城市(city): unknown
省份(region): unknown
国家(country): United States of America (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 20.144.67.49
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 23030
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;20.144.67.49. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021100 1800 900 604800 86400
;; Query time: 38 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 11 21:50:38 CST 2025
;; MSG SIZE rcvd: 105Host 49.67.144.20.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 49.67.144.20.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 85.102.11.86 | attack | Automatic report - Port Scan Attack |
2019-09-27 12:16:33 |
| 94.176.77.55 | attack | (Sep 27) LEN=40 TTL=244 ID=15423 DF TCP DPT=23 WINDOW=14600 SYN (Sep 27) LEN=40 TTL=244 ID=52704 DF TCP DPT=23 WINDOW=14600 SYN (Sep 27) LEN=40 TTL=244 ID=10395 DF TCP DPT=23 WINDOW=14600 SYN (Sep 27) LEN=40 TTL=244 ID=9252 DF TCP DPT=23 WINDOW=14600 SYN (Sep 27) LEN=40 TTL=244 ID=24038 DF TCP DPT=23 WINDOW=14600 SYN (Sep 27) LEN=40 TTL=244 ID=47887 DF TCP DPT=23 WINDOW=14600 SYN (Sep 26) LEN=40 TTL=244 ID=10579 DF TCP DPT=23 WINDOW=14600 SYN (Sep 26) LEN=40 TTL=244 ID=26403 DF TCP DPT=23 WINDOW=14600 SYN (Sep 26) LEN=40 TTL=244 ID=35328 DF TCP DPT=23 WINDOW=14600 SYN (Sep 26) LEN=40 TTL=244 ID=54797 DF TCP DPT=23 WINDOW=14600 SYN (Sep 26) LEN=40 TTL=244 ID=37100 DF TCP DPT=23 WINDOW=14600 SYN (Sep 26) LEN=40 TTL=244 ID=42773 DF TCP DPT=23 WINDOW=14600 SYN (Sep 26) LEN=40 TTL=244 ID=17923 DF TCP DPT=23 WINDOW=14600 SYN (Sep 26) LEN=40 TTL=244 ID=54002 DF TCP DPT=23 WINDOW=14600 SYN (Sep 26) LEN=40 TTL=244 ID=49864 DF TCP DPT=23 WINDOW=14600 S... |
2019-09-27 12:18:27 |
| 106.12.202.192 | attackbots | Sep 26 18:29:15 php1 sshd\[1227\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.202.192 user=root Sep 26 18:29:17 php1 sshd\[1227\]: Failed password for root from 106.12.202.192 port 54680 ssh2 Sep 26 18:35:14 php1 sshd\[1722\]: Invalid user ftp from 106.12.202.192 Sep 26 18:35:14 php1 sshd\[1722\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.202.192 Sep 26 18:35:16 php1 sshd\[1722\]: Failed password for invalid user ftp from 106.12.202.192 port 37696 ssh2 |
2019-09-27 12:38:17 |
| 124.82.192.42 | attack | Sep 27 06:40:20 core sshd[16744]: Invalid user Victor1 from 124.82.192.42 port 53908 Sep 27 06:40:23 core sshd[16744]: Failed password for invalid user Victor1 from 124.82.192.42 port 53908 ssh2 ... |
2019-09-27 12:46:41 |
| 190.221.50.90 | attackbots | *Port Scan* detected from 190.221.50.90 (AR/Argentina/host89.190-221-50.telmex.net.ar). 4 hits in the last 180 seconds |
2019-09-27 13:03:31 |
| 159.203.201.66 | attack | ssh bruteforce or scan ... |
2019-09-27 12:34:01 |
| 122.192.51.202 | attack | Sep 27 03:46:31 ip-172-31-62-245 sshd\[7381\]: Invalid user murai1 from 122.192.51.202\ Sep 27 03:46:33 ip-172-31-62-245 sshd\[7381\]: Failed password for invalid user murai1 from 122.192.51.202 port 43478 ssh2\ Sep 27 03:51:10 ip-172-31-62-245 sshd\[7403\]: Failed password for root from 122.192.51.202 port 53524 ssh2\ Sep 27 03:55:37 ip-172-31-62-245 sshd\[7423\]: Invalid user nin from 122.192.51.202\ Sep 27 03:55:39 ip-172-31-62-245 sshd\[7423\]: Failed password for invalid user nin from 122.192.51.202 port 35346 ssh2\ |
2019-09-27 12:43:45 |
| 91.121.69.151 | attackspam | Sep 27 05:56:09 localhost sshd\[383\]: Invalid user edp from 91.121.69.151 port 9224 Sep 27 05:56:09 localhost sshd\[383\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.121.69.151 Sep 27 05:56:11 localhost sshd\[383\]: Failed password for invalid user edp from 91.121.69.151 port 9224 ssh2 |
2019-09-27 12:22:59 |
| 37.49.230.31 | attackbotsspam | firewall-block, port(s): 5353/udp |
2019-09-27 12:56:16 |
| 167.99.255.80 | attackbots | Sep 27 06:18:14 vps01 sshd[24991]: Failed password for root from 167.99.255.80 port 56012 ssh2 |
2019-09-27 12:25:18 |
| 163.172.45.69 | attackbots | 2019-09-27T04:28:09.648053abusebot-2.cloudsearch.cf sshd\[24639\]: Invalid user lauren from 163.172.45.69 port 53744 |
2019-09-27 12:49:42 |
| 3.18.66.5 | attackbots | 2019-09-27T04:49:40.132530abusebot-6.cloudsearch.cf sshd\[21699\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ec2-3-18-66-5.us-east-2.compute.amazonaws.com user=root |
2019-09-27 13:00:29 |
| 171.244.10.50 | attackbots | Sep 27 04:20:49 *** sshd[11964]: Invalid user gmodserver from 171.244.10.50 |
2019-09-27 12:42:54 |
| 46.38.144.32 | attackspambots | Sep 27 06:05:51 webserver postfix/smtpd\[4316\]: warning: unknown\[46.38.144.32\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 27 06:08:05 webserver postfix/smtpd\[4316\]: warning: unknown\[46.38.144.32\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 27 06:10:34 webserver postfix/smtpd\[4316\]: warning: unknown\[46.38.144.32\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 27 06:13:02 webserver postfix/smtpd\[4316\]: warning: unknown\[46.38.144.32\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 27 06:15:30 webserver postfix/smtpd\[4808\]: warning: unknown\[46.38.144.32\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2019-09-27 12:18:46 |
| 71.6.232.4 | attack | Port scan attempt detected by AWS-CCS, CTS, India |
2019-09-27 12:48:01 |