城市(city): unknown
省份(region): unknown
国家(country): China
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 61.52.189.122
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 61603
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;61.52.189.122. IN A
;; AUTHORITY SECTION:
. 321 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021301 1800 900 604800 86400
;; Query time: 74 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 14 09:05:21 CST 2022
;; MSG SIZE rcvd: 106122.189.52.61.in-addr.arpa domain name pointer hn.kd.dhcp.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
122.189.52.61.in-addr.arpa name = hn.kd.dhcp.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 142.93.193.63 | attack | 142.93.193.63 - - [10/Oct/2020:23:36:39 +0100] "POST /wp-login.php HTTP/1.1" 200 2302 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.193.63 - - [10/Oct/2020:23:36:41 +0100] "POST /wp-login.php HTTP/1.1" 200 2238 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.193.63 - - [10/Oct/2020:23:36:43 +0100] "POST /wp-login.php HTTP/1.1" 200 2282 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-10-11 16:11:20 |
| 180.226.47.134 | attack | Oct 10 23:58:31 server1 sshd[12153]: Bad protocol version identification 'GET / HTTP/1.1' from 180.226.47.134 port 57889 Oct 10 23:59:04 server1 sshd[14469]: Bad protocol version identification 'GET / HTTP/1.1' from 180.226.47.134 port 58396 Oct 10 23:59:08 server1 sshd[14843]: Bad protocol version identification 'GET / HTTP/1.1' from 180.226.47.134 port 58491 ... |
2020-10-11 15:49:17 |
| 62.234.120.3 | attackspam | 2020-10-11T07:33:06.392339shield sshd\[5196\]: Invalid user majordomo from 62.234.120.3 port 59312 2020-10-11T07:33:06.401729shield sshd\[5196\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.120.3 2020-10-11T07:33:08.325241shield sshd\[5196\]: Failed password for invalid user majordomo from 62.234.120.3 port 59312 ssh2 2020-10-11T07:33:40.643154shield sshd\[5286\]: Invalid user cvs1 from 62.234.120.3 port 35880 2020-10-11T07:33:40.651231shield sshd\[5286\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.120.3 |
2020-10-11 15:34:36 |
| 106.12.196.118 | attackbotsspam | (sshd) Failed SSH login from 106.12.196.118 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct 11 01:35:39 server5 sshd[21225]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.196.118 user=root Oct 11 01:35:41 server5 sshd[21225]: Failed password for root from 106.12.196.118 port 56116 ssh2 Oct 11 01:36:12 server5 sshd[21554]: Invalid user openvpn from 106.12.196.118 Oct 11 01:36:12 server5 sshd[21554]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.196.118 Oct 11 01:36:14 server5 sshd[21554]: Failed password for invalid user openvpn from 106.12.196.118 port 59952 ssh2 |
2020-10-11 15:59:14 |
| 81.68.239.140 | attackspambots | Lines containing failures of 81.68.239.140 Oct 6 17:24:45 mellenthin sshd[30324]: User r.r from 81.68.239.140 not allowed because not listed in AllowUsers Oct 6 17:24:45 mellenthin sshd[30324]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.68.239.140 user=r.r Oct 6 17:24:47 mellenthin sshd[30324]: Failed password for invalid user r.r from 81.68.239.140 port 40446 ssh2 Oct 6 17:24:47 mellenthin sshd[30324]: Received disconnect from 81.68.239.140 port 40446:11: Bye Bye [preauth] Oct 6 17:24:47 mellenthin sshd[30324]: Disconnected from invalid user r.r 81.68.239.140 port 40446 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=81.68.239.140 |
2020-10-11 16:10:42 |
| 61.177.172.142 | attack | 2020-10-11T07:48:39.412641abusebot-7.cloudsearch.cf sshd[6906]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.142 user=root 2020-10-11T07:48:41.089518abusebot-7.cloudsearch.cf sshd[6906]: Failed password for root from 61.177.172.142 port 31301 ssh2 2020-10-11T07:48:44.406250abusebot-7.cloudsearch.cf sshd[6906]: Failed password for root from 61.177.172.142 port 31301 ssh2 2020-10-11T07:48:39.412641abusebot-7.cloudsearch.cf sshd[6906]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.142 user=root 2020-10-11T07:48:41.089518abusebot-7.cloudsearch.cf sshd[6906]: Failed password for root from 61.177.172.142 port 31301 ssh2 2020-10-11T07:48:44.406250abusebot-7.cloudsearch.cf sshd[6906]: Failed password for root from 61.177.172.142 port 31301 ssh2 2020-10-11T07:48:39.412641abusebot-7.cloudsearch.cf sshd[6906]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser ... |
2020-10-11 15:58:37 |
| 42.194.159.233 | attackbots | ssh brute force |
2020-10-11 15:44:03 |
| 60.179.17.218 | attackspambots | Tried our host z. |
2020-10-11 16:05:06 |
| 140.143.243.27 | attack | $f2bV_matches |
2020-10-11 15:33:54 |
| 195.154.232.205 | attackspambots | Attacks websites by trying to access known vulnerables of plugins, brute-force of backends or probing of administrative tools |
2020-10-11 16:12:24 |
| 106.52.44.179 | attackspambots | Unauthorised connection attempt detected at AUO MAIN. System is sshd. Protected by AUO Stack Web Application Firewall (WAF) |
2020-10-11 15:51:58 |
| 220.123.241.30 | attack | 2020-10-11T11:18:23.125836paragon sshd[855127]: Failed password for git from 220.123.241.30 port 52754 ssh2 2020-10-11T11:20:12.646551paragon sshd[855150]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.123.241.30 user=root 2020-10-11T11:20:14.981588paragon sshd[855150]: Failed password for root from 220.123.241.30 port 23531 ssh2 2020-10-11T11:22:09.097699paragon sshd[855180]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.123.241.30 user=root 2020-10-11T11:22:11.492795paragon sshd[855180]: Failed password for root from 220.123.241.30 port 50805 ssh2 ... |
2020-10-11 15:59:45 |
| 195.123.246.16 | attack | [N3.H3.VM3] Port Scanner Detected Blocked by UFW |
2020-10-11 15:39:10 |
| 190.207.249.177 | attack | Brute forcing RDP port 3389 |
2020-10-11 16:11:06 |
| 103.245.181.2 | attack | $f2bV_matches |
2020-10-11 15:57:24 |