城市(city): unknown
省份(region): unknown
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 154.3.25.42
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 26646
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;154.3.25.42. IN A
;; AUTHORITY SECTION:
. 385 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022010900 1800 900 604800 86400
;; Query time: 64 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jan 09 15:39:12 CST 2022
;; MSG SIZE rcvd: 104b'Host 42.25.3.154.in-addr.arpa not found: 2(SERVFAIL)
'server can't find 154.3.25.42.in-addr.arpa: SERVFAIL| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 140.246.207.140 | attackbotsspam | detected by Fail2Ban |
2019-12-06 20:14:16 |
| 167.71.229.184 | attackbots | Dec 6 08:14:58 icinga sshd[13043]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.229.184 Dec 6 08:14:59 icinga sshd[13043]: Failed password for invalid user swe from 167.71.229.184 port 45476 ssh2 Dec 6 08:27:02 icinga sshd[23977]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.229.184 ... |
2019-12-06 20:41:31 |
| 122.51.71.197 | attackbotsspam | Dec 6 16:07:23 microserver sshd[52048]: Invalid user vaumousse from 122.51.71.197 port 47040 Dec 6 16:07:23 microserver sshd[52048]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.71.197 Dec 6 16:07:25 microserver sshd[52048]: Failed password for invalid user vaumousse from 122.51.71.197 port 47040 ssh2 Dec 6 16:15:21 microserver sshd[53355]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.71.197 user=games Dec 6 16:15:23 microserver sshd[53355]: Failed password for games from 122.51.71.197 port 56686 ssh2 |
2019-12-06 20:16:53 |
| 103.209.20.36 | attackspambots | Dec 6 06:38:32 Tower sshd[24456]: Connection from 103.209.20.36 port 55514 on 192.168.10.220 port 22 Dec 6 06:38:34 Tower sshd[24456]: Failed password for root from 103.209.20.36 port 55514 ssh2 Dec 6 06:38:34 Tower sshd[24456]: Received disconnect from 103.209.20.36 port 55514:11: Bye Bye [preauth] Dec 6 06:38:34 Tower sshd[24456]: Disconnected from authenticating user root 103.209.20.36 port 55514 [preauth] |
2019-12-06 20:34:40 |
| 217.128.65.11 | attackbots | Dec 6 03:26:56 liveconfig01 sshd[19399]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.128.65.11 user=r.r Dec 6 03:26:58 liveconfig01 sshd[19399]: Failed password for r.r from 217.128.65.11 port 40978 ssh2 Dec 6 03:26:58 liveconfig01 sshd[19399]: Received disconnect from 217.128.65.11 port 40978:11: Bye Bye [preauth] Dec 6 03:26:58 liveconfig01 sshd[19399]: Disconnected from 217.128.65.11 port 40978 [preauth] Dec 6 03:37:28 liveconfig01 sshd[20650]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.128.65.11 user=r.r Dec 6 03:37:30 liveconfig01 sshd[20650]: Failed password for r.r from 217.128.65.11 port 57484 ssh2 Dec 6 03:37:30 liveconfig01 sshd[20650]: Received disconnect from 217.128.65.11 port 57484:11: Bye Bye [preauth] Dec 6 03:37:30 liveconfig01 sshd[20650]: Disconnected from 217.128.65.11 port 57484 [preauth] Dec 6 03:42:32 liveconfig01 sshd[20959]: Invalid user s........ ------------------------------- |
2019-12-06 20:21:55 |
| 218.92.0.134 | attackspambots | Dec 6 06:07:44 debian sshd[14569]: Unable to negotiate with 218.92.0.134 port 52108: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 [preauth] Dec 6 07:49:17 debian sshd[20324]: Unable to negotiate with 218.92.0.134 port 58982: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 [preauth] ... |
2019-12-06 20:53:54 |
