城市(city): unknown
省份(region): unknown
国家(country): Indonesia
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 116.68.254.97
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 58150
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;116.68.254.97. IN A
;; AUTHORITY SECTION:
. 340 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022030400 1800 900 604800 86400
;; Query time: 67 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Mar 04 19:37:05 CST 2022
;; MSG SIZE rcvd: 106Host 97.254.68.116.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 97.254.68.116.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 49.88.112.116 | attackspambots | Failed password for root from 49.88.112.116 port 53270 ssh2 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.116 user=root Failed password for root from 49.88.112.116 port 50430 ssh2 Failed password for root from 49.88.112.116 port 50430 ssh2 Failed password for root from 49.88.112.116 port 50430 ssh2 |
2019-11-19 23:05:59 |
| 203.195.235.135 | attackspambots | Nov 19 15:28:42 vps666546 sshd\[27774\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.195.235.135 user=games Nov 19 15:28:43 vps666546 sshd\[27774\]: Failed password for games from 203.195.235.135 port 46906 ssh2 Nov 19 15:34:18 vps666546 sshd\[27921\]: Invalid user asterisk from 203.195.235.135 port 57976 Nov 19 15:34:18 vps666546 sshd\[27921\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.195.235.135 Nov 19 15:34:20 vps666546 sshd\[27921\]: Failed password for invalid user asterisk from 203.195.235.135 port 57976 ssh2 ... |
2019-11-19 23:21:27 |
| 139.155.33.169 | attackspambots | Nov 19 02:57:57 sachi sshd\[924\]: Invalid user ned from 139.155.33.169 Nov 19 02:57:57 sachi sshd\[924\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.33.169 Nov 19 02:57:59 sachi sshd\[924\]: Failed password for invalid user ned from 139.155.33.169 port 42930 ssh2 Nov 19 03:03:21 sachi sshd\[1371\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.33.169 user=root Nov 19 03:03:23 sachi sshd\[1371\]: Failed password for root from 139.155.33.169 port 51224 ssh2 |
2019-11-19 23:03:34 |
| 90.187.62.121 | attackbotsspam | Nov 19 20:14:54 gw1 sshd[14631]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=90.187.62.121 Nov 19 20:14:57 gw1 sshd[14631]: Failed password for invalid user test from 90.187.62.121 port 53426 ssh2 ... |
2019-11-19 23:21:14 |
| 103.48.111.250 | attack | Telnet Server BruteForce Attack |
2019-11-19 22:59:32 |
| 45.249.80.131 | attack | 2019-11-19T13:02:59.956466abusebot-2.cloudsearch.cf sshd\[26159\]: Invalid user user1 from 45.249.80.131 port 57950 |
2019-11-19 23:23:29 |
| 190.188.100.169 | attack | Nov 19 13:48:27 mxgate1 postfix/postscreen[7608]: CONNECT from [190.188.100.169]:13356 to [176.31.12.44]:25 Nov 19 13:48:27 mxgate1 postfix/dnsblog[7610]: addr 190.188.100.169 listed by domain zen.spamhaus.org as 127.0.0.11 Nov 19 13:48:27 mxgate1 postfix/dnsblog[7610]: addr 190.188.100.169 listed by domain zen.spamhaus.org as 127.0.0.4 Nov 19 13:48:27 mxgate1 postfix/dnsblog[7611]: addr 190.188.100.169 listed by domain cbl.abuseat.org as 127.0.0.2 Nov 19 13:48:27 mxgate1 postfix/dnsblog[7612]: addr 190.188.100.169 listed by domain b.barracudacentral.org as 127.0.0.2 Nov 19 13:48:33 mxgate1 postfix/postscreen[7608]: DNSBL rank 4 for [190.188.100.169]:13356 Nov x@x Nov 19 13:48:35 mxgate1 postfix/postscreen[7608]: HANGUP after 1.1 from [190.188.100.169]:13356 in tests after SMTP handshake Nov 19 13:48:35 mxgate1 postfix/postscreen[7608]: DISCONNECT [190.188.100.169]:13356 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=190.188.100.169 |
2019-11-19 23:00:06 |
| 51.38.231.36 | attackbots | Nov 19 15:50:12 vps647732 sshd[14901]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.231.36 Nov 19 15:50:14 vps647732 sshd[14901]: Failed password for invalid user presti from 51.38.231.36 port 37558 ssh2 ... |
2019-11-19 23:05:35 |
| 223.247.223.194 | attackspam | SSH Brute-Force attacks |
2019-11-19 23:26:47 |
| 182.252.0.188 | attackspambots | Nov 19 19:01:44 vibhu-HP-Z238-Microtower-Workstation sshd\[19799\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.252.0.188 user=root Nov 19 19:01:45 vibhu-HP-Z238-Microtower-Workstation sshd\[19799\]: Failed password for root from 182.252.0.188 port 47164 ssh2 Nov 19 19:05:36 vibhu-HP-Z238-Microtower-Workstation sshd\[20049\]: Invalid user test from 182.252.0.188 Nov 19 19:05:36 vibhu-HP-Z238-Microtower-Workstation sshd\[20049\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.252.0.188 Nov 19 19:05:38 vibhu-HP-Z238-Microtower-Workstation sshd\[20049\]: Failed password for invalid user test from 182.252.0.188 port 36801 ssh2 ... |
