城市(city): unknown
省份(region): unknown
国家(country): None
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 252.154.54.27
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 4034
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;252.154.54.27. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021901 1800 900 604800 86400
;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 20 02:36:34 CST 2025
;; MSG SIZE rcvd: 106Host 27.54.154.252.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 27.54.154.252.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 222.186.30.35 | attackbots | Sep 15 02:00:11 abendstille sshd\[30304\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.35 user=root Sep 15 02:00:13 abendstille sshd\[30304\]: Failed password for root from 222.186.30.35 port 46376 ssh2 Sep 15 02:00:15 abendstille sshd\[30304\]: Failed password for root from 222.186.30.35 port 46376 ssh2 Sep 15 02:00:18 abendstille sshd\[30304\]: Failed password for root from 222.186.30.35 port 46376 ssh2 Sep 15 02:00:20 abendstille sshd\[30358\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.35 user=root ... |
2020-09-15 08:03:29 |
| 61.133.232.254 | attackspambots | 2020-09-14T23:29:15.654105randservbullet-proofcloud-66.localdomain sshd[28689]: Invalid user gene from 61.133.232.254 port 12915 2020-09-14T23:29:15.658729randservbullet-proofcloud-66.localdomain sshd[28689]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.133.232.254 2020-09-14T23:29:15.654105randservbullet-proofcloud-66.localdomain sshd[28689]: Invalid user gene from 61.133.232.254 port 12915 2020-09-14T23:29:17.870642randservbullet-proofcloud-66.localdomain sshd[28689]: Failed password for invalid user gene from 61.133.232.254 port 12915 ssh2 ... |
2020-09-15 08:12:38 |
| 138.197.69.184 | attackbotsspam | Sep 15 01:59:11 OPSO sshd\[16431\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.69.184 user=root Sep 15 01:59:12 OPSO sshd\[16431\]: Failed password for root from 138.197.69.184 port 37006 ssh2 Sep 15 02:03:21 OPSO sshd\[17908\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.69.184 user=root Sep 15 02:03:23 OPSO sshd\[17908\]: Failed password for root from 138.197.69.184 port 48544 ssh2 Sep 15 02:07:23 OPSO sshd\[19167\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.69.184 user=root |
2020-09-15 08:14:52 |
| 83.167.87.198 | attackspambots | Sep 14 21:53:56 sshgateway sshd\[24375\]: Invalid user webmail from 83.167.87.198 Sep 14 21:53:56 sshgateway sshd\[24375\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=83.167.87.198 Sep 14 21:53:58 sshgateway sshd\[24375\]: Failed password for invalid user webmail from 83.167.87.198 port 55764 ssh2 |
2020-09-15 07:59:43 |
| 192.145.99.71 | attack | Sep 15 03:42:48 our-server-hostname sshd[30783]: Address 192.145.99.71 maps to aofy.ru, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Sep 15 03:42:48 our-server-hostname sshd[30783]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.145.99.71 user=r.r Sep 15 03:42:50 our-server-hostname sshd[30783]: Failed password for r.r from 192.145.99.71 port 60175 ssh2 Sep 15 03:59:06 our-server-hostname sshd[32531]: Address 192.145.99.71 maps to aofy.ru, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Sep 15 03:59:06 our-server-hostname sshd[32531]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.145.99.71 user=r.r Sep 15 03:59:08 our-server-hostname sshd[32531]: Failed password for r.r from 192.145.99.71 port 40733 ssh2 Sep 15 04:03:54 our-server-hostname sshd[547]: Address 192.145.99.71 maps to aofy.ru, but this does not map back to the address ........ ------------------------------- |
2020-09-15 08:17:40 |
| 54.39.151.44 | attackspambots | Sep 14 15:55:22 Tower sshd[43001]: Connection from 54.39.151.44 port 42432 on 192.168.10.220 port 22 rdomain "" Sep 14 15:55:22 Tower sshd[43001]: Failed password for root from 54.39.151.44 port 42432 ssh2 Sep 14 15:55:22 Tower sshd[43001]: Received disconnect from 54.39.151.44 port 42432:11: Bye Bye [preauth] Sep 14 15:55:22 Tower sshd[43001]: Disconnected from authenticating user root 54.39.151.44 port 42432 [preauth] |
2020-09-15 07:58:55 |
| 13.231.222.146 | attack | Multiple SSH authentication failures from 13.231.222.146 |
2020-09-15 08:13:27 |
| 177.67.164.134 | attackbotsspam | $f2bV_matches |
2020-09-15 08:14:09 |
| 80.151.235.172 | attack | Sep 14 21:40:48 h2646465 sshd[24594]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.151.235.172 user=root Sep 14 21:40:49 h2646465 sshd[24594]: Failed password for root from 80.151.235.172 port 47926 ssh2 Sep 14 22:07:22 h2646465 sshd[28310]: Invalid user admin from 80.151.235.172 Sep 14 22:07:22 h2646465 sshd[28310]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.151.235.172 Sep 14 22:07:22 h2646465 sshd[28310]: Invalid user admin from 80.151.235.172 Sep 14 22:07:24 h2646465 sshd[28310]: Failed password for invalid user admin from 80.151.235.172 port 56602 ssh2 Sep 14 22:30:02 h2646465 sshd[31156]: Invalid user nak from 80.151.235.172 Sep 14 22:30:02 h2646465 sshd[31156]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.151.235.172 Sep 14 22:30:02 h2646465 sshd[31156]: Invalid user nak from 80.151.235.172 Sep 14 22:30:04 h2646465 sshd[31156]: Failed password for invalid user nak |
2020-09-15 08:02:32 |
| 123.157.219.83 | attackbots | Sep 14 21:01:26 firewall sshd[23405]: Failed password for invalid user cacti from 123.157.219.83 port 30207 ssh2 Sep 14 21:03:34 firewall sshd[23450]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.157.219.83 user=root Sep 14 21:03:37 firewall sshd[23450]: Failed password for root from 123.157.219.83 port 46116 ssh2 ... |
2020-09-15 08:17:20 |
| 27.7.14.31 | attackspambots | Auto Detect Rule! proto TCP (SYN), 27.7.14.31:24905->gjan.info:23, len 40 |
2020-09-15 12:05:58 |
| 185.153.199.185 | attackbots | [portscan] Port scan |
2020-09-15 08:16:49 |
| 59.120.189.234 | attack | Sep 14 18:58:09 Tower sshd[19644]: Connection from 59.120.189.234 port 54598 on 192.168.10.220 port 22 rdomain "" Sep 14 18:58:11 Tower sshd[19644]: Failed password for root from 59.120.189.234 port 54598 ssh2 Sep 14 18:58:12 Tower sshd[19644]: Received disconnect from 59.120.189.234 port 54598:11: Bye Bye [preauth] Sep 14 18:58:12 Tower sshd[19644]: Disconnected from authenticating user root 59.120.189.234 port 54598 [preauth] |
2020-09-15 08:23:20 |
| 78.37.19.110 | attackspambots | Unauthorized connection attempt from IP address 78.37.19.110 on Port 445(SMB) |
2020-09-15 12:10:33 |
| 209.124.90.241 | attack | 209.124.90.241 - - \[14/Sep/2020:22:01:34 +0200\] "POST /wp-login.php HTTP/1.1" 200 12843 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 209.124.90.241 - - \[14/Sep/2020:22:01:36 +0200\] "POST /wp-login.php HTTP/1.1" 200 12712 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" ... |
2020-09-15 07:57:57 |