城市(city): unknown
省份(region): unknown
国家(country): None
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 242.104.102.24
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 53935
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;242.104.102.24. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020600 1800 900 604800 86400
;; Query time: 33 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 06 20:06:41 CST 2025
;; MSG SIZE rcvd: 107
Host 24.102.104.242.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 24.102.104.242.in-addr.arpa: NXDOMAIN
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 51.178.53.233 | attackspam | Sep 23 12:40:52 vps647732 sshd[11878]: Failed password for root from 51.178.53.233 port 43940 ssh2 ... |
2020-09-23 22:07:21 |
| 188.166.172.189 | attack | 188.166.172.189 (GB/United Kingdom/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep 23 09:00:47 server2 sshd[1074]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.172.189 user=root Sep 23 09:00:07 server2 sshd[870]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.108.46 user=root Sep 23 08:58:24 server2 sshd[32261]: Failed password for root from 151.236.37.57 port 37004 ssh2 Sep 23 09:00:09 server2 sshd[870]: Failed password for root from 128.199.108.46 port 55006 ssh2 Sep 23 08:58:58 server2 sshd[32394]: Failed password for root from 91.121.205.83 port 54246 ssh2 IP Addresses Blocked: |
2020-09-23 21:47:37 |
| 122.51.246.97 | attack | Time: Wed Sep 23 06:31:58 2020 +0000 IP: 122.51.246.97 (CN/China/-) Failures: 5 (sshd) Interval: 3600 seconds Blocked: Permanent Block [LF_SSHD] Log entries: Sep 23 05:56:52 3 sshd[9783]: Invalid user ian from 122.51.246.97 port 53722 Sep 23 05:56:54 3 sshd[9783]: Failed password for invalid user ian from 122.51.246.97 port 53722 ssh2 Sep 23 06:14:53 3 sshd[16141]: Invalid user cent from 122.51.246.97 port 59566 Sep 23 06:14:55 3 sshd[16141]: Failed password for invalid user cent from 122.51.246.97 port 59566 ssh2 Sep 23 06:31:55 3 sshd[23042]: Invalid user xia from 122.51.246.97 port 49710 |
2020-09-23 21:41:00 |
| 117.253.140.143 | attackspam | Lines containing failures of 117.253.140.143 Sep 22 18:29:29 shared10 sshd[5235]: Connection closed by 117.253.140.143 port 33608 [preauth] Sep 22 18:34:02 shared10 sshd[7489]: Connection reset by 117.253.140.143 port 56452 [preauth] Sep 22 18:38:16 shared10 sshd[9264]: Connection closed by 117.253.140.143 port 51078 [preauth] Sep 22 18:42:30 shared10 sshd[11454]: Invalid user ahmed from 117.253.140.143 port 45662 Sep 22 18:42:30 shared10 sshd[11454]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.253.140.143 Sep 22 18:42:32 shared10 sshd[11454]: Failed password for invalid user ahmed from 117.253.140.143 port 45662 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=117.253.140.143 |
2020-09-23 21:41:23 |
| 182.122.0.140 | attackbotsspam | Sep 23 15:42:31 sshgateway sshd\[18013\]: Invalid user wordpress from 182.122.0.140 Sep 23 15:42:31 sshgateway sshd\[18013\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.122.0.140 Sep 23 15:42:34 sshgateway sshd\[18013\]: Failed password for invalid user wordpress from 182.122.0.140 port 64344 ssh2 |
2020-09-23 21:44:35 |
| 68.183.31.114 | attack | Sep 23 18:38:35 mx sshd[907654]: Invalid user allen from 68.183.31.114 port 59912 Sep 23 18:38:35 mx sshd[907654]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.31.114 Sep 23 18:38:35 mx sshd[907654]: Invalid user allen from 68.183.31.114 port 59912 Sep 23 18:38:37 mx sshd[907654]: Failed password for invalid user allen from 68.183.31.114 port 59912 ssh2 Sep 23 18:42:18 mx sshd[907762]: Invalid user josh from 68.183.31.114 port 41564 ... |
2020-09-23 21:39:53 |
| 95.71.135.110 | attack | Sep 22 17:02:04 ssh2 sshd[20706]: User root from 95.71.135.110 not allowed because not listed in AllowUsers Sep 22 17:02:04 ssh2 sshd[20706]: Failed password for invalid user root from 95.71.135.110 port 54288 ssh2 Sep 22 17:02:04 ssh2 sshd[20706]: Connection closed by invalid user root 95.71.135.110 port 54288 [preauth] ... |
2020-09-23 21:37:40 |
| 194.169.190.228 | attack | Automatic report - Port Scan Attack |
2020-09-23 22:04:44 |
| 155.94.243.43 | attack | Icarus honeypot on github |
2020-09-23 21:55:39 |
| 77.27.168.117 | attack | Sep 23 15:47:33 meumeu sshd[414400]: Invalid user guillermo from 77.27.168.117 port 39416 Sep 23 15:47:33 meumeu sshd[414400]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.27.168.117 Sep 23 15:47:33 meumeu sshd[414400]: Invalid user guillermo from 77.27.168.117 port 39416 Sep 23 15:47:34 meumeu sshd[414400]: Failed password for invalid user guillermo from 77.27.168.117 port 39416 ssh2 Sep 23 15:51:45 meumeu sshd[414581]: Invalid user pierre from 77.27.168.117 port 44292 Sep 23 15:51:45 meumeu sshd[414581]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.27.168.117 Sep 23 15:51:45 meumeu sshd[414581]: Invalid user pierre from 77.27.168.117 port 44292 Sep 23 15:51:47 meumeu sshd[414581]: Failed password for invalid user pierre from 77.27.168.117 port 44292 ssh2 Sep 23 15:55:58 meumeu sshd[414831]: Invalid user mitra from 77.27.168.117 port 49167 ... |
2020-09-23 22:13:05 |
| 81.68.128.180 | attack | Automatic report - Banned IP Access |
2020-09-23 22:00:49 |
| 62.38.222.98 | attack | Automatic report - Banned IP Access |
2020-09-23 22:01:52 |
| 132.145.158.230 | attackspam | Sep 23 15:03:37 ip106 sshd[10925]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.145.158.230 Sep 23 15:03:39 ip106 sshd[10925]: Failed password for invalid user solr from 132.145.158.230 port 36380 ssh2 ... |
2020-09-23 21:45:53 |
| 182.253.245.172 | attackspam | Hacking |
2020-09-23 21:51:14 |
| 5.253.27.243 | attack | Bruteforce detected by fail2ban |
2020-09-23 22:03:19 |