| 83.48.89.147 | attack | Dec 6 10:10:21 ns382633 sshd\[17670\]: Invalid user user from 83.48.89.147 port 33982 Dec 6 10:10:22 ns382633 sshd\[17670\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=83.48.89.147 Dec 6 10:10:23 ns382633 sshd\[17670\]: Failed password for invalid user user from 83.48.89.147 port 33982 ssh2 Dec 6 10:16:29 ns382633 sshd\[18710\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=83.48.89.147 user=root Dec 6 10:16:31 ns382633 sshd\[18710\]: Failed password for root from 83.48.89.147 port 44106 ssh2 |
2019-12-06 20:45:04 |
| 148.70.18.216 | attack | 2019-12-06T13:26:45.307150scmdmz1 sshd\[24179\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.18.216 user=root 2019-12-06T13:26:47.966592scmdmz1 sshd\[24179\]: Failed password for root from 148.70.18.216 port 57742 ssh2 2019-12-06T13:34:25.962852scmdmz1 sshd\[25343\]: Invalid user zonneveld from 148.70.18.216 port 38544 ... |
2019-12-06 20:43:57 |
| 111.206.164.161 | attackbots | " " |
2019-12-06 20:43:14 |
| 157.245.98.160 | attack | Dec 6 12:18:49 tux-35-217 sshd\[1597\]: Invalid user smmsp from 157.245.98.160 port 58458 Dec 6 12:18:49 tux-35-217 sshd\[1597\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.98.160 Dec 6 12:18:51 tux-35-217 sshd\[1597\]: Failed password for invalid user smmsp from 157.245.98.160 port 58458 ssh2 Dec 6 12:25:10 tux-35-217 sshd\[1683\]: Invalid user pass888 from 157.245.98.160 port 40644 Dec 6 12:25:10 tux-35-217 sshd\[1683\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.98.160 ... |
2019-12-06 20:18:38 |
| 182.75.248.254 | attack | Dec 6 17:50:19 vibhu-HP-Z238-Microtower-Workstation sshd\[32653\]: Invalid user netrangr from 182.75.248.254 Dec 6 17:50:19 vibhu-HP-Z238-Microtower-Workstation sshd\[32653\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.75.248.254 Dec 6 17:50:21 vibhu-HP-Z238-Microtower-Workstation sshd\[32653\]: Failed password for invalid user netrangr from 182.75.248.254 port 60830 ssh2 Dec 6 17:57:05 vibhu-HP-Z238-Microtower-Workstation sshd\[606\]: Invalid user NoGaH$@! from 182.75.248.254 Dec 6 17:57:05 vibhu-HP-Z238-Microtower-Workstation sshd\[606\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.75.248.254 ... |
2019-12-06 20:30:43 |
| 117.146.251.138 | attackbots | 43403/tcp 39094/tcp 43361/tcp... [2019-10-16/12-05]79pkt,79pt.(tcp) |
2019-12-06 20:50:02 |
| 93.173.92.148 | attackbots | Automatic report - Port Scan Attack |
2019-12-06 20:10:44 |
| 67.55.92.89 | attackbots | Dec 6 01:48:49 hanapaa sshd\[25593\]: Invalid user worland from 67.55.92.89 Dec 6 01:48:49 hanapaa sshd\[25593\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=67.55.92.89 Dec 6 01:48:52 hanapaa sshd\[25593\]: Failed password for invalid user worland from 67.55.92.89 port 49928 ssh2 Dec 6 01:54:14 hanapaa sshd\[26015\]: Invalid user hung from 67.55.92.89 Dec 6 01:54:14 hanapaa sshd\[26015\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=67.55.92.89 |
2019-12-06 20:14:52 |
| 80.211.35.16 | attack | Dec 6 14:16:27 pkdns2 sshd\[9120\]: Address 80.211.35.16 maps to dns1.cloud.it, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!Dec 6 14:16:27 pkdns2 sshd\[9120\]: Invalid user puta from 80.211.35.16Dec 6 14:16:29 pkdns2 sshd\[9120\]: Failed password for invalid user puta from 80.211.35.16 port 45130 ssh2Dec 6 14:22:35 pkdns2 sshd\[9374\]: Address 80.211.35.16 maps to dns1.arubacloud.fr, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!Dec 6 14:22:35 pkdns2 sshd\[9374\]: Invalid user kehl from 80.211.35.16Dec 6 14:22:37 pkdns2 sshd\[9374\]: Failed password for invalid user kehl from 80.211.35.16 port 55358 ssh2 ... |
2019-12-06 20:23:47 |