城市(city): unknown
省份(region): unknown
国家(country): Brazil
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 200.252.214.101
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11637
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;200.252.214.101. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025013001 1800 900 604800 86400
;; Query time: 54 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jan 31 11:04:02 CST 2025
;; MSG SIZE rcvd: 108Host 101.214.252.200.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 101.214.252.200.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 118.89.108.152 | attack | Sep 26 11:31:32 124388 sshd[31896]: Invalid user guest from 118.89.108.152 port 53540 Sep 26 11:31:32 124388 sshd[31896]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.89.108.152 Sep 26 11:31:32 124388 sshd[31896]: Invalid user guest from 118.89.108.152 port 53540 Sep 26 11:31:34 124388 sshd[31896]: Failed password for invalid user guest from 118.89.108.152 port 53540 ssh2 Sep 26 11:35:57 124388 sshd[32065]: Invalid user larry from 118.89.108.152 port 49098 |
2020-09-27 00:00:09 |
| 221.202.232.84 | attack | Port probing on unauthorized port 8080 |
2020-09-27 00:24:43 |
| 128.199.162.108 | attack | 2020-09-26 08:21:33.484151-0500 localhost sshd[37933]: Failed password for invalid user market from 128.199.162.108 port 56006 ssh2 |
2020-09-26 23:59:35 |
| 106.13.29.92 | attackbots | Sep 26 17:20:18 santamaria sshd\[8452\]: Invalid user kbe from 106.13.29.92 Sep 26 17:20:18 santamaria sshd\[8452\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.29.92 Sep 26 17:20:20 santamaria sshd\[8452\]: Failed password for invalid user kbe from 106.13.29.92 port 39212 ssh2 ... |
2020-09-26 23:48:31 |
| 157.230.96.179 | attackbotsspam | 157.230.96.179 - - [26/Sep/2020:14:16:53 +0100] "POST /wp-login.php HTTP/1.1" 200 2238 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 157.230.96.179 - - [26/Sep/2020:14:16:55 +0100] "POST /wp-login.php HTTP/1.1" 200 2282 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 157.230.96.179 - - [26/Sep/2020:14:16:55 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-09-26 23:52:19 |
| 191.239.247.63 | attack | Sep 26 18:15:05 ip106 sshd[18823]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.239.247.63 Sep 26 18:15:07 ip106 sshd[18823]: Failed password for invalid user admin from 191.239.247.63 port 39249 ssh2 ... |
2020-09-27 00:21:43 |
| 49.235.99.209 | attackbots | Sep 26 13:43:21 marvibiene sshd[38429]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.99.209 user=root Sep 26 13:43:24 marvibiene sshd[38429]: Failed password for root from 49.235.99.209 port 51678 ssh2 Sep 26 13:46:07 marvibiene sshd[26339]: Invalid user reach from 49.235.99.209 port 40174 |
2020-09-26 23:51:19 |
| 119.122.115.41 | attackbotsspam | Listed on barracudaCentral plus zen-spamhaus / proto=6 . srcport=35876 . dstport=445 . (3540) |
2020-09-27 00:27:40 |
| 218.92.0.248 | attack | 2020-09-25T02:31:16.067169git sshd[66716]: Unable to negotiate with 218.92.0.248 port 23775: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 [preauth] 2020-09-25T14:47:19.233993git sshd[71188]: Connection from 218.92.0.248 port 43594 on 138.197.214.51 port 22 rdomain "" 2020-09-25T14:47:19.947520git sshd[71188]: Unable to negotiate with 218.92.0.248 port 43594: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 [preauth] 2020-09-25T16:53:45.684230git sshd[71704]: Connection from 218.92.0.248 port 45008 on 138.197.214.51 port 22 rdomain "" 2020-09-25T16:53:46.402222git sshd[71704]: Unable to negotiate with 218.92.0.248 port 45008: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 [preauth] 2020-09-25T18:24:35.10551 ... |
2020-09-27 00:02:11 |
| 59.124.90.113 | attack | Sep 26 15:14:44 l02a sshd[15307]: Invalid user bash from 59.124.90.113 Sep 26 15:14:44 l02a sshd[15307]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59-124-90-113.hinet-ip.hinet.net Sep 26 15:14:44 l02a sshd[15307]: Invalid user bash from 59.124.90.113 Sep 26 15:14:47 l02a sshd[15307]: Failed password for invalid user bash from 59.124.90.113 port 47576 ssh2 |
2020-09-27 00:20:11 |
| 139.155.13.81 | attack | Sep 26 17:09:11 ns382633 sshd\[29250\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.13.81 user=root Sep 26 17:09:13 ns382633 sshd\[29250\]: Failed password for root from 139.155.13.81 port 53970 ssh2 Sep 26 17:14:30 ns382633 sshd\[30199\]: Invalid user cisco from 139.155.13.81 port 51202 Sep 26 17:14:30 ns382633 sshd\[30199\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.13.81 Sep 26 17:14:32 ns382633 sshd\[30199\]: Failed password for invalid user cisco from 139.155.13.81 port 51202 ssh2 |
2020-09-26 23:47:41 |
| 129.28.92.64 | attack | Sep 26 03:42:10 propaganda sshd[25287]: Connection from 129.28.92.64 port 44660 on 10.0.0.161 port 22 rdomain "" Sep 26 03:42:10 propaganda sshd[25287]: Connection closed by 129.28.92.64 port 44660 [preauth] |
2020-09-26 23:59:03 |
| 188.17.155.103 | attack | Listed on zen-spamhaus also barracudaCentral and abuseat.org / proto=6 . srcport=27259 . dstport=2323 . (3542) |
2020-09-27 00:17:26 |
| 81.70.18.39 | attack | Sep 26 08:20:14 propaganda sshd[36315]: Connection from 81.70.18.39 port 55898 on 10.0.0.161 port 22 rdomain "" Sep 26 08:20:15 propaganda sshd[36315]: Connection closed by 81.70.18.39 port 55898 [preauth] |
2020-09-27 00:25:16 |
| 128.199.63.176 | attack | Lines containing failures of 128.199.63.176 Sep 25 05:42:47 shared09 sshd[32294]: Invalid user prueba from 128.199.63.176 port 59190 Sep 25 05:42:47 shared09 sshd[32294]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.63.176 Sep 25 05:42:49 shared09 sshd[32294]: Failed password for invalid user prueba from 128.199.63.176 port 59190 ssh2 Sep 25 05:42:50 shared09 sshd[32294]: Received disconnect from 128.199.63.176 port 59190:11: Bye Bye [preauth] Sep 25 05:42:50 shared09 sshd[32294]: Disconnected from invalid user prueba 128.199.63.176 port 59190 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=128.199.63.176 |
2020-09-27 00:09:03 |