城市(city): Guri-si
省份(region): Gyeonggi-do
国家(country): South Korea
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.56.52.13
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 59346
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;14.56.52.13. IN A
;; AUTHORITY SECTION:
. 312 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022070200 1800 900 604800 86400
;; Query time: 26 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jul 02 14:07:49 CST 2022
;; MSG SIZE rcvd: 104Host 13.52.56.14.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 13.52.56.14.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 193.70.0.93 | attackbotsspam | Oct 15 06:47:49 SilenceServices sshd[2003]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.70.0.93 Oct 15 06:47:51 SilenceServices sshd[2003]: Failed password for invalid user denise from 193.70.0.93 port 55290 ssh2 Oct 15 06:51:52 SilenceServices sshd[3121]: Failed password for root from 193.70.0.93 port 39364 ssh2 |
2019-10-15 16:16:26 |
| 117.6.78.253 | attackspambots | Lines containing failures of 117.6.78.253 Oct 14 19:31:39 shared05 sshd[750]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.6.78.253 user=r.r Oct 14 19:31:42 shared05 sshd[750]: Failed password for r.r from 117.6.78.253 port 32784 ssh2 Oct 14 19:31:42 shared05 sshd[750]: Received disconnect from 117.6.78.253 port 32784:11: Bye Bye [preauth] Oct 14 19:31:42 shared05 sshd[750]: Disconnected from authenticating user r.r 117.6.78.253 port 32784 [preauth] Oct 14 19:45:04 shared05 sshd[5369]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.6.78.253 user=r.r Oct 14 19:45:06 shared05 sshd[5369]: Failed password for r.r from 117.6.78.253 port 34298 ssh2 Oct 14 19:45:07 shared05 sshd[5369]: Received disconnect from 117.6.78.253 port 34298:11: Bye Bye [preauth] Oct 14 19:45:07 shared05 sshd[5369]: Disconnected from authenticating user r.r 117.6.78.253 port 34298 [preauth] Oct 14 19:49:41 sha........ ------------------------------ |
2019-10-15 15:47:20 |
| 106.56.247.85 | attack | /download/file.php?id=219&sid=e67118ee57919f913a39fa6a43bb0cef |
2019-10-15 16:19:27 |
| 106.13.125.248 | attack | $f2bV_matches |
2019-10-15 15:49:45 |
| 221.224.194.83 | attackspambots | web-1 [ssh_2] SSH Attack |
2019-10-15 16:02:35 |
| 95.58.194.148 | attackspam | Oct 15 05:17:52 game-panel sshd[25189]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.58.194.148 Oct 15 05:17:54 game-panel sshd[25189]: Failed password for invalid user show from 95.58.194.148 port 37878 ssh2 Oct 15 05:21:47 game-panel sshd[25313]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.58.194.148 |
2019-10-15 15:47:38 |
| 192.169.243.224 | attack | WordPress login Brute force / Web App Attack on client site. |
2019-10-15 16:19:05 |
| 93.86.61.48 | attackspam | postfix (unknown user, SPF fail or relay access denied) |
2019-10-15 15:53:53 |
| 200.72.249.139 | attackspam | Oct 15 05:43:49 DAAP sshd[16851]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.72.249.139 user=root Oct 15 05:43:51 DAAP sshd[16851]: Failed password for root from 200.72.249.139 port 59897 ssh2 Oct 15 05:48:38 DAAP sshd[16863]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.72.249.139 user=root Oct 15 05:48:40 DAAP sshd[16863]: Failed password for root from 200.72.249.139 port 52823 ssh2 ... |
2019-10-15 16:08:38 |
| 119.10.114.5 | attackbots | Oct 14 21:50:07 tdfoods sshd\[5395\]: Invalid user nw from 119.10.114.5 Oct 14 21:50:07 tdfoods sshd\[5395\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.10.114.5 Oct 14 21:50:09 tdfoods sshd\[5395\]: Failed password for invalid user nw from 119.10.114.5 port 57269 ssh2 Oct 14 21:54:55 tdfoods sshd\[5763\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.10.114.5 user=sshd Oct 14 21:54:56 tdfoods sshd\[5763\]: Failed password for sshd from 119.10.114.5 port 21076 ssh2 |
2019-10-15 16:07:56 |
| 60.16.248.121 | attackbotsspam | Unauthorised access (Oct 15) SRC=60.16.248.121 LEN=40 TTL=49 ID=55617 TCP DPT=8080 WINDOW=3795 SYN Unauthorised access (Oct 15) SRC=60.16.248.121 LEN=40 TTL=49 ID=20525 TCP DPT=8080 WINDOW=2290 SYN |
2019-10-15 16:15:07 |
| 159.203.141.208 | attackbots | Oct 15 06:31:36 game-panel sshd[28418]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.141.208 Oct 15 06:31:38 game-panel sshd[28418]: Failed password for invalid user admin from 159.203.141.208 port 58584 ssh2 Oct 15 06:35:40 game-panel sshd[28541]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.141.208 |
2019-10-15 15:51:05 |
| 83.175.213.250 | attackbots | $f2bV_matches |
2019-10-15 15:46:29 |
| 192.228.100.228 | attackspambots | Scanning and Vuln Attempts |
2019-10-15 16:15:39 |
| 180.250.140.74 | attackbots | Oct 15 09:08:54 MK-Soft-VM3 sshd[19752]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.250.140.74 Oct 15 09:08:56 MK-Soft-VM3 sshd[19752]: Failed password for invalid user hcn12715683 from 180.250.140.74 port 49122 ssh2 ... |
2019-10-15 15:42:57 |