城市(city): unknown
省份(region): unknown
国家(country): China
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.252.99.6
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 42461
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;42.252.99.6. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012400 1800 900 604800 86400
;; Query time: 10 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jan 24 17:51:01 CST 2025
;; MSG SIZE rcvd: 104Host 6.99.252.42.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 6.99.252.42.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 24.137.195.230 | attackspam | Unauthorized connection attempt detected from IP address 24.137.195.230 to port 445 |
2019-12-11 15:42:20 |
| 81.22.45.146 | attack | SNORT TCP Port: 3389 Classtype misc-attack - ET DROP Dshield Block Listed Source group 1 - - Destination xx.xx.4.1 Port: 3389 - - Source 81.22.45.146 Port: 55635 _ (Listed on zen-spamhaus) _ _ (307) |
2019-12-11 15:43:38 |
| 112.112.102.79 | attack | Dec 11 12:39:00 gw1 sshd[5921]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.112.102.79 Dec 11 12:39:02 gw1 sshd[5921]: Failed password for invalid user hituzi from 112.112.102.79 port 5822 ssh2 ... |
2019-12-11 15:40:10 |
| 92.119.160.143 | attackspam | firewall-block, port(s): 26605/tcp, 41006/tcp, 45056/tcp, 46938/tcp, 57675/tcp, 60785/tcp |
2019-12-11 15:51:23 |
| 120.86.70.92 | attack | 20 attempts against mh-ssh on echoip.magehost.pro |
2019-12-11 15:47:12 |
| 222.186.175.150 | attackspam | Dec 11 08:57:50 dedicated sshd[18753]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.150 user=root Dec 11 08:57:52 dedicated sshd[18753]: Failed password for root from 222.186.175.150 port 44656 ssh2 |
2019-12-11 16:01:00 |
| 223.215.6.69 | attackbots | Dec 10 02:36:52 mxgate1 postfix/postscreen[9577]: CONNECT from [223.215.6.69]:57293 to [176.31.12.44]:25 Dec 10 02:36:52 mxgate1 postfix/dnsblog[9617]: addr 223.215.6.69 listed by domain zen.spamhaus.org as 127.0.0.3 Dec 10 02:36:52 mxgate1 postfix/dnsblog[9617]: addr 223.215.6.69 listed by domain zen.spamhaus.org as 127.0.0.11 Dec 10 02:36:52 mxgate1 postfix/dnsblog[9617]: addr 223.215.6.69 listed by domain zen.spamhaus.org as 127.0.0.4 Dec 10 02:36:52 mxgate1 postfix/dnsblog[9615]: addr 223.215.6.69 listed by domain cbl.abuseat.org as 127.0.0.2 Dec 10 02:36:52 mxgate1 postfix/postscreen[9577]: PREGREET 14 after 0.25 from [223.215.6.69]:57293: EHLO g7Jtvc8 Dec 10 02:36:52 mxgate1 postfix/postscreen[9577]: DNSBL rank 3 for [223.215.6.69]:57293 Dec 10 02:36:53 mxgate1 postfix/postscreen[9577]: NOQUEUE: reject: RCPT from [223.215.6.69]:57293: 550 5.7.1 Service unavailable; client [223.215.6.69] blocked using zen.spamhaus.org; from=x@x helo= |
2019-12-11 15:50:47 |
| 132.145.170.174 | attack | Dec 11 08:43:00 OPSO sshd\[25613\]: Invalid user fogg from 132.145.170.174 port 13334 Dec 11 08:43:00 OPSO sshd\[25613\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.145.170.174 Dec 11 08:43:02 OPSO sshd\[25613\]: Failed password for invalid user fogg from 132.145.170.174 port 13334 ssh2 Dec 11 08:48:10 OPSO sshd\[26701\]: Invalid user sanberg from 132.145.170.174 port 45556 Dec 11 08:48:10 OPSO sshd\[26701\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.145.170.174 |
2019-12-11 15:54:20 |
| 218.92.0.156 | attackbots | Brute-force attempt banned |
2019-12-11 15:44:41 |
| 5.249.131.161 | attackspam | 2019-12-11T01:22:31.107477ns547587 sshd\[24055\]: Invalid user Sakari from 5.249.131.161 port 60301 2019-12-11T01:22:31.113065ns547587 sshd\[24055\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.249.131.161 2019-12-11T01:22:33.009706ns547587 sshd\[24055\]: Failed password for invalid user Sakari from 5.249.131.161 port 60301 ssh2 2019-12-11T01:29:42.771512ns547587 sshd\[3246\]: Invalid user ohh from 5.249.131.161 port 38557 ... |
2019-12-11 15:42:33 |
| 103.30.151.17 | attackbots | Dec 11 06:43:22 zeus sshd[23278]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.30.151.17 Dec 11 06:43:25 zeus sshd[23278]: Failed password for invalid user vcsa from 103.30.151.17 port 35352 ssh2 Dec 11 06:49:51 zeus sshd[23540]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.30.151.17 Dec 11 06:49:53 zeus sshd[23540]: Failed password for invalid user liese from 103.30.151.17 port 41629 ssh2 |
2019-12-11 15:40:37 |
| 218.92.0.212 | attack | SSH Bruteforce attack |
2019-12-11 15:35:30 |
| 187.199.127.164 | attackbotsspam | Lines containing failures of 187.199.127.164 Dec 10 07:16:24 zabbix sshd[6153]: Invalid user contactus from 187.199.127.164 port 58214 Dec 10 07:16:24 zabbix sshd[6153]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.199.127.164 Dec 10 07:16:25 zabbix sshd[6153]: Failed password for invalid user contactus from 187.199.127.164 port 58214 ssh2 Dec 10 07:16:26 zabbix sshd[6153]: Received disconnect from 187.199.127.164 port 58214:11: Bye Bye [preauth] Dec 10 07:16:26 zabbix sshd[6153]: Disconnected from invalid user contactus 187.199.127.164 port 58214 [preauth] Dec 10 07:25:11 zabbix sshd[7401]: Invalid user johannesmelkeraen from 187.199.127.164 port 33632 Dec 10 07:25:11 zabbix sshd[7401]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.199.127.164 Dec 10 07:25:13 zabbix sshd[7401]: Failed password for invalid user johannesmelkeraen from 187.199.127.164 port 33632 ssh2 Dec 10 07:25:1........ ------------------------------ |
2019-12-11 16:12:18 |
| 52.162.253.241 | attackspambots | Dec 11 07:29:35 srv206 sshd[26469]: Invalid user attack from 52.162.253.241 ... |
2019-12-11 15:49:43 |
| 222.186.175.154 | attackbots | Unauthorized access to SSH at 11/Dec/2019:07:38:01 +0000. Received: (SSH-2.0-PuTTY) |
2019-12-11 15:44:22 |