城市(city): unknown
省份(region): unknown
国家(country): China
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 202.201.54.66
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 23349
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;202.201.54.66. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022800 1800 900 604800 86400
;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 28 23:51:15 CST 2025
;; MSG SIZE rcvd: 106Host 66.54.201.202.in-addr.arpa not found: 2(SERVFAIL);; Got SERVFAIL reply from 183.60.83.19, trying next server
Server: 183.60.82.98
Address: 183.60.82.98#53
** server can't find 66.54.201.202.in-addr.arpa: SERVFAIL| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 81.214.71.86 | attack | Automatic report - Port Scan Attack |
2020-06-07 07:36:48 |
| 202.131.69.18 | attack | Invalid user test3 from 202.131.69.18 port 37980 |
2020-06-07 07:12:31 |
| 112.85.42.178 | attackbots | Jun 6 23:04:55 IngegnereFirenze sshd[2253]: User root from 112.85.42.178 not allowed because not listed in AllowUsers ... |
2020-06-07 07:15:42 |
| 89.248.174.193 | attack | port |
2020-06-07 07:22:08 |
| 142.93.182.7 | attackbots | Automatic report - XMLRPC Attack |
2020-06-07 07:06:37 |
| 62.234.83.138 | attackbots | Jun 6 22:09:28 ns382633 sshd\[27695\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.83.138 user=root Jun 6 22:09:30 ns382633 sshd\[27695\]: Failed password for root from 62.234.83.138 port 42074 ssh2 Jun 6 22:39:43 ns382633 sshd\[720\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.83.138 user=root Jun 6 22:39:45 ns382633 sshd\[720\]: Failed password for root from 62.234.83.138 port 51484 ssh2 Jun 6 22:43:37 ns382633 sshd\[1543\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.83.138 user=root |
2020-06-07 07:23:04 |
| 185.100.87.206 | attack | Brute force attack stopped by firewall |
2020-06-07 07:26:09 |
| 61.141.65.198 | attackspambots | Lines containing failures of 61.141.65.198 Jun 5 16:26:34 online-web-2 sshd[3397963]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.141.65.198 user=r.r Jun 5 16:26:36 online-web-2 sshd[3397963]: Failed password for r.r from 61.141.65.198 port 37942 ssh2 Jun 5 16:26:38 online-web-2 sshd[3397963]: Received disconnect from 61.141.65.198 port 37942:11: Bye Bye [preauth] Jun 5 16:26:38 online-web-2 sshd[3397963]: Disconnected from authenticating user r.r 61.141.65.198 port 37942 [preauth] Jun 5 16:30:16 online-web-2 sshd[3399338]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.141.65.198 user=r.r Jun 5 16:30:18 online-web-2 sshd[3399338]: Failed password for r.r from 61.141.65.198 port 34166 ssh2 Jun 5 16:30:19 online-web-2 sshd[3399338]: Received disconnect from 61.141.65.198 port 34166:11: Bye Bye [preauth] Jun 5 16:30:19 online-web-2 sshd[3399338]: Disconnected from authentic........ ------------------------------ |
2020-06-07 07:23:26 |
| 106.12.126.114 | attack | Jun 5 19:42:06 UTC__SANYALnet-Labs__cac14 sshd[12601]: Connection from 106.12.126.114 port 48810 on 64.137.176.112 port 22 Jun 5 19:42:08 UTC__SANYALnet-Labs__cac14 sshd[12601]: User r.r from 106.12.126.114 not allowed because not listed in AllowUsers Jun 5 19:42:08 UTC__SANYALnet-Labs__cac14 sshd[12601]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.126.114 user=r.r Jun 5 19:42:11 UTC__SANYALnet-Labs__cac14 sshd[12601]: Failed password for invalid user r.r from 106.12.126.114 port 48810 ssh2 Jun 5 19:42:11 UTC__SANYALnet-Labs__cac14 sshd[12601]: Received disconnect from 106.12.126.114: 11: Bye Bye [preauth] Jun 5 19:52:19 UTC__SANYALnet-Labs__cac14 sshd[10556]: Connection from 106.12.126.114 port 42532 on 64.137.176.112 port 22 Jun 5 19:52:22 UTC__SANYALnet-Labs__cac14 sshd[10556]: User r.r from 106.12.126.114 not allowed because not listed in AllowUsers Jun 5 19:52:22 UTC__SANYALnet-Labs__cac14 sshd[10556]: pam........ ------------------------------- |
2020-06-07 07:35:11 |
| 122.51.198.90 | attackspambots | Invalid user hirohara from 122.51.198.90 port 52616 |
2020-06-07 07:10:13 |
| 189.51.103.74 | attack | Brute force attempt |
2020-06-07 07:16:29 |
| 106.13.72.190 | attackspambots | (sshd) Failed SSH login from 106.13.72.190 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jun 7 00:02:55 s1 sshd[25328]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.72.190 user=root Jun 7 00:02:57 s1 sshd[25328]: Failed password for root from 106.13.72.190 port 51924 ssh2 Jun 7 00:06:56 s1 sshd[25563]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.72.190 user=root Jun 7 00:06:59 s1 sshd[25563]: Failed password for root from 106.13.72.190 port 48462 ssh2 Jun 7 00:10:49 s1 sshd[25854]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.72.190 user=root |
2020-06-07 07:29:16 |
| 78.128.113.42 | attackbots | Multiport scan : 45 ports scanned 1141 1221 2068 2130 2228 2240 2244 2512 2569 2622 2649 2688 2860 2951 3001 3217 3251 3300 3314 3357 3406 3490 3578 3588 3689 3733 3750 3768 3839 3841 3988 4009 4309 4331 4410 4414 4502 4570 4582 4587 4743 4919 5315 5511 5566 |
2020-06-07 07:25:31 |
| 37.49.226.249 | attackbotsspam | Invalid user admin from 37.49.226.249 |
2020-06-07 07:07:23 |
| 222.82.250.4 | attackspam | Jun 6 23:41:40 legacy sshd[13651]: Failed password for root from 222.82.250.4 port 48682 ssh2 Jun 6 23:44:09 legacy sshd[13746]: Failed password for root from 222.82.250.4 port 38334 ssh2 ... |
2020-06-07 07:35:44 |