城市(city): unknown
省份(region): unknown
国家(country): Russian Federation (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 89.20.120.143
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 15096
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;89.20.120.143. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020901 1800 900 604800 86400
;; Query time: 9 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 10 10:01:20 CST 2025
;; MSG SIZE rcvd: 106
143.120.20.89.in-addr.arpa domain name pointer 89.20.120.143.permonline.ru.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
143.120.20.89.in-addr.arpa name = 89.20.120.143.permonline.ru.
Authoritative answers can be found from:
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 154.202.5.175 | attack | Oct 8 00:30:56 mail sshd[911907]: Failed password for root from 154.202.5.175 port 55394 ssh2 Oct 8 00:44:13 mail sshd[912856]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.202.5.175 user=root Oct 8 00:44:16 mail sshd[912856]: Failed password for root from 154.202.5.175 port 55948 ssh2 ... |
2020-10-08 08:36:56 |
| 111.33.152.150 | attack | Oct 8 01:27:58 gospond sshd[24940]: Failed password for root from 111.33.152.150 port 57992 ssh2 Oct 8 01:27:56 gospond sshd[24940]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.33.152.150 user=root Oct 8 01:27:58 gospond sshd[24940]: Failed password for root from 111.33.152.150 port 57992 ssh2 ... |
2020-10-08 08:35:15 |
| 144.91.110.130 | attackspam | [MK-VM2] SSH login failed |
2020-10-08 08:12:10 |
| 187.180.102.108 | attackspam | Oct 8 01:15:04 journals sshd\[43794\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.180.102.108 user=root Oct 8 01:15:06 journals sshd\[43794\]: Failed password for root from 187.180.102.108 port 57347 ssh2 Oct 8 01:18:48 journals sshd\[44318\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.180.102.108 user=root Oct 8 01:18:50 journals sshd\[44318\]: Failed password for root from 187.180.102.108 port 50290 ssh2 Oct 8 01:22:35 journals sshd\[44690\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.180.102.108 user=root ... |
2020-10-08 08:04:05 |
| 212.70.149.68 | attack | 2020-10-07T17:50:14.221745linuxbox-skyline auth[40599]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=pw rhost=212.70.149.68 ... |
2020-10-08 08:03:32 |
| 112.85.42.200 | attackspam | Oct 8 02:28:47 *host* sshd\[9053\]: Unable to negotiate with 112.85.42.200 port 25756: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 \[preauth\] |
2020-10-08 08:30:06 |
| 171.252.202.151 | attackbotsspam | 1602103600 - 10/07/2020 22:46:40 Host: 171.252.202.151/171.252.202.151 Port: 23 TCP Blocked ... |
2020-10-08 08:35:44 |
| 113.91.36.139 | attackspambots | Oct 7 07:19:30 mailrelay sshd[25926]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.91.36.139 user=r.r Oct 7 07:19:31 mailrelay sshd[25926]: Failed password for r.r from 113.91.36.139 port 45424 ssh2 Oct 7 07:19:32 mailrelay sshd[25926]: Received disconnect from 113.91.36.139 port 45424:11: Bye Bye [preauth] Oct 7 07:19:32 mailrelay sshd[25926]: Disconnected from 113.91.36.139 port 45424 [preauth] Oct 7 07:46:01 mailrelay sshd[26422]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.91.36.139 user=r.r Oct 7 07:46:03 mailrelay sshd[26422]: Failed password for r.r from 113.91.36.139 port 45330 ssh2 Oct 7 07:46:04 mailrelay sshd[26422]: Received disconnect from 113.91.36.139 port 45330:11: Bye Bye [preauth] Oct 7 07:46:04 mailrelay sshd[26422]: Disconnected from 113.91.36.139 port 45330 [preauth] Oct 7 07:49:26 mailrelay sshd[26473]: pam_unix(sshd:auth): authentication failu........ ------------------------------- |
