城市(city): unknown
省份(region): unknown
国家(country): United States of America (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.89.191.165
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 50869
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;139.89.191.165. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012802 1800 900 604800 86400
;; Query time: 60 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jan 29 10:44:59 CST 2025
;; MSG SIZE rcvd: 107Host 165.191.89.139.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 165.191.89.139.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 188.131.145.98 | attackspam | Dec 3 15:42:22 meumeu sshd[20119]: Failed password for root from 188.131.145.98 port 42416 ssh2 Dec 3 15:51:13 meumeu sshd[21203]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.131.145.98 Dec 3 15:51:15 meumeu sshd[21203]: Failed password for invalid user duba from 188.131.145.98 port 41870 ssh2 ... |
2019-12-04 04:58:38 |
| 185.211.245.170 | attackspambots | Dec 3 21:33:06 mail postfix/smtpd[15936]: warning: unknown[185.211.245.170]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Dec 3 21:33:07 mail postfix/smtpd[17432]: warning: unknown[185.211.245.170]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Dec 3 21:33:13 mail postfix/smtpd[16024]: warning: unknown[185.211.245.170]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 |
2019-12-04 04:43:42 |
| 185.143.223.143 | attackbots | 2019-12-03T21:37:19.550385+01:00 lumpi kernel: [695396.051203] INPUT:DROP:SPAMHAUS_EDROP:IN=eth0 OUT= MAC=52:54:a2:01:a5:04:d2:74:7f:6e:37:e3:08:00 SRC=185.143.223.143 DST=78.46.199.189 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=122 PROTO=TCP SPT=49612 DPT=8008 WINDOW=1024 RES=0x00 SYN URGP=0 ... |
2019-12-04 04:50:29 |
| 159.65.111.89 | attackbots | Dec 2 22:49:22 *** sshd[1130]: Failed password for invalid user autenried from 159.65.111.89 port 43060 ssh2 Dec 2 22:54:49 *** sshd[1214]: Failed password for invalid user godofredo from 159.65.111.89 port 54276 ssh2 Dec 2 23:00:04 *** sshd[1297]: Failed password for invalid user test from 159.65.111.89 port 37246 ssh2 Dec 2 23:12:44 *** sshd[1655]: Failed password for invalid user borkowski from 159.65.111.89 port 59682 ssh2 Dec 2 23:17:59 *** sshd[1735]: Failed password for invalid user calloni from 159.65.111.89 port 42650 ssh2 Dec 2 23:23:25 *** sshd[1885]: Failed password for invalid user yokono from 159.65.111.89 port 53872 ssh2 Dec 2 23:34:17 *** sshd[2103]: Failed password for invalid user tya from 159.65.111.89 port 48012 ssh2 Dec 2 23:39:49 *** sshd[2252]: Failed password for invalid user tillquist from 159.65.111.89 port 59218 ssh2 Dec 2 23:50:42 *** sshd[2519]: Failed password for invalid user subscribe from 159.65.111.89 port 53370 ssh2 Dec 2 23:56:19 *** sshd[2618]: Failed password fo |
2019-12-04 04:30:39 |
| 14.169.185.251 | attackspam | port scan and connect, tcp 23 (telnet) |
2019-12-04 04:25:07 |
| 111.230.13.11 | attackspam | Dec 3 15:53:58 ns382633 sshd\[13431\]: Invalid user astor from 111.230.13.11 port 35350 Dec 3 15:53:58 ns382633 sshd\[13431\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.230.13.11 Dec 3 15:54:00 ns382633 sshd\[13431\]: Failed password for invalid user astor from 111.230.13.11 port 35350 ssh2 Dec 3 16:08:36 ns382633 sshd\[16108\]: Invalid user eggbreaker2 from 111.230.13.11 port 45930 Dec 3 16:08:36 ns382633 sshd\[16108\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.230.13.11 |
