城市(city): unknown
省份(region): unknown
国家(country): United States of America (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 16.208.42.104
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 61092
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;16.208.42.104. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025013101 1800 900 604800 86400
;; Query time: 33 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 01 04:05:40 CST 2025
;; MSG SIZE rcvd: 106Host 104.42.208.16.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 104.42.208.16.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 106.75.148.111 | attackspam | Oct 5 04:12:10 onepixel sshd[675223]: Failed password for root from 106.75.148.111 port 47958 ssh2 Oct 5 04:13:56 onepixel sshd[675494]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.148.111 user=root Oct 5 04:13:58 onepixel sshd[675494]: Failed password for root from 106.75.148.111 port 44180 ssh2 Oct 5 04:15:47 onepixel sshd[675764]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.148.111 user=root Oct 5 04:15:50 onepixel sshd[675764]: Failed password for root from 106.75.148.111 port 40394 ssh2 |
2020-10-05 12:19:34 |
| 106.75.247.206 | attackspam | fail2ban |
2020-10-05 12:43:38 |
| 106.13.228.33 | attackspambots | 2020-10-05T07:33:46.197635snf-827550 sshd[26297]: Failed password for root from 106.13.228.33 port 55502 ssh2 2020-10-05T07:34:54.217339snf-827550 sshd[26304]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.228.33 user=root 2020-10-05T07:34:56.357141snf-827550 sshd[26304]: Failed password for root from 106.13.228.33 port 38256 ssh2 ... |
2020-10-05 12:39:51 |
| 140.143.30.33 | attackbots | Oct 5 00:23:39 con01 sshd[3982289]: Failed password for root from 140.143.30.33 port 44950 ssh2 Oct 5 00:27:57 con01 sshd[3991050]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.30.33 user=root Oct 5 00:27:59 con01 sshd[3991050]: Failed password for root from 140.143.30.33 port 48994 ssh2 Oct 5 00:32:09 con01 sshd[4000088]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.30.33 user=root Oct 5 00:32:11 con01 sshd[4000088]: Failed password for root from 140.143.30.33 port 53024 ssh2 ... |
2020-10-05 12:09:37 |
| 60.185.155.117 | attackbotsspam | Lines containing failures of 60.185.155.117 Oct 4 16:28:26 neweola postfix/smtpd[21372]: connect from unknown[60.185.155.117] Oct 4 16:28:27 neweola postfix/smtpd[21372]: lost connection after AUTH from unknown[60.185.155.117] Oct 4 16:28:27 neweola postfix/smtpd[21372]: disconnect from unknown[60.185.155.117] ehlo=2 starttls=1 auth=0/1 commands=3/4 Oct 4 16:28:28 neweola postfix/smtpd[21372]: connect from unknown[60.185.155.117] Oct 4 16:28:29 neweola postfix/smtpd[21372]: lost connection after AUTH from unknown[60.185.155.117] Oct 4 16:28:29 neweola postfix/smtpd[21372]: disconnect from unknown[60.185.155.117] ehlo=2 starttls=1 auth=0/1 commands=3/4 Oct 4 16:28:30 neweola postfix/smtpd[21372]: connect from unknown[60.185.155.117] Oct 4 16:28:31 neweola postfix/smtpd[21372]: lost connection after AUTH from unknown[60.185.155.117] Oct 4 16:28:31 neweola postfix/smtpd[21372]: disconnect from unknown[60.185.155.117] ehlo=2 starttls=1 auth=0/1 commands=3/4 Oct 4 1........ ------------------------------ |
2020-10-05 12:16:20 |
| 206.189.142.144 | attackbots | 2020-10-04T20:19:40.164581git sshd[52848]: Unable to negotiate with 206.189.142.144 port 58508: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] 2020-10-04T20:22:40.678999git sshd[52859]: Connection from 206.189.142.144 port 40310 on 138.197.214.51 port 22 rdomain "" 2020-10-04T20:22:40.903511git sshd[52859]: Unable to negotiate with 206.189.142.144 port 40310: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] 2020-10-04T20:25:45.496633git sshd[52877]: Connection from 206.189.142.144 port 50340 on 138.197.214.51 port 22 rdomain "" 2020-10-04T20:25:45.719524git sshd[52877]: Unable to negotiate with 206.189.142.144 port 50340: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] 2020-10-04 ... |
2020-10-05 12:16:47 |
| 190.65.223.142 | attackspambots | 445/tcp 445/tcp 445/tcp... [2020-08-05/10-04]7pkt,1pt.(tcp) |
2020-10-05 12:24:50 |
| 206.189.231.196 | attack | 206.189.231.196 - - [05/Oct/2020:01:16:14 +0100] "POST /wp-login.php HTTP/1.1" 200 2673 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 206.189.231.196 - - [05/Oct/2020:01:16:16 +0100] "POST /wp-login.php HTTP/1.1" 200 2668 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 206.189.231.196 - - [05/Oct/2020:01:16:18 +0100] "POST /wp-login.php HTTP/1.1" 200 2626 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-10-05 12:11:52 |
| 138.197.97.157 | attackspam | 138.197.97.157 - - [05/Oct/2020:03:19:11 +0100] "POST /wp-login.php HTTP/1.1" 200 2548 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.197.97.157 - - [05/Oct/2020:03:19:18 +0100] "POST /wp-login.php HTTP/1.1" 200 2529 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.197.97.157 - - [05/Oct/2020:03:19:20 +0100] "POST /xmlrpc.php HTTP/1.1" 200 247 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-10-05 12:23:57 |
| 165.22.57.175 | attack | 2020-10-05T04:18:12.108110ns386461 sshd\[19469\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.57.175 user=root 2020-10-05T04:18:13.920243ns386461 sshd\[19469\]: Failed password for root from 165.22.57.175 port 43982 ssh2 2020-10-05T04:35:22.862126ns386461 sshd\[3134\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.57.175 user=root 2020-10-05T04:35:24.745682ns386461 sshd\[3134\]: Failed password for root from 165.22.57.175 port 37340 ssh2 2020-10-05T04:39:17.773758ns386461 sshd\[6643\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.57.175 user=root ... |
2020-10-05 12:45:07 |
| 60.167.176.184 | attack | Oct 4 21:50:36 vm1 sshd[514]: Failed password for root from 60.167.176.184 port 47616 ssh2 ... |
2020-10-05 12:36:01 |
| 5.63.151.102 | attack | 7548/tcp 2152/udp 8443/tcp... [2020-08-05/10-04]7pkt,6pt.(tcp),1pt.(udp) |
2020-10-05 12:44:31 |
| 85.72.131.37 | attackbots | Mikrotik RouterOS-Based Botnet |
2020-10-05 12:34:59 |
| 112.85.42.85 | attackbotsspam | "fail2ban match" |
2020-10-05 12:30:27 |
| 40.73.77.193 | attackbotsspam | "XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES: |
2020-10-05 12:28:38 |