城市(city): unknown
省份(region): unknown
国家(country): None
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 214.13.50.41
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 7299
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;214.13.50.41. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021901 1800 900 604800 86400
;; Query time: 48 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 20 05:04:51 CST 2025
;; MSG SIZE rcvd: 105Host 41.50.13.214.in-addr.arpa not found: 2(SERVFAIL)
server can't find 214.13.50.41.in-addr.arpa: SERVFAIL| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 1.71.129.108 | attackspam | Nov 14 22:35:30 hpm sshd\[14028\]: Invalid user passw0rd1 from 1.71.129.108 Nov 14 22:35:30 hpm sshd\[14028\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.71.129.108 Nov 14 22:35:32 hpm sshd\[14028\]: Failed password for invalid user passw0rd1 from 1.71.129.108 port 47320 ssh2 Nov 14 22:40:47 hpm sshd\[14591\]: Invalid user 111111 from 1.71.129.108 Nov 14 22:40:47 hpm sshd\[14591\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.71.129.108 |
2019-11-15 17:30:19 |
| 206.183.108.195 | attackspambots | port scan and connect, tcp 1433 (ms-sql-s) |
2019-11-15 17:27:57 |
| 125.42.237.24 | attack | Unauthorised access (Nov 15) SRC=125.42.237.24 LEN=40 TTL=47 ID=36349 TCP DPT=23 WINDOW=35065 SYN |
2019-11-15 17:56:00 |
| 84.54.189.227 | attackspambots | scan z |
2019-11-15 17:31:19 |
| 198.108.67.84 | attackbots | 198.108.67.84 was recorded 5 times by 4 hosts attempting to connect to the following ports: 9743,2232,9211,3922,6264. Incident counter (4h, 24h, all-time): 5, 14, 164 |
2019-11-15 17:33:51 |
| 106.75.168.107 | attackbotsspam | $f2bV_matches |
2019-11-15 17:32:13 |
| 188.165.20.73 | attack | Invalid user huiyu from 188.165.20.73 port 53060 |
2019-11-15 17:49:08 |
| 39.96.201.119 | attack | 11/15/2019-01:25:47.472938 39.96.201.119 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433 |
2019-11-15 17:57:15 |
| 49.234.35.195 | attackbots | SSH bruteforce (Triggered fail2ban) |
2019-11-15 17:57:02 |
| 129.204.95.39 | attack | Nov 14 22:10:07 web1 sshd\[1610\]: Invalid user admin from 129.204.95.39 Nov 14 22:10:07 web1 sshd\[1610\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.95.39 Nov 14 22:10:09 web1 sshd\[1610\]: Failed password for invalid user admin from 129.204.95.39 port 57706 ssh2 Nov 14 22:14:56 web1 sshd\[2048\]: Invalid user apache from 129.204.95.39 Nov 14 22:14:56 web1 sshd\[2048\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.95.39 |
2019-11-15 18:02:17 |
| 218.92.0.189 | attackbots | Nov 15 01:26:35 123flo sshd[17051]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.189 user=root |
2019-11-15 17:26:41 |
| 212.15.169.6 | attackspam | Nov 15 10:22:07 vps sshd[13434]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.15.169.6 Nov 15 10:22:09 vps sshd[13434]: Failed password for invalid user lommer from 212.15.169.6 port 34048 ssh2 Nov 15 10:27:10 vps sshd[13652]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.15.169.6 ... |
2019-11-15 17:38:13 |
| 124.153.75.18 | attack | Lines containing failures of 124.153.75.18 (max 1000) Nov 11 03:22:42 localhost sshd[9701]: Invalid user mniece from 124.153.75.18 port 42458 Nov 11 03:22:42 localhost sshd[9701]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.153.75.18 Nov 11 03:22:43 localhost sshd[9701]: Failed password for invalid user mniece from 124.153.75.18 port 42458 ssh2 Nov 11 03:22:44 localhost sshd[9701]: Received disconnect from 124.153.75.18 port 42458:11: Bye Bye [preauth] Nov 11 03:22:44 localhost sshd[9701]: Disconnected from invalid user mniece 124.153.75.18 port 42458 [preauth] Nov 11 03:35:11 localhost sshd[15380]: Invalid user admin from 124.153.75.18 port 56198 Nov 11 03:35:11 localhost sshd[15380]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.153.75.18 Nov 11 03:35:13 localhost sshd[15380]: Failed password for invalid user admin from 124.153.75.18 port 56198 ssh2 Nov 11 03:35:14 localhost........ ------------------------------ |
2019-11-15 17:40:06 |
| 139.59.5.179 | attackspam | notenschluessel-fulda.de 139.59.5.179 \[15/Nov/2019:08:49:29 +0100\] "POST /wp-login.php HTTP/1.1" 200 6539 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" notenschluessel-fulda.de 139.59.5.179 \[15/Nov/2019:08:49:30 +0100\] "POST /wp-login.php HTTP/1.1" 200 6499 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" notenschluessel-fulda.de 139.59.5.179 \[15/Nov/2019:08:49:31 +0100\] "POST /xmlrpc.php HTTP/1.1" 200 4142 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" |
2019-11-15 17:24:54 |
| 148.70.65.31 | attack | Nov 15 10:41:49 eventyay sshd[3925]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.65.31 Nov 15 10:41:50 eventyay sshd[3925]: Failed password for invalid user appriou from 148.70.65.31 port 46522 ssh2 Nov 15 10:45:59 eventyay sshd[3988]: Failed password for root from 148.70.65.31 port 25037 ssh2 ... |
2019-11-15 17:55:43 |