城市(city): unknown
省份(region): unknown
国家(country): United States of America (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 48.144.192.130
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 30562
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;48.144.192.130. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021101 1800 900 604800 86400
;; Query time: 35 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 12 05:29:37 CST 2025
;; MSG SIZE rcvd: 107Host 130.192.144.48.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 130.192.144.48.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 51.75.19.157 | attack | Dec 27 15:45:32 vm11 sshd[13412]: Did not receive identification string from 51.75.19.157 port 43150 Dec 27 15:47:14 vm11 sshd[13414]: Invalid user bad from 51.75.19.157 port 44692 Dec 27 15:47:14 vm11 sshd[13414]: Received disconnect from 51.75.19.157 port 44692:11: Normal Shutdown, Thank you for playing [preauth] Dec 27 15:47:14 vm11 sshd[13414]: Disconnected from 51.75.19.157 port 44692 [preauth] Dec 27 15:47:30 vm11 sshd[13416]: Invalid user testdev from 51.75.19.157 port 47298 Dec 27 15:47:30 vm11 sshd[13416]: Received disconnect from 51.75.19.157 port 47298:11: Normal Shutdown, Thank you for playing [preauth] Dec 27 15:47:30 vm11 sshd[13416]: Disconnected from 51.75.19.157 port 47298 [preauth] Dec 27 15:47:46 vm11 sshd[13418]: Invalid user db2inst1 from 51.75.19.157 port 49962 Dec 27 15:47:46 vm11 sshd[13418]: Received disconnect from 51.75.19.157 port 49962:11: Normal Shutdown, Thank you for playing [preauth] Dec 27 15:47:46 vm11 sshd[13418]: Disconnected from 51........ ------------------------------- |
2019-12-30 06:49:19 |
| 103.44.18.68 | attackspambots | Dec 29 08:55:54 : SSH login attempts with invalid user |
2019-12-30 07:06:10 |
| 222.186.175.220 | attackbots | Dec 30 00:05:53 MK-Soft-Root2 sshd[9330]: Failed password for root from 222.186.175.220 port 64980 ssh2 Dec 30 00:05:57 MK-Soft-Root2 sshd[9330]: Failed password for root from 222.186.175.220 port 64980 ssh2 ... |
2019-12-30 07:14:56 |
| 193.254.135.252 | attackspam | Dec 30 00:04:51 localhost sshd\[19351\]: Invalid user kegan from 193.254.135.252 port 37740 Dec 30 00:04:51 localhost sshd\[19351\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.254.135.252 Dec 30 00:04:53 localhost sshd\[19351\]: Failed password for invalid user kegan from 193.254.135.252 port 37740 ssh2 |
2019-12-30 07:10:30 |
| 138.68.234.162 | attackspambots | Dec 21 04:59:28 mail sshd[22292]: Failed password for invalid user cather from 138.68.234.162 port 40860 ssh2 Dec 21 04:59:29 mail sshd[22292]: Received disconnect from 138.68.234.162: 11: Bye Bye [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=138.68.234.162 |
2019-12-30 07:09:26 |
| 130.185.155.34 | attackspambots | Dec 25 09:39:27 h1946882 sshd[9112]: pam_unix(sshd:auth): authenticatio= n failure; logname=3D uid=3D0 euid=3D0 tty=3Dssh ruser=3D rhost=3D130.1= 85.155.34 user=3Dr.r Dec 25 09:39:29 h1946882 sshd[9112]: Failed password for r.r from 130.= 185.155.34 port 54258 ssh2 Dec 25 09:39:29 h1946882 sshd[9112]: Received disconnect from 130.185.1= 55.34: 11: Bye Bye [preauth] Dec 25 09:47:52 h1946882 sshd[9228]: pam_unix(sshd:auth): authenticatio= n failure; logname=3D uid=3D0 euid=3D0 tty=3Dssh ruser=3D rhost=3D130.1= 85.155.34=20 Dec 25 09:47:54 h1946882 sshd[9228]: Failed password for invalid user r= pm from 130.185.155.34 port 52988 ssh2 Dec 25 09:47:54 h1946882 sshd[9228]: Received disconnect from 130.185.1= 55.34: 11: Bye Bye [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=130.185.155.34 |
