城市(city): unknown
省份(region): unknown
国家(country): United States of America (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 141.121.249.62
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 10521
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;141.121.249.62. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025013101 1800 900 604800 86400
;; Query time: 11 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 01 04:45:42 CST 2025
;; MSG SIZE rcvd: 107Host 62.249.121.141.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 62.249.121.141.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 98.155.238.182 | attackspam | (sshd) Failed SSH login from 98.155.238.182 (US/United States/Hawaii/Lahaina/cpe-98-155-238-182.hawaii.res.rr.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 17 12:58:46 atlas sshd[5787]: Invalid user admin from 98.155.238.182 port 42128 Sep 17 12:58:48 atlas sshd[5787]: Failed password for invalid user admin from 98.155.238.182 port 42128 ssh2 Sep 17 12:58:49 atlas sshd[5792]: Invalid user admin from 98.155.238.182 port 42207 Sep 17 12:58:51 atlas sshd[5792]: Failed password for invalid user admin from 98.155.238.182 port 42207 ssh2 Sep 17 12:58:52 atlas sshd[5799]: Invalid user admin from 98.155.238.182 port 42288 |
2020-09-18 16:19:17 |
| 111.230.248.93 | attackbotsspam | Sep 18 08:08:14 localhost sshd[2443711]: Failed password for root from 111.230.248.93 port 47590 ssh2 Sep 18 08:12:29 localhost sshd[2452623]: Invalid user fbl from 111.230.248.93 port 39074 Sep 18 08:12:29 localhost sshd[2452623]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.230.248.93 Sep 18 08:12:29 localhost sshd[2452623]: Invalid user fbl from 111.230.248.93 port 39074 Sep 18 08:12:31 localhost sshd[2452623]: Failed password for invalid user fbl from 111.230.248.93 port 39074 ssh2 ... |
2020-09-18 16:39:46 |
| 112.85.42.94 | attack | Sep 18 05:13:31 bsd01 sshd[97615]: Unable to negotiate with 112.85.42.94 port 18697: no matching key exchange method found. Their offer: ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 [preauth] Sep 18 05:14:51 bsd01 sshd[97622]: Unable to negotiate with 112.85.42.94 port 13760: no matching key exchange method found. Their offer: ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 [preauth] Sep 18 05:15:58 bsd01 sshd[97666]: Unable to negotiate with 112.85.42.94 port 63960: no matching key exchange method found. Their offer: ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 [preauth] Sep 18 ... |
2020-09-18 16:41:28 |
| 114.239.0.28 | attackbotsspam | Lines containing failures of 114.239.0.28 Sep 17 21:39:03 kmh-mb-001 sshd[3195]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.239.0.28 user=r.r Sep 17 21:39:05 kmh-mb-001 sshd[3195]: Failed password for r.r from 114.239.0.28 port 52424 ssh2 Sep 17 21:39:06 kmh-mb-001 sshd[3195]: Received disconnect from 114.239.0.28 port 52424:11: Bye Bye [preauth] Sep 17 21:39:06 kmh-mb-001 sshd[3195]: Disconnected from authenticating user r.r 114.239.0.28 port 52424 [preauth] Sep 17 21:46:20 kmh-mb-001 sshd[3474]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.239.0.28 user=r.r Sep 17 21:46:22 kmh-mb-001 sshd[3474]: Failed password for r.r from 114.239.0.28 port 43908 ssh2 Sep 17 21:46:24 kmh-mb-001 sshd[3474]: Received disconnect from 114.239.0.28 port 43908:11: Bye Bye [preauth] Sep 17 21:46:24 kmh-mb-001 sshd[3474]: Disconnected from authenticating user r.r 114.239.0.28 port 43908 [preauth]........ ------------------------------ |
2020-09-18 16:11:47 |
| 218.92.0.224 | attackspambots | Sep 18 10:09:29 ns381471 sshd[5529]: Failed password for root from 218.92.0.224 port 26778 ssh2 Sep 18 10:09:32 ns381471 sshd[5529]: Failed password for root from 218.92.0.224 port 26778 ssh2 |
2020-09-18 16:09:45 |
| 117.27.88.61 | attackbots | $f2bV_matches |
2020-09-18 16:21:53 |
| 51.254.38.106 | attack | Sep 18 07:05:33 *** sshd[5222]: Invalid user testuser from 51.254.38.106 |
2020-09-18 16:23:59 |
| 14.170.4.211 | attack | 1600361908 - 09/17/2020 18:58:28 Host: 14.170.4.211/14.170.4.211 Port: 445 TCP Blocked ... |
2020-09-18 16:39:01 |
| 99.78.79.216 | attack | (sshd) Failed SSH login from 99.78.79.216 (US/United States/-): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 17 12:59:08 internal2 sshd[16207]: Invalid user admin from 99.78.79.216 port 55541 Sep 17 12:59:09 internal2 sshd[16241]: Invalid user admin from 99.78.79.216 port 55615 Sep 17 12:59:09 internal2 sshd[16244]: Invalid user admin from 99.78.79.216 port 55624 |
2020-09-18 16:13:06 |
| 167.99.67.209 | attackbots | Port scan: Attack repeated for 24 hours |
2020-09-18 16:30:48 |
| 157.230.100.192 | attackspam | Sep 18 09:37:39 haigwepa sshd[21986]: Failed password for root from 157.230.100.192 port 41302 ssh2 ... |
2020-09-18 16:33:25 |
| 77.55.216.27 | attack | Phishing |
2020-09-18 16:09:16 |
| 117.215.75.233 | attack | smtp probe/invalid login attempt |
2020-09-18 16:43:15 |
| 59.127.181.186 | attackspam | Portscan detected |
2020-09-18 16:16:37 |
| 191.233.254.251 | attack | Tried sshing with brute force. |
2020-09-18 16:08:15 |