城市(city): Sydney
省份(region): New South Wales
国家(country): Australia
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 103.139.48.72
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 1555
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;103.139.48.72. IN A
;; AUTHORITY SECTION:
. 317 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022040402 1800 900 604800 86400
;; Query time: 54 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Apr 05 17:57:35 CST 2022
;; MSG SIZE rcvd: 106Host 72.48.139.103.in-addr.arpa not found: 2(SERVFAIL)
server can't find 103.139.48.72.in-addr.arpa: SERVFAIL| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 200.56.60.44 | attackbotsspam | Dec 27 23:12:42 localhost sshd\[114729\]: Invalid user hung from 200.56.60.44 port 18814 Dec 27 23:12:42 localhost sshd\[114729\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.56.60.44 Dec 27 23:12:45 localhost sshd\[114729\]: Failed password for invalid user hung from 200.56.60.44 port 18814 ssh2 Dec 27 23:16:28 localhost sshd\[114829\]: Invalid user motashaw from 200.56.60.44 port 43285 Dec 27 23:16:28 localhost sshd\[114829\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.56.60.44 ... |
2019-12-28 07:25:48 |
| 62.234.122.205 | attackbots | Dec 24 05:06:16 h2034429 sshd[9009]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.122.205 user=r.r Dec 24 05:06:18 h2034429 sshd[9009]: Failed password for r.r from 62.234.122.205 port 53174 ssh2 Dec 24 05:06:18 h2034429 sshd[9009]: Received disconnect from 62.234.122.205 port 53174:11: Bye Bye [preauth] Dec 24 05:06:18 h2034429 sshd[9009]: Disconnected from 62.234.122.205 port 53174 [preauth] Dec 24 05:19:35 h2034429 sshd[9157]: Invalid user enkj from 62.234.122.205 Dec 24 05:19:35 h2034429 sshd[9157]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.122.205 Dec 24 05:19:37 h2034429 sshd[9157]: Failed password for invalid user enkj from 62.234.122.205 port 50128 ssh2 Dec 24 05:19:37 h2034429 sshd[9157]: Received disconnect from 62.234.122.205 port 50128:11: Bye Bye [preauth] Dec 24 05:19:37 h2034429 sshd[9157]: Disconnected from 62.234.122.205 port 50128 [preauth] Dec 24 05........ ------------------------------- |
2019-12-28 07:54:10 |
| 198.245.49.37 | attack | Invalid user test from 198.245.49.37 port 57122 |
2019-12-28 07:57:14 |
| 45.122.138.22 | attack | 2019-12-27T23:51:12.745531shield sshd\[5830\]: Invalid user ervin from 45.122.138.22 port 59069 2019-12-27T23:51:12.748817shield sshd\[5830\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.122.138.22 2019-12-27T23:51:15.045338shield sshd\[5830\]: Failed password for invalid user ervin from 45.122.138.22 port 59069 ssh2 2019-12-27T23:54:04.214561shield sshd\[6635\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.122.138.22 user=root 2019-12-27T23:54:06.791896shield sshd\[6635\]: Failed password for root from 45.122.138.22 port 41868 ssh2 |
2019-12-28 07:58:59 |
| 62.234.141.48 | attackspam | Dec 27 23:09:15 zeus sshd[31874]: Failed password for root from 62.234.141.48 port 32844 ssh2 Dec 27 23:12:27 zeus sshd[31974]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.141.48 Dec 27 23:12:29 zeus sshd[31974]: Failed password for invalid user pwd from 62.234.141.48 port 56592 ssh2 |
2019-12-28 07:47:04 |
| 46.38.144.117 | attack | Dec 28 00:23:56 webserver postfix/smtpd\[30852\]: warning: unknown\[46.38.144.117\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Dec 28 00:25:33 webserver postfix/smtpd\[31504\]: warning: unknown\[46.38.144.117\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Dec 28 00:27:14 webserver postfix/smtpd\[30852\]: warning: unknown\[46.38.144.117\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Dec 28 00:28:55 webserver postfix/smtpd\[30852\]: warning: unknown\[46.38.144.117\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Dec 28 00:30:35 webserver postfix/smtpd\[30852\]: warning: unknown\[46.38.144.117\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2019-12-28 07:30:12 |
| 222.186.175.216 | attackspambots | 19/12/27@18:32:13: FAIL: Alarm-SSH address from=222.186.175.216 ... |
2019-12-28 07:39:43 |
| 121.226.28.148 | attackspam | [portscan] Port scan |
2019-12-28 07:21:25 |
| 138.68.18.232 | attackbots | Invalid user rpm from 138.68.18.232 port 53214 |
2019-12-28 07:41:31 |
| 36.112.137.55 | attackbotsspam | Dec 27 22:31:58 server sshd\[6975\]: Invalid user x from 36.112.137.55 Dec 27 22:31:58 server sshd\[6975\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.112.137.55 Dec 27 22:32:00 server sshd\[6975\]: Failed password for invalid user x from 36.112.137.55 port 59512 ssh2 Dec 28 01:56:10 server sshd\[15942\]: Invalid user lou from 36.112.137.55 Dec 28 01:56:10 server sshd\[15942\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.112.137.55 ... |
2019-12-28 07:35:22 |
| 106.13.97.121 | attackbots | Dec 28 00:07:30 ns3110291 sshd\[14781\]: Invalid user antoi from 106.13.97.121 Dec 28 00:07:30 ns3110291 sshd\[14781\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.97.121 Dec 28 00:07:33 ns3110291 sshd\[14781\]: Failed password for invalid user antoi from 106.13.97.121 port 44632 ssh2 Dec 28 00:09:57 ns3110291 sshd\[14810\]: Invalid user nfs from 106.13.97.121 Dec 28 00:09:57 ns3110291 sshd\[14810\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.97.121 ... |
2019-12-28 07:29:00 |
| 167.99.202.143 | attack | Invalid user stuckey from 167.99.202.143 port 45810 |
2019-12-28 07:46:26 |
| 165.22.240.63 | attackbots | 165.22.240.63 - - \[27/Dec/2019:23:56:16 +0100\] "POST /wp-login.php HTTP/1.0" 200 4128 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 165.22.240.63 - - \[27/Dec/2019:23:56:18 +0100\] "POST /wp-login.php HTTP/1.0" 200 3955 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 165.22.240.63 - - \[27/Dec/2019:23:56:23 +0100\] "POST /xmlrpc.php HTTP/1.0" 200 736 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" |
2019-12-28 07:27:28 |
| 122.224.131.116 | attackspambots | Dec 27 23:50:45 localhost sshd[26273]: Failed password for root from 122.224.131.116 port 41478 ssh2 Dec 27 23:57:37 localhost sshd[26646]: Failed password for root from 122.224.131.116 port 51280 ssh2 Dec 28 00:00:36 localhost sshd[28842]: Failed password for invalid user oooooo from 122.224.131.116 port 43284 ssh2 |
2019-12-28 07:20:30 |
| 223.149.245.175 | attack | Honeypot hit. |
2019-12-28 07:39:06 |