城市(city): unknown
省份(region): unknown
国家(country): United States of America (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 55.241.192.20
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 25402
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;55.241.192.20. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021200 1800 900 604800 86400
;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 12 19:32:31 CST 2025
;; MSG SIZE rcvd: 106b'Host 20.192.241.55.in-addr.arpa not found: 2(SERVFAIL)
'server can't find 55.241.192.20.in-addr.arpa: SERVFAIL| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 106.245.160.140 | attack | Nov 13 06:31:52 hpm sshd\[31595\]: Invalid user tiganca from 106.245.160.140 Nov 13 06:31:52 hpm sshd\[31595\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.245.160.140 Nov 13 06:31:53 hpm sshd\[31595\]: Failed password for invalid user tiganca from 106.245.160.140 port 36184 ssh2 Nov 13 06:35:45 hpm sshd\[31908\]: Invalid user 3r3nity from 106.245.160.140 Nov 13 06:35:45 hpm sshd\[31908\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.245.160.140 |
2019-11-14 01:56:26 |
| 91.134.140.242 | attackspam | Nov 13 19:19:44 SilenceServices sshd[19308]: Failed password for root from 91.134.140.242 port 47636 ssh2 Nov 13 19:22:53 SilenceServices sshd[21450]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.134.140.242 Nov 13 19:22:55 SilenceServices sshd[21450]: Failed password for invalid user vico from 91.134.140.242 port 56100 ssh2 |
2019-11-14 02:24:00 |
| 156.227.67.39 | attackbotsspam | Nov 13 15:37:42 HOSTNAME sshd[8098]: Invalid user prud from 156.227.67.39 port 33406 Nov 13 15:37:42 HOSTNAME sshd[8098]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=156.227.67.39 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=156.227.67.39 |
2019-11-14 02:27:44 |
| 131.118.95.201 | attack | Lines containing failures of 131.118.95.201 Nov 13 15:34:00 *** sshd[18678]: Invalid user aaland from 131.118.95.201 port 36610 Nov 13 15:34:00 *** sshd[18678]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=131.118.95.201 Nov 13 15:34:02 *** sshd[18678]: Failed password for invalid user aaland from 131.118.95.201 port 36610 ssh2 Nov 13 15:34:02 *** sshd[18678]: Received disconnect from 131.118.95.201 port 36610:11: Bye Bye [preauth] Nov 13 15:34:02 *** sshd[18678]: Disconnected from invalid user aaland 131.118.95.201 port 36610 [preauth] Nov 13 15:38:26 *** sshd[19063]: Invalid user seiden from 131.118.95.201 port 55596 Nov 13 15:38:26 *** sshd[19063]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=131.118.95.201 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=131.118.95.201 |
2019-11-14 02:34:08 |
| 222.186.180.223 | attackspambots | Nov 13 19:10:46 minden010 sshd[25105]: Failed password for root from 222.186.180.223 port 54172 ssh2 Nov 13 19:10:50 minden010 sshd[25105]: Failed password for root from 222.186.180.223 port 54172 ssh2 Nov 13 19:10:53 minden010 sshd[25105]: Failed password for root from 222.186.180.223 port 54172 ssh2 Nov 13 19:10:59 minden010 sshd[25105]: error: maximum authentication attempts exceeded for root from 222.186.180.223 port 54172 ssh2 [preauth] ... |
2019-11-14 02:11:49 |
| 2804:14c:6583:4af4:b445:2840:6fcc:2a23 | attack | MYH,DEF GET /downloader/ |
2019-11-14 02:07:00 |
| 87.154.251.205 | attackspambots | Nov 13 18:58:59 mail postfix/smtpd[32322]: warning: p579AFBCD.dip0.t-ipconnect.de[87.154.251.205]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 13 19:01:01 mail postfix/smtpd[2018]: warning: p579AFBCD.dip0.t-ipconnect.de[87.154.251.205]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 13 19:02:58 mail postfix/smtpd[1161]: warning: p579AFBCD.dip0.t-ipconnect.de[87.154.251.205]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 |
2019-11-14 02:20:33 |
| 137.74.173.211 | attackbots | $f2bV_matches |
2019-11-14 02:12:01 |
| 14.169.53.34 | attack | Automatic report - Port Scan Attack |
2019-11-14 02:24:29 |
| 152.136.122.130 | attack | Nov 13 18:39:36 vps691689 sshd[30782]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.122.130 Nov 13 18:39:38 vps691689 sshd[30782]: Failed password for invalid user teste from 152.136.122.130 port 45100 ssh2 ... |
2019-11-14 01:59:15 |
| 111.204.164.82 | attack | SSH login attempts |
2019-11-14 02:08:23 |
| 167.99.158.136 | attackspam | Nov 13 16:50:42 MK-Soft-VM6 sshd[30588]: Failed password for mysql from 167.99.158.136 port 45644 ssh2 ... |
2019-11-14 02:28:32 |
| 210.51.161.210 | attackspambots | Nov 13 18:24:03 sd-53420 sshd\[28687\]: User root from 210.51.161.210 not allowed because none of user's groups are listed in AllowGroups Nov 13 18:24:03 sd-53420 sshd\[28687\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.51.161.210 user=root Nov 13 18:24:05 sd-53420 sshd\[28687\]: Failed password for invalid user root from 210.51.161.210 port 60832 ssh2 Nov 13 18:27:52 sd-53420 sshd\[29720\]: User backup from 210.51.161.210 not allowed because none of user's groups are listed in AllowGroups Nov 13 18:27:52 sd-53420 sshd\[29720\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.51.161.210 user=backup Nov 13 18:27:55 sd-53420 sshd\[29720\]: Failed password for invalid user backup from 210.51.161.210 port 39278 ssh2 ... |
2019-11-14 02:15:22 |
| 130.61.93.5 | attack | Nov 13 17:13:59 SilenceServices sshd[31426]: Failed password for root from 130.61.93.5 port 42674 ssh2 Nov 13 17:17:54 SilenceServices sshd[1604]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=130.61.93.5 Nov 13 17:17:56 SilenceServices sshd[1604]: Failed password for invalid user server from 130.61.93.5 port 51736 ssh2 |
2019-11-14 02:02:49 |
| 115.48.17.120 | attackbotsspam | Telnet/23 MH Probe, BF, Hack - |
2019-11-14 02:07:24 |