城市(city): unknown
省份(region): unknown
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 20.30.248.106
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 21576
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;20.30.248.106. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2024121902 1800 900 604800 86400
;; Query time: 35 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Dec 20 08:16:42 CST 2024
;; MSG SIZE rcvd: 106Host 106.248.30.20.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 106.248.30.20.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 51.83.70.157 | attack | Invalid user Zmeu from 51.83.70.157 port 36360 |
2019-08-04 11:21:52 |
| 35.154.136.70 | attack | xmlrpc attack |
2019-08-04 11:25:50 |
| 129.205.208.21 | attackspam | Jan 23 15:25:03 motanud sshd\[22063\]: Invalid user wmaina from 129.205.208.21 port 31267 Jan 23 15:25:03 motanud sshd\[22063\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.205.208.21 Jan 23 15:25:05 motanud sshd\[22063\]: Failed password for invalid user wmaina from 129.205.208.21 port 31267 ssh2 Mar 4 07:20:56 motanud sshd\[8200\]: Invalid user ftpadmin from 129.205.208.21 port 9310 Mar 4 07:20:56 motanud sshd\[8200\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.205.208.21 Mar 4 07:20:58 motanud sshd\[8200\]: Failed password for invalid user ftpadmin from 129.205.208.21 port 9310 ssh2 |
2019-08-04 10:43:31 |
| 187.12.167.85 | attackspam | 2019-08-04T02:54:40.217671abusebot-6.cloudsearch.cf sshd\[4735\]: Invalid user comfort from 187.12.167.85 port 48454 |
2019-08-04 11:18:29 |
| 31.172.134.180 | attack | Aug 3 06:34:33 our-server-hostname postfix/smtpd[2655]: connect from unknown[31.172.134.180] Aug x@x Aug 3 06:34:34 our-server-hostname postfix/smtpd[2655]: disconnect from unknown[31.172.134.180] Aug 3 06:35:58 our-server-hostname postfix/smtpd[3315]: connect from unknown[31.172.134.180] Aug x@x Aug 3 06:35:59 our-server-hostname postfix/smtpd[3315]: disconnect from unknown[31.172.134.180] Aug 3 06:43:03 our-server-hostname postfix/smtpd[3183]: connect from unknown[31.172.134.180] Aug x@x Aug 3 06:43:05 our-server-hostname postfix/smtpd[3183]: disconnect from unknown[31.172.134.180] Aug 3 06:50:48 our-server-hostname postfix/smtpd[4812]: connect from unknown[31.172.134.180] Aug x@x Aug 3 06:50:50 our-server-hostname postfix/smtpd[4812]: disconnect from unknown[31.172.134.180] Aug 3 06:54:02 our-server-hostname postfix/smtpd[3181]: connect from unknown[31.172.134.180] Aug x@x Aug 3 06:54:03 our-server-hostname postfix/smtpd[3181]: disconnect from unknown[31.17........ ------------------------------- |
2019-08-04 10:52:32 |
| 142.93.240.79 | attackbots | Aug 4 02:51:01 pornomens sshd\[17950\]: Invalid user hbacoustic from 142.93.240.79 port 39240 Aug 4 02:51:01 pornomens sshd\[17950\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.240.79 Aug 4 02:51:03 pornomens sshd\[17950\]: Failed password for invalid user hbacoustic from 142.93.240.79 port 39240 ssh2 ... |
2019-08-04 10:49:29 |
| 114.67.90.149 | attack | Aug 4 06:02:54 server sshd\[14063\]: Invalid user sll from 114.67.90.149 port 39238 Aug 4 06:02:54 server sshd\[14063\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.67.90.149 Aug 4 06:02:55 server sshd\[14063\]: Failed password for invalid user sll from 114.67.90.149 port 39238 ssh2 Aug 4 06:08:10 server sshd\[5891\]: User root from 114.67.90.149 not allowed because listed in DenyUsers Aug 4 06:08:10 server sshd\[5891\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.67.90.149 user=root |