2020-10-08 08:05:17 |
| 49.233.183.155 | attackspambots | Oct 7 20:38:23 ip-172-31-42-142 sshd\[4188\]: Failed password for root from 49.233.183.155 port 60818 ssh2\ Oct 7 20:40:31 ip-172-31-42-142 sshd\[4311\]: Failed password for root from 49.233.183.155 port 56648 ssh2\ Oct 7 20:42:38 ip-172-31-42-142 sshd\[4337\]: Failed password for root from 49.233.183.155 port 52484 ssh2\ Oct 7 20:44:46 ip-172-31-42-142 sshd\[4358\]: Failed password for root from 49.233.183.155 port 48312 ssh2\ Oct 7 20:46:55 ip-172-31-42-142 sshd\[4385\]: Failed password for root from 49.233.183.155 port 44144 ssh2\ |
2020-10-08 08:21:20 |
| 122.51.248.76 | attack | Oct 8 02:02:10 vps1 sshd[13325]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.248.76 user=root Oct 8 02:02:12 vps1 sshd[13325]: Failed password for invalid user root from 122.51.248.76 port 40008 ssh2 Oct 8 02:03:35 vps1 sshd[13355]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.248.76 user=root Oct 8 02:03:37 vps1 sshd[13355]: Failed password for invalid user root from 122.51.248.76 port 34290 ssh2 Oct 8 02:05:00 vps1 sshd[13405]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.248.76 user=root Oct 8 02:05:02 vps1 sshd[13405]: Failed password for invalid user root from 122.51.248.76 port 56800 ssh2 ... |
2020-10-08 08:29:25 |
| 80.251.216.109 | attackspambots | 4183:Oct 6 02:24:54 kim5 sshd[28180]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.251.216.109 user=r.r 4184:Oct 6 02:24:55 kim5 sshd[28180]: Failed password for r.r from 80.251.216.109 port 55404 ssh2 4185:Oct 6 02:24:57 kim5 sshd[28180]: Received disconnect from 80.251.216.109 port 55404:11: Bye Bye [preauth] 4186:Oct 6 02:24:57 kim5 sshd[28180]: Disconnected from authenticating user r.r 80.251.216.109 port 55404 [preauth] 4225:Oct 6 02:43:45 kim5 sshd[30202]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.251.216.109 user=r.r 4226:Oct 6 02:43:47 kim5 sshd[30202]: Failed password for r.r from 80.251.216.109 port 55456 ssh2 4227:Oct 6 02:43:48 kim5 sshd[30202]: Received disconnect from 80.251.216.109 port 55456:11: Bye Bye [preauth] 4228:Oct 6 02:43:48 kim5 sshd[30202]: Disconnected from authenticating user r.r 80.251.216.109 port 55456 [preauth] 4241:Oct 6 02:52:54 kim5........ ------------------------------ |
2020-10-08 08:30:38 |
| 24.38.150.130 | attackspambots | Unauthorized admin access - /admin/css/datepicker.css?v=913-new-social-icons033bdff474ed2c72 |
2020-10-08 08:34:27 |
| 185.176.27.94 | attackspambots | ET DROP Dshield Block Listed Source group 1 - port: 4444 proto: tcp cat: Misc Attackbytes: 60 |
2020-10-08 08:38:49 |
| 71.189.47.10 | attack | Oct 7 19:38:44 ws12vmsma01 sshd[32674]: Failed password for root from 71.189.47.10 port 5778 ssh2 Oct 7 19:42:09 ws12vmsma01 sshd[33200]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.ehmsllc.com user=root Oct 7 19:42:10 ws12vmsma01 sshd[33200]: Failed password for root from 71.189.47.10 port 27072 ssh2 ... |
2020-10-08 07:58:00 |
| 92.239.13.99 | attackbots | Oct 7 22:47:11 pve1 sshd[24575]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.239.13.99 ... |
2020-10-08 08:04:30 |