2019-11-19 23:27:36 |
| 102.171.140.33 | attackspam | Nov 19 13:47:06 mxgate1 postfix/postscreen[7608]: CONNECT from [102.171.140.33]:21485 to [176.31.12.44]:25 Nov 19 13:47:06 mxgate1 postfix/dnsblog[7612]: addr 102.171.140.33 listed by domain cbl.abuseat.org as 127.0.0.2 Nov 19 13:47:06 mxgate1 postfix/dnsblog[7610]: addr 102.171.140.33 listed by domain zen.spamhaus.org as 127.0.0.4 Nov 19 13:47:06 mxgate1 postfix/dnsblog[7610]: addr 102.171.140.33 listed by domain zen.spamhaus.org as 127.0.0.3 Nov 19 13:47:06 mxgate1 postfix/dnsblog[7610]: addr 102.171.140.33 listed by domain zen.spamhaus.org as 127.0.0.11 Nov 19 13:47:12 mxgate1 postfix/postscreen[7608]: DNSBL rank 3 for [102.171.140.33]:21485 Nov x@x Nov 19 13:47:13 mxgate1 postfix/postscreen[7608]: HANGUP after 0.57 from [102.171.140.33]:21485 in tests after SMTP handshake Nov 19 13:47:13 mxgate1 postfix/postscreen[7608]: DISCONNECT [102.171.140.33]:21485 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=102.171.140.33 |
2019-11-19 22:48:37 |
| 139.155.45.196 | attackspam | Nov 9 05:55:26 vtv3 sshd[6681]: Invalid user unix123456 from 139.155.45.196 port 36464 Nov 9 05:55:26 vtv3 sshd[6681]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.45.196 Nov 9 05:55:28 vtv3 sshd[6681]: Failed password for invalid user unix123456 from 139.155.45.196 port 36464 ssh2 Nov 9 05:59:46 vtv3 sshd[8670]: Invalid user zeidc112233 from 139.155.45.196 port 37430 Nov 9 05:59:46 vtv3 sshd[8670]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.45.196 Nov 19 12:55:06 vtv3 sshd[656]: Failed password for backup from 139.155.45.196 port 50234 ssh2 Nov 19 13:01:54 vtv3 sshd[2748]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.45.196 Nov 19 13:01:56 vtv3 sshd[2748]: Failed password for invalid user vadnais from 139.155.45.196 port 40956 ssh2 Nov 19 13:16:04 vtv3 sshd[6639]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost |
2019-11-19 23:04:43 |
| 62.234.124.196 | attackbotsspam | Nov 19 16:31:54 server sshd\[7803\]: Invalid user ssh from 62.234.124.196 port 36803 Nov 19 16:31:54 server sshd\[7803\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.124.196 Nov 19 16:31:56 server sshd\[7803\]: Failed password for invalid user ssh from 62.234.124.196 port 36803 ssh2 Nov 19 16:37:21 server sshd\[30509\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.124.196 user=mysql Nov 19 16:37:24 server sshd\[30509\]: Failed password for mysql from 62.234.124.196 port 53783 ssh2 |
2019-11-19 22:52:17 |
| 120.205.45.252 | attackspam | Nov 19 15:37:39 ns382633 sshd\[2171\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.205.45.252 user=root Nov 19 15:37:41 ns382633 sshd\[2171\]: Failed password for root from 120.205.45.252 port 62154 ssh2 Nov 19 15:37:44 ns382633 sshd\[2177\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.205.45.252 user=root Nov 19 15:37:46 ns382633 sshd\[2177\]: Failed password for root from 120.205.45.252 port 62734 ssh2 Nov 19 15:37:48 ns382633 sshd\[2185\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.205.45.252 user=root |
2019-11-19 23:17:32 |
| 106.13.144.164 | attack | Lines containing failures of 106.13.144.164 Nov 19 13:20:57 install sshd[2345]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.144.164 user=r.r Nov 19 13:20:58 install sshd[2345]: Failed password for r.r from 106.13.144.164 port 43940 ssh2 Nov 19 13:20:58 install sshd[2345]: Received disconnect from 106.13.144.164 port 43940:11: Bye Bye [preauth] Nov 19 13:20:58 install sshd[2345]: Disconnected from authenticating user r.r 106.13.144.164 port 43940 [preauth] Nov 19 13:48:33 install sshd[6523]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.144.164 user=r.r Nov 19 13:48:35 install sshd[6523]: Failed password for r.r from 106.13.144.164 port 37936 ssh2 Nov 19 13:48:35 install sshd[6523]: Received disconnect from 106.13.144.164 port 37936:11: Bye Bye [preauth] Nov 19 13:48:35 install sshd[6523]: Disconnected from authenticating user r.r 106.13.144.164 port 37936 [preauth] Nov 1........ ------------------------------ |
2019-11-19 23:07:03 |