城市(city): Tainan
省份(region): Tainan
国家(country): Taiwan, China
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 140.116.22.13
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 14959
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;140.116.22.13. IN A
;; AUTHORITY SECTION:
. 412 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2023051200 1800 900 604800 86400
;; Query time: 112 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri May 12 17:11:57 CST 2023
;; MSG SIZE rcvd: 106Host 13.22.116.140.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 13.22.116.140.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 118.24.100.198 | attackspambots | $f2bV_matches |
2020-07-21 06:53:20 |
| 191.241.35.62 | attackbotsspam | Lines containing failures of 191.241.35.62 Jul 20 22:34:09 shared12 sshd[15408]: Did not receive identification string from 191.241.35.62 port 49693 Jul 20 22:34:13 shared12 sshd[15438]: Invalid user 666666 from 191.241.35.62 port 49942 Jul 20 22:34:13 shared12 sshd[15438]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.241.35.62 Jul 20 22:34:15 shared12 sshd[15438]: Failed password for invalid user 666666 from 191.241.35.62 port 49942 ssh2 Jul 20 22:34:15 shared12 sshd[15438]: Connection closed by invalid user 666666 191.241.35.62 port 49942 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=191.241.35.62 |
2020-07-21 06:45:51 |
| 49.233.13.145 | attack | Jul 20 22:44:36 h2829583 sshd[20369]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.13.145 |
2020-07-21 06:59:21 |
| 93.56.8.14 | attack | Jul 20 23:07:06 web-main sshd[665156]: Invalid user cmsftp from 93.56.8.14 port 45790 Jul 20 23:07:09 web-main sshd[665156]: Failed password for invalid user cmsftp from 93.56.8.14 port 45790 ssh2 Jul 20 23:15:48 web-main sshd[665288]: Invalid user ywz from 93.56.8.14 port 40446 |
2020-07-21 06:34:43 |
| 113.89.68.232 | attackbotsspam | (sshd) Failed SSH login from 113.89.68.232 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jul 21 00:09:15 s1 sshd[26733]: Invalid user pvs from 113.89.68.232 port 12405 Jul 21 00:09:17 s1 sshd[26733]: Failed password for invalid user pvs from 113.89.68.232 port 12405 ssh2 Jul 21 00:13:26 s1 sshd[26889]: Invalid user ts1 from 113.89.68.232 port 12576 Jul 21 00:13:29 s1 sshd[26889]: Failed password for invalid user ts1 from 113.89.68.232 port 12576 ssh2 Jul 21 00:21:28 s1 sshd[27125]: Invalid user ht from 113.89.68.232 port 12480 |
2020-07-21 06:46:34 |
| 190.234.209.112 | attackbotsspam | IP 190.234.209.112 attacked honeypot on port: 3433 at 7/20/2020 1:42:08 PM |
2020-07-21 06:40:40 |
| 222.186.42.137 | attackbots | Jul 20 22:20:16 scw-6657dc sshd[30541]: Failed password for root from 222.186.42.137 port 34987 ssh2 Jul 20 22:20:16 scw-6657dc sshd[30541]: Failed password for root from 222.186.42.137 port 34987 ssh2 Jul 20 22:20:18 scw-6657dc sshd[30541]: Failed password for root from 222.186.42.137 port 34987 ssh2 ... |
2020-07-21 06:31:40 |
| 221.195.189.144 | attackbotsspam | detected by Fail2Ban |
2020-07-21 06:29:06 |
| 114.46.47.110 | attackspam | Jul 20 22:33:56 uapps sshd[14129]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114-46-47-110.dynamic-ip.hinet.net Jul 20 22:33:58 uapps sshd[14129]: Failed password for invalid user admin from 114.46.47.110 port 40131 ssh2 Jul 20 22:33:58 uapps sshd[14129]: Received disconnect from 114.46.47.110: 11: Bye Bye [preauth] Jul 20 22:34:00 uapps sshd[14131]: User r.r from 114-46-47-110.dynamic-ip.hinet.net not allowed because not listed in AllowUsers Jul 20 22:34:01 uapps sshd[14131]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114-46-47-110.dynamic-ip.hinet.net user=r.r ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=114.46.47.110 |
2020-07-21 06:35:29 |
| 114.88.90.37 | attackbots | Jul 20 21:38:01 scw-6657dc sshd[29114]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.88.90.37 Jul 20 21:38:01 scw-6657dc sshd[29114]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.88.90.37 Jul 20 21:38:03 scw-6657dc sshd[29114]: Failed password for invalid user webadmin from 114.88.90.37 port 55524 ssh2 ... |
2020-07-21 06:44:09 |
| 150.136.102.101 | attackbots | Jul 21 00:31:28 ns3164893 sshd[22356]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.136.102.101 Jul 21 00:31:30 ns3164893 sshd[22356]: Failed password for invalid user admin3 from 150.136.102.101 port 40730 ssh2 ... |
2020-07-21 06:54:23 |
| 106.13.86.136 | attack | Banned for a week because repeated abuses, for example SSH, but not only |
2020-07-21 06:46:56 |
| 138.197.151.129 | attackspambots | 2020-07-21T00:23:15.631954amanda2.illicoweb.com sshd\[18130\]: Invalid user oper from 138.197.151.129 port 34748 2020-07-21T00:23:15.634732amanda2.illicoweb.com sshd\[18130\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.151.129 2020-07-21T00:23:17.486948amanda2.illicoweb.com sshd\[18130\]: Failed password for invalid user oper from 138.197.151.129 port 34748 ssh2 2020-07-21T00:29:26.616836amanda2.illicoweb.com sshd\[18489\]: Invalid user victor from 138.197.151.129 port 58816 2020-07-21T00:29:26.619678amanda2.illicoweb.com sshd\[18489\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.151.129 ... |
2020-07-21 06:31:16 |
| 37.49.224.42 | attack | ET DROP Dshield Block Listed Source group 1 - port: 5038 proto: tcp cat: Misc Attackbytes: 60 |
2020-07-21 06:45:29 |
| 88.68.135.147 | attack | Jul 20 16:36:29 cumulus sshd[21806]: Bad protocol version identification '' from 88.68.135.147 port 47382 Jul 20 16:36:31 cumulus sshd[21807]: Invalid user openhabian from 88.68.135.147 port 48054 Jul 20 16:36:32 cumulus sshd[21807]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=88.68.135.147 Jul 20 16:36:34 cumulus sshd[21807]: Failed password for invalid user openhabian from 88.68.135.147 port 48054 ssh2 Jul 20 16:36:34 cumulus sshd[21807]: Connection closed by 88.68.135.147 port 48054 [preauth] Jul 20 16:36:36 cumulus sshd[21812]: Invalid user support from 88.68.135.147 port 50324 Jul 20 16:36:36 cumulus sshd[21812]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=88.68.135.147 Jul 20 16:36:38 cumulus sshd[21812]: Failed password for invalid user support from 88.68.135.147 port 50324 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=88.68.135.147 |
2020-07-21 06:58:12 |