城市(city): unknown
省份(region): unknown
国家(country): unknown
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
bb'
; <<>> DiG 9.11.3-1ubuntu1.15-Ubuntu <<>> 2605:0:1:0:144:26:2:9
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 44394
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 65494
;; QUESTION SECTION:
;2605:0:1:0:144:26:2:9. IN A
;; Query time: 0 msec
;; SERVER: 127.0.0.53#53(127.0.0.53)
;; WHEN: Sat Feb 19 05:18:16 CST 2022
;; MSG SIZE rcvd: 50
'9.0.0.0.2.0.0.0.6.2.0.0.4.4.1.0.0.0.0.0.1.0.0.0.0.0.0.0.5.0.6.2.ip6.arpa domain name pointer www-prod.wcupa.edu.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
9.0.0.0.2.0.0.0.6.2.0.0.4.4.1.0.0.0.0.0.1.0.0.0.0.0.0.0.5.0.6.2.ip6.arpa name = www-prod.wcupa.edu.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 114.67.74.91 | attackspambots | (sshd) Failed SSH login from 114.67.74.91 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: May 15 06:41:37 srv sshd[15308]: Invalid user sai from 114.67.74.91 port 33670 May 15 06:41:39 srv sshd[15308]: Failed password for invalid user sai from 114.67.74.91 port 33670 ssh2 May 15 06:50:44 srv sshd[15571]: Invalid user corina from 114.67.74.91 port 44838 May 15 06:50:46 srv sshd[15571]: Failed password for invalid user corina from 114.67.74.91 port 44838 ssh2 May 15 06:54:40 srv sshd[15660]: Invalid user jobs from 114.67.74.91 port 38380 |
2020-05-15 14:46:36 |
| 222.186.42.155 | attack | May 15 08:18:49 ArkNodeAT sshd\[22555\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.155 user=root May 15 08:18:52 ArkNodeAT sshd\[22555\]: Failed password for root from 222.186.42.155 port 53366 ssh2 May 15 08:18:54 ArkNodeAT sshd\[22555\]: Failed password for root from 222.186.42.155 port 53366 ssh2 |
2020-05-15 14:26:13 |
| 178.186.95.244 | attack | port scan and connect, tcp 8080 (http-proxy) |
2020-05-15 14:12:22 |
| 106.13.228.153 | attackbots | May 15 10:03:35 gw1 sshd[26859]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.228.153 May 15 10:03:37 gw1 sshd[26859]: Failed password for invalid user postgres from 106.13.228.153 port 59152 ssh2 ... |
2020-05-15 14:57:54 |
| 49.234.23.248 | attackspam | May 15 06:02:44 scw-6657dc sshd[13805]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.23.248 May 15 06:02:44 scw-6657dc sshd[13805]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.23.248 May 15 06:02:45 scw-6657dc sshd[13805]: Failed password for invalid user fortran from 49.234.23.248 port 54096 ssh2 ... |
2020-05-15 14:36:17 |
| 89.248.168.221 | attackspambots | May 15 03:53:18 TCP Attack: SRC=89.248.168.221 DST=[Masked] LEN=40 TOS=0x08 PREC=0x20 TTL=246 PROTO=TCP SPT=46000 DPT=44816 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-05-15 14:19:52 |
| 222.186.175.150 | attack | May 15 06:12:32 ip-172-31-61-156 sshd[20041]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.150 user=root May 15 06:12:34 ip-172-31-61-156 sshd[20041]: Failed password for root from 222.186.175.150 port 11184 ssh2 ... |
2020-05-15 14:15:35 |
| 34.192.8.69 | attackbotsspam | Scanning for exploits - /phpMyAdmin/scripts/setup.php |
2020-05-15 14:14:36 |
| 161.35.131.224 | attackbotsspam | May 14 19:14:29 venus sshd[24104]: Invalid user fake from 161.35.131.224 port 52286 May 14 19:14:29 venus sshd[24104]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.35.131.224 May 14 19:14:31 venus sshd[24104]: Failed password for invalid user fake from 161.35.131.224 port 52286 ssh2 May 14 19:14:32 venus sshd[24111]: Invalid user admin from 161.35.131.224 port 35208 May 14 19:14:32 venus sshd[24111]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.35.131.224 May 14 19:14:34 venus sshd[24111]: Failed password for invalid user admin from 161.35.131.224 port 35208 ssh2 May 14 19:14:35 venus sshd[24117]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.35.131.224 user=r.r May 14 19:14:37 venus sshd[24117]: Failed password for r.r from 161.35.131.224 port 45944 ssh2 May 14 19:14:38 venus sshd[24123]: Invalid user ubnt from 161.35.131.224 port ........ ------------------------------ |
2020-05-15 14:12:45 |
| 51.83.45.65 | attackspam | $f2bV_matches |
2020-05-15 14:44:41 |
| 40.68.133.163 | attackbotsspam | May 15 08:12:33 legacy sshd[3149]: Failed password for root from 40.68.133.163 port 35394 ssh2 May 15 08:16:27 legacy sshd[3303]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.68.133.163 May 15 08:16:29 legacy sshd[3303]: Failed password for invalid user ts from 40.68.133.163 port 44444 ssh2 ... |
2020-05-15 14:30:27 |
| 92.118.37.83 | attack | 05/15/2020-01:35:39.229790 92.118.37.83 Protocol: 6 ET SCAN NMAP -sS window 1024 |
2020-05-15 14:40:13 |
| 37.49.226.32 | attackbotsspam | May 15 08:23:41 sd-69548 sshd[1333030]: Unable to negotiate with 37.49.226.32 port 53626: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 15 08:23:46 sd-69548 sshd[1333037]: Unable to negotiate with 37.49.226.32 port 33714: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] ... |
2020-05-15 14:37:24 |
| 195.54.160.121 | attackspambots | May 15 07:38:13 debian-2gb-nbg1-2 kernel: \[11779944.200998\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=195.54.160.121 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=58097 PROTO=TCP SPT=58191 DPT=8081 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-05-15 14:13:12 |
| 61.155.2.142 | attackbots | 2020-05-15 05:46:29,931 fail2ban.actions [1093]: NOTICE [sshd] Ban 61.155.2.142 2020-05-15 06:19:43,526 fail2ban.actions [1093]: NOTICE [sshd] Ban 61.155.2.142 2020-05-15 06:52:59,012 fail2ban.actions [1093]: NOTICE [sshd] Ban 61.155.2.142 2020-05-15 07:27:42,878 fail2ban.actions [1093]: NOTICE [sshd] Ban 61.155.2.142 2020-05-15 08:02:10,390 fail2ban.actions [1093]: NOTICE [sshd] Ban 61.155.2.142 ... |
2020-05-15 14:11:04 |