城市(city): unknown
省份(region): unknown
国家(country): Multicast Address
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 224.94.102.254
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 43847
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;224.94.102.254. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025011700 1800 900 604800 86400
;; Query time: 54 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jan 18 00:12:06 CST 2025
;; MSG SIZE rcvd: 107
Host 254.102.94.224.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 254.102.94.224.in-addr.arpa: NXDOMAIN
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 81.30.212.14 | attackspambots | Sep 28 09:46:39 tux-35-217 sshd\[6359\]: Invalid user avendoria from 81.30.212.14 port 56416 Sep 28 09:46:39 tux-35-217 sshd\[6359\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.30.212.14 Sep 28 09:46:40 tux-35-217 sshd\[6359\]: Failed password for invalid user avendoria from 81.30.212.14 port 56416 ssh2 Sep 28 09:51:05 tux-35-217 sshd\[6361\]: Invalid user pete from 81.30.212.14 port 39452 Sep 28 09:51:05 tux-35-217 sshd\[6361\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.30.212.14 ... |
2019-09-28 15:55:45 |
| 117.93.105.75 | attack | (Sep 28) LEN=40 TOS=0x10 PREC=0x40 TTL=49 ID=61165 TCP DPT=8080 WINDOW=56748 SYN (Sep 27) LEN=40 TOS=0x10 PREC=0x40 TTL=49 ID=49114 TCP DPT=8080 WINDOW=40897 SYN (Sep 27) LEN=40 TOS=0x10 PREC=0x40 TTL=49 ID=18715 TCP DPT=8080 WINDOW=40897 SYN (Sep 27) LEN=40 TOS=0x10 PREC=0x40 TTL=49 ID=13774 TCP DPT=8080 WINDOW=9274 SYN (Sep 27) LEN=40 TOS=0x10 PREC=0x40 TTL=49 ID=51243 TCP DPT=8080 WINDOW=502 SYN (Sep 26) LEN=40 TOS=0x10 PREC=0x40 TTL=49 ID=1517 TCP DPT=8080 WINDOW=20807 SYN (Sep 26) LEN=40 TOS=0x10 PREC=0x40 TTL=49 ID=64159 TCP DPT=8080 WINDOW=20807 SYN (Sep 26) LEN=40 TOS=0x10 PREC=0x40 TTL=49 ID=45528 TCP DPT=8080 WINDOW=56748 SYN (Sep 26) LEN=40 TOS=0x10 PREC=0x40 TTL=49 ID=59689 TCP DPT=8080 WINDOW=20807 SYN (Sep 25) LEN=40 TOS=0x10 PREC=0x40 TTL=49 ID=52375 TCP DPT=8080 WINDOW=40897 SYN (Sep 24) LEN=40 TOS=0x10 PREC=0x40 TTL=49 ID=45596 TCP DPT=8080 WINDOW=28066 SYN (Sep 24) LEN=40 TOS=0x10 PREC=0x40 TTL=49 ID=22981 TCP DPT=8080 WINDOW=28066 S... |
2019-09-28 16:19:31 |
| 113.173.163.223 | attack | Sep 28 05:52:09 vmanager6029 sshd\[7850\]: Invalid user admin from 113.173.163.223 port 49942 Sep 28 05:52:09 vmanager6029 sshd\[7850\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.173.163.223 Sep 28 05:52:11 vmanager6029 sshd\[7850\]: Failed password for invalid user admin from 113.173.163.223 port 49942 ssh2 |
2019-09-28 15:39:42 |
| 159.203.201.23 | attackbots | port scan/probe/communication attempt |
2019-09-28 16:04:00 |
| 104.131.37.34 | attackbots | Sep 27 19:27:01 hiderm sshd\[1065\]: Invalid user testuser from 104.131.37.34 Sep 27 19:27:01 hiderm sshd\[1065\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=virgo.accion-sa.cl Sep 27 19:27:03 hiderm sshd\[1065\]: Failed password for invalid user testuser from 104.131.37.34 port 54926 ssh2 Sep 27 19:32:13 hiderm sshd\[1507\]: Invalid user amitsn from 104.131.37.34 Sep 27 19:32:13 hiderm sshd\[1507\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=virgo.accion-sa.cl |
2019-09-28 15:53:11 |
| 145.239.196.248 | attackspambots | Invalid user manfred from 145.239.196.248 port 58234 |
2019-09-28 16:06:35 |
| 182.50.142.186 | attack | xmlrpc attack |
2019-09-28 15:56:37 |
| 191.34.107.229 | attack | Sep 27 21:32:48 lcdev sshd\[32585\]: Invalid user st from 191.34.107.229 Sep 27 21:32:48 lcdev sshd\[32585\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.34.107.229 Sep 27 21:32:50 lcdev sshd\[32585\]: Failed password for invalid user st from 191.34.107.229 port 35667 ssh2 Sep 27 21:38:56 lcdev sshd\[669\]: Invalid user car from 191.34.107.229 Sep 27 21:38:56 lcdev sshd\[669\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.34.107.229 |
