城市(city): unknown
省份(region): unknown
国家(country): United Kingdom
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 131.231.108.20
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 63932
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;131.231.108.20. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019062401 1800 900 604800 86400
;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Tue Jun 25 09:10:45 CST 2019
;; MSG SIZE rcvd: 11820.108.231.131.in-addr.arpa domain name pointer eduroam-staff-131-108-20.lut.ac.uk.Server: 67.207.67.2
Address: 67.207.67.2#53
Non-authoritative answer:
20.108.231.131.in-addr.arpa name = eduroam-staff-131-108-20.lut.ac.uk.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 130.105.215.3 | attackbotsspam | Attempts to probe for or exploit a Drupal site on url: /wp-login.php. Reported by the module https://www.drupal.org/project/abuseipdb. |
2019-09-17 08:06:05 |
| 42.59.249.169 | attackspam | Sep 16 04:07:43 wildwolf ssh-honeypotd[26164]: Failed password for r.r from 42.59.249.169 port 17705 ssh2 (target: 158.69.100.132:22, password: default) Sep 16 04:07:43 wildwolf ssh-honeypotd[26164]: Failed password for r.r from 42.59.249.169 port 17705 ssh2 (target: 158.69.100.132:22, password: default) Sep 16 04:07:44 wildwolf ssh-honeypotd[26164]: Failed password for r.r from 42.59.249.169 port 17705 ssh2 (target: 158.69.100.132:22, password: default) Sep 16 04:07:44 wildwolf ssh-honeypotd[26164]: Failed password for r.r from 42.59.249.169 port 17705 ssh2 (target: 158.69.100.132:22, password: uClinux) Sep 16 04:07:44 wildwolf ssh-honeypotd[26164]: Failed password for r.r from 42.59.249.169 port 17705 ssh2 (target: 158.69.100.132:22, password: 1234) Sep 16 04:07:44 wildwolf ssh-honeypotd[26164]: Failed password for r.r from 42.59.249.169 port 17705 ssh2 (target: 158.69.100.132:22, password: openelec) Sep 16 04:07:45 wildwolf ssh-honeypotd[26164]: Failed password for r......... ------------------------------ |
2019-09-17 07:39:32 |
| 91.183.90.237 | attack | Sep 17 01:07:34 localhost sshd\[17081\]: Invalid user jaimie from 91.183.90.237 port 40952 Sep 17 01:07:34 localhost sshd\[17081\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.183.90.237 Sep 17 01:07:36 localhost sshd\[17081\]: Failed password for invalid user jaimie from 91.183.90.237 port 40952 ssh2 |
2019-09-17 07:34:59 |
| 222.253.252.195 | attackbotsspam | Attempt To attack host OS, exploiting network vulnerabilities, on 16-09-2019 22:27:18. |
2019-09-17 08:05:15 |
| 178.128.121.188 | attackbots | Sep 17 01:11:29 localhost sshd\[17476\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.121.188 user=root Sep 17 01:11:30 localhost sshd\[17476\]: Failed password for root from 178.128.121.188 port 36208 ssh2 Sep 17 01:16:38 localhost sshd\[17948\]: Invalid user hp from 178.128.121.188 port 51890 |
2019-09-17 07:36:04 |
| 121.69.130.2 | attackspambots | Sep 16 10:05:03 lcdev sshd\[13067\]: Invalid user q from 121.69.130.2 Sep 16 10:05:03 lcdev sshd\[13067\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.69.130.2 Sep 16 10:05:06 lcdev sshd\[13067\]: Failed password for invalid user q from 121.69.130.2 port 2170 ssh2 Sep 16 10:07:07 lcdev sshd\[13213\]: Invalid user jy from 121.69.130.2 Sep 16 10:07:07 lcdev sshd\[13213\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.69.130.2 |
2019-09-17 07:28:02 |
| 200.164.217.210 | attackspambots | Sep 16 23:31:39 microserver sshd[2333]: Invalid user rosa from 200.164.217.210 port 60669 Sep 16 23:31:39 microserver sshd[2333]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.164.217.210 Sep 16 23:31:41 microserver sshd[2333]: Failed password for invalid user rosa from 200.164.217.210 port 60669 ssh2 Sep 16 23:39:21 microserver sshd[3199]: Invalid user roberto from 200.164.217.210 port 57257 Sep 16 23:39:21 microserver sshd[3199]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.164.217.210 Sep 16 23:54:21 microserver sshd[5274]: Invalid user informix from 200.164.217.210 port 50377 Sep 16 23:54:21 microserver sshd[5274]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.164.217.210 Sep 16 23:54:22 microserver sshd[5274]: Failed password for invalid user informix from 200.164.217.210 port 50377 ssh2 Sep 17 00:02:07 microserver sshd[6500]: Invalid user daniela from 200.164.217.210 |
