城市(city): unknown
省份(region): unknown
国家(country): China
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.197.12.220
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 12338
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;42.197.12.220. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021401 1800 900 604800 86400
;; Query time: 36 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 15 10:59:50 CST 2025
;; MSG SIZE rcvd: 106Host 220.12.197.42.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 220.12.197.42.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 5.196.29.194 | attackbots | 2019-10-19T05:49:34.674175 sshd[31968]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.196.29.194 user=root 2019-10-19T05:49:36.656516 sshd[31968]: Failed password for root from 5.196.29.194 port 51390 ssh2 2019-10-19T05:54:15.325161 sshd[32023]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.196.29.194 user=root 2019-10-19T05:54:17.884501 sshd[32023]: Failed password for root from 5.196.29.194 port 36000 ssh2 2019-10-19T05:58:57.181784 sshd[32051]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.196.29.194 user=root 2019-10-19T05:58:59.455007 sshd[32051]: Failed password for root from 5.196.29.194 port 48527 ssh2 ... |
2019-10-19 12:01:05 |
| 180.244.9.127 | attackbotsspam | Oct 19 03:58:35 thevastnessof sshd[22128]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.244.9.127 ... |
2019-10-19 12:13:10 |
| 74.142.56.226 | attackbotsspam | Oct 19 02:41:47 nxxxxxxx0 sshd[20141]: Invalid user aguistin from 74.142.56.226 Oct 19 02:41:47 nxxxxxxx0 sshd[20141]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=rrcs-74-142-56-226.central.biz.rr.com Oct 19 02:41:49 nxxxxxxx0 sshd[20141]: Failed password for invalid user aguistin from 74.142.56.226 port 42390 ssh2 Oct 19 02:41:49 nxxxxxxx0 sshd[20141]: Received disconnect from 74.142.56.226: 11: Bye Bye [preauth] Oct 19 02:48:11 nxxxxxxx0 sshd[20661]: Invalid user fo from 74.142.56.226 Oct 19 02:48:11 nxxxxxxx0 sshd[20661]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=rrcs-74-142-56-226.central.biz.rr.com Oct 19 02:48:12 nxxxxxxx0 sshd[20661]: Failed password for invalid user fo from 74.142.56.226 port 41870 ssh2 Oct 19 02:48:13 nxxxxxxx0 sshd[20661]: Received disconnect from 74.142.56.226: 11: Bye Bye [preauth] Oct 19 02:52:11 nxxxxxxx0 sshd[21050]: pam_unix(sshd:auth): authentica........ ------------------------------- |
2019-10-19 12:04:18 |
| 103.21.148.51 | attack | Automatic report - Banned IP Access |
2019-10-19 07:39:32 |
| 89.178.215.221 | attackbotsspam | Bruteforcing port 3389 (Remote Desktop) - Exceed maximum 10 attempts/hour |
2019-10-19 07:49:15 |
| 113.173.101.78 | attackbots | Oct 19 03:58:32 thevastnessof sshd[22118]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.173.101.78 ... |
2019-10-19 12:17:46 |
| 180.167.134.194 | attack | Oct 19 00:09:52 xtremcommunity sshd\[666822\]: Invalid user images from 180.167.134.194 port 45984 Oct 19 00:09:52 xtremcommunity sshd\[666822\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.167.134.194 Oct 19 00:09:54 xtremcommunity sshd\[666822\]: Failed password for invalid user images from 180.167.134.194 port 45984 ssh2 Oct 19 00:13:51 xtremcommunity sshd\[666889\]: Invalid user ubuntu from 180.167.134.194 port 56594 Oct 19 00:13:51 xtremcommunity sshd\[666889\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.167.134.194 ... |
2019-10-19 12:20:28 |
