城市(city): unknown
省份(region): unknown
国家(country): Canada
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 142.40.148.213
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 64829
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;142.40.148.213. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012201 1800 900 604800 86400
;; Query time: 38 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jan 23 11:12:56 CST 2025
;; MSG SIZE rcvd: 107Host 213.148.40.142.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 213.148.40.142.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 92.222.127.232 | attack | 2019-09-24T13:12:03.782272abusebot.cloudsearch.cf sshd\[4959\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.222.127.232 user=root |
2019-09-25 00:29:43 |
| 128.199.154.60 | attack | 2019-09-24T13:09:