城市(city): unknown
省份(region): unknown
国家(country): United States of America (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 140.53.139.248
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 64844
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;140.53.139.248. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021900 1800 900 604800 86400
;; Query time: 10 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 19 22:43:54 CST 2025
;; MSG SIZE rcvd: 107Host 248.139.53.140.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 248.139.53.140.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 52.160.40.60 | attackbots | Jun 25 05:48:01 *** sshd[2607]: User root from 52.160.40.60 not allowed because not listed in AllowUsers |
2020-06-25 15:12:29 |
| 89.248.172.85 | attackbotsspam |
|
2020-06-25 15:30:47 |
| 54.38.240.23 | attackbots | Jun 25 08:30:05 ArkNodeAT sshd\[831\]: Invalid user suisse from 54.38.240.23 Jun 25 08:30:05 ArkNodeAT sshd\[831\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.240.23 Jun 25 08:30:06 ArkNodeAT sshd\[831\]: Failed password for invalid user suisse from 54.38.240.23 port 43818 ssh2 |
2020-06-25 15:17:00 |
| 112.133.244.185 | attack | Port scan: Attack repeated for 24 hours |
2020-06-25 15:26:37 |
| 5.101.107.190 | attackspam | Jun 25 08:44:54 piServer sshd[21073]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.101.107.190 Jun 25 08:44:55 piServer sshd[21073]: Failed password for invalid user postgres1 from 5.101.107.190 port 42283 ssh2 Jun 25 08:50:57 piServer sshd[21739]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.101.107.190 ... |
2020-06-25 15:30:00 |
| 149.202.56.228 | attackbotsspam | 2020-06-25T07:43:16.537091mail.csmailer.org sshd[1611]: Failed password for invalid user nexus from 149.202.56.228 port 39828 ssh2 2020-06-25T07:46:46.150998mail.csmailer.org sshd[2429]: Invalid user produccion from 149.202.56.228 port 43174 2020-06-25T07:46:46.153854mail.csmailer.org sshd[2429]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=228.ip-149-202-56.eu 2020-06-25T07:46:46.150998mail.csmailer.org sshd[2429]: Invalid user produccion from 149.202.56.228 port 43174 2020-06-25T07:46:48.746819mail.csmailer.org sshd[2429]: Failed password for invalid user produccion from 149.202.56.228 port 43174 ssh2 ... |
2020-06-25 15:45:25 |
| 46.38.145.5 | attackbotsspam | 2020-06-25 07:00:12 auth_plain authenticator failed for (User) [46.38.145.5]: 535 Incorrect authentication data (set_id=ssp@csmailer.org) 2020-06-25 07:00:59 auth_plain authenticator failed for (User) [46.38.145.5]: 535 Incorrect authentication data (set_id=eron@csmailer.org) 2020-06-25 07:01:46 auth_plain authenticator failed for (User) [46.38.145.5]: 535 Incorrect authentication data (set_id=dam@csmailer.org) 2020-06-25 07:02:34 auth_plain authenticator failed for (User) [46.38.145.5]: 535 Incorrect authentication data (set_id=holiday@csmailer.org) 2020-06-25 07:03:20 auth_plain authenticator failed for (User) [46.38.145.5]: 535 Incorrect authentication data (set_id=imga@csmailer.org) ... |
2020-06-25 15:09:19 |
| 106.12.215.238 | attackbots | detected by Fail2Ban |
2020-06-25 15:34:21 |
| 192.144.207.22 | attackbots | Jun 25 05:47:58 buvik sshd[8433]: Failed password for invalid user jan from 192.144.207.22 port 60968 ssh2 Jun 25 05:52:51 buvik sshd[9207]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.144.207.22 user=root Jun 25 05:52:53 buvik sshd[9207]: Failed password for root from 192.144.207.22 port 40172 ssh2 ... |
2020-06-25 15:43:59 |
| 192.241.236.125 | attackspam | 8087/tcp [2020-06-25]1pkt |
2020-06-25 15:23:11 |
| 161.35.120.218 | attackspambots | Jun 25 02:44:13 h1637304 sshd[4524]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.35.120.218 user=r.r Jun 25 02:44:16 h1637304 sshd[4524]: Failed password for r.r from 161.35.120.218 port 39922 ssh2 Jun 25 02:44:16 h1637304 sshd[4524]: Received disconnect from 161.35.120.218: 11: Normal Shutdown, Thank you for playing [preauth] Jun 25 02:44:26 h1637304 sshd[4526]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.35.120.218 user=r.r Jun 25 02:44:29 h1637304 sshd[4526]: Failed password for r.r from 161.35.120.218 port 40434 ssh2 Jun 25 02:44:29 h1637304 sshd[4526]: Received disconnect from 161.35.120.218: 11: Normal Shutdown, Thank you for playing [preauth] Jun 25 02:44:40 h1637304 sshd[4530]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.35.120.218 user=r.r Jun 25 02:44:42 h1637304 sshd[4530]: Failed password for r.r from 161.35.120.2........ ------------------------------- |
2020-06-25 15:33:57 |
| 106.12.28.152 | attack | Jun 24 20:47:26 dignus sshd[30803]: Failed password for invalid user xq from 106.12.28.152 port 35244 ssh2 Jun 24 20:50:33 dignus sshd[31093]: Invalid user user from 106.12.28.152 port 43312 Jun 24 20:50:33 dignus sshd[31093]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.28.152 Jun 24 20:50:35 dignus sshd[31093]: Failed password for invalid user user from 106.12.28.152 port 43312 ssh2 Jun 24 20:53:29 dignus sshd[31298]: Invalid user recording from 106.12.28.152 port 51374 ... |
2020-06-25 15:16:12 |
| 220.156.167.132 | attackspambots | Dovecot Invalid User Login Attempt. |
2020-06-25 15:25:41 |
| 117.50.20.11 | attackspam | web-1 [ssh] SSH Attack |
2020-06-25 15:02:49 |
| 139.215.208.125 | attackbotsspam | Jun 25 06:18:36 home sshd[11002]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.215.208.125 Jun 25 06:18:37 home sshd[11002]: Failed password for invalid user remote from 139.215.208.125 port 55575 ssh2 Jun 25 06:20:51 home sshd[11216]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.215.208.125 ... |
2020-06-25 15:22:44 |