2019-12-30 07:10:41 |
| 218.92.0.191 | attackbots | Dec 30 00:04:43 dcd-gentoo sshd[20302]: User root from 218.92.0.191 not allowed because none of user's groups are listed in AllowGroups Dec 30 00:04:46 dcd-gentoo sshd[20302]: error: PAM: Authentication failure for illegal user root from 218.92.0.191 Dec 30 00:04:43 dcd-gentoo sshd[20302]: User root from 218.92.0.191 not allowed because none of user's groups are listed in AllowGroups Dec 30 00:04:46 dcd-gentoo sshd[20302]: error: PAM: Authentication failure for illegal user root from 218.92.0.191 Dec 30 00:04:43 dcd-gentoo sshd[20302]: User root from 218.92.0.191 not allowed because none of user's groups are listed in AllowGroups Dec 30 00:04:46 dcd-gentoo sshd[20302]: error: PAM: Authentication failure for illegal user root from 218.92.0.191 Dec 30 00:04:46 dcd-gentoo sshd[20302]: Failed keyboard-interactive/pam for invalid user root from 218.92.0.191 port 18564 ssh2 ... |
2019-12-30 07:13:12 |
| 178.128.56.22 | attackbots | php WP PHPmyadamin ABUSE blocked for 12h |
2019-12-30 07:04:03 |
| 222.72.137.110 | attackbotsspam | Dec 29 18:50:16 DAAP sshd[2792]: Invalid user server from 222.72.137.110 port 12424 Dec 29 18:50:16 DAAP sshd[2792]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.72.137.110 Dec 29 18:50:16 DAAP sshd[2792]: Invalid user server from 222.72.137.110 port 12424 Dec 29 18:50:18 DAAP sshd[2792]: Failed password for invalid user server from 222.72.137.110 port 12424 ssh2 ... |
2019-12-30 06:48:56 |
| 170.106.1.121 | attack | 170.106.1.121 - - \[30/Dec/2019:00:04:51 +0100\] "GET /TP/public/index.php HTTP/1.1" 403 465 "-" "Mozilla/5.0 \(Windows\; U\; Windows NT 6.0\;en-US\; rv:1.9.2\) Gecko/20100115 Firefox/3.6\)" 170.106.1.121 - - \[30/Dec/2019:00:04:51 +0100\] "GET /TP/index.php HTTP/1.1" 403 458 "-" "Mozilla/5.0 \(Windows\; U\; Windows NT 6.0\;en-US\; rv:1.9.2\) Gecko/20100115 Firefox/3.6\)" 170.106.1.121 - - \[30/Dec/2019:00:04:51 +0100\] "GET /thinkphp/html/public/index.php HTTP/1.1" 403 476 "-" "Mozilla/5.0 \(Windows\; U\; Windows NT 6.0\;en-US\; rv:1.9.2\) Gecko/20100115 Firefox/3.6\)" ... |
2019-12-30 07:11:06 |
| 193.218.140.93 | attack | Dec 29 21:52:43 localhost sshd\[22136\]: Invalid user mysql from 193.218.140.93 port 40400 Dec 29 21:52:43 localhost sshd\[22136\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.218.140.93 Dec 29 21:52:45 localhost sshd\[22136\]: Failed password for invalid user mysql from 193.218.140.93 port 40400 ssh2 ... |
2019-12-30 07:03:41 |
| 103.52.52.22 | attackbotsspam | Dec 29 14:58:20 : SSH login attempts with invalid user |
2019-12-30 07:05:55 |
| 106.54.245.86 | attackbots | Dec 29 18:25:57 pi sshd\[10911\]: Invalid user password from 106.54.245.86 port 49501 Dec 29 18:25:57 pi sshd\[10911\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.245.86 Dec 29 18:25:59 pi sshd\[10911\]: Failed password for invalid user password from 106.54.245.86 port 49501 ssh2 Dec 29 18:28:17 pi sshd\[10960\]: Invalid user aguzzoli from 106.54.245.86 port 10012 Dec 29 18:28:17 pi sshd\[10960\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.245.86 ... |
2019-12-30 06:45:27 |
| 193.112.104.178 | attack | Dec 29 15:47:40 debian-2gb-nbg1-2 kernel: \[1283571.699524\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=193.112.104.178 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=47 ID=38060 PROTO=TCP SPT=54725 DPT=23 WINDOW=16740 RES=0x00 SYN URGP=0 |
2019-12-30 06:41:42 |
| 110.137.101.26 | attackspam | 1577630841 - 12/29/2019 15:47:21 Host: 110.137.101.26/110.137.101.26 Port: 445 TCP Blocked |
2019-12-30 06:50:26 |