| 210.221.220.68 | attackbots | Oct 18 13:37:58 home sshd[30664]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.221.220.68 user=root Oct 18 13:38:00 home sshd[30664]: Failed password for root from 210.221.220.68 port 52636 ssh2 Oct 18 13:45:10 home sshd[30719]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.221.220.68 user=root Oct 18 13:45:11 home sshd[30719]: Failed password for root from 210.221.220.68 port 60209 ssh2 Oct 18 13:49:30 home sshd[30760]: Invalid user drive from 210.221.220.68 port 35143 Oct 18 13:49:30 home sshd[30760]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.221.220.68 Oct 18 13:49:30 home sshd[30760]: Invalid user drive from 210.221.220.68 port 35143 Oct 18 13:49:31 home sshd[30760]: Failed password for invalid user drive from 210.221.220.68 port 35143 ssh2 Oct 18 13:53:48 home sshd[30780]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=21 |
2019-10-19 07:40:48 |
| 106.75.17.91 | attack | Oct 18 13:28:56 sachi sshd\[16790\]: Invalid user user01 from 106.75.17.91 Oct 18 13:28:56 sachi sshd\[16790\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.17.91 Oct 18 13:28:57 sachi sshd\[16790\]: Failed password for invalid user user01 from 106.75.17.91 port 44674 ssh2 Oct 18 13:33:35 sachi sshd\[17156\]: Invalid user gitlab from 106.75.17.91 Oct 18 13:33:35 sachi sshd\[17156\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.17.91 |
2019-10-19 07:42:58 |
| 50.209.145.30 | attackspambots | Oct 19 05:55:01 vmanager6029 sshd\[15852\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=50.209.145.30 user=root Oct 19 05:55:03 vmanager6029 sshd\[15852\]: Failed password for root from 50.209.145.30 port 58562 ssh2 Oct 19 05:58:39 vmanager6029 sshd\[15947\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=50.209.145.30 user=root |
2019-10-19 12:10:40 |
| 80.82.64.73 | attack | Oct 19 05:54:05 mail kernel: [1170487.205042] [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:05:0d:89:f8:66:f2:68:66:ff:08:00 SRC=80.82.64.73 DST=77.73.69.240 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=33012 PROTO=TCP SPT=54202 DPT=42929 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 19 05:54:15 mail kernel: [1170496.580104] [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:05:0d:89:f8:66:f2:68:66:ff:08:00 SRC=80.82.64.73 DST=77.73.69.240 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=9883 PROTO=TCP SPT=54202 DPT=42380 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 19 05:55:10 mail kernel: [1170552.413123] [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:05:0d:89:f8:66:f2:68:66:ff:08:00 SRC=80.82.64.73 DST=77.73.69.240 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=51709 PROTO=TCP SPT=54202 DPT=42527 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 19 05:55:14 mail kernel: [1170555.595227] [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:05:0d:89:f8:66:f2:68:66:ff:08:00 SRC=80.82.64.73 DST=77.73.69.240 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=16262 PROTO=TCP SPT=54202 DPT=42421 WINDOW=1024 RES=0x00 SYN URGP=0 O |
2019-10-19 12:05:01 |
| 119.29.133.210 | attackbots | Oct 19 06:58:18 www sshd\[33987\]: Invalid user Personal@123 from 119.29.133.210 Oct 19 06:58:18 www sshd\[33987\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.29.133.210 Oct 19 06:58:20 www sshd\[33987\]: Failed password for invalid user Personal@123 from 119.29.133.210 port 51384 ssh2 ... |
2019-10-19 12:22:34 |
| 124.109.62.38 | attack | Oct 19 03:58:30 thevastnessof sshd[22116]: Failed password for root from 124.109.62.38 port 57685 ssh2 ... |
2019-10-19 12:18:13 |
| 112.216.39.29 | attack | Automatic report - Banned IP Access |
2019-10-19 07:41:25 |
| 222.186.180.8 | attackspambots | Triggered by Fail2Ban at Ares web server |
2019-10-19 07:44:35 |