城市(city): unknown
省份(region): unknown
国家(country): Hong Kong
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 119.247.48.105
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 29760
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;119.247.48.105. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022802 1800 900 604800 86400
;; Query time: 12 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Mar 01 06:23:13 CST 2025
;; MSG SIZE rcvd: 107105.48.247.119.in-addr.arpa domain name pointer 119247048105.ctinets.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
105.48.247.119.in-addr.arpa name = 119247048105.ctinets.com.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 66.65.138.92 | attack | Dec 3 15:14:32 master sshd[9412]: Failed password for invalid user yp from 66.65.138.92 port 50943 ssh2 Dec 3 16:11:51 master sshd[10133]: Failed password for invalid user test from 66.65.138.92 port 59382 ssh2 |
2019-12-04 04:59:44 |
| 45.82.153.81 | attackbots | Dec 3 20:28:40 heicom postfix/smtpd\[7819\]: warning: unknown\[45.82.153.81\]: SASL LOGIN authentication failed: authentication failure Dec 3 20:28:47 heicom postfix/smtpd\[8331\]: warning: unknown\[45.82.153.81\]: SASL LOGIN authentication failed: authentication failure Dec 3 20:31:06 heicom postfix/smtpd\[7819\]: warning: unknown\[45.82.153.81\]: SASL LOGIN authentication failed: authentication failure Dec 3 20:31:12 heicom postfix/smtpd\[8333\]: warning: unknown\[45.82.153.81\]: SASL LOGIN authentication failed: authentication failure Dec 3 20:47:01 heicom postfix/smtpd\[8333\]: warning: unknown\[45.82.153.81\]: SASL LOGIN authentication failed: authentication failure ... |
2019-12-04 04:53:53 |
| 163.53.151.25 | attack | postfix (unknown user, SPF fail or relay access denied) |
2019-12-04 05:07:00 |
| 89.171.26.70 | attack | Dec 3 15:34:31 server sshd\[26158\]: Failed password for invalid user backup from 89.171.26.70 port 53038 ssh2 Dec 3 23:35:09 server sshd\[29656\]: Invalid user db2inst1 from 89.171.26.70 Dec 3 23:35:09 server sshd\[29656\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=89-171-26-70.static.ip.netia.com.pl Dec 3 23:35:11 server sshd\[29656\]: Failed password for invalid user db2inst1 from 89.171.26.70 port 50206 ssh2 Dec 3 23:42:05 server sshd\[31507\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=89-171-26-70.static.ip.netia.com.pl user=root ... |
2019-12-04 05:14:14 |
| 190.193.41.173 | attack | Dec 2 18:26:32 cumulus sshd[4227]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.193.41.173 user=backup Dec 2 18:26:33 cumulus sshd[4227]: Failed password for backup from 190.193.41.173 port 39678 ssh2 Dec 2 18:26:34 cumulus sshd[4227]: Received disconnect from 190.193.41.173 port 39678:11: Bye Bye [preauth] Dec 2 18:26:34 cumulus sshd[4227]: Disconnected from 190.193.41.173 port 39678 [preauth] Dec 2 18:40:53 cumulus sshd[5022]: Invalid user cccard from 190.193.41.173 port 41206 Dec 2 18:40:53 cumulus sshd[5022]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.193.41.173 Dec 2 18:40:54 cumulus sshd[5022]: Failed password for invalid user cccard from 190.193.41.173 port 41206 ssh2 Dec 2 18:40:55 cumulus sshd[5022]: Received disconnect from 190.193.41.173 port 41206:11: Bye Bye [preauth] Dec 2 18:40:55 cumulus sshd[5022]: Disconnected from 190.193.41.173 port 41206 [preaut........ ------------------------------- |
2019-12-04 05:13:16 |
| 103.92.225.95 | attack | A spam blank email was sent from this SMTP server. All To headers of this kind of spam emails were "To: undisclosed-recipients:;". |
2019-12-04 05:30:00 |
| 209.95.48.117 | attack | RDP Brute-Force (Grieskirchen RZ2) |
