城市(city): unknown
省份(region): unknown
国家(country): None
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 2.94.228.50
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 31408
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;2.94.228.50. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021901 1800 900 604800 86400
;; Query time: 40 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 20 02:03:38 CST 2025
;; MSG SIZE rcvd: 104Host 50.228.94.2.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 50.228.94.2.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 175.24.93.7 | attack | Automatic report BANNED IP |
2020-09-22 01:36:48 |
| 222.252.11.10 | attack | Invalid user user3 from 222.252.11.10 port 52595 |
2020-09-22 01:59:50 |
| 51.254.32.102 | attackbots | Time: Mon Sep 21 17:40:24 2020 +0000 IP: 51.254.32.102 (FR/France/102.ip-51-254-32.eu) Failures: 5 (sshd) Interval: 3600 seconds Blocked: Permanent Block [LF_SSHD] Log entries: Sep 21 17:22:02 3 sshd[16809]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.254.32.102 user=root Sep 21 17:22:04 3 sshd[16809]: Failed password for root from 51.254.32.102 port 44238 ssh2 Sep 21 17:36:06 3 sshd[20171]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.254.32.102 user=root Sep 21 17:36:07 3 sshd[20171]: Failed password for root from 51.254.32.102 port 54732 ssh2 Sep 21 17:40:20 3 sshd[21182]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.254.32.102 user=root |
2020-09-22 02:15:06 |
| 68.115.18.134 | attack | SS5,WP GET /wp-login.php |
2020-09-22 02:11:03 |
| 124.67.47.186 | attackspam | Listed on zen-spamhaus / proto=6 . srcport=53770 . dstport=1433 . (2302) |
2020-09-22 02:11:31 |
| 85.209.0.253 | attack | Sep 21 18:17:43 vmd17057 sshd[12145]: Failed password for root from 85.209.0.253 port 15742 ssh2 Sep 21 18:17:43 vmd17057 sshd[12146]: Failed password for root from 85.209.0.253 port 15744 ssh2 ... |
2020-09-22 01:43:15 |
| 165.22.215.192 | attackbotsspam | detected by Fail2Ban |
2020-09-22 01:46:39 |
| 192.241.141.162 | attack | 192.241.141.162 - - [21/Sep/2020:18:39:12 +0100] "POST /wp-login.php HTTP/1.1" 200 2141 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 192.241.141.162 - - [21/Sep/2020:18:39:13 +0100] "POST /wp-login.php HTTP/1.1" 200 2125 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 192.241.141.162 - - [21/Sep/2020:18:39:13 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-09-22 02:07:10 |
| 213.39.55.13 | attack | Sep 21 12:33:22 localhost sshd[27930]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.39.55.13 user=root Sep 21 12:33:23 localhost sshd[27930]: Failed password for root from 213.39.55.13 port 50174 ssh2 Sep 21 12:38:03 localhost sshd[28616]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.39.55.13 user=root Sep 21 12:38:05 localhost sshd[28616]: Failed password for root from 213.39.55.13 port 59780 ssh2 Sep 21 12:42:33 localhost sshd[29277]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.39.55.13 user=root Sep 21 12:42:35 localhost sshd[29277]: Failed password for root from 213.39.55.13 port 41152 ssh2 ... |
2020-09-22 01:52:16 |
| 112.85.42.87 | attack | Sep 21 16:56:21 ip-172-31-42-142 sshd\[31421\]: Failed password for root from 112.85.42.87 port 29827 ssh2\ Sep 21 16:57:28 ip-172-31-42-142 sshd\[31428\]: Failed password for root from 112.85.42.87 port 46935 ssh2\ Sep 21 16:57:30 ip-172-31-42-142 sshd\[31428\]: Failed password for root from 112.85.42.87 port 46935 ssh2\ Sep 21 16:57:32 ip-172-31-42-142 sshd\[31428\]: Failed password for root from 112.85.42.87 port 46935 ssh2\ Sep 21 17:03:15 ip-172-31-42-142 sshd\[31455\]: Failed password for root from 112.85.42.87 port 22432 ssh2\ |
2020-09-22 02:12:33 |
| 117.28.25.50 | attackspambots | 2020-09-21T19:49:03.178189amanda2.illicoweb.com sshd\[38228\]: Invalid user test from 117.28.25.50 port 27375 2020-09-21T19:49:03.183534amanda2.illicoweb.com sshd\[38228\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.28.25.50 2020-09-21T19:49:05.022764amanda2.illicoweb.com sshd\[38228\]: Failed password for invalid user test from 117.28.25.50 port 27375 ssh2 2020-09-21T19:53:09.838081amanda2.illicoweb.com sshd\[38643\]: Invalid user hadoop from 117.28.25.50 port 27388 2020-09-21T19:53:09.842976amanda2.illicoweb.com sshd\[38643\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.28.25.50 ... |
2020-09-22 02:09:24 |
| 180.76.134.238 | attackspam | Banned for a week because repeated abuses, for example SSH, but not only |
2020-09-22 01:37:15 |
| 212.47.241.15 | attackspam | s2.hscode.pl - SSH Attack |
2020-09-22 01:40:58 |
| 1.34.164.204 | attack | invalid user |
2020-09-22 01:48:10 |
| 124.180.32.34 | attack | (sshd) Failed SSH login from 124.180.32.34 (AU/Australia/cpe-124-180-32-34.ab01.act.asp.telstra.net): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 20 12:58:01 internal2 sshd[3092]: Invalid user ubnt from 124.180.32.34 port 46615 Sep 20 12:59:15 internal2 sshd[4103]: Invalid user admin from 124.180.32.34 port 47148 Sep 20 12:59:18 internal2 sshd[4123]: Invalid user admin from 124.180.32.34 port 47169 |
2020-09-22 01:55:56 |