城市(city): unknown
省份(region): unknown
国家(country): United States
运营商(isp): AT&T
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 12.140.108.40
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49259
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;12.140.108.40. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021300 1800 900 604800 86400
;; Query time: 45 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 13 20:02:54 CST 2025
;; MSG SIZE rcvd: 106Host 40.108.140.12.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 40.108.140.12.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 95.169.13.22 | attackspambots | Sep 14 12:48:35 cho sshd[2891521]: Failed password for root from 95.169.13.22 port 43730 ssh2 Sep 14 12:52:04 cho sshd[2891725]: Invalid user bismillah from 95.169.13.22 port 50050 Sep 14 12:52:04 cho sshd[2891725]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.169.13.22 Sep 14 12:52:04 cho sshd[2891725]: Invalid user bismillah from 95.169.13.22 port 50050 Sep 14 12:52:06 cho sshd[2891725]: Failed password for invalid user bismillah from 95.169.13.22 port 50050 ssh2 ... |
2020-09-14 19:19:21 |
| 189.91.5.42 | attack | Sep 13 18:29:11 mail.srvfarm.net postfix/smtpd[1231911]: warning: unknown[189.91.5.42]: SASL PLAIN authentication failed: Sep 13 18:29:11 mail.srvfarm.net postfix/smtpd[1231911]: lost connection after AUTH from unknown[189.91.5.42] Sep 13 18:30:22 mail.srvfarm.net postfix/smtpd[1214684]: warning: unknown[189.91.5.42]: SASL PLAIN authentication failed: Sep 13 18:30:23 mail.srvfarm.net postfix/smtpd[1214684]: lost connection after AUTH from unknown[189.91.5.42] Sep 13 18:30:41 mail.srvfarm.net postfix/smtpd[1232278]: warning: unknown[189.91.5.42]: SASL PLAIN authentication failed: |
2020-09-14 19:42:44 |
| 18.196.81.81 | attackbots | CMS (WordPress or Joomla) login attempt. |
2020-09-14 19:29:05 |
| 51.89.68.141 | attack | Sep 14 11:38:50 hosting sshd[24017]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip141.ip-51-89-68.eu user=root Sep 14 11:38:51 hosting sshd[24017]: Failed password for root from 51.89.68.141 port 60366 ssh2 ... |
2020-09-14 19:19:49 |
| 170.83.189.69 | attack | Sep 13 17:59:10 mail.srvfarm.net postfix/smtpd[1214559]: warning: unknown[170.83.189.69]: SASL PLAIN authentication failed: Sep 13 17:59:11 mail.srvfarm.net postfix/smtpd[1214559]: lost connection after AUTH from unknown[170.83.189.69] Sep 13 18:03:17 mail.srvfarm.net postfix/smtpd[1215356]: warning: unknown[170.83.189.69]: SASL PLAIN authentication failed: Sep 13 18:03:18 mail.srvfarm.net postfix/smtpd[1215356]: lost connection after AUTH from unknown[170.83.189.69] Sep 13 18:08:12 mail.srvfarm.net postfix/smtpd[1214683]: warning: unknown[170.83.189.69]: SASL PLAIN authentication failed: |
2020-09-14 19:46:52 |
| 116.125.141.56 | attack | Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-09-14T09:06:53Z and 2020-09-14T09:14:57Z |
2020-09-14 19:27:34 |
| 87.204.167.252 | attack | Sep 13 18:23:57 mail.srvfarm.net postfix/smtpd[1229040]: warning: unknown[87.204.167.252]: SASL PLAIN authentication failed: Sep 13 18:23:57 mail.srvfarm.net postfix/smtpd[1229040]: lost connection after AUTH from unknown[87.204.167.252] Sep 13 18:29:27 mail.srvfarm.net postfix/smtpd[1232281]: warning: unknown[87.204.167.252]: SASL PLAIN authentication failed: Sep 13 18:29:27 mail.srvfarm.net postfix/smtpd[1232281]: lost connection after AUTH from unknown[87.204.167.252] Sep 13 18:33:43 mail.srvfarm.net postfix/smtpd[1230212]: warning: unknown[87.204.167.252]: SASL PLAIN authentication failed: |