2019-12-04 05:28:32 |
| 65.50.209.87 | attack | Dec 3 22:26:07 server sshd\[10639\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=65.50.209.87 user=root Dec 3 22:26:10 server sshd\[10639\]: Failed password for root from 65.50.209.87 port 35632 ssh2 Dec 3 22:31:25 server sshd\[12053\]: Invalid user web from 65.50.209.87 Dec 3 22:31:25 server sshd\[12053\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=65.50.209.87 Dec 3 22:31:28 server sshd\[12053\]: Failed password for invalid user web from 65.50.209.87 port 47846 ssh2 ... |
2019-12-04 05:16:14 |
| 8.14.149.127 | attackspambots | Dec 3 11:15:17 eddieflores sshd\[16803\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.14.149.127 user=root Dec 3 11:15:19 eddieflores sshd\[16803\]: Failed password for root from 8.14.149.127 port 59274 ssh2 Dec 3 11:21:27 eddieflores sshd\[17378\]: Invalid user nashali from 8.14.149.127 Dec 3 11:21:27 eddieflores sshd\[17378\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.14.149.127 Dec 3 11:21:28 eddieflores sshd\[17378\]: Failed password for invalid user nashali from 8.14.149.127 port 21684 ssh2 |
2019-12-04 05:27:33 |
| 185.164.63.234 | attackbots | Dec 3 11:35:07 TORMINT sshd\[4587\]: Invalid user test from 185.164.63.234 Dec 3 11:35:07 TORMINT sshd\[4587\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.164.63.234 Dec 3 11:35:09 TORMINT sshd\[4587\]: Failed password for invalid user test from 185.164.63.234 port 37310 ssh2 ... |
2019-12-04 04:53:11 |
| 167.99.166.195 | attackbots | Dec 3 11:12:05 eddieflores sshd\[16503\]: Invalid user donavon from 167.99.166.195 Dec 3 11:12:05 eddieflores sshd\[16503\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.166.195 Dec 3 11:12:07 eddieflores sshd\[16503\]: Failed password for invalid user donavon from 167.99.166.195 port 44218 ssh2 Dec 3 11:17:31 eddieflores sshd\[16995\]: Invalid user johan from 167.99.166.195 Dec 3 11:17:31 eddieflores sshd\[16995\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.166.195 |
2019-12-04 05:26:22 |
| 104.131.203.173 | attack | 104.131.203.173 - - [03/Dec/2019:18:55:36 +0500] "GET /wp-login.php HTTP/1.1" 301 185 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2019-12-04 05:30:45 |
| 181.127.196.226 | attackspambots | Dec 2 14:44:20 penfold sshd[22964]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.127.196.226 user=backup Dec 2 14:44:23 penfold sshd[22964]: Failed password for backup from 181.127.196.226 port 34110 ssh2 Dec 2 14:44:23 penfold sshd[22964]: Received disconnect from 181.127.196.226 port 34110:11: Bye Bye [preauth] Dec 2 14:44:23 penfold sshd[22964]: Disconnected from 181.127.196.226 port 34110 [preauth] Dec 2 14:52:57 penfold sshd[23482]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.127.196.226 user=sync Dec 2 14:52:59 penfold sshd[23482]: Failed password for sync from 181.127.196.226 port 58748 ssh2 Dec 2 14:52:59 penfold sshd[23482]: Received disconnect from 181.127.196.226 port 58748:11: Bye Bye [preauth] Dec 2 14:52:59 penfold sshd[23482]: Disconnected from 181.127.196.226 port 58748 [preauth] Dec 2 15:00:34 penfold sshd[23731]: pam_unix(sshd:auth): authentication........ ------------------------------- |
2019-12-04 05:04:47 |
| 78.32.253.202 | attackspam | phpMyAdmin connection attempt |
2019-12-04 05:08:44 |
| 45.95.168.105 | attackbots | Dec 03 14:43:38 askasleikir sshd[10252]: Failed password for root from 45.95.168.105 port 58654 ssh2 Dec 03 14:43:22 askasleikir sshd[10173]: Failed password for root from 45.95.168.105 port 37372 ssh2 Dec 03 14:44:36 askasleikir sshd[10283]: Failed password for root from 45.95.168.105 port 59122 ssh2 |
2019-12-04 04:55:32 |