城市(city): unknown
省份(region): unknown
国家(country): None
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 242.0.210.49
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 44871
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;242.0.210.49. IN A
;; AUTHORITY SECTION:
. 213 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020092401 1800 900 604800 86400
;; Query time: 70 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Sep 25 04:35:18 CST 2020
;; MSG SIZE rcvd: 116
Host 49.210.0.242.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 49.210.0.242.in-addr.arpa: NXDOMAIN
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 14.186.63.25 | attack | Oct 2 03:52:12 f201 sshd[430]: Address 14.186.63.25 maps to static.vnpt.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Oct 2 03:52:13 f201 sshd[430]: Connection closed by 14.186.63.25 [preauth] Oct 2 05:06:36 f201 sshd[19618]: Address 14.186.63.25 maps to static.vnpt.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Oct 2 05:06:37 f201 sshd[19618]: Connection closed by 14.186.63.25 [preauth] Oct 2 05:31:02 f201 sshd[26042]: Address 14.186.63.25 maps to static.vnpt.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=14.186.63.25 |
2019-10-02 14:39:39 |
| 158.69.220.70 | attack | Oct 2 08:07:02 SilenceServices sshd[22992]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=158.69.220.70 Oct 2 08:07:04 SilenceServices sshd[22992]: Failed password for invalid user fs2017 from 158.69.220.70 port 51430 ssh2 Oct 2 08:10:56 SilenceServices sshd[24211]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=158.69.220.70 |
2019-10-02 14:13:26 |
| 110.87.120.41 | attackspam | Oct 2 00:43:30 shadeyouvpn sshd[11714]: Address 110.87.120.41 maps to 41.120.87.110.broad.xm.fj.dynamic.163data.com.cn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Oct 2 00:43:30 shadeyouvpn sshd[11714]: Invalid user test from 110.87.120.41 Oct 2 00:43:30 shadeyouvpn sshd[11714]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.87.120.41 Oct 2 00:43:32 shadeyouvpn sshd[11714]: Failed password for invalid user test from 110.87.120.41 port 22880 ssh2 Oct 2 00:43:33 shadeyouvpn sshd[11714]: Received disconnect from 110.87.120.41: 11: Bye Bye [preauth] Oct 2 00:50:02 shadeyouvpn sshd[16151]: Address 110.87.120.41 maps to 41.120.87.110.broad.xm.fj.dynamic.163data.com.cn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Oct 2 00:50:02 shadeyouvpn sshd[16151]: Invalid user ubuntu from 110.87.120.41 Oct 2 00:50:02 shadeyouvpn sshd[16151]: pam_unix(sshd:auth): authentication fail........ ------------------------------- |
2019-10-02 14:13:47 |
| 42.159.10.104 | attackbots | Oct 2 06:52:19 www5 sshd\[14910\]: Invalid user dragon from 42.159.10.104 Oct 2 06:52:19 www5 sshd\[14910\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.159.10.104 Oct 2 06:52:21 www5 sshd\[14910\]: Failed password for invalid user dragon from 42.159.10.104 port 41260 ssh2 ... |
2019-10-02 14:09:03 |
| 222.186.15.18 | attackspambots | Oct 2 06:54:56 vmi181237 sshd\[20721\]: refused connect from 222.186.15.18 \(222.186.15.18\) Oct 2 06:55:51 vmi181237 sshd\[20737\]: refused connect from 222.186.15.18 \(222.186.15.18\) Oct 2 06:56:26 vmi181237 sshd\[20750\]: refused connect from 222.186.15.18 \(222.186.15.18\) Oct 2 06:57:01 vmi181237 sshd\[20761\]: refused connect from 222.186.15.18 \(222.186.15.18\) Oct 2 06:57:39 vmi181237 sshd\[20781\]: refused connect from 222.186.15.18 \(222.186.15.18\) |
2019-10-02 14:07:36 |
| 49.151.180.241 | attackspambots | Sql/code injection probe |
2019-10-02 13:57:11 |
| 49.232.11.112 | attackspambots | Oct 1 19:57:54 friendsofhawaii sshd\[14633\]: Invalid user yyy from 49.232.11.112 Oct 1 19:57:54 friendsofhawaii sshd\[14633\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.232.11.112 Oct 1 19:57:57 friendsofhawaii sshd\[14633\]: Failed password for invalid user yyy from 49.232.11.112 port 33000 ssh2 Oct 1 20:01:20 friendsofhawaii sshd\[14905\]: Invalid user jose from 49.232.11.112 Oct 1 20:01:20 friendsofhawaii sshd\[14905\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.232.11.112 |
2019-10-02 14:17:19 |
| 91.134.141.89 | attack | Invalid user newbreak from 91.134.141.89 port 38654 |
2019-10-02 14:38:21 |
| 222.186.175.167 | attackspam | SSH Brute Force, server-1 sshd[30346]: Failed password for root from 222.186.175.167 port 49122 ssh2 |
2019-10-02 14:36:33 |
| 159.65.176.156 | attack | Oct 1 18:19:57 sachi sshd\[21734\]: Invalid user ailis from 159.65.176.156 Oct 1 18:19:57 sachi sshd\[21734\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.176.156 Oct 1 18:19:59 sachi sshd\[21734\]: Failed password for invalid user ailis from 159.65.176.156 port 46469 ssh2 Oct 1 18:23:53 sachi sshd\[22093\]: Invalid user nagesh from 159.65.176.156 Oct 1 18:23:53 sachi sshd\[22093\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.176.156 |
2019-10-02 14:12:56 |
| 58.144.150.233 | attack | Oct 2 06:29:38 game-panel sshd[20246]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.144.150.233 Oct 2 06:29:39 game-panel sshd[20246]: Failed password for invalid user wubao from 58.144.150.233 port 49796 ssh2 Oct 2 06:34:51 game-panel sshd[20423]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.144.150.233 |
2019-10-02 14:39:10 |
| 121.46.29.116 | attackspam | Oct 2 06:49:43 site2 sshd\[65052\]: Invalid user jira from 121.46.29.116Oct 2 06:49:45 site2 sshd\[65052\]: Failed password for invalid user jira from 121.46.29.116 port 46282 ssh2Oct 2 06:53:12 site2 sshd\[65453\]: Invalid user legacy from 121.46.29.116Oct 2 06:53:14 site2 sshd\[65453\]: Failed password for invalid user legacy from 121.46.29.116 port 34773 ssh2Oct 2 06:56:39 site2 sshd\[462\]: Failed password for root from 121.46.29.116 port 51494 ssh2 ... |
2019-10-02 14:08:35 |
| 122.152.197.6 | attackbots | Invalid user mother from 122.152.197.6 port 34884 |
2019-10-02 13:59:54 |
| 106.43.41.169 | attack | Automatic report - Port Scan Attack |
2019-10-02 14:12:33 |
| 51.254.210.53 | attack | Oct 2 08:25:37 SilenceServices sshd[28118]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.254.210.53 Oct 2 08:25:39 SilenceServices sshd[28118]: Failed password for invalid user lab from 51.254.210.53 port 54746 ssh2 Oct 2 08:29:28 SilenceServices sshd[29231]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.254.210.53 |
2019-10-02 14:32:05 |