2020-09-14 19:37:56 |
| 41.79.16.132 | attackbots | Sep 13 18:07:55 mail.srvfarm.net postfix/smtpd[1217748]: warning: unknown[41.79.16.132]: SASL PLAIN authentication failed: Sep 13 18:07:55 mail.srvfarm.net postfix/smtpd[1217748]: lost connection after AUTH from unknown[41.79.16.132] Sep 13 18:12:07 mail.srvfarm.net postfix/smtps/smtpd[1216115]: warning: unknown[41.79.16.132]: SASL PLAIN authentication failed: Sep 13 18:12:07 mail.srvfarm.net postfix/smtps/smtpd[1216115]: lost connection after AUTH from unknown[41.79.16.132] Sep 13 18:14:02 mail.srvfarm.net postfix/smtps/smtpd[1216379]: warning: unknown[41.79.16.132]: SASL PLAIN authentication failed: |
2020-09-14 19:53:42 |
| 103.40.200.175 | attack | Sep 13 18:37:13 mail.srvfarm.net postfix/smtps/smtpd[1230507]: warning: unknown[103.40.200.175]: SASL PLAIN authentication failed: Sep 13 18:37:13 mail.srvfarm.net postfix/smtps/smtpd[1230507]: lost connection after AUTH from unknown[103.40.200.175] Sep 13 18:41:07 mail.srvfarm.net postfix/smtps/smtpd[1230509]: warning: unknown[103.40.200.175]: SASL PLAIN authentication failed: Sep 13 18:41:08 mail.srvfarm.net postfix/smtps/smtpd[1230509]: lost connection after AUTH from unknown[103.40.200.175] Sep 13 18:43:19 mail.srvfarm.net postfix/smtpd[1232282]: warning: unknown[103.40.200.175]: SASL PLAIN authentication failed: |
2020-09-14 19:36:35 |
| 37.18.255.242 | attackspam | RDP brute-forcing |
2020-09-14 19:25:20 |
| 190.144.14.170 | attackbots | Sep 14 12:59:33 myvps sshd[19075]: Failed password for root from 190.144.14.170 port 35896 ssh2 Sep 14 13:14:56 myvps sshd[5488]: Failed password for root from 190.144.14.170 port 38200 ssh2 ... |
2020-09-14 19:30:30 |
| 91.83.161.153 | attack | Sep 13 18:33:46 mail.srvfarm.net postfix/smtpd[1233116]: warning: unknown[91.83.161.153]: SASL PLAIN authentication failed: Sep 13 18:33:46 mail.srvfarm.net postfix/smtpd[1233116]: lost connection after AUTH from unknown[91.83.161.153] Sep 13 18:38:17 mail.srvfarm.net postfix/smtpd[1232281]: warning: unknown[91.83.161.153]: SASL PLAIN authentication failed: Sep 13 18:38:17 mail.srvfarm.net postfix/smtpd[1232281]: lost connection after AUTH from unknown[91.83.161.153] Sep 13 18:41:52 mail.srvfarm.net postfix/smtpd[1234121]: warning: unknown[91.83.161.153]: SASL PLAIN authentication failed: |
2020-09-14 19:37:39 |
| 201.148.184.168 | attack | Sep 13 18:33:49 mail.srvfarm.net postfix/smtpd[1231911]: warning: 201-148-184-168.grtelecom.net.br[201.148.184.168]: SASL PLAIN authentication failed: Sep 13 18:33:52 mail.srvfarm.net postfix/smtpd[1231911]: lost connection after AUTH from 201-148-184-168.grtelecom.net.br[201.148.184.168] Sep 13 18:34:18 mail.srvfarm.net postfix/smtps/smtpd[1230508]: lost connection after EHLO from 201-148-184-168.grtelecom.net.br[201.148.184.168] Sep 13 18:41:08 mail.srvfarm.net postfix/smtps/smtpd[1230733]: warning: 201-148-184-168.grtelecom.net.br[201.148.184.168]: SASL PLAIN authentication failed: Sep 13 18:41:11 mail.srvfarm.net postfix/smtps/smtpd[1230733]: lost connection after AUTH from 201-148-184-168.grtelecom.net.br[201.148.184.168] |
2020-09-14 19:33:07 |
| 184.176.166.16 | attackbots | Autoban 184.176.166.16 ABORTED AUTH |
2020-09-14 19:57:38 |
| 193.169.253.128 | attack | $f2bV_matches |
2020-09-14 19:33:58 |