城市(city): unknown
省份(region): unknown
国家(country): None
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 130.25.109.104
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 61117
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;130.25.109.104. IN A
;; AUTHORITY SECTION:
. 165 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022030802 1800 900 604800 86400
;; Query time: 27 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 05:19:04 CST 2022
;; MSG SIZE rcvd: 107
104.109.25.130.in-addr.arpa domain name pointer net-130-25-109-104.cust.vodafonedsl.it.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
104.109.25.130.in-addr.arpa name = net-130-25-109-104.cust.vodafonedsl.it.
Authoritative answers can be found from:
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 193.228.91.123 | attackbots | Oct 8 19:22:15 sd-69548 sshd[126356]: Unable to negotiate with 193.228.91.123 port 39824: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] Oct 8 19:22:39 sd-69548 sshd[126382]: Unable to negotiate with 193.228.91.123 port 51142: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] ... |
2020-10-09 01:26:23 |
| 103.216.115.38 | attackspam | Oct 8 11:43:22 roki sshd[4628]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.216.115.38 user=root Oct 8 11:43:23 roki sshd[4628]: Failed password for root from 103.216.115.38 port 37866 ssh2 Oct 8 11:49:30 roki sshd[5032]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.216.115.38 user=root Oct 8 11:49:32 roki sshd[5032]: Failed password for root from 103.216.115.38 port 59184 ssh2 Oct 8 11:54:04 roki sshd[5341]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.216.115.38 user=root ... |
2020-10-09 01:33:41 |
| 119.45.46.212 | attack | fail2ban/Oct 8 19:19:25 h1962932 sshd[21693]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.45.46.212 user=root Oct 8 19:19:27 h1962932 sshd[21693]: Failed password for root from 119.45.46.212 port 34684 ssh2 Oct 8 19:23:17 h1962932 sshd[22047]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.45.46.212 user=root Oct 8 19:23:19 h1962932 sshd[22047]: Failed password for root from 119.45.46.212 port 47992 ssh2 Oct 8 19:27:13 h1962932 sshd[22436]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.45.46.212 user=root Oct 8 19:27:15 h1962932 sshd[22436]: Failed password for root from 119.45.46.212 port 33072 ssh2 |
2020-10-09 01:35:31 |
| 86.161.9.225 | attackbots | Port Scan: TCP/443 |
2020-10-09 01:23:50 |
| 51.83.68.213 | attack | $f2bV_matches |
2020-10-09 01:24:41 |
| 212.83.134.226 | attackspam | Oct 8 17:25:10 email sshd\[21327\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.83.134.226 user=root Oct 8 17:25:12 email sshd\[21327\]: Failed password for root from 212.83.134.226 port 40432 ssh2 Oct 8 17:28:44 email sshd\[21982\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.83.134.226 user=root Oct 8 17:28:45 email sshd\[21982\]: Failed password for root from 212.83.134.226 port 47010 ssh2 Oct 8 17:32:12 email sshd\[22614\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.83.134.226 user=root ... |
2020-10-09 01:36:51 |
| 54.38.53.251 | attack | 54.38.53.251 (PL/Poland/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Oct 8 12:35:12 jbs1 sshd[31160]: Failed password for root from 120.92.119.90 port 14226 ssh2 Oct 8 12:35:09 jbs1 sshd[31160]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.92.119.90 user=root Oct 8 12:34:01 jbs1 sshd[30336]: Failed password for root from 120.70.100.88 port 43679 ssh2 Oct 8 12:37:08 jbs1 sshd[32020]: Failed password for root from 212.56.152.151 port 57256 ssh2 Oct 8 12:37:15 jbs1 sshd[32044]: Failed password for root from 54.38.53.251 port 51720 ssh2 IP Addresses Blocked: 120.92.119.90 (CN/China/-) 120.70.100.88 (CN/China/-) 212.56.152.151 (MT/Malta/-) |
2020-10-09 01:55:02 |
| 45.142.120.15 | attack | Oct 8 19:24:23 v22019058497090703 postfix/smtpd[25771]: warning: unknown[45.142.120.15]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 8 19:24:29 v22019058497090703 postfix/smtpd[26879]: warning: unknown[45.142.120.15]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 8 19:24:33 v22019058497090703 postfix/smtpd[6994]: warning: unknown[45.142.120.15]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2020-10-09 01:27:39 |
| 185.176.27.42 | attackbots | ET DROP Dshield Block Listed Source group 1 - port: 9982 proto: tcp cat: Misc Attackbytes: 60 |
2020-10-09 01:44:56 |
| 106.54.208.123 | attackbots | 2020-10-08T15:40:18.123964mail.broermann.family sshd[5834]: Failed password for root from 106.54.208.123 port 42838 ssh2 2020-10-08T15:44:13.930003mail.broermann.family sshd[6197]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.208.123 user=root 2020-10-08T15:44:16.414126mail.broermann.family sshd[6197]: Failed password for root from 106.54.208.123 port 54770 ssh2 2020-10-08T15:48:06.755463mail.broermann.family sshd[6621]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.208.123 user=root 2020-10-08T15:48:08.557543mail.broermann.family sshd[6621]: Failed password for root from 106.54.208.123 port 38462 ssh2 ... |
2020-10-09 01:43:18 |
| 191.235.100.66 | attack | SSH invalid-user multiple login try |
2020-10-09 01:32:06 |
| 111.162.205.249 | attack | Oct 7 14:42:18 cumulus sshd[25179]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.162.205.249 user=r.r Oct 7 14:42:20 cumulus sshd[25179]: Failed password for r.r from 111.162.205.249 port 58194 ssh2 Oct 7 14:42:20 cumulus sshd[25179]: Received disconnect from 111.162.205.249 port 58194:11: Bye Bye [preauth] Oct 7 14:42:20 cumulus sshd[25179]: Disconnected from 111.162.205.249 port 58194 [preauth] Oct 7 14:44:17 cumulus sshd[25389]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.162.205.249 user=r.r Oct 7 14:44:19 cumulus sshd[25389]: Failed password for r.r from 111.162.205.249 port 50048 ssh2 Oct 7 14:44:20 cumulus sshd[25389]: Received disconnect from 111.162.205.249 port 50048:11: Bye Bye [preauth] Oct 7 14:44:20 cumulus sshd[25389]: Disconnected from 111.162.205.249 port 50048 [preauth] Oct 7 14:45:12 cumulus sshd[25498]: pam_unix(sshd:auth): authentication failure........ ------------------------------- |
2020-10-09 01:51:05 |
| 195.62.46.11 | attackbotsspam | E-mail Spam RBL ... |
2020-10-09 01:30:23 |
| 175.24.42.136 | attackspam | SSH Brute-Forcing (server1) |
2020-10-09 01:17:35 |
| 197.39.53.66 | attackspambots | [N3.H3.VM3] Port Scanner Detected Blocked by UFW |
2020-10-09 01:46:05 |