城市(city): unknown
省份(region): unknown
国家(country): None
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 134.106.103.116
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 51401
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;134.106.103.116. IN A
;; AUTHORITY SECTION:
. 260 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022011002 1800 900 604800 86400
;; Query time: 56 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jan 11 16:20:58 CST 2022
;; MSG SIZE rcvd: 108Host 116.103.106.134.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 116.103.106.134.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 185.234.217.50 | attackbotsspam | Port 3389 Scan |
2019-10-21 18:19:40 |
| 190.25.232.2 | attack | Lines containing failures of 190.25.232.2 Oct 21 02:42:27 mellenthin sshd[28147]: Invalid user uc from 190.25.232.2 port 55999 Oct 21 02:42:27 mellenthin sshd[28147]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.25.232.2 Oct 21 02:42:29 mellenthin sshd[28147]: Failed password for invalid user uc from 190.25.232.2 port 55999 ssh2 Oct 21 02:42:29 mellenthin sshd[28147]: Received disconnect from 190.25.232.2 port 55999:11: Bye Bye [preauth] Oct 21 02:42:29 mellenthin sshd[28147]: Disconnected from invalid user uc 190.25.232.2 port 55999 [preauth] Oct 21 02:57:30 mellenthin sshd[28265]: User r.r from 190.25.232.2 not allowed because not listed in AllowUsers Oct 21 02:57:30 mellenthin sshd[28265]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.25.232.2 user=r.r Oct 21 02:57:32 mellenthin sshd[28265]: Failed password for invalid user r.r from 190.25.232.2 port 47370 ssh2 Oct 21 02:57:3........ ------------------------------ |
2019-10-21 18:44:33 |
| 198.108.67.132 | attackbotsspam | 10/21/2019-04:34:41.512288 198.108.67.132 Protocol: 6 ET DROP Dshield Block Listed Source group 1 |
2019-10-21 18:16:31 |
| 182.72.178.114 | attackbots | Oct 20 23:43:08 Tower sshd[7799]: Connection from 182.72.178.114 port 20226 on 192.168.10.220 port 22 Oct 20 23:43:10 Tower sshd[7799]: Invalid user webpop from 182.72.178.114 port 20226 Oct 20 23:43:10 Tower sshd[7799]: error: Could not get shadow information for NOUSER Oct 20 23:43:10 Tower sshd[7799]: Failed password for invalid user webpop from 182.72.178.114 port 20226 ssh2 Oct 20 23:43:10 Tower sshd[7799]: Received disconnect from 182.72.178.114 port 20226:11: Bye Bye [preauth] Oct 20 23:43:10 Tower sshd[7799]: Disconnected from invalid user webpop 182.72.178.114 port 20226 [preauth] |
2019-10-21 18:47:06 |
| 45.40.244.197 | attack | Oct 21 13:17:53 sauna sshd[109858]: Failed password for root from 45.40.244.197 port 47004 ssh2 ... |
2019-10-21 18:40:50 |
| 213.182.101.187 | attack | Oct 21 04:55:15 Tower sshd[24096]: Connection from 213.182.101.187 port 43598 on 192.168.10.220 port 22 Oct 21 04:55:20 Tower sshd[24096]: Failed password for root from 213.182.101.187 port 43598 ssh2 Oct 21 04:55:20 Tower sshd[24096]: Received disconnect from 213.182.101.187 port 43598:11: Bye Bye [preauth] Oct 21 04:55:20 Tower sshd[24096]: Disconnected from authenticating user root 213.182.101.187 port 43598 [preauth] |
2019-10-21 18:37:13 |
| 79.131.251.135 | attackspambots | Port Scan: TCP/23 |
2019-10-21 18:27:13 |
