城市(city): unknown
省份(region): unknown
国家(country): Canada
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 64.42.231.241
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 39560
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;64.42.231.241. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012700 1800 900 604800 86400
;; Query time: 36 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jan 28 01:11:20 CST 2025
;; MSG SIZE rcvd: 106Host 241.231.42.64.in-addr.arpa not found: 2(SERVFAIL)
;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server: 183.60.82.98
Address: 183.60.82.98#53
** server can't find 241.231.42.64.in-addr.arpa: SERVFAIL
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 128.70.165.161 | attack | Dec 21 01:05:41 jane sshd[31241]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.70.165.161 Dec 21 01:05:42 jane sshd[31241]: Failed password for invalid user camire from 128.70.165.161 port 60290 ssh2 ... |
2019-12-21 08:09:10 |
| 106.12.78.251 | attackspam | Dec 20 13:10:44 tdfoods sshd\[24469\]: Invalid user mathog from 106.12.78.251 Dec 20 13:10:44 tdfoods sshd\[24469\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.78.251 Dec 20 13:10:47 tdfoods sshd\[24469\]: Failed password for invalid user mathog from 106.12.78.251 port 45360 ssh2 Dec 20 13:17:24 tdfoods sshd\[25164\]: Invalid user makaio from 106.12.78.251 Dec 20 13:17:24 tdfoods sshd\[25164\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.78.251 |
2019-12-21 07:45:02 |
| 184.154.76.10 | attackbots | fell into ViewStateTrap:Dodoma |
2019-12-21 08:13:38 |
| 188.19.119.4 | attackbots | 1576885579 - 12/21/2019 00:46:19 Host: 188.19.119.4/188.19.119.4 Port: 445 TCP Blocked |
2019-12-21 07:57:11 |
| 115.164.62.5 | attack | Dec 20 16:21:40 web1 sshd[6067]: Address 115.164.62.5 maps to ue5.62.digi.net.my, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 20 16:21:40 web1 sshd[6067]: Invalid user guest from 115.164.62.5 Dec 20 16:21:40 web1 sshd[6067]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.164.62.5 Dec 20 16:21:42 web1 sshd[6067]: Failed password for invalid user guest from 115.164.62.5 port 47705 ssh2 Dec 20 16:21:43 web1 sshd[6067]: Received disconnect from 115.164.62.5: 11: Bye Bye [preauth] Dec 20 16:36:27 web1 sshd[7404]: Address 115.164.62.5 maps to ue5.62.digi.net.my, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 20 16:36:27 web1 sshd[7404]: Invalid user denys from 115.164.62.5 Dec 20 16:36:27 web1 sshd[7404]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.164.62.5 Dec 20 16:36:30 web1 sshd[7404]: Failed password for invalid user de........ ------------------------------- |
2019-12-21 08:16:22 |
| 178.217.173.54 | attackbotsspam | Dec 21 00:12:24 microserver sshd[38388]: Invalid user ogrodnik from 178.217.173.54 port 45196 Dec 21 00:12:24 microserver sshd[38388]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.217.173.54 Dec 21 00:12:25 microserver sshd[38388]: Failed password for invalid user ogrodnik from 178.217.173.54 port 45196 ssh2 Dec 21 00:18:33 microserver sshd[39261]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.217.173.54 user=root Dec 21 00:18:36 microserver sshd[39261]: Failed password for root from 178.217.173.54 port 53872 ssh2 Dec 21 00:30:40 microserver sshd[41244]: Invalid user ingaberg from 178.217.173.54 port 42882 Dec 21 00:30:40 microserver sshd[41244]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.217.173.54 Dec 21 00:30:42 microserver sshd[41244]: Failed password for invalid user ingaberg from 178.217.173.54 port 42882 ssh2 Dec 21 00:36:50 microserver sshd[42086]: Invalid user |
