城市(city): Sanxia
省份(region): New Taipei
国家(country): Taiwan, China
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 163.25.200.102
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 42292
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;163.25.200.102. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021102 1800 900 604800 86400
;; Query time: 44 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 12 08:23:58 CST 2025
;; MSG SIZE rcvd: 107102.200.25.163.in-addr.arpa domain name pointer u102-200-25-163.un-announce.tyc.edu.tw.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
102.200.25.163.in-addr.arpa name = u102-200-25-163.un-announce.tyc.edu.tw.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 111.68.46.68 | attack | SSH login attempts. |
2020-04-07 02:21:38 |
| 167.99.234.170 | attackspambots | Apr 6 19:49:53 OPSO sshd\[25049\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.234.170 user=root Apr 6 19:49:55 OPSO sshd\[25049\]: Failed password for root from 167.99.234.170 port 50386 ssh2 Apr 6 19:53:30 OPSO sshd\[25855\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.234.170 user=root Apr 6 19:53:32 OPSO sshd\[25855\]: Failed password for root from 167.99.234.170 port 60554 ssh2 Apr 6 19:57:02 OPSO sshd\[26869\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.234.170 user=root |
2020-04-07 02:03:35 |
| 157.245.110.95 | attackspam | Apr 6 12:29:45 ws12vmsma01 sshd[61291]: Failed password for root from 157.245.110.95 port 41850 ssh2 Apr 6 12:34:24 ws12vmsma01 sshd[61955]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.110.95 user=root Apr 6 12:34:26 ws12vmsma01 sshd[61955]: Failed password for root from 157.245.110.95 port 53736 ssh2 ... |
2020-04-07 02:23:23 |
| 204.51.77.28 | attackbots | 20/4/6@11:35:03: FAIL: Alarm-Network address from=204.51.77.28 20/4/6@11:35:03: FAIL: Alarm-Network address from=204.51.77.28 ... |
2020-04-07 02:24:37 |
| 132.148.129.180 | attack | Apr 6 17:40:28 marvibiene sshd[56095]: Invalid user ftpuser from 132.148.129.180 port 33948 Apr 6 17:40:28 marvibiene sshd[56095]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.148.129.180 Apr 6 17:40:28 marvibiene sshd[56095]: Invalid user ftpuser from 132.148.129.180 port 33948 Apr 6 17:40:30 marvibiene sshd[56095]: Failed password for invalid user ftpuser from 132.148.129.180 port 33948 ssh2 ... |
2020-04-07 01:58:52 |
| 93.174.95.106 | attackbotsspam | Apr 6 20:20:31 debian-2gb-nbg1-2 kernel: \[8456255.699832\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=93.174.95.106 DST=195.201.40.59 LEN=44 TOS=0x10 PREC=0x00 TTL=120 ID=35538 PROTO=TCP SPT=28821 DPT=1521 WINDOW=46611 RES=0x00 SYN URGP=0 |
2020-04-07 02:26:00 |
| 211.20.181.186 | attackspam | (sshd) Failed SSH login from 211.20.181.186 (TW/Taiwan/-): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Apr 6 19:37:35 ubnt-55d23 sshd[29079]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.20.181.186 user=root Apr 6 19:37:36 ubnt-55d23 sshd[29079]: Failed password for root from 211.20.181.186 port 21000 ssh2 |
2020-04-07 02:00:10 |
| 104.236.45.171 | attack | 104.236.45.171 - - \[06/Apr/2020:17:35:03 +0200\] "POST /wp-login.php HTTP/1.0" 200 7427 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 104.236.45.171 - - \[06/Apr/2020:17:35:05 +0200\] "POST /wp-login.php HTTP/1.0" 200 7242 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 104.236.45.171 - - \[06/Apr/2020:17:35:11 +0200\] "POST /wp-login.php HTTP/1.0" 200 7239 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" |
2020-04-07 02:18:21 |
| 103.252.42.179 | attack | SpamScore above: 10.0 |
2020-04-07 02:13:47 |
| 138.59.68.4 | attackspambots | Honeypot attack, port: 445, PTR: 138.59.68.4.egtech.com.br. |
2020-04-07 01:42:35 |
| 112.85.42.188 | attackbots | 04/06/2020-13:44:37.033727 112.85.42.188 Protocol: 6 ET SCAN Potential SSH Scan |
2020-04-07 01:45:25 |
| 51.89.21.206 | attackbotsspam | 51.89.21.206 was recorded 8 times by 6 hosts attempting to connect to the following ports: 5060. Incident counter (4h, 24h, all-time): 8, 34, 1013 |
2020-04-07 02:19:50 |
| 185.176.27.162 | attackspambots | 04/06/2020-13:07:59.677221 185.176.27.162 Protocol: 6 ET SCAN NMAP -sS window 1024 |
2020-04-07 02:14:13 |
| 61.84.196.50 | attack | none |
2020-04-07 02:10:52 |
| 158.69.220.70 | attack | SSH bruteforce |
2020-04-07 02:00:41 |