TTL=49 ID=6573 TCP DPT=8080 WINDOW=14095 SYN Unauthorised access (Aug 11) SRC=103.59.53.34 LEN=40 TOS=0x08 TTL=49 ID=40926 TCP DPT=8080 WINDOW=24970 SYN Unauthorised access (Aug 10) SRC=103.59.53.34 LEN=40 TOS=0x08 TTL=52 ID=15162 TCP DPT=8080 WINDOW=14095 SYN Unauthorised access (Aug 10) SRC=103.59.53.34 LEN=40 TOS=0x08 TTL=49 ID=16493 TCP DPT=8080 WINDOW=24970 SYN |
2020-08-12 21:29:38 |
| 159.89.194.160 | attackbotsspam | Aug 12 12:38:26 jumpserver sshd[122980]: Failed password for root from 159.89.194.160 port 38668 ssh2 Aug 12 12:43:03 jumpserver sshd[123016]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.194.160 user=root Aug 12 12:43:05 jumpserver sshd[123016]: Failed password for root from 159.89.194.160 port 49892 ssh2 ... |
2020-08-12 21:49:29 |
| 159.146.95.154 | attackspam | plussize.fitness 159.146.95.154 [12/Aug/2020:14:43:23 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4271 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.109 Safari/537.36" plussize.fitness 159.146.95.154 [12/Aug/2020:14:43:25 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4271 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.109 Safari/537.36" |
2020-08-12 21:26:11 |
| 103.107.17.139 | attackbots | 2020-08-12T13:00:08.420092shield sshd\[9925\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.107.17.139 user=root 2020-08-12T13:00:10.524773shield sshd\[9925\]: Failed password for root from 103.107.17.139 port 51116 ssh2 2020-08-12T13:04:34.587544shield sshd\[10735\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.107.17.139 user=root 2020-08-12T13:04:36.882872shield sshd\[10735\]: Failed password for root from 103.107.17.139 port 51398 ssh2 2020-08-12T13:09:06.364344shield sshd\[11668\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.107.17.139 user=root |
2020-08-12 21:21:46 |
| 196.221.166.200 | attackbots | 20/8/12@08:42:49: FAIL: Alarm-Intrusion address from=196.221.166.200 20/8/12@08:42:49: FAIL: Alarm-Intrusion address from=196.221.166.200 ... |
2020-08-12 21:59:27 |
| 194.15.36.150 | attack | 2020-08-12T13:19:02.060067server.espacesoutien.com sshd[28904]: Invalid user admin from 194.15.36.150 port 60982 2020-08-12T13:19:02.071019server.espacesoutien.com sshd[28904]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.15.36.150 2020-08-12T13:19:02.060067server.espacesoutien.com sshd[28904]: Invalid user admin from 194.15.36.150 port 60982 2020-08-12T13:19:04.185288server.espacesoutien.com sshd[28904]: Failed password for invalid user admin from 194.15.36.150 port 60982 ssh2 ... |
2020-08-12 21:24:41 |
| 118.24.118.202 | attackspam | Aug 12 12:42:52 *** sshd[28596]: User root from 118.24.118.202 not allowed because not listed in AllowUsers |
2020-08-12 21:53:27 |
| 209.97.177.73 | attack | 209.97.177.73 - - [12/Aug/2020:14:21:30 +0200] "POST /xmlrpc.php HTTP/1.1" 403 146 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 209.97.177.73 - - [12/Aug/2020:14:46:02 +0200] "POST /xmlrpc.php HTTP/1.1" 403 146 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-08-12 21:44:12 |
| 193.247.213.196 | attack | prod8 ... |
2020-08-12 21:55:16 |
| 85.209.0.102 | attackspambots | Port scan - 25 hits (greater than 5) |
2020-08-12 21:51:16 |
| 212.70.149.82 | attackbots | Aug 12 15:51:04 cho postfix/smtpd[510875]: warning: unknown[212.70.149.82]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 12 15:51:32 cho postfix/smtpd[510875]: warning: unknown[212.70.149.82]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 12 15:52:00 cho postfix/smtpd[511512]: warning: unknown[212.70.149.82]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 12 15:52:28 cho postfix/smtpd[511512]: warning: unknown[212.70.149.82]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 12 15:52:57 cho postfix/smtpd[511512]: warning: unknown[212.70.149.82]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2020-08-12 21:56:32 |
| 112.85.42.172 | attackspam | Aug 12 06:54:15 dignus sshd[9827]: Failed password for root from 112.85.42.172 port 34027 ssh2 Aug 12 06:54:18 dignus sshd[9827]: Failed password for root from 112.85.42.172 port 34027 ssh2 Aug 12 06:54:22 dignus sshd[9827]: Failed password for root from 112.85.42.172 port 34027 ssh2 Aug 12 06:54:26 dignus sshd[9827]: Failed password for root from 112.85.42.172 port 34027 ssh2 Aug 12 06:54:29 dignus sshd[9827]: Failed password for root from 112.85.42.172 port 34027 ssh2 ... |
2020-08-12 21:58:19 |