2019-12-21 07:48:32 |
| 83.159.162.26 | attackbotsspam | Unauthorized connection attempt from IP address 83.159.162.26 on Port 445(SMB) |
2019-12-21 08:04:13 |
| 61.76.169.138 | attackspambots | Dec 21 00:39:52 sd-53420 sshd\[5281\]: Invalid user murugayah from 61.76.169.138 Dec 21 00:39:52 sd-53420 sshd\[5281\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.76.169.138 Dec 21 00:39:54 sd-53420 sshd\[5281\]: Failed password for invalid user murugayah from 61.76.169.138 port 3709 ssh2 Dec 21 00:46:20 sd-53420 sshd\[7604\]: Invalid user test from 61.76.169.138 Dec 21 00:46:20 sd-53420 sshd\[7604\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.76.169.138 ... |
2019-12-21 07:56:00 |
| 14.160.39.106 | attackspam | SSH bruteforce (Triggered fail2ban) |
2019-12-21 07:56:14 |
| 148.70.121.68 | attackspambots | Dec 21 00:37:00 minden010 sshd[9635]: Failed password for root from 148.70.121.68 port 55126 ssh2 Dec 21 00:46:16 minden010 sshd[13454]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.121.68 Dec 21 00:46:17 minden010 sshd[13454]: Failed password for invalid user djenana from 148.70.121.68 port 33064 ssh2 ... |
2019-12-21 08:01:29 |
| 220.180.149.110 | attack | 1576886006 - 12/21/2019 00:53:26 Host: 220.180.149.110/220.180.149.110 Port: 445 TCP Blocked |
2019-12-21 08:12:34 |
| 80.82.79.235 | attackspambots | Dec 21 01:02:06 srv01 postfix/smtpd\[31273\]: warning: unknown\[80.82.79.235\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Dec 21 01:02:10 srv01 postfix/smtpd\[16362\]: warning: unknown\[80.82.79.235\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Dec 21 01:02:10 srv01 postfix/smtpd\[16366\]: warning: unknown\[80.82.79.235\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Dec 21 01:02:10 srv01 postfix/smtpd\[16365\]: warning: unknown\[80.82.79.235\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Dec 21 01:02:10 srv01 postfix/smtpd\[16367\]: warning: unknown\[80.82.79.235\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Dec 21 01:02:10 srv01 postfix/smtpd\[16369\]: warning: unknown\[80.82.79.235\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Dec 21 01:02:10 srv01 postfix/smtpd\[16364\]: warning: unknown\[80.82.79.235\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Dec 21 01:02:10 srv01 postfix/smtpd\[16368\]: warning: unknown\[80.82.79.235\]: SASL LOGIN authentication faile ... |
2019-12-21 08:04:24 |
| 142.93.212.131 | attackspambots | Dec 20 13:40:25 tdfoods sshd\[27562\]: Invalid user ashlynne from 142.93.212.131 Dec 20 13:40:25 tdfoods sshd\[27562\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.212.131 Dec 20 13:40:28 tdfoods sshd\[27562\]: Failed password for invalid user ashlynne from 142.93.212.131 port 54792 ssh2 Dec 20 13:46:22 tdfoods sshd\[28146\]: Invalid user wealch from 142.93.212.131 Dec 20 13:46:22 tdfoods sshd\[28146\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.212.131 |
2019-12-21 07:53:45 |
| 185.117.139.92 | attackbotsspam | Unauthorized connection attempt from IP address 185.117.139.92 on Port 445(SMB) |
2019-12-21 08:13:21 |
| 27.254.136.29 | attackbots | Dec 20 23:15:50 localhost sshd\[91756\]: Invalid user komrakov from 27.254.136.29 port 50260 Dec 20 23:15:50 localhost sshd\[91756\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.254.136.29 Dec 20 23:15:52 localhost sshd\[91756\]: Failed password for invalid user komrakov from 27.254.136.29 port 50260 ssh2 Dec 20 23:21:49 localhost sshd\[91965\]: Invalid user tackett from 27.254.136.29 port 55026 Dec 20 23:21:49 localhost sshd\[91965\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.254.136.29 ... |
2019-12-21 07:44:42 |