2019-09-28 15:40:27 |
| 125.160.17.32 | attack | [portscan] tcp/22 [SSH] *(RWIN=49512)(09280917) |
2019-09-28 16:08:54 |
| 41.159.18.20 | attack | Sep 27 21:27:56 friendsofhawaii sshd\[26987\]: Invalid user centos from 41.159.18.20 Sep 27 21:27:56 friendsofhawaii sshd\[26987\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.159.18.20 Sep 27 21:27:58 friendsofhawaii sshd\[26987\]: Failed password for invalid user centos from 41.159.18.20 port 41698 ssh2 Sep 27 21:33:18 friendsofhawaii sshd\[27429\]: Invalid user aamdal from 41.159.18.20 Sep 27 21:33:18 friendsofhawaii sshd\[27429\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.159.18.20 |
2019-09-28 15:48:41 |
| 94.177.240.4 | attackspambots | Sep 28 09:40:28 microserver sshd[36277]: Invalid user testuser from 94.177.240.4 port 53678 Sep 28 09:40:28 microserver sshd[36277]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.177.240.4 Sep 28 09:40:31 microserver sshd[36277]: Failed password for invalid user testuser from 94.177.240.4 port 53678 ssh2 Sep 28 09:44:28 microserver sshd[36493]: Invalid user cjchen from 94.177.240.4 port 39940 Sep 28 09:44:28 microserver sshd[36493]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.177.240.4 Sep 28 09:55:54 microserver sshd[38329]: Invalid user devonshop from 94.177.240.4 port 54942 Sep 28 09:55:54 microserver sshd[38329]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.177.240.4 Sep 28 09:55:56 microserver sshd[38329]: Failed password for invalid user devonshop from 94.177.240.4 port 54942 ssh2 Sep 28 10:00:10 microserver sshd[38890]: Invalid user gitolite1 from 94.177.240.4 port 4 |
2019-09-28 16:14:18 |
| 59.100.169.211 | attackspambots | Sep 26 08:24:36 mxgate1 postfix/postscreen[14972]: CONNECT from [59.100.169.211]:49291 to [176.31.12.44]:25 Sep 26 08:24:36 mxgate1 postfix/dnsblog[14976]: addr 59.100.169.211 listed by domain b.barracudacentral.org as 127.0.0.2 Sep 26 08:24:42 mxgate1 postfix/postscreen[14972]: PASS NEW [59.100.169.211]:49291 Sep 26 08:24:47 mxgate1 postfix/smtpd[14978]: connect from 59-100-169-211.cust.static-ipl.aapt.com.au[59.100.169.211] Sep x@x Sep 26 08:24:53 mxgate1 postfix/smtpd[14978]: disconnect from 59-100-169-211.cust.static-ipl.aapt.com.au[59.100.169.211] ehlo=2 starttls=1 mail=1 rcpt=0/1 data=0/1 eclipset=1 quhostname=1 commands=6/8 Sep 26 09:36:49 mxgate1 postfix/postscreen[17680]: CONNECT from [59.100.169.211]:58386 to [176.31.12.44]:25 Sep 26 09:36:49 mxgate1 postfix/dnsblog[17683]: addr 59.100.169.211 listed by domain b.barracudacentral.org as 127.0.0.2 Sep 26 09:36:49 mxgate1 postfix/postscreen[17680]: PASS OLD [59.100.169.211]:58386 Sep 26 09:36:49 mxgate1 postfix/s........ ------------------------------- |
2019-09-28 16:15:02 |
| 117.239.66.148 | attackbots | 2019-09-28T07:33:07.844023abusebot-6.cloudsearch.cf sshd\[30921\]: Invalid user dsj from 117.239.66.148 port 58793 |
2019-09-28 15:50:02 |
| 164.77.188.109 | attackspambots | Sep 27 22:10:01 lcdev sshd\[3534\]: Invalid user user from 164.77.188.109 Sep 27 22:10:01 lcdev sshd\[3534\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.77.188.109 Sep 27 22:10:02 lcdev sshd\[3534\]: Failed password for invalid user user from 164.77.188.109 port 34672 ssh2 Sep 27 22:15:05 lcdev sshd\[3959\]: Invalid user conciergerie from 164.77.188.109 Sep 27 22:15:05 lcdev sshd\[3959\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.77.188.109 |
2019-09-28 16:21:03 |
| 14.177.232.173 | attackbots | 445/tcp 445/tcp 445/tcp... [2019-08-05/09-28]8pkt,1pt.(tcp) |
2019-09-28 16:04:56 |