2019-08-04 11:11:18 |
| 182.61.184.47 | attackbotsspam | Aug 4 04:05:24 localhost sshd\[59475\]: Invalid user paul from 182.61.184.47 port 60730 Aug 4 04:05:24 localhost sshd\[59475\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.184.47 ... |
2019-08-04 11:17:24 |
| 186.73.69.238 | attackspam | Unauthorised access (Aug 4) SRC=186.73.69.238 LEN=52 TTL=109 ID=20220 DF TCP DPT=3389 WINDOW=8192 SYN |
2019-08-04 10:50:33 |
| 80.250.238.7 | attackspambots | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-08-04 00:22:41,643 INFO [amun_request_handler] PortScan Detected on Port: 445 (80.250.238.7) |
2019-08-04 11:23:19 |
| 123.16.13.61 | attack | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-08-04 00:22:56,671 INFO [amun_request_handler] PortScan Detected on Port: 445 (123.16.13.61) |
2019-08-04 11:21:07 |
| 139.59.149.183 | attack | 2019-08-04T02:39:57.107572abusebot.cloudsearch.cf sshd\[19531\]: Invalid user marko from 139.59.149.183 port 47876 |
2019-08-04 10:47:21 |
| 91.121.208.136 | attackspambots | Aug 4 00:50:56 srv00 sshd[31000]: fatal: Unable to negotiate whostnameh 91.121.208.136 port 33760: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] Aug 4 00:51:05 srv00 sshd[31002]: fatal: Unable to negotiate whostnameh 91.121.208.136 port 38304: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] Aug 4 00:51:13 srv00 sshd[31005]: fatal: Unable to negotiate whostnameh 91.121.208.136 port 42848: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] Aug 4 00:51:23 srv00 sshd[31007]: fatal: Unable to negotiate whostnameh 91.121.208.136 port 47356: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman........ ------------------------------ |
2019-08-04 10:41:15 |
| 186.31.37.203 | attackbotsspam | Aug 4 06:09:04 pkdns2 sshd\[39291\]: Address 186.31.37.203 maps to ingettel.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!Aug 4 06:09:04 pkdns2 sshd\[39291\]: Invalid user huang from 186.31.37.203Aug 4 06:09:06 pkdns2 sshd\[39291\]: Failed password for invalid user huang from 186.31.37.203 port 57518 ssh2Aug 4 06:13:48 pkdns2 sshd\[39470\]: Address 186.31.37.203 maps to ingettel.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!Aug 4 06:13:48 pkdns2 sshd\[39470\]: Invalid user mauricio from 186.31.37.203Aug 4 06:13:51 pkdns2 sshd\[39470\]: Failed password for invalid user mauricio from 186.31.37.203 port 53587 ssh2 ... |
2019-08-04 11:14:34 |
| 118.27.20.30 | attackbotsspam | 2019-08-04T10:23:57.411796 [VPS3] sshd[17362]: Invalid user ?tomcat from 118.27.20.30 port 41742 2019-08-04T10:24:54.721184 [VPS3] sshd[17369]: Invalid user tomcat from 118.27.20.30 port 53118 2019-08-04T10:25:51.880076 [VPS3] sshd[17388]: Invalid user tomcat from 118.27.20.30 port 36260 2019-08-04T10:26:47.118795 [VPS3] sshd[17395]: Invalid user tomcat from 118.27.20.30 port 47628 2019-08-04T10:27:44.021812 [VPS3] sshd[17402]: Invalid user tomcat from 118.27.20.30 port 59004 2019-08-04T10:28:43.203453 [VPS3] sshd[17409]: Invalid user tomcat from 118.27.20.30 port 42146 2019-08-04T10:29:34.906873 [VPS3] sshd[17414]: Invalid user user from 118.27.20.30 port 53522 2019-08-04T10:30:29.215663 [VPS3] sshd[17440]: Invalid user user from 118.27.20.30 port 36664 2019-08-04T10:31:22.672975 [VPS3] sshd[17448]: Invalid user user from 118.27.20.30 port 48044 2019-08-04T10:32:16.054375 [VPS3] sshd[17456]: Invalid user user from 118.27.20.30 port 59410 |
2019-08-04 10:56:20 |