城市(city): unknown
省份(region): unknown
国家(country): China
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.123.42.143
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 62092
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;42.123.42.143. IN A
;; AUTHORITY SECTION:
. 286 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022011002 1800 900 604800 86400
;; Query time: 61 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jan 11 20:06:43 CST 2022
;; MSG SIZE rcvd: 106Host 143.42.123.42.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 143.42.123.42.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 152.89.216.33 | attackspambots | Sep 8 23:23:09 ns382633 sshd\[31408\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.89.216.33 user=root Sep 8 23:23:11 ns382633 sshd\[31408\]: Failed password for root from 152.89.216.33 port 48974 ssh2 Sep 8 23:32:51 ns382633 sshd\[491\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.89.216.33 user=root Sep 8 23:32:54 ns382633 sshd\[491\]: Failed password for root from 152.89.216.33 port 36458 ssh2 Sep 8 23:36:19 ns382633 sshd\[1223\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.89.216.33 user=root |
2020-09-09 08:07:36 |
| 39.96.82.174 | attackbotsspam | Coordinated SSH brute-force attack from different IPs. pam_unix(sshd:auth): |
2020-09-09 08:31:53 |
| 128.199.247.130 | attackbots | Coordinated SSH brute-force attack from different IPs. pam_unix(sshd:auth): user=root |
2020-09-09 07:58:04 |
| 178.45.177.22 | attackspambots | " " |
2020-09-09 08:08:51 |
| 79.120.102.34 | attack | Coordinated SSH brute-force attack from different IPs. pam_unix(sshd:auth): |
2020-09-09 07:53:27 |
| 193.169.253.173 | attack | 2020-09-09T01:43:01.194538lavrinenko.info sshd[28565]: Failed password for root from 193.169.253.173 port 55828 ssh2 2020-09-09T01:44:18.659762lavrinenko.info sshd[28611]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.169.253.173 user=root 2020-09-09T01:44:20.328611lavrinenko.info sshd[28611]: Failed password for root from 193.169.253.173 port 32816 ssh2 2020-09-09T01:45:37.673990lavrinenko.info sshd[28661]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.169.253.173 user=root 2020-09-09T01:45:39.854743lavrinenko.info sshd[28661]: Failed password for root from 193.169.253.173 port 38172 ssh2 ... |
2020-09-09 08:10:06 |
| 93.120.224.170 | attack | Lines containing failures of 93.120.224.170 (max 1000) Sep 7 12:23:34 HOSTNAME sshd[7713]: Address 93.120.224.170 maps to 93-120-224-170.static.mts-nn.ru, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Sep 7 12:23:34 HOSTNAME sshd[7713]: User r.r from 93.120.224.170 not allowed because not listed in AllowUsers Sep 7 12:23:34 HOSTNAME sshd[7713]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.120.224.170 user=r.r Sep 7 12:23:36 HOSTNAME sshd[7713]: Failed password for invalid user r.r from 93.120.224.170 port 35340 ssh2 Sep 7 12:23:36 HOSTNAME sshd[7713]: Received disconnect from 93.120.224.170 port 35340:11: Bye Bye [preauth] Sep 7 12:23:36 HOSTNAME sshd[7713]: Disconnected from 93.120.224.170 port 35340 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=93.120.224.170 |
2020-09-09 08:25:03 |
| 69.55.49.187 | attack | Sep 9 01:48:04 buvik sshd[17252]: Invalid user oracle from 69.55.49.187 Sep 9 01:48:04 buvik sshd[17252]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.55.49.187 Sep 9 01:48:06 buvik sshd[17252]: Failed password for invalid user oracle from 69.55.49.187 port 52730 ssh2 ... |
2020-09-09 08:01:42 |
| 165.22.49.219 | attack | Repeated brute force against a port |
2020-09-09 08:18:09 |
| 52.231.78.31 | attackspambots | Sep 2 06:56:01 mail.srvfarm.net postfix/smtps/smtpd[1576840]: warning: unknown[52.231.78.31]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 2 06:57:48 mail.srvfarm.net postfix/smtps/smtpd[1576837]: warning: unknown[52.231.78.31]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 2 06:59:39 mail.srvfarm.net postfix/smtps/smtpd[1576839]: warning: unknown[52.231.78.31]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 2 07:01:36 mail.srvfarm.net postfix/smtps/smtpd[1576837]: warning: unknown[52.231.78.31]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 2 07:03:35 mail.srvfarm.net postfix/smtps/smtpd[1577507]: warning: unknown[52.231.78.31]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 |
2020-09-09 07:55:40 |
| 160.153.154.5 | attackbotsspam | Brute force attack stopped by firewall |
2020-09-09 07:54:34 |
| 187.245.141.100 | attack | Coordinated SSH brute-force attack from different IPs. pam_unix(sshd:auth): user=root |
2020-09-09 08:22:28 |
| 201.184.94.188 | attackspambots | 20/9/8@12:53:13: FAIL: Alarm-Network address from=201.184.94.188 20/9/8@12:53:13: FAIL: Alarm-Network address from=201.184.94.188 20/9/8@12:53:14: FAIL: Alarm-Network address from=201.184.94.188 ... |
2020-09-09 08:02:35 |
| 125.25.184.76 | attackspam | Coordinated SSH brute-force attack from different IPs. pam_unix(sshd:auth): user=root |
2020-09-09 07:56:35 |
| 165.227.133.181 | attackspam | Sep 8 21:18:28 nuernberg-4g-01 sshd[5878]: Failed password for root from 165.227.133.181 port 42614 ssh2 Sep 8 21:21:37 nuernberg-4g-01 sshd[7101]: Failed password for root from 165.227.133.181 port 41906 ssh2 Sep 8 21:24:48 nuernberg-4g-01 sshd[9758]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.133.181 |
2020-09-09 08:17:45 |