城市(city): unknown
省份(region): unknown
国家(country): United States of America (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 20.169.113.80
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 64408
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;20.169.113.80. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020401 1800 900 604800 86400
;; Query time: 43 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 05 02:30:28 CST 2025
;; MSG SIZE rcvd: 106Host 80.113.169.20.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 80.113.169.20.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 51.79.128.154 | attack | 09/24/2019-23:53:10.183821 51.79.128.154 Protocol: 6 ET SCAN NMAP -sS window 1024 |
2019-09-25 14:51:31 |
| 221.214.55.82 | attack | 25/09/2019 8:54 high 221.214.55.82 CHN 62748 / tcp 80 (http) / tcp Unknown (Unknown) 0 SERVER-APACHE Apache Struts remote code execution attempt (1:49376:1) Attempted Administrator Privilege Gain 25/09/2019 8:54 high 221.214.55.82 CHN 62298 / tcp 80 (http) / tcp Unknown (Unknown) 0 SERVER-APACHE Apache Struts remote code execution attempt (1:41819:2) Attempted Administrator Privilege Gain 25/09/2019 8:54 high 221.214.55.82 CHN 62298 / tcp 80 (http) / tcp Unknown (Unknown) 0 SERVER-APACHE Apache Struts remote code execution attempt (1:41818:3) Attempted Administrator Privilege Gain 25/09/2019 8:52 high 221.214.55.82 CHN 59847 / tcp 80 (http) / tcp Unknown (Unknown) 0 SERVER-APACHE Apache Struts remote code execution attempt (1:49376:1) Attempted Administrator Privilege Gain |
2019-09-25 15:20:49 |
| 125.45.90.28 | attackbotsspam | Sep 23 07:20:33 ACSRAD auth.info sshd[21951]: Invalid user kc from 125.45.90.28 port 39048 Sep 23 07:20:33 ACSRAD auth.info sshd[21951]: Failed password for invalid user kc from 125.45.90.28 port 39048 ssh2 Sep 23 07:20:34 ACSRAD auth.info sshd[21951]: Received disconnect from 125.45.90.28 port 39048:11: Bye Bye [preauth] Sep 23 07:20:34 ACSRAD auth.info sshd[21951]: Disconnected from 125.45.90.28 port 39048 [preauth] Sep 23 07:20:34 ACSRAD auth.notice sshguard[30767]: Attack from "125.45.90.28" on service 100 whostnameh danger 10. Sep 23 07:20:34 ACSRAD auth.notice sshguard[30767]: Attack from "125.45.90.28" on service 100 whostnameh danger 10. Sep 23 07:20:34 ACSRAD auth.notice sshguard[30767]: Attack from "125.45.90.28" on service 100 whostnameh danger 10. Sep 23 07:20:34 ACSRAD auth.warn sshguard[30767]: Blocking "125.45.90.28/32" for 120 secs (3 attacks in 0 secs, after 1 abuses over 0 secs.) Sep 23 07:25:13 ACSRAD auth.info sshd[24533]: Invalid user loverd from 125........ ------------------------------ |
2019-09-25 14:49:07 |
| 202.254.234.142 | attackbotsspam | Scanning and Vuln Attempts |
2019-09-25 14:47:35 |
| 163.172.207.104 | attackbots | \[2019-09-25 02:51:47\] SECURITY\[1978\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-09-25T02:51:47.482-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="",SessionID="0x7f9b34358e08",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/163.172.207.104/49902",ACLName="no_extension_match" \[2019-09-25 02:55:22\] SECURITY\[1978\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-09-25T02:55:22.569-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="",SessionID="0x7f9b34358e08",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/163.172.207.104/51893",ACLName="no_extension_match" \[2019-09-25 02:59:25\] SECURITY\[1978\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-09-25T02:59:25.016-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="333011972592277524",SessionID="0x7f9b34358e08",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/163.172.207.104/61928",ACLName="no_extension_match" ... |
2019-09-25 15:18:55 |
| 111.230.112.37 | attackspam | Sep 24 20:43:48 aiointranet sshd\[1689\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.230.112.37 user=root Sep 24 20:43:50 aiointranet sshd\[1689\]: Failed password for root from 111.230.112.37 port 34714 ssh2 Sep 24 20:46:45 aiointranet sshd\[1950\]: Invalid user ubnt from 111.230.112.37 Sep 24 20:46:45 aiointranet sshd\[1950\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.230.112.37 Sep 24 20:46:46 aiointranet sshd\[1950\]: Failed password for invalid user ubnt from 111.230.112.37 port 55954 ssh2 |
2019-09-25 14:52:35 |
| 222.186.175.148 | attackbots | v+ssh-bruteforce |
2019-09-25 14:47:00 |
| 202.142.173.58 | attackspam | Scanning and Vuln Attempts |
2019-09-25 14:52:04 |
| 103.104.17.139 | attackspam | 2019-09-25T02:42:06.2198911495-001 sshd\[32615\]: Failed password for invalid user yuanwd from 103.104.17.139 port 53262 ssh2 2019-09-25T02:56:35.3201651495-001 sshd\[33599\]: Invalid user admin from 103.104.17.139 port 34794 2019-09-25T02:56:35.3275691495-001 sshd\[33599\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.104.17.139 2019-09-25T02:56:37.5929701495-001 sshd\[33599\]: Failed password for invalid user admin from 103.104.17.139 port 34794 ssh2 2019-09-25T03:01:21.0306131495-001 sshd\[33926\]: Invalid user samba from 103.104.17.139 port 47348 2019-09-25T03:01:21.0390841495-001 sshd\[33926\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.104.17.139 ... |
2019-09-25 15:15:58 |
| 163.172.98.236 | attack | 2019-09-25T07:00:36.890715abusebot-2.cloudsearch.cf sshd\[15755\]: Invalid user metser from 163.172.98.236 port 58706 |
2019-09-25 15:14:16 |
| 223.111.150.149 | attackbots | 2019-09-25T03:01:36.6178011495-001 sshd\[34009\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.111.150.149 user=root 2019-09-25T03:01:38.8731451495-001 sshd\[34009\]: Failed password for root from 223.111.150.149 port 28685 ssh2 2019-09-25T03:01:41.1756141495-001 sshd\[34009\]: Failed password for root from 223.111.150.149 port 28685 ssh2 2019-09-25T03:01:47.6320941495-001 sshd\[34009\]: Failed password for root from 223.111.150.149 port 28685 ssh2 2019-09-25T03:01:47.6325291495-001 sshd\[34009\]: error: maximum authentication attempts exceeded for root from 223.111.150.149 port 28685 ssh2 \[preauth\] 2019-09-25T03:02:01.1210381495-001 sshd\[34027\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.111.150.149 user=root ... |
2019-09-25 15:26:01 |
| 118.25.231.17 | attackspam | $f2bV_matches_ltvn |
2019-09-25 14:57:41 |
| 202.254.234.151 | attack | Scanning and Vuln Attempts |
2019-09-25 14:43:21 |
| 71.6.167.142 | attackbots | 09/24/2019-23:52:34.447413 71.6.167.142 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 71 |
2019-09-25 15:14:42 |
| 164.132.192.219 | attackbotsspam | Automatic report - Banned IP Access |
2019-09-25 15:18:07 |