城市(city): unknown
省份(region): unknown
国家(country): United States of America (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 6.3.42.168
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 22146
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;6.3.42.168. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012102 1800 900 604800 86400
;; Query time: 11 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jan 22 10:49:00 CST 2025
;; MSG SIZE rcvd: 103Host 168.42.3.6.in-addr.arpa not found: 2(SERVFAIL)
server can't find 6.3.42.168.in-addr.arpa: SERVFAIL| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 169.57.146.174 | attackspambots | $f2bV_matches |
2020-07-26 23:02:44 |
| 217.120.71.66 | attack | Lines containing failures of 217.120.71.66 Jul 26 13:43:25 v2hgb sshd[15591]: Bad protocol version identification '' from 217.120.71.66 port 50485 Jul 26 13:43:41 v2hgb sshd[15611]: Invalid user netscreen from 217.120.71.66 port 51244 Jul 26 13:43:44 v2hgb sshd[15611]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.120.71.66 Jul 26 13:43:46 v2hgb sshd[15611]: Failed password for invalid user netscreen from 217.120.71.66 port 51244 ssh2 Jul 26 13:43:48 v2hgb sshd[15611]: Connection closed by invalid user netscreen 217.120.71.66 port 51244 [preauth] Jul 26 13:44:09 v2hgb sshd[15630]: Invalid user nexthink from 217.120.71.66 port 55303 Jul 26 13:44:12 v2hgb sshd[15630]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.120.71.66 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=217.120.71.66 |
2020-07-26 23:13:32 |
| 54.36.98.129 | attackspam | Jul 26 14:41:05 vps-51d81928 sshd[176168]: Invalid user gk from 54.36.98.129 port 42602 Jul 26 14:41:05 vps-51d81928 sshd[176168]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.36.98.129 Jul 26 14:41:05 vps-51d81928 sshd[176168]: Invalid user gk from 54.36.98.129 port 42602 Jul 26 14:41:08 vps-51d81928 sshd[176168]: Failed password for invalid user gk from 54.36.98.129 port 42602 ssh2 Jul 26 14:45:34 vps-51d81928 sshd[176322]: Invalid user administrator from 54.36.98.129 port 55866 ... |
2020-07-26 23:25:27 |
| 51.83.76.25 | attackbots | k+ssh-bruteforce |
2020-07-26 23:00:33 |
| 151.80.45.51 | attackspam | 151.80.45.51 - - [26/Jul/2020:13:05:03 +0100] "POST /wp-login.php HTTP/1.1" 200 1704 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 151.80.45.51 - - [26/Jul/2020:13:05:04 +0100] "POST /wp-login.php HTTP/1.1" 200 1685 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 151.80.45.51 - - [26/Jul/2020:13:05:04 +0100] "POST /xmlrpc.php HTTP/1.1" 200 247 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-07-26 23:25:50 |
| 110.137.2.5 | attack | Jul 26 16:02:52 rocket sshd[18699]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.137.2.5 Jul 26 16:02:54 rocket sshd[18699]: Failed password for invalid user dw from 110.137.2.5 port 38080 ssh2 ... |
2020-07-26 23:16:33 |
| 94.129.81.120 | attackbotsspam | Jul 26 21:12:09 our-server-hostname sshd[13270]: Invalid user cyber from 94.129.81.120 Jul 26 21:12:09 our-server-hostname sshd[13270]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.129.81.120 Jul 26 21:12:11 our-server-hostname sshd[13270]: Failed password for invalid user cyber from 94.129.81.120 port 49538 ssh2 Jul 26 21:31:11 our-server-hostname sshd[15759]: Invalid user temp1 from 94.129.81.120 Jul 26 21:31:11 our-server-hostname sshd[15759]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.129.81.120 Jul 26 21:31:13 our-server-hostname sshd[15759]: Failed password for invalid user temp1 from 94.129.81.120 port 42551 ssh2 Jul 26 21:36:32 our-server-hostname sshd[16475]: Invalid user test from 94.129.81.120 Jul 26 21:36:32 our-server-hostname sshd[16475]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.129.81.120 ........ ----------------------------------------------- htt |
2020-07-26 22:59:30 |
| 106.54.208.123 | attack | [ssh] SSH attack |
2020-07-26 23:08:53 |
| 178.32.218.192 | attackspambots | Jul 26 17:16:16 inter-technics sshd[25688]: Invalid user gaowei from 178.32.218.192 port 59527 Jul 26 17:16:16 inter-technics sshd[25688]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.32.218.192 Jul 26 17:16:16 inter-technics sshd[25688]: Invalid user gaowei from 178.32.218.192 port 59527 Jul 26 17:16:18 inter-technics sshd[25688]: Failed password for invalid user gaowei from 178.32.218.192 port 59527 ssh2 Jul 26 17:19:38 inter-technics sshd[25892]: Invalid user btsync from 178.32.218.192 port 60123 ... |
2020-07-26 23:35:09 |
| 80.82.77.212 | attack | 07/26/2020-11:24:13.180638 80.82.77.212 Protocol: 17 ET DROP Dshield Block Listed Source group 1 |
2020-07-26 23:34:54 |
| 2001:ee0:4f3b:b41f:80a7:43c6:b2e2:6897 | attack | Jul 26 06:05:11 Host-KLAX-C postfix/smtpd[25891]: lost connection after CONNECT from unknown[2001:ee0:4f3b:b41f:80a7:43c6:b2e2:6897] ... |
2020-07-26 23:20:33 |
| 202.67.42.20 | attack | Port 22 Scan, PTR: None |
2020-07-26 22:59:52 |
| 49.75.199.214 | attackbotsspam | fail2ban detected bruce force on ssh iptables |
2020-07-26 23:07:14 |
| 194.26.29.83 | attackbots | Port-scan: detected 144 distinct ports within a 24-hour window. |
2020-07-26 23:03:44 |
| 37.202.19.74 | attack | Port 22 Scan, PTR: None |
2020-07-26 22:56:43 |