城市(city): unknown
省份(region): unknown
国家(country): United States of America (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 48.42.240.20
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 47287
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;48.42.240.20. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022001 1800 900 604800 86400
;; Query time: 32 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 21 03:47:56 CST 2025
;; MSG SIZE rcvd: 105Host 20.240.42.48.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 20.240.42.48.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 179.31.88.112 | attack | Unauthorized connection attempt from IP address 179.31.88.112 on Port 445(SMB) |
2020-03-04 13:28:06 |
| 36.80.148.42 | attackbots | firewall-block, port(s): 445/tcp |
2020-03-04 13:29:05 |
| 190.181.38.55 | attackspambots | Mar 4 05:34:48 Ubuntu-1404-trusty-64-minimal sshd\[32163\]: Invalid user m from 190.181.38.55 Mar 4 05:34:48 Ubuntu-1404-trusty-64-minimal sshd\[32163\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.181.38.55 Mar 4 05:34:50 Ubuntu-1404-trusty-64-minimal sshd\[32163\]: Failed password for invalid user m from 190.181.38.55 port 63624 ssh2 Mar 4 06:00:15 Ubuntu-1404-trusty-64-minimal sshd\[12239\]: Invalid user ofisher from 190.181.38.55 Mar 4 06:00:15 Ubuntu-1404-trusty-64-minimal sshd\[12239\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.181.38.55 |
2020-03-04 13:10:24 |
| 192.241.222.84 | attackspambots | firewall-block, port(s): 4848/tcp |
2020-03-04 13:06:39 |
| 123.207.189.27 | attackbots | Mar 4 02:40:03 silence02 sshd[24299]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.207.189.27 Mar 4 02:40:06 silence02 sshd[24299]: Failed password for invalid user sammy from 123.207.189.27 port 36050 ssh2 Mar 4 02:49:54 silence02 sshd[25140]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.207.189.27 |
2020-03-04 10:53:31 |
| 117.160.141.43 | attackbotsspam | Mar 4 06:07:28 MK-Soft-VM3 sshd[14093]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.160.141.43 Mar 4 06:07:31 MK-Soft-VM3 sshd[14093]: Failed password for invalid user vpn from 117.160.141.43 port 16510 ssh2 ... |
2020-03-04 13:07:45 |
| 219.111.52.251 | attackbots | SSH invalid-user multiple login attempts |
2020-03-04 13:16:01 |
| 159.203.63.125 | attackspam | 2020-03-04T01:46:50.581612shield sshd\[16724\]: Invalid user impala from 159.203.63.125 port 34558 2020-03-04T01:46:50.592787shield sshd\[16724\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.63.125 2020-03-04T01:46:52.440114shield sshd\[16724\]: Failed password for invalid user impala from 159.203.63.125 port 34558 ssh2 2020-03-04T01:55:34.736928shield sshd\[17914\]: Invalid user david from 159.203.63.125 port 50268 2020-03-04T01:55:34.742931shield sshd\[17914\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.63.125 |
2020-03-04 10:37:10 |
| 206.189.28.79 | attackbotsspam | Mar 2 15:29:57 dax sshd[10530]: reveeclipse mapping checking getaddrinfo for 165975.cloudwaysapps.com [206.189.28.79] failed - POSSIBLE BREAK-IN ATTEMPT! Mar 2 15:29:57 dax sshd[10530]: Invalid user postgres from 206.189.28.79 Mar 2 15:29:57 dax sshd[10530]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.28.79 Mar 2 15:29:59 dax sshd[10530]: Failed password for invalid user postgres from 206.189.28.79 port 53912 ssh2 Mar 2 15:29:59 dax sshd[10530]: Received disconnect from 206.189.28.79: 11: Normal Shutdown [preauth] Mar 2 15:33:25 dax sshd[11093]: reveeclipse mapping checking getaddrinfo for 165975.cloudwaysapps.com [206.189.28.79] failed - POSSIBLE BREAK-IN ATTEMPT! Mar 2 15:33:25 dax sshd[11093]: Invalid user www from 206.189.28.79 Mar 2 15:33:25 dax sshd[11093]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.28.79 Mar 2 15:33:27 dax sshd[11093]: Failed passwo........ ------------------------------- |
2020-03-04 13:29:26 |
| 192.144.164.229 | attackbots | Mar 4 06:00:16 MK-Soft-VM3 sshd[13641]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.144.164.229 Mar 4 06:00:19 MK-Soft-VM3 sshd[13641]: Failed password for invalid user ocean from 192.144.164.229 port 53768 ssh2 ... |
2020-03-04 13:07:11 |
| 189.213.37.170 | attackspam | Automatic report - Port Scan Attack |
2020-03-04 10:36:28 |
| 193.168.225.62 | attack | Attempt to attack host OS, exploiting network vulnerabilities, on 04-03-2020 05:00:10. |
2020-03-04 13:21:22 |
| 222.186.175.202 | attackbotsspam | Mar 4 05:59:47 meumeu sshd[24544]: Failed password for root from 222.186.175.202 port 54386 ssh2 Mar 4 06:00:02 meumeu sshd[24544]: Failed password for root from 222.186.175.202 port 54386 ssh2 Mar 4 06:00:03 meumeu sshd[24544]: error: maximum authentication attempts exceeded for root from 222.186.175.202 port 54386 ssh2 [preauth] ... |
2020-03-04 13:04:46 |
| 123.18.53.205 | attackbots | Unauthorized connection attempt from IP address 123.18.53.205 on Port 445(SMB) |
2020-03-04 13:36:29 |
| 129.211.62.131 | attack | 2020-03-04T03:58:34.915860 sshd[25634]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.62.131 2020-03-04T03:58:34.902429 sshd[25634]: Invalid user plexuser from 129.211.62.131 port 32808 2020-03-04T03:58:37.630592 sshd[25634]: Failed password for invalid user plexuser from 129.211.62.131 port 32808 ssh2 2020-03-04T06:00:12.883854 sshd[27924]: Invalid user ec2-user from 129.211.62.131 port 33531 ... |
2020-03-04 13:14:44 |