2019-12-04 04:56:38 |
| 77.40.3.89 | attack | 2019-12-03 17:57:06 auth_login authenticator failed for (localhost.localdomain) [77.40.3.89]: 535 Incorrect authentication data (set_id=billing@polypics.ru) 2019-12-03 18:54:29 auth_login authenticator failed for (localhost.localdomain) [77.40.3.89]: 535 Incorrect authentication data (set_id=membership@legion-td.ru) ... |
2019-12-04 04:38:32 |
| 202.69.191.85 | attackspam | Dec 3 21:29:01 areeb-Workstation sshd[10016]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.69.191.85 Dec 3 21:29:03 areeb-Workstation sshd[10016]: Failed password for invalid user qwerty from 202.69.191.85 port 47186 ssh2 ... |
2019-12-04 04:33:17 |
| 223.199.157.87 | attackspam | Port 1433 Scan |
2019-12-04 04:25:41 |
| 176.65.169.247 | attackspambots | " " |
2019-12-04 04:33:36 |
| 80.232.246.116 | attackspambots | ssh intrusion attempt |
2019-12-04 04:53:26 |
| 64.9.223.129 | attackbots | Dec 3 17:09:18 server sshd\[18514\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.9.223.129 user=root Dec 3 17:09:19 server sshd\[18514\]: Failed password for root from 64.9.223.129 port 17905 ssh2 Dec 3 17:24:45 server sshd\[22594\]: Invalid user sanimah from 64.9.223.129 Dec 3 17:24:45 server sshd\[22594\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.9.223.129 Dec 3 17:24:47 server sshd\[22594\]: Failed password for invalid user sanimah from 64.9.223.129 port 10950 ssh2 ... |
2019-12-04 04:39:45 |
| 37.187.22.227 | attack | Dec 3 10:19:10 auw2 sshd\[422\]: Invalid user aaaaaa from 37.187.22.227 Dec 3 10:19:10 auw2 sshd\[422\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ks3357677.kimsufi.com Dec 3 10:19:12 auw2 sshd\[422\]: Failed password for invalid user aaaaaa from 37.187.22.227 port 57134 ssh2 Dec 3 10:26:04 auw2 sshd\[1241\]: Invalid user \|\|\|\|\|\|\|\| from 37.187.22.227 Dec 3 10:26:04 auw2 sshd\[1241\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ks3357677.kimsufi.com |
2019-12-04 04:40:02 |
| 139.59.14.239 | attackbotsspam | Dec 3 21:07:28 vmanager6029 sshd\[9514\]: Invalid user potente from 139.59.14.239 port 49012 Dec 3 21:07:28 vmanager6029 sshd\[9514\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.14.239 Dec 3 21:07:30 vmanager6029 sshd\[9514\]: Failed password for invalid user potente from 139.59.14.239 port 49012 ssh2 |
2019-12-04 04:40:56 |
| 221.154.166.165 | attackbotsspam | Dec 2 07:06:10 sanyalnet-cloud-vps3 sshd[20385]: Connection from 221.154.166.165 port 38426 on 45.62.248.66 port 22 Dec 2 07:06:10 sanyalnet-cloud-vps3 sshd[20385]: Did not receive identification string from 221.154.166.165 Dec 2 07:06:30 sanyalnet-cloud-vps3 sshd[20386]: Connection from 221.154.166.165 port 40888 on 45.62.248.66 port 22 Dec 2 07:06:32 sanyalnet-cloud-vps3 sshd[20386]: User r.r from 221.154.166.165 not allowed because not listed in AllowUsers Dec 2 07:06:32 sanyalnet-cloud-vps3 sshd[20386]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.154.166.165 user=r.r Dec 2 07:06:34 sanyalnet-cloud-vps3 sshd[20386]: Failed password for invalid user r.r from 221.154.166.165 port 40888 ssh2 Dec 2 07:06:34 sanyalnet-cloud-vps3 sshd[20386]: Received disconnect from 221.154.166.165: 11: Bye Bye [preauth] Dec 2 07:06:48 sanyalnet-cloud-vps3 sshd[20388]: Connection from 221.154.166.165 port 42994 on 45.62.248.66 port ........ ------------------------------- |
2019-12-04 04:41:13 |