城市(city): unknown
省份(region): unknown
国家(country): Puerto Rico
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 66.50.27.31
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 62353
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;66.50.27.31. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012200 1800 900 604800 86400
;; Query time: 43 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jan 23 00:12:10 CST 2025
;; MSG SIZE rcvd: 10431.27.50.66.in-addr.arpa domain name pointer 66-50-27-31.prtc.net.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
31.27.50.66.in-addr.arpa name = 66-50-27-31.prtc.net.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 202.188.101.106 | attack | Dec 29 22:11:56 : SSH login attempts with invalid user |
2019-12-30 07:18:59 |
| 149.202.45.205 | attackspam | Dec 30 00:01:55 dedicated sshd[14419]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.202.45.205 user=root Dec 30 00:01:57 dedicated sshd[14419]: Failed password for root from 149.202.45.205 port 42800 ssh2 Dec 30 00:04:19 dedicated sshd[14756]: Invalid user squid from 149.202.45.205 port 40678 Dec 30 00:04:19 dedicated sshd[14756]: Invalid user squid from 149.202.45.205 port 40678 |
2019-12-30 07:27:55 |
| 221.8.52.21 | attack | Port scan: Attack repeated for 24 hours |
2019-12-30 07:50:41 |
| 27.111.33.54 | attack | Lines containing failures of 27.111.33.54 Dec 28 13:18:45 HOSTNAME sshd[30901]: Invalid user duplichostnamey from 27.111.33.54 port 37256 Dec 28 13:18:45 HOSTNAME sshd[30901]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.111.33.54 Dec 28 13:18:47 HOSTNAME sshd[30901]: Failed password for invalid user duplichostnamey from 27.111.33.54 port 37256 ssh2 Dec 28 13:18:47 HOSTNAME sshd[30901]: Received disconnect from 27.111.33.54 port 37256:11: Bye Bye [preauth] Dec 28 13:18:47 HOSTNAME sshd[30901]: Disconnected from 27.111.33.54 port 37256 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=27.111.33.54 |
2019-12-30 07:47:27 |
| 83.219.12.178 | attackbotsspam | Unauthorized access detected from banned ip |
2019-12-30 07:44:25 |
| 138.68.181.61 | attack | MYH,DEF GET /app/etc/local.xml GET /app/etc/local.xml |
2019-12-30 07:32:44 |
| 129.211.10.228 | attackspam | Dec 30 00:00:45 srv-ubuntu-dev3 sshd[73386]: Invalid user laquanda from 129.211.10.228 Dec 30 00:00:45 srv-ubuntu-dev3 sshd[73386]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.10.228 Dec 30 00:00:45 srv-ubuntu-dev3 sshd[73386]: Invalid user laquanda from 129.211.10.228 Dec 30 00:00:46 srv-ubuntu-dev3 sshd[73386]: Failed password for invalid user laquanda from 129.211.10.228 port 19944 ssh2 Dec 30 00:02:25 srv-ubuntu-dev3 sshd[73810]: Invalid user relo from 129.211.10.228 Dec 30 00:02:25 srv-ubuntu-dev3 sshd[73810]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.10.228 Dec 30 00:02:25 srv-ubuntu-dev3 sshd[73810]: Invalid user relo from 129.211.10.228 Dec 30 00:02:27 srv-ubuntu-dev3 sshd[73810]: Failed password for invalid user relo from 129.211.10.228 port 39508 ssh2 Dec 30 00:04:13 srv-ubuntu-dev3 sshd[73937]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ru ... |
2019-12-30 07:31:36 |
| 79.137.86.205 | attack | Fail2Ban Ban Triggered |
2019-12-30 07:40:43 |
| 167.114.47.68 | attackspam | Dec 29 13:17:11 web9 sshd\[14502\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.114.47.68 user=mysql Dec 29 13:17:13 web9 sshd\[14502\]: Failed password for mysql from 167.114.47.68 port 38632 ssh2 Dec 29 13:20:21 web9 sshd\[14929\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.114.47.68 user=root Dec 29 13:20:23 web9 sshd\[14929\]: Failed password for root from 167.114.47.68 port 53330 ssh2 Dec 29 13:23:28 web9 sshd\[15391\]: Invalid user server from 167.114.47.68 |
2019-12-30 07:42:00 |
| 46.38.144.146 | attack | Dec 30 00:02:23 relay postfix/smtpd\[19133\]: warning: unknown\[46.38.144.146\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Dec 30 00:02:46 relay postfix/smtpd\[6978\]: warning: unknown\[46.38.144.146\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Dec 30 00:03:24 relay postfix/smtpd\[19133\]: warning: unknown\[46.38.144.146\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Dec 30 00:03:47 relay postfix/smtpd\[6979\]: warning: unknown\[46.38.144.146\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Dec 30 00:04:26 relay postfix/smtpd\[19132\]: warning: unknown\[46.38.144.146\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2019-12-30 07:22:36 |
| 176.10.104.240 | attackbotsspam | Automatic report - Banned IP Access |
2019-12-30 07:12:21 |
| 190.207.224.144 | attackbots | Unauthorised access (Dec 30) SRC=190.207.224.144 LEN=52 TTL=52 ID=3712 DF TCP DPT=445 WINDOW=8192 SYN |
2019-12-30 07:39:33 |
| 93.90.75.211 | attackspambots | Dec 28 19:05:28 ns01 sshd[9169]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.90.75.211 user=r.r Dec 28 19:05:30 ns01 sshd[9169]: Failed password for r.r from 93.90.75.211 port 54400 ssh2 Dec 28 19:10:27 ns01 sshd[9318]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.90.75.211 user=r.r Dec 28 19:10:29 ns01 sshd[9318]: Failed password for r.r from 93.90.75.211 port 49474 ssh2 Dec 28 19:10:36 ns01 sshd[9320]: Invalid user susi from 93.90.75.211 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=93.90.75.211 |
2019-12-30 07:40:16 |
| 88.214.26.17 | attackbots | 191229 17:51:38 [Warning] Access denied for user 'admin'@'88.214.26.17' (using password: YES) 191229 17:51:41 [Warning] Access denied for user 'admin'@'88.214.26.17' (using password: YES) 191229 17:51:44 [Warning] Access denied for user 'admin'@'88.214.26.17' (using password: YES) ... |
2019-12-30 07:16:23 |
| 220.246.26.51 | attackbotsspam | Automatic report - SSH Brute-Force Attack |
2019-12-30 07:14:03 |