城市(city): unknown
省份(region): unknown
国家(country): United States of America (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 204.80.56.19
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 10284
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;204.80.56.19. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022600 1800 900 604800 86400
;; Query time: 36 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 26 23:08:01 CST 2025
;; MSG SIZE rcvd: 105
19.56.80.204.in-addr.arpa has no PTR record
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
*** Can't find 19.56.80.204.in-addr.arpa.: No answer
Authoritative answers can be found from:
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 144.91.83.149 | attack | Apr 25 16:15:08 aragorn sshd[11246]: Invalid user git from 144.91.83.149 Apr 25 16:17:43 aragorn sshd[11759]: Invalid user git from 144.91.83.149 Apr 25 16:20:17 aragorn sshd[12487]: Invalid user git from 144.91.83.149 Apr 25 16:22:50 aragorn sshd[12669]: Invalid user git from 144.91.83.149 ... |
2020-04-26 08:35:21 |
| 203.172.66.216 | attackbotsspam | Apr 26 01:02:05 srv-ubuntu-dev3 sshd[104909]: Invalid user ubuntu from 203.172.66.216 Apr 26 01:02:05 srv-ubuntu-dev3 sshd[104909]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.172.66.216 Apr 26 01:02:05 srv-ubuntu-dev3 sshd[104909]: Invalid user ubuntu from 203.172.66.216 Apr 26 01:02:08 srv-ubuntu-dev3 sshd[104909]: Failed password for invalid user ubuntu from 203.172.66.216 port 53566 ssh2 Apr 26 01:03:55 srv-ubuntu-dev3 sshd[105283]: Invalid user wordpress from 203.172.66.216 Apr 26 01:03:55 srv-ubuntu-dev3 sshd[105283]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.172.66.216 Apr 26 01:03:55 srv-ubuntu-dev3 sshd[105283]: Invalid user wordpress from 203.172.66.216 Apr 26 01:03:57 srv-ubuntu-dev3 sshd[105283]: Failed password for invalid user wordpress from 203.172.66.216 port 52648 ssh2 Apr 26 01:05:41 srv-ubuntu-dev3 sshd[105550]: Invalid user apps from 203.172.66.216 ... |
2020-04-26 07:59:18 |
| 34.92.237.74 | attack | Bruteforce detected by fail2ban |
2020-04-26 08:12:27 |
| 211.108.168.106 | attack | Apr 26 00:18:52 host5 sshd[29527]: Invalid user ying from 211.108.168.106 port 53786 ... |
2020-04-26 08:33:22 |
| 178.176.174.62 | attackspambots | Brute Force - Postfix |
2020-04-26 08:29:04 |
| 45.63.104.211 | attack | 2020-04-25T19:08:21.4764051495-001 sshd[8704]: Invalid user yuri from 45.63.104.211 port 45660 2020-04-25T19:08:23.3186381495-001 sshd[8704]: Failed password for invalid user yuri from 45.63.104.211 port 45660 ssh2 2020-04-25T19:11:58.6655481495-001 sshd[8884]: Invalid user emil from 45.63.104.211 port 51609 2020-04-25T19:11:58.6735861495-001 sshd[8884]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.63.104.211 2020-04-25T19:11:58.6655481495-001 sshd[8884]: Invalid user emil from 45.63.104.211 port 51609 2020-04-25T19:12:00.2971941495-001 sshd[8884]: Failed password for invalid user emil from 45.63.104.211 port 51609 ssh2 ... |
2020-04-26 08:15:07 |
| 200.160.111.44 | attackspam | 2020-04-25T18:41:37.4000591495-001 sshd[7404]: Invalid user j from 200.160.111.44 port 44146 2020-04-25T18:41:39.0423641495-001 sshd[7404]: Failed password for invalid user j from 200.160.111.44 port 44146 ssh2 2020-04-25T18:46:48.2561771495-001 sshd[7683]: Invalid user wp from 200.160.111.44 port 58040 2020-04-25T18:46:48.2614191495-001 sshd[7683]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.160.111.44 2020-04-25T18:46:48.2561771495-001 sshd[7683]: Invalid user wp from 200.160.111.44 port 58040 2020-04-25T18:46:50.2563491495-001 sshd[7683]: Failed password for invalid user wp from 200.160.111.44 port 58040 ssh2 ... |
