城市(city): Gangnam-gu
省份(region): Seoul
国家(country): South Korea
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): Korea Telecom
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.52.102.142
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 44003
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;14.52.102.142. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019052600 1800 900 604800 86400
;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sun May 26 21:10:13 CST 2019
;; MSG SIZE rcvd: 117
Host 142.102.52.14.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 67.207.67.2
Address: 67.207.67.2#53
** server can't find 142.102.52.14.in-addr.arpa: NXDOMAIN
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 222.186.169.192 | attackspam | Oct 16 14:38:57 server sshd\[20310\]: Failed password for root from 222.186.169.192 port 7116 ssh2 Oct 16 14:38:58 server sshd\[20332\]: Failed password for root from 222.186.169.192 port 57090 ssh2 Oct 16 17:37:55 server sshd\[10251\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.169.192 user=root Oct 16 17:37:57 server sshd\[10251\]: Failed password for root from 222.186.169.192 port 13234 ssh2 Oct 16 17:38:01 server sshd\[10251\]: Failed password for root from 222.186.169.192 port 13234 ssh2 ... |
2019-10-16 22:38:25 |
| 51.68.17.217 | attack | Port scan on 2 port(s): 139 445 |
2019-10-16 22:21:48 |
| 61.220.140.204 | attackbots | 19/10/16@07:21:14: FAIL: Alarm-Intrusion address from=61.220.140.204 ... |
2019-10-16 22:32:11 |
| 92.50.249.166 | attack | Oct 16 16:24:52 MK-Soft-VM6 sshd[17728]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.50.249.166 Oct 16 16:24:54 MK-Soft-VM6 sshd[17728]: Failed password for invalid user aiyaz from 92.50.249.166 port 49810 ssh2 ... |
2019-10-16 22:29:16 |
| 189.172.79.33 | attackbotsspam | Oct 16 04:01:46 php1 sshd\[10490\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.172.79.33 user=root Oct 16 04:01:48 php1 sshd\[10490\]: Failed password for root from 189.172.79.33 port 41874 ssh2 Oct 16 04:06:47 php1 sshd\[10922\]: Invalid user aland from 189.172.79.33 Oct 16 04:06:47 php1 sshd\[10922\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.172.79.33 Oct 16 04:06:49 php1 sshd\[10922\]: Failed password for invalid user aland from 189.172.79.33 port 53774 ssh2 |
2019-10-16 22:11:50 |
| 103.253.27.196 | attackbotsspam | 10/16/2019-07:21:25.620834 103.253.27.196 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433 |
2019-10-16 22:26:01 |
| 95.178.159.213 | attack | Telnetd brute force attack detected by fail2ban |
2019-10-16 22:44:10 |
| 74.208.252.136 | attack | Oct 16 13:15:54 server sshd\[27238\]: Failed password for invalid user P@$$wort_1@3 from 74.208.252.136 port 34264 ssh2 Oct 16 14:17:06 server sshd\[13960\]: Invalid user toor1 from 74.208.252.136 Oct 16 14:17:06 server sshd\[13960\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=74.208.252.136 Oct 16 14:17:08 server sshd\[13960\]: Failed password for invalid user toor1 from 74.208.252.136 port 36546 ssh2 Oct 16 14:21:09 server sshd\[15277\]: Invalid user arcades from 74.208.252.136 Oct 16 14:21:09 server sshd\[15277\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=74.208.252.136 ... |
2019-10-16 22:36:14 |
| 222.186.175.217 | attack | pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.217 user=root Failed password for root from 222.186.175.217 port 45570 ssh2 Failed password for root from 222.186.175.217 port 45570 ssh2 Failed password for root from 222.186.175.217 port 45570 ssh2 Failed password for root from 222.186.175.217 port 45570 ssh2 |
2019-10-16 22:17:22 |
| 68.183.149.241 | attack | WordPress wp-login brute force :: 68.183.149.241 0.052 BYPASS [17/Oct/2019:01:36:10 1100] [censored_4] "POST /wp-login.php HTTP/1.1" 200 3989 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2019-10-16 22:43:07 |
| 184.105.139.82 | attackspambots | MultiHost/MultiPort Probe, Scan, Hack - |
2019-10-16 22:39:30 |
| 85.209.0.194 | attackspambots | Scanning for open ports |
2019-10-16 22:31:20 |
| 112.116.155.205 | attackbotsspam | (sshd) Failed SSH login from 112.116.155.205 (205.155.116.112.broad.km.yn.dynamic.163data.com.cn): 5 in the last 3600 secs |
2019-10-16 22:21:21 |
| 151.80.144.255 | attackspam | Oct 16 13:21:51 dedicated sshd[2825]: Invalid user database from 151.80.144.255 port 55188 |
2019-10-16 22:08:59 |
| 148.216.29.46 | attackbotsspam | Oct 16 15:57:51 localhost sshd\[2754\]: Invalid user 0fordn1on@\#\$%\^\& from 148.216.29.46 port 38122 Oct 16 15:57:52 localhost sshd\[2754\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.216.29.46 Oct 16 15:57:54 localhost sshd\[2754\]: Failed password for invalid user 0fordn1on@\#\$%\^\& from 148.216.29.46 port 38122 ssh2 |
2019-10-16 22:05:41 |