| 51.83.33.156 | attackspam | 2019-10-21T06:33:03.819454shield sshd\[14589\]: Invalid user yann from 51.83.33.156 port 56354 2019-10-21T06:33:03.825153shield sshd\[14589\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=156.ip-51-83-33.eu 2019-10-21T06:33:05.181061shield sshd\[14589\]: Failed password for invalid user yann from 51.83.33.156 port 56354 ssh2 2019-10-21T06:36:57.734861shield sshd\[15544\]: Invalid user dehart from 51.83.33.156 port 38712 2019-10-21T06:36:57.739344shield sshd\[15544\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=156.ip-51-83-33.eu |
2019-10-21 18:13:34 |
| 182.74.190.198 | attack | SSH bruteforce (Triggered fail2ban) |
2019-10-21 18:28:12 |
| 167.114.185.237 | attack | Oct 21 10:28:03 amit sshd\[22889\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.114.185.237 user=root Oct 21 10:28:05 amit sshd\[22889\]: Failed password for root from 167.114.185.237 port 35276 ssh2 Oct 21 10:31:42 amit sshd\[27502\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.114.185.237 user=root ... |
2019-10-21 18:27:44 |
| 91.121.103.175 | attackspam | Oct 20 17:55:56 hanapaa sshd\[15110\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns354139.ip-91-121-103.eu user=root Oct 20 17:55:58 hanapaa sshd\[15110\]: Failed password for root from 91.121.103.175 port 40766 ssh2 Oct 20 18:01:55 hanapaa sshd\[15579\]: Invalid user powerapp from 91.121.103.175 Oct 20 18:01:55 hanapaa sshd\[15579\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns354139.ip-91-121-103.eu Oct 20 18:01:57 hanapaa sshd\[15579\]: Failed password for invalid user powerapp from 91.121.103.175 port 50596 ssh2 |
2019-10-21 18:30:03 |
| 94.176.5.253 | attack | (Oct 21) LEN=44 TTL=244 ID=59141 DF TCP DPT=23 WINDOW=14600 SYN (Oct 21) LEN=44 TTL=244 ID=3608 DF TCP DPT=23 WINDOW=14600 SYN (Oct 21) LEN=44 TTL=244 ID=3355 DF TCP DPT=23 WINDOW=14600 SYN (Oct 21) LEN=44 TTL=244 ID=34518 DF TCP DPT=23 WINDOW=14600 SYN (Oct 21) LEN=44 TTL=244 ID=65399 DF TCP DPT=23 WINDOW=14600 SYN (Oct 21) LEN=44 TTL=244 ID=37754 DF TCP DPT=23 WINDOW=14600 SYN (Oct 21) LEN=44 TTL=244 ID=1152 DF TCP DPT=23 WINDOW=14600 SYN (Oct 21) LEN=44 TTL=244 ID=61012 DF TCP DPT=23 WINDOW=14600 SYN (Oct 21) LEN=44 TTL=244 ID=4326 DF TCP DPT=23 WINDOW=14600 SYN (Oct 20) LEN=44 TTL=244 ID=37336 DF TCP DPT=23 WINDOW=14600 SYN (Oct 20) LEN=44 TTL=244 ID=17818 DF TCP DPT=23 WINDOW=14600 SYN (Oct 20) LEN=44 TTL=244 ID=455 DF TCP DPT=23 WINDOW=14600 SYN (Oct 20) LEN=44 TTL=244 ID=17143 DF TCP DPT=23 WINDOW=14600 SYN (Oct 20) LEN=44 TTL=244 ID=33953 DF TCP DPT=23 WINDOW=14600 SYN (Oct 20) LEN=44 TTL=244 ID=28562 DF TCP DPT=23 WINDOW=14600 SYN ... |
2019-10-21 18:41:18 |
| 185.165.168.77 | attack | Oct 21 05:44:28 rotator sshd\[7233\]: Failed password for root from 185.165.168.77 port 42068 ssh2Oct 21 05:44:31 rotator sshd\[7233\]: Failed password for root from 185.165.168.77 port 42068 ssh2Oct 21 05:44:33 rotator sshd\[7233\]: Failed password for root from 185.165.168.77 port 42068 ssh2Oct 21 05:44:36 rotator sshd\[7233\]: Failed password for root from 185.165.168.77 port 42068 ssh2Oct 21 05:44:38 rotator sshd\[7233\]: Failed password for root from 185.165.168.77 port 42068 ssh2Oct 21 05:44:41 rotator sshd\[7233\]: Failed password for root from 185.165.168.77 port 42068 ssh2 ... |
2019-10-21 18:15:31 |
| 58.57.18.70 | attack | Port 1433 Scan |
2019-10-21 18:39:16 |
| 93.171.141.141 | attackspambots | Oct 21 09:10:30 vmd17057 sshd\[6065\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.171.141.141 user=root Oct 21 09:10:32 vmd17057 sshd\[6065\]: Failed password for root from 93.171.141.141 port 34148 ssh2 Oct 21 09:17:55 vmd17057 sshd\[6551\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.171.141.141 user=root ... |
2019-10-21 18:14:30 |