城市(city): New Taipei City
省份(region): New Taipei
国家(country): Taiwan, China
运营商(isp): Chunghwa
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.70.203.109
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 21763
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;42.70.203.109. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021501 1800 900 604800 86400
;; Query time: 43 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 16 09:05:22 CST 2025
;; MSG SIZE rcvd: 106109.203.70.42.in-addr.arpa domain name pointer 42-70-203-109.emome-ip.hinet.net.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
109.203.70.42.in-addr.arpa name = 42-70-203-109.emome-ip.hinet.net.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 103.111.71.82 | attackbots | www.goldgier.de 103.111.71.82 [28/Aug/2020:14:08:37 +0200] "POST /wp-login.php HTTP/1.1" 200 8761 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" www.goldgier.de 103.111.71.82 [28/Aug/2020:14:08:38 +0200] "POST /wp-login.php HTTP/1.1" 200 8761 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-08-28 21:39:39 |
| 157.230.230.152 | attackspam | (sshd) Failed SSH login from 157.230.230.152 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Aug 28 14:51:24 srv sshd[2742]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.230.152 user=root Aug 28 14:51:26 srv sshd[2742]: Failed password for root from 157.230.230.152 port 49722 ssh2 Aug 28 15:05:11 srv sshd[3014]: Invalid user fang from 157.230.230.152 port 55486 Aug 28 15:05:13 srv sshd[3014]: Failed password for invalid user fang from 157.230.230.152 port 55486 ssh2 Aug 28 15:08:29 srv sshd[3071]: Invalid user xo from 157.230.230.152 port 33460 |
2020-08-28 21:42:44 |
| 187.86.152.139 | attackbots | 2020-08-28 08:36:15.088528-0500 localhost sshd[41410]: Failed password for root from 187.86.152.139 port 47926 ssh2 |
2020-08-28 21:59:00 |
| 152.136.104.57 | attackbots | Aug 28 19:01:10 dhoomketu sshd[2721473]: Invalid user wwwadm from 152.136.104.57 port 53736 Aug 28 19:01:10 dhoomketu sshd[2721473]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.104.57 Aug 28 19:01:10 dhoomketu sshd[2721473]: Invalid user wwwadm from 152.136.104.57 port 53736 Aug 28 19:01:12 dhoomketu sshd[2721473]: Failed password for invalid user wwwadm from 152.136.104.57 port 53736 ssh2 Aug 28 19:03:31 dhoomketu sshd[2721509]: Invalid user larry from 152.136.104.57 port 51574 ... |
2020-08-28 21:52:23 |
| 51.158.112.98 | attackspambots | Aug 28 14:08:08 kh-dev-server sshd[14376]: Failed password for root from 51.158.112.98 port 58986 ssh2 ... |
2020-08-28 22:12:37 |
| 114.67.113.90 | attackspam | Aug 28 20:18:56 webhost01 sshd[2816]: Failed password for root from 114.67.113.90 port 51168 ssh2 ... |
2020-08-28 21:32:54 |
| 67.205.162.223 | attackbotsspam | Aug 28 13:21:59 instance-2 sshd[1698]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=67.205.162.223 Aug 28 13:22:01 instance-2 sshd[1698]: Failed password for invalid user ww from 67.205.162.223 port 39556 ssh2 Aug 28 13:27:02 instance-2 sshd[1837]: Failed password for root from 67.205.162.223 port 46084 ssh2 |
2020-08-28 21:33:44 |
| 217.12.213.64 | attackspam | Bruteforce detected by fail2ban |
2020-08-28 22:01:54 |
| 77.247.181.163 | attack | 2020-08-28T14:48[Censored Hostname] sshd[15194]: Failed password for root from 77.247.181.163 port 17000 ssh2 2020-08-28T14:48[Censored Hostname] sshd[15194]: Failed password for root from 77.247.181.163 port 17000 ssh2 2020-08-28T14:48[Censored Hostname] sshd[15194]: Failed password for root from 77.247.181.163 port 17000 ssh2[...] |
2020-08-28 22:00:48 |
| 116.121.119.103 | attack | Brute-force attempt banned |
2020-08-28 21:43:33 |
| 106.13.233.4 | attackbots | 2020-08-28T07:28:54.468876linuxbox-skyline sshd[215080]: Invalid user apple from 106.13.233.4 port 52846 ... |
2020-08-28 21:56:30 |
| 181.48.46.195 | attackbotsspam | Aug 28 14:31:56 inter-technics sshd[10750]: Invalid user ubuntu from 181.48.46.195 port 57503 Aug 28 14:31:56 inter-technics sshd[10750]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.48.46.195 Aug 28 14:31:56 inter-technics sshd[10750]: Invalid user ubuntu from 181.48.46.195 port 57503 Aug 28 14:31:58 inter-technics sshd[10750]: Failed password for invalid user ubuntu from 181.48.46.195 port 57503 ssh2 Aug 28 14:35:57 inter-technics sshd[10979]: Invalid user claudia from 181.48.46.195 port 60593 ... |
2020-08-28 21:42:21 |
| 159.65.30.66 | attackbots | Aug 28 14:24:46 home sshd[2040662]: Invalid user niki from 159.65.30.66 port 60056 Aug 28 14:24:46 home sshd[2040662]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.30.66 Aug 28 14:24:46 home sshd[2040662]: Invalid user niki from 159.65.30.66 port 60056 Aug 28 14:24:48 home sshd[2040662]: Failed password for invalid user niki from 159.65.30.66 port 60056 ssh2 Aug 28 14:28:56 home sshd[2042079]: Invalid user adrian from 159.65.30.66 port 38558 ... |
2020-08-28 21:49:27 |
| 218.78.46.81 | attack | Aug 27 21:10:36 Ubuntu-1404-trusty-64-minimal sshd\[3446\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.78.46.81 user=root Aug 27 21:10:38 Ubuntu-1404-trusty-64-minimal sshd\[3446\]: Failed password for root from 218.78.46.81 port 43741 ssh2 Aug 28 13:59:27 Ubuntu-1404-trusty-64-minimal sshd\[27296\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.78.46.81 user=root Aug 28 13:59:29 Ubuntu-1404-trusty-64-minimal sshd\[27296\]: Failed password for root from 218.78.46.81 port 50416 ssh2 Aug 28 14:08:28 Ubuntu-1404-trusty-64-minimal sshd\[4366\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.78.46.81 user=root |
2020-08-28 21:48:31 |
| 104.248.205.67 | attack | scans 2 times in preceeding hours on the ports (in chronological order) 12982 29682 resulting in total of 6 scans from 104.248.0.0/16 block. |
2020-08-28 21:43:48 |