城市(city): unknown
省份(region): unknown
国家(country): Japan
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 150.49.117.73
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 22581
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;150.49.117.73. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020901 1800 900 604800 86400
;; Query time: 36 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 10 02:32:55 CST 2025
;; MSG SIZE rcvd: 106Host 73.117.49.150.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 73.117.49.150.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 200.81.53.0 | attackbots | Jun 30 07:53:19 rotator sshd\[12732\]: Invalid user fff from 200.81.53.0Jun 30 07:53:21 rotator sshd\[12732\]: Failed password for invalid user fff from 200.81.53.0 port 59646 ssh2Jun 30 08:00:41 rotator sshd\[14313\]: Invalid user mcserver from 200.81.53.0Jun 30 08:00:43 rotator sshd\[14313\]: Failed password for invalid user mcserver from 200.81.53.0 port 38088 ssh2Jun 30 08:02:33 rotator sshd\[14334\]: Invalid user xyz from 200.81.53.0Jun 30 08:02:34 rotator sshd\[14334\]: Failed password for invalid user xyz from 200.81.53.0 port 53854 ssh2 ... |
2020-06-30 16:06:36 |
| 125.24.200.89 | attack | Jun 30 09:01:02 hni-server sshd[20382]: Did not receive identification string from 125.24.200.89 Jun 30 09:01:06 hni-server sshd[20392]: Invalid user admin2 from 125.24.200.89 Jun 30 09:01:06 hni-server sshd[20392]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.24.200.89 Jun 30 09:01:09 hni-server sshd[20392]: Failed password for invalid user admin2 from 125.24.200.89 port 46371 ssh2 Jun 30 09:01:09 hni-server sshd[20392]: Connection closed by 125.24.200.89 port 46371 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=125.24.200.89 |
2020-06-30 16:18:31 |
| 192.185.219.16 | attack | Automatic report - Banned IP Access |
2020-06-30 16:10:44 |
| 120.92.119.90 | attackspam | $f2bV_matches |
2020-06-30 16:14:13 |
| 41.225.5.58 | attackspam | [29.06.2020 14:05:02] Login failure for user support from 41.225.5.58 |
2020-06-30 15:52:40 |
| 159.203.27.146 | attackbotsspam | Jun 30 07:58:31 h1745522 sshd[11545]: Invalid user cps from 159.203.27.146 port 48950 Jun 30 07:58:31 h1745522 sshd[11545]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.27.146 Jun 30 07:58:31 h1745522 sshd[11545]: Invalid user cps from 159.203.27.146 port 48950 Jun 30 07:58:34 h1745522 sshd[11545]: Failed password for invalid user cps from 159.203.27.146 port 48950 ssh2 Jun 30 08:00:34 h1745522 sshd[12359]: Invalid user soft from 159.203.27.146 port 54218 Jun 30 08:00:34 h1745522 sshd[12359]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.27.146 Jun 30 08:00:34 h1745522 sshd[12359]: Invalid user soft from 159.203.27.146 port 54218 Jun 30 08:00:36 h1745522 sshd[12359]: Failed password for invalid user soft from 159.203.27.146 port 54218 ssh2 Jun 30 08:02:33 h1745522 sshd[12989]: Invalid user server from 159.203.27.146 port 59492 ... |
2020-06-30 16:24:35 |
| 206.189.132.8 | attackspam | Jun 30 06:53:03 h1745522 sshd[7105]: Invalid user lxl from 206.189.132.8 port 45972 Jun 30 06:53:03 h1745522 sshd[7105]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.132.8 Jun 30 06:53:03 h1745522 sshd[7105]: Invalid user lxl from 206.189.132.8 port 45972 Jun 30 06:53:06 h1745522 sshd[7105]: Failed password for invalid user lxl from 206.189.132.8 port 45972 ssh2 Jun 30 06:54:36 h1745522 sshd[7165]: Invalid user geo from 206.189.132.8 port 40364 Jun 30 06:54:36 h1745522 sshd[7165]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.132.8 Jun 30 06:54:36 h1745522 sshd[7165]: Invalid user geo from 206.189.132.8 port 40364 Jun 30 06:54:38 h1745522 sshd[7165]: Failed password for invalid user geo from 206.189.132.8 port 40364 ssh2 Jun 30 06:56:12 h1745522 sshd[7268]: Invalid user wcj from 206.189.132.8 port 34758 ... |
2020-06-30 16:13:50 |
| 41.93.32.94 | attack | Jun 30 12:51:00 webhost01 sshd[18812]: Failed password for root from 41.93.32.94 port 33704 ssh2 ... |
2020-06-30 15:59:16 |
| 212.47.233.79 | attack | Jun 29 23:52:27 debian sshd[18890]: Unable to negotiate with 212.47.233.79 port 45948: no matching key exchange method found. Their offer: ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 [preauth] Jun 29 23:52:29 debian sshd[18893]: Unable to negotiate with 212.47.233.79 port 45964: no matching key exchange method found. Their offer: ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 [preauth] ... |
2020-06-30 16:02:25 |
| 79.124.62.86 | attackbotsspam | unauthorized connection attempt |
2020-06-30 15:53:10 |
| 162.243.133.47 | attackspambots | 8098/tcp [2020-06-30]1pkt |
2020-06-30 16:16:56 |
| 111.229.129.100 | attackspam | Jun 29 15:20:33 Tower sshd[7562]: refused connect from 185.140.12.45 (185.140.12.45) Jun 30 03:11:01 Tower sshd[7562]: Connection from 111.229.129.100 port 41924 on 192.168.10.220 port 22 rdomain "" Jun 30 03:11:05 Tower sshd[7562]: Invalid user admin from 111.229.129.100 port 41924 Jun 30 03:11:05 Tower sshd[7562]: error: Could not get shadow information for NOUSER Jun 30 03:11:05 Tower sshd[7562]: Failed password for invalid user admin from 111.229.129.100 port 41924 ssh2 Jun 30 03:11:05 Tower sshd[7562]: Received disconnect from 111.229.129.100 port 41924:11: Bye Bye [preauth] Jun 30 03:11:05 Tower sshd[7562]: Disconnected from invalid user admin 111.229.129.100 port 41924 [preauth] |
2020-06-30 16:16:40 |
| 138.68.249.19 | attackspambots | Jun 30 00:45:05 ws12vmsma01 sshd[34974]: Invalid user buckland from 138.68.249.19 Jun 30 00:45:07 ws12vmsma01 sshd[34974]: Failed password for invalid user buckland from 138.68.249.19 port 45544 ssh2 Jun 30 00:51:44 ws12vmsma01 sshd[35943]: Invalid user buckler from 138.68.249.19 ... |
2020-06-30 16:04:10 |
| 119.29.3.45 | attack | Jun 30 05:39:20 ns382633 sshd\[16551\]: Invalid user cyr from 119.29.3.45 port 48533 Jun 30 05:39:20 ns382633 sshd\[16551\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.29.3.45 Jun 30 05:39:22 ns382633 sshd\[16551\]: Failed password for invalid user cyr from 119.29.3.45 port 48533 ssh2 Jun 30 05:52:10 ns382633 sshd\[19308\]: Invalid user odoo from 119.29.3.45 port 44417 Jun 30 05:52:10 ns382633 sshd\[19308\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.29.3.45 |
2020-06-30 16:18:02 |
| 167.172.186.32 | attackbots | WordPress wp-login brute force :: 167.172.186.32 0.088 BYPASS [30/Jun/2020:05:06:21 0000] [censored_2] "POST /wp-login.php HTTP/1.1" 200 2003 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-06-30 16:11:44 |