城市(city): unknown
省份(region): unknown
国家(country): United States of America (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 47.38.168.21
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 51530
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;47.38.168.21. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020500 1800 900 604800 86400
;; Query time: 13 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 05 22:40:39 CST 2025
;; MSG SIZE rcvd: 10521.168.38.47.in-addr.arpa domain name pointer syn-047-038-168-021.res.spectrum.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
21.168.38.47.in-addr.arpa name = syn-047-038-168-021.res.spectrum.com.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 45.14.49.211 | attackbotsspam | 45.14.49.211 [45.14.49.211] - - [06/Nov/2019:15:25:40 +0900] "GET /vendor/phpunit/phpunit/LICENSE HTTP/1.1" 404 196 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" |
2019-11-06 16:50:38 |
| 178.62.28.89 | attack | ft-1848-basketball.de 178.62.28.89 \[06/Nov/2019:07:28:02 +0100\] "POST /wp-login.php HTTP/1.1" 200 2164 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" ft-1848-basketball.de 178.62.28.89 \[06/Nov/2019:07:28:03 +0100\] "POST /xmlrpc.php HTTP/1.1" 200 426 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" |
2019-11-06 16:24:20 |
| 213.241.46.78 | attack | Nov 5 20:55:37 web1 sshd\[2985\]: Invalid user 1qazqaz from 213.241.46.78 Nov 5 20:55:37 web1 sshd\[2985\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.241.46.78 Nov 5 20:55:39 web1 sshd\[2985\]: Failed password for invalid user 1qazqaz from 213.241.46.78 port 58339 ssh2 Nov 5 20:59:43 web1 sshd\[3521\]: Invalid user test1test from 213.241.46.78 Nov 5 20:59:43 web1 sshd\[3521\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.241.46.78 |
2019-11-06 16:39:22 |
| 222.186.175.169 | attack | Nov 6 09:31:36 vpn01 sshd[26558]: Failed password for root from 222.186.175.169 port 23790 ssh2 Nov 6 09:31:40 vpn01 sshd[26558]: Failed password for root from 222.186.175.169 port 23790 ssh2 ... |
2019-11-06 16:33:39 |
| 106.241.16.105 | attackspambots | Nov 6 01:45:30 mailserver sshd[12169]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.241.16.105 user=r.r Nov 6 01:45:32 mailserver sshd[12169]: Failed password for r.r from 106.241.16.105 port 20506 ssh2 Nov 6 01:45:33 mailserver sshd[12169]: Received disconnect from 106.241.16.105 port 20506:11: Bye Bye [preauth] Nov 6 01:45:33 mailserver sshd[12169]: Disconnected from 106.241.16.105 port 20506 [preauth] Nov 6 01:52:46 mailserver sshd[12587]: Invalid user cmartinez from 106.241.16.105 Nov 6 01:52:46 mailserver sshd[12587]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.241.16.105 Nov 6 01:52:48 mailserver sshd[12587]: Failed password for invalid user cmartinez from 106.241.16.105 port 40561 ssh2 Nov 6 01:52:49 mailserver sshd[12587]: Received disconnect from 106.241.16.105 port 40561:11: Bye Bye [preauth] Nov 6 01:52:49 mailserver sshd[12587]: Disconnected from 106.241......... ------------------------------- |
2019-11-06 16:41:14 |
| 45.136.109.174 | attackbots | CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found |
2019-11-06 16:39:53 |
| 201.149.22.37 | attackspam | Nov 6 09:30:15 lnxmail61 sshd[501]: Failed password for root from 201.149.22.37 port 54702 ssh2 Nov 6 09:30:15 lnxmail61 sshd[501]: Failed password for root from 201.149.22.37 port 54702 ssh2 |
2019-11-06 16:43:03 |
| 45.118.144.31 | attackspambots | Nov 5 22:00:02 sachi sshd\[27984\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.118.144.31 user=root Nov 5 22:00:04 sachi sshd\[27984\]: Failed password for root from 45.118.144.31 port 51446 ssh2 Nov 5 22:04:34 sachi sshd\[28362\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.118.144.31 user=root Nov 5 22:04:35 sachi sshd\[28362\]: Failed password for root from 45.118.144.31 port 60490 ssh2 Nov 5 22:09:06 sachi sshd\[10955\]: Invalid user com from 45.118.144.31 |
2019-11-06 16:25:18 |
| 222.186.175.182 | attackbots | 2019-11-06T08:29:54.168399+00:00 suse sshd[25177]: User root from 222.186.175.182 not allowed because not listed in AllowUsers 2019-11-06T08:29:58.126765+00:00 suse sshd[25177]: error: PAM: Authentication failure for illegal user root from 222.186.175.182 2019-11-06T08:29:54.168399+00:00 suse sshd[25177]: User root from 222.186.175.182 not allowed because not listed in AllowUsers 2019-11-06T08:29:58.126765+00:00 suse sshd[25177]: error: PAM: Authentication failure for illegal user root from 222.186.175.182 2019-11-06T08:29:54.168399+00:00 suse sshd[25177]: User root from 222.186.175.182 not allowed because not listed in AllowUsers 2019-11-06T08:29:58.126765+00:00 suse sshd[25177]: error: PAM: Authentication failure for illegal user root from 222.186.175.182 2019-11-06T08:29:58.128342+00:00 suse sshd[25177]: Failed keyboard-interactive/pam for invalid user root from 222.186.175.182 port 36342 ssh2 ... |
2019-11-06 16:34:20 |
| 113.140.75.205 | attackspam | Nov 6 09:49:19 microserver sshd[13621]: Failed password for root from 113.140.75.205 port 44272 ssh2 Nov 6 09:54:19 microserver sshd[14267]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.140.75.205 user=root Nov 6 09:54:21 microserver sshd[14267]: Failed password for root from 113.140.75.205 port 49224 ssh2 Nov 6 09:59:14 microserver sshd[14927]: Invalid user ecopy from 113.140.75.205 port 54172 Nov 6 09:59:14 microserver sshd[14927]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.140.75.205 Nov 6 10:09:26 microserver sshd[16296]: Invalid user west from 113.140.75.205 port 35850 Nov 6 10:09:26 microserver sshd[16296]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.140.75.205 Nov 6 10:09:28 microserver sshd[16296]: Failed password for invalid user west from 113.140.75.205 port 35850 ssh2 Nov 6 10:14:19 microserver sshd[16969]: Invalid user nagios from 113.140.75.205 |
2019-11-06 16:58:34 |
| 118.24.102.70 | attack | Nov 6 07:27:57 work-partkepr sshd\[1523\]: Invalid user Admin from 118.24.102.70 port 44152 Nov 6 07:27:57 work-partkepr sshd\[1523\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.102.70 ... |
2019-11-06 16:23:09 |
| 175.211.105.99 | attackbots | Automatic report - Banned IP Access |
2019-11-06 16:29:39 |
| 198.27.116.229 | attackbotsspam | [Aegis] @ 2019-11-06 07:27:50 0000 -> Attempted Administrator Privilege Gain: ET SCAN LibSSH Based Frequent SSH Connections Likely BruteForce Attack |
2019-11-06 16:23:36 |
| 129.204.147.84 | attackspambots | Nov 6 09:30:55 * sshd[15675]: Failed password for root from 129.204.147.84 port 45646 ssh2 |
2019-11-06 16:40:55 |
| 51.38.48.127 | attack | Nov 6 09:09:36 lnxded64 sshd[31917]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.48.127 |
2019-11-06 16:22:44 |