2019-09-17 07:43:18 |
| 180.253.183.36 | attackbotsspam | Lines containing failures of 180.253.183.36 Sep 16 21:38:53 siirappi sshd[13710]: Invalid user martin from 180.253.183.36 port 48250 Sep 16 21:38:53 siirappi sshd[13710]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.253.183.36 Sep 16 21:38:54 siirappi sshd[13710]: Failed password for invalid user martin from 180.253.183.36 port 48250 ssh2 Sep 16 21:38:55 siirappi sshd[13710]: Received disconnect from 180.253.183.36 port 48250:11: Bye Bye [preauth] Sep 16 21:38:55 siirappi sshd[13710]: Disconnected from 180.253.183.36 port 48250 [preauth] Sep 16 21:43:35 siirappi sshd[13787]: Invalid user tpuser from 180.253.183.36 port 57402 Sep 16 21:43:35 siirappi sshd[13787]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.253.183.36 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=180.253.183.36 |
2019-09-17 07:43:47 |
| 210.245.2.226 | attack | Sep 16 20:59:26 MK-Soft-VM5 sshd\[17912\]: Invalid user tkm from 210.245.2.226 port 39706 Sep 16 20:59:26 MK-Soft-VM5 sshd\[17912\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.245.2.226 Sep 16 20:59:28 MK-Soft-VM5 sshd\[17912\]: Failed password for invalid user tkm from 210.245.2.226 port 39706 ssh2 ... |
2019-09-17 07:34:14 |
| 189.207.246.57 | attackspam | Sep 16 23:27:44 ip-172-31-62-245 sshd\[4610\]: Invalid user testftp1 from 189.207.246.57\ Sep 16 23:27:46 ip-172-31-62-245 sshd\[4610\]: Failed password for invalid user testftp1 from 189.207.246.57 port 54910 ssh2\ Sep 16 23:31:52 ip-172-31-62-245 sshd\[4650\]: Invalid user jerry from 189.207.246.57\ Sep 16 23:31:53 ip-172-31-62-245 sshd\[4650\]: Failed password for invalid user jerry from 189.207.246.57 port 48183 ssh2\ Sep 16 23:36:01 ip-172-31-62-245 sshd\[4684\]: Invalid user robert from 189.207.246.57\ |
2019-09-17 07:38:16 |
| 89.163.227.81 | attackspambots | Sep 17 01:16:18 mail sshd\[19501\]: Failed password for invalid user pl from 89.163.227.81 port 46712 ssh2 Sep 17 01:19:59 mail sshd\[19991\]: Invalid user by from 89.163.227.81 port 60898 Sep 17 01:19:59 mail sshd\[19991\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.163.227.81 Sep 17 01:20:01 mail sshd\[19991\]: Failed password for invalid user by from 89.163.227.81 port 60898 ssh2 Sep 17 01:23:51 mail sshd\[20477\]: Invalid user zui from 89.163.227.81 port 46858 Sep 17 01:23:51 mail sshd\[20477\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.163.227.81 |
2019-09-17 07:31:14 |
| 222.73.242.180 | attackspambots | Automatic report - Banned IP Access |
2019-09-17 07:59:52 |
| 92.222.75.72 | attackspam | k+ssh-bruteforce |
2019-09-17 07:51:21 |
| 51.68.82.218 | attackspam | Sep 17 02:34:31 site2 sshd\[41965\]: Address 51.68.82.218 maps to ip-51-68-82.eu, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!Sep 17 02:34:31 site2 sshd\[41965\]: Invalid user twintown from 51.68.82.218Sep 17 02:34:33 site2 sshd\[41965\]: Failed password for invalid user twintown from 51.68.82.218 port 35392 ssh2Sep 17 02:38:29 site2 sshd\[42087\]: Address 51.68.82.218 maps to ip-51-68-82.eu, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!Sep 17 02:38:29 site2 sshd\[42087\]: Invalid user wuchunpeng from 51.68.82.218 ... |
2019-09-17 07:54:46 |
| 159.89.153.54 | attack | Sep 16 17:42:25 xtremcommunity sshd\[157558\]: Invalid user Valpuri from 159.89.153.54 port 54982 Sep 16 17:42:25 xtremcommunity sshd\[157558\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.153.54 Sep 16 17:42:27 xtremcommunity sshd\[157558\]: Failed password for invalid user Valpuri from 159.89.153.54 port 54982 ssh2 Sep 16 17:46:50 xtremcommunity sshd\[157661\]: Invalid user ax400 from 159.89.153.54 port 42182 Sep 16 17:46:50 xtremcommunity sshd\[157661\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.153.54 ... |
2019-09-17 07:22:14 |