城市(city): unknown
省份(region): unknown
国家(country): Canada
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 142.9.215.93
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 39239
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;142.9.215.93. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022200 1800 900 604800 86400
;; Query time: 10 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 23 01:36:17 CST 2025
;; MSG SIZE rcvd: 105Host 93.215.9.142.in-addr.arpa not found: 2(SERVFAIL)
server can't find 142.9.215.93.in-addr.arpa: SERVFAIL| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 112.199.98.42 | attackspam | Aug 9 07:43:46 mockhub sshd[23526]: Failed password for root from 112.199.98.42 port 42704 ssh2 ... |
2020-08-10 02:07:31 |
| 49.51.12.221 | attack | Sent packet to closed port: 32770 |
2020-08-10 02:03:33 |
| 103.40.22.89 | attackspambots | (sshd) Failed SSH login from 103.40.22.89 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Aug 9 14:53:13 amsweb01 sshd[20841]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.40.22.89 user=root Aug 9 14:53:15 amsweb01 sshd[20841]: Failed password for root from 103.40.22.89 port 33266 ssh2 Aug 9 14:59:51 amsweb01 sshd[21940]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.40.22.89 user=root Aug 9 14:59:54 amsweb01 sshd[21940]: Failed password for root from 103.40.22.89 port 39814 ssh2 Aug 9 15:02:35 amsweb01 sshd[22399]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.40.22.89 user=root |
2020-08-10 01:53:01 |
| 51.75.83.77 | attack | $f2bV_matches |
2020-08-10 02:09:13 |
| 167.71.38.104 | attack | Aug 9 17:20:59 scw-tender-jepsen sshd[6167]: Failed password for root from 167.71.38.104 port 40216 ssh2 |
2020-08-10 02:02:43 |
| 177.155.248.159 | attackbotsspam | Lines containing failures of 177.155.248.159 (max 1000) Aug 3 23:03:18 UTC__SANYALnet-Labs__cac12 sshd[27593]: Connection from 177.155.248.159 port 48278 on 64.137.176.104 port 22 Aug 3 23:03:21 UTC__SANYALnet-Labs__cac12 sshd[27593]: reveeclipse mapping checking getaddrinfo for 177-155-248-159.inbnet.com.br [177.155.248.159] failed - POSSIBLE BREAK-IN ATTEMPT! Aug 3 23:03:21 UTC__SANYALnet-Labs__cac12 sshd[27593]: User r.r from 177.155.248.159 not allowed because not listed in AllowUsers Aug 3 23:03:21 UTC__SANYALnet-Labs__cac12 sshd[27593]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.155.248.159 user=r.r Aug 3 23:03:22 UTC__SANYALnet-Labs__cac12 sshd[27593]: Failed password for invalid user r.r from 177.155.248.159 port 48278 ssh2 Aug 3 23:03:23 UTC__SANYALnet-Labs__cac12 sshd[27593]: Received disconnect from 177.155.248.159 port 48278:11: Bye Bye [preauth] Aug 3 23:03:23 UTC__SANYALnet-Labs__cac12 sshd[27593]: Di........ ------------------------------ |
2020-08-10 01:41:23 |
| 77.53.145.97 | attackbots | Port Scan detected! ... |
2020-08-10 02:15:10 |
| 180.208.58.145 | attackbotsspam | SSH authentication failure x 6 reported by Fail2Ban ... |
2020-08-10 02:11:56 |
| 134.122.53.154 | attack | Aug 4 04:44:31 host sshd[24941]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.122.53.154 user=r.r Aug 4 04:44:33 host sshd[24941]: Failed password for r.r from 134.122.53.154 port 37978 ssh2 Aug 4 04:44:33 host sshd[24941]: Received disconnect from 134.122.53.154: 11: Bye Bye [preauth] Aug 4 04:55:39 host sshd[23248]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.122.53.154 user=r.r Aug 4 04:55:41 host sshd[23248]: Failed password for r.r from 134.122.53.154 port 39642 ssh2 Aug 4 04:55:41 host sshd[23248]: Received disconnect from 134.122.53.154: 11: Bye Bye [preauth] Aug 4 04:59:34 host sshd[2160]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.122.53.154 user=r.r Aug 4 04:59:35 host sshd[2160]: Failed password for r.r from 134.122.53.154 port 54224 ssh2 Aug 4 04:59:35 host sshd[2160]: Received disconnect from 134.122.53......... ------------------------------- |
2020-08-10 02:15:37 |
| 220.166.241.138 | attackspam | Aug 4 14:05:50 *** sshd[11941]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.166.241.138 user=r.r Aug 4 14:05:52 *** sshd[11941]: Failed password for r.r from 220.166.241.138 port 48516 ssh2 Aug 4 14:05:52 *** sshd[11941]: Received disconnect from 220.166.241.138 port 48516:11: Bye Bye [preauth] Aug 4 14:05:52 *** sshd[11941]: Disconnected from 220.166.241.138 port 48516 [preauth] Aug 4 14:12:13 *** sshd[12045]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.166.241.138 user=r.r Aug 4 14:12:15 *** sshd[12045]: Failed password for r.r from 220.166.241.138 port 48792 ssh2 Aug 4 14:12:16 *** sshd[12045]: Received disconnect from 220.166.241.138 port 48792:11: Bye Bye [preauth] Aug 4 14:12:16 *** sshd[12045]: Disconnected from 220.166.241.138 port 48792 [preauth] Aug 4 14:14:58 *** sshd[12103]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruse........ ------------------------------- |
2020-08-10 02:17:47 |
| 91.106.64.82 | attack | 1596974937 - 08/09/2020 14:08:57 Host: 91.106.64.82/91.106.64.82 Port: 445 TCP Blocked |
2020-08-10 01:37:57 |
| 106.12.218.2 | attackspambots | Aug 9 19:35:25 serwer sshd\[21831\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.218.2 user=root Aug 9 19:35:27 serwer sshd\[21831\]: Failed password for root from 106.12.218.2 port 44434 ssh2 Aug 9 19:40:22 serwer sshd\[22466\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.218.2 user=root ... |
2020-08-10 01:44:52 |
| 209.45.76.233 | attackbots | [N10.H1.VM1] Port Scanner Detected Blocked by UFW |
2020-08-10 01:55:48 |
| 198.27.115.120 | attackspam | 2020-08-09 dovecot_login authenticator failed for \(QDeioW\) \[198.27.115.120\]: 535 Incorrect authentication data \(set_id=**REMOVED****REMOVED****REMOVED**_perl@**REMOVED**.de\) 2020-08-09 dovecot_login authenticator failed for \(71Iadq7lFj\) \[198.27.115.120\]: 535 Incorrect authentication data \(set_id=**REMOVED****REMOVED****REMOVED**_perl@**REMOVED**.de\) 2020-08-09 dovecot_login authenticator failed for \(wHiqPlg6S\) \[198.27.115.120\]: 535 Incorrect authentication data \(set_id=**REMOVED****REMOVED****REMOVED**_perl@**REMOVED**.de\) |
2020-08-10 01:39:47 |
| 106.12.215.244 | attackbotsspam | SSH Brute-force |
2020-08-10 01:54:37 |