2020-04-26 08:27:44 |
| 51.91.140.241 | attack | Lines containing failures of 51.91.140.241 Apr 25 07:50:40 kmh-wmh-002-nbg03 sshd[5414]: Invalid user samp from 51.91.140.241 port 41992 Apr 25 07:50:40 kmh-wmh-002-nbg03 sshd[5414]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.91.140.241 Apr 25 07:50:42 kmh-wmh-002-nbg03 sshd[5414]: Failed password for invalid user samp from 51.91.140.241 port 41992 ssh2 Apr 25 07:50:43 kmh-wmh-002-nbg03 sshd[5414]: Received disconnect from 51.91.140.241 port 41992:11: Bye Bye [preauth] Apr 25 07:50:43 kmh-wmh-002-nbg03 sshd[5414]: Disconnected from invalid user samp 51.91.140.241 port 41992 [preauth] Apr 25 07:53:39 kmh-wmh-002-nbg03 sshd[5658]: Invalid user transfer from 51.91.140.241 port 58662 Apr 25 07:53:39 kmh-wmh-002-nbg03 sshd[5658]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.91.140.241 Apr 25 07:53:41 kmh-wmh-002-nbg03 sshd[5658]: Failed password for invalid user transfer from 51.91........ ------------------------------ |
2020-04-26 08:03:18 |
| 171.38.193.134 | botsattack | Apr 26 12:46:50 telnetd a new connection from ::ffff:171.38.193.134 accepted. Apr 26 12:46:50 ndm Core::Server: started Session /var/run/ndm.core.socket. Apr 26 12:46:52 ndm Core::Authenticator: no such user: "888888888". Apr 26 12:47:05 telnetd ::ffff:171.38.193.134 client disconnected. Apr 26 12:47:05 ndm Core::Session: client disconnected. |
2020-04-26 09:49:09 |
| 210.96.48.228 | attack | Invalid user test from 210.96.48.228 port 35850 |
2020-04-26 08:10:13 |
| 122.202.48.251 | attack | Apr 26 01:16:01 sxvn sshd[442770]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.202.48.251 |
2020-04-26 08:34:42 |
| 180.241.94.165 | attackspambots | DATE:2020-04-25 22:23:05, IP:180.241.94.165, PORT:telnet Telnet brute force auth on honeypot server (epe-honey1-hq) |
2020-04-26 08:28:10 |
| 162.243.55.188 | attackspam | Apr 26 01:11:26 server sshd[52388]: Failed password for invalid user dragos from 162.243.55.188 port 33176 ssh2 Apr 26 01:32:09 server sshd[1696]: Failed password for invalid user wqc from 162.243.55.188 port 59674 ssh2 Apr 26 01:45:04 server sshd[10655]: Failed password for root from 162.243.55.188 port 38218 ssh2 |
2020-04-26 08:20:49 |
| 187.173.254.94 | attackspam | Apr 25 01:17:20 localhost sshd[2124977]: Invalid user ruan from 187.173.254.94 port 43478 Apr 25 01:17:20 localhost sshd[2124977]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.173.254.94 Apr 25 01:17:20 localhost sshd[2124977]: Invalid user ruan from 187.173.254.94 port 43478 Apr 25 01:17:22 localhost sshd[2124977]: Failed password for invalid user ruan from 187.173.254.94 port 43478 ssh2 Apr 25 01:32:05 localhost sshd[2130925]: Invalid user deploy from 187.173.254.94 port 44110 Apr 25 01:32:05 localhost sshd[2130925]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.173.254.94 Apr 25 01:32:05 localhost sshd[2130925]: Invalid user deploy from 187.173.254.94 port 44110 Apr 25 01:32:07 localhost sshd[2130925]: Failed password for invalid user deploy from 187.173.254.94 port 44110 ssh2 Apr 25 01:48:05 localhost sshd[2137205]: Invalid user luca from 187.173.254.94 port 47868 ........ ------------------------------------- |
2020-04-26 07:59:40 |
| 218.92.0.179 | attack | Apr 26 02:09:06 *host* sshd\[13267\]: Unable to negotiate with 218.92.0.179 port 8910: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 \[preauth\] |
2020-04-26 08:09:43 |