城市(city): unknown
省份(region): unknown
国家(country): United States of America (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 170.94.122.166
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 9790
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;170.94.122.166. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012201 1800 900 604800 86400
;; Query time: 36 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jan 23 10:22:23 CST 2025
;; MSG SIZE rcvd: 107b'Host 166.122.94.170.in-addr.arpa. not found: 3(NXDOMAIN)
'server can't find 170.94.122.166.in-addr.arpa: SERVFAIL| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 106.54.202.131 | attackbots | Aug 24 06:20:01 plex-server sshd[2560973]: Invalid user arojas from 106.54.202.131 port 38884 Aug 24 06:20:01 plex-server sshd[2560973]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.202.131 Aug 24 06:20:01 plex-server sshd[2560973]: Invalid user arojas from 106.54.202.131 port 38884 Aug 24 06:20:04 plex-server sshd[2560973]: Failed password for invalid user arojas from 106.54.202.131 port 38884 ssh2 Aug 24 06:22:07 plex-server sshd[2561850]: Invalid user wolfgang from 106.54.202.131 port 60330 ... |
2020-08-24 14:35:00 |
| 183.134.104.148 | attackbotsspam | Input Traffic from this IP, but critial abuseconfidencescore |
2020-08-24 14:43:10 |
| 220.149.227.105 | attack | Aug 24 07:55:15 ift sshd\[56398\]: Invalid user hwz from 220.149.227.105Aug 24 07:55:17 ift sshd\[56398\]: Failed password for invalid user hwz from 220.149.227.105 port 39274 ssh2Aug 24 07:59:25 ift sshd\[56878\]: Failed password for root from 220.149.227.105 port 42573 ssh2Aug 24 08:03:40 ift sshd\[57503\]: Invalid user isaque from 220.149.227.105Aug 24 08:03:43 ift sshd\[57503\]: Failed password for invalid user isaque from 220.149.227.105 port 45867 ssh2 ... |
2020-08-24 14:37:18 |
| 148.70.173.252 | attackspambots | Aug 24 00:53:50 ws24vmsma01 sshd[42114]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.173.252 Aug 24 00:53:52 ws24vmsma01 sshd[42114]: Failed password for invalid user trace from 148.70.173.252 port 10558 ssh2 ... |
2020-08-24 14:40:44 |
| 51.83.73.127 | attackbotsspam | Aug 24 06:16:51 jumpserver sshd[23510]: Invalid user cacti from 51.83.73.127 port 33456 Aug 24 06:16:53 jumpserver sshd[23510]: Failed password for invalid user cacti from 51.83.73.127 port 33456 ssh2 Aug 24 06:20:37 jumpserver sshd[23559]: Invalid user tgu from 51.83.73.127 port 41314 ... |
2020-08-24 14:57:10 |
| 154.92.195.207 | attackspambots | SSH brute-force attempt |
2020-08-24 14:19:54 |
| 31.184.199.114 | attackbotsspam | SSH Brute-Forcing (server1) |
2020-08-24 14:24:25 |
| 49.234.43.39 | attackspam | Aug 24 03:00:20 firewall sshd[25317]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.43.39 Aug 24 03:00:20 firewall sshd[25317]: Invalid user test1 from 49.234.43.39 Aug 24 03:00:21 firewall sshd[25317]: Failed password for invalid user test1 from 49.234.43.39 port 41120 ssh2 ... |
2020-08-24 14:34:31 |
| 106.54.112.173 | attack | Invalid user arthur from 106.54.112.173 port 41872 |
2020-08-24 14:17:37 |
| 107.170.63.221 | attackspam | $f2bV_matches |
2020-08-24 14:22:31 |
| 104.131.55.92 | attackspambots | Aug 24 08:11:42 vps639187 sshd\[28949\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.55.92 user=root Aug 24 08:11:44 vps639187 sshd\[28949\]: Failed password for root from 104.131.55.92 port 51686 ssh2 Aug 24 08:16:19 vps639187 sshd\[29061\]: Invalid user jaime from 104.131.55.92 port 35906 Aug 24 08:16:19 vps639187 sshd\[29061\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.55.92 ... |
2020-08-24 14:26:58 |
| 84.38.187.184 | attackbots | Aug 24 08:03:28 *hidden* kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:05:0d:89:f8:66:f2:68:66:ff:08:00 SRC=84.38.187.184 DST=77.73.69.240 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=54495 PROTO=TCP SPT=50143 DPT=27436 WINDOW=1024 RES=0x00 SYN URGP=0 Aug 24 08:05:05 *hidden* kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:05:0d:89:f8:66:f2:68:66:ff:08:00 SRC=84.38.187.184 DST=77.73.69.240 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=59370 PROTO=TCP SPT=50143 DPT=27224 WINDOW=1024 RES=0x00 SYN URGP=0 Aug 24 08:06:11 *hidden* kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:05:0d:89:f8:66:f2:68:66:ff:08:00 SRC=84.38.187.184 DST=77.73.69.240 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=33048 PROTO=TCP SPT=50143 DPT=27591 WINDOW=1024 RES=0x00 SYN URGP=0 Aug 24 08:06:51 *hidden* kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:05:0d:89:f8:66:f2:68:66:ff:08:00 SRC=84.38.187.184 DST=77.73.69.240 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=48695 PROTO=TCP SPT=50143 DPT=27413 WINDOW=1024 RES=0x00 SYN URGP=0 Aug 24 08:07:43 *hidden* ... |
2020-08-24 14:30:44 |
| 42.112.211.52 | attack | Lines containing failures of 42.112.211.52 Aug 24 04:26:29 kmh-vmh-003-fsn07 sshd[10353]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.112.211.52 user=r.r Aug 24 04:26:31 kmh-vmh-003-fsn07 sshd[10353]: Failed password for r.r from 42.112.211.52 port 35634 ssh2 Aug 24 04:26:32 kmh-vmh-003-fsn07 sshd[10353]: Received disconnect from 42.112.211.52 port 35634:11: Bye Bye [preauth] Aug 24 04:26:32 kmh-vmh-003-fsn07 sshd[10353]: Disconnected from authenticating user r.r 42.112.211.52 port 35634 [preauth] Aug 24 04:44:55 kmh-vmh-003-fsn07 sshd[12890]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.112.211.52 user=r.r Aug 24 04:44:57 kmh-vmh-003-fsn07 sshd[12890]: Failed password for r.r from 42.112.211.52 port 23324 ssh2 Aug 24 04:44:58 kmh-vmh-003-fsn07 sshd[12890]: Received disconnect from 42.112.211.52 port 23324:11: Bye Bye [preauth] Aug 24 04:44:58 kmh-vmh-003-fsn07 sshd[12890]: Dis........ ------------------------------ |
2020-08-24 14:38:32 |
| 110.93.240.189 | attackbots | Tried our host z. |
2020-08-24 14:44:01 |
| 43.226.150.92 | attackbotsspam | Aug 24 06:09:55 buvik sshd[9944]: Invalid user julia from 43.226.150.92 Aug 24 06:09:56 buvik sshd[9944]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.226.150.92 Aug 24 06:09:57 buvik sshd[9944]: Failed password for invalid user julia from 43.226.150.92 port 35608 ssh2 ... |
2020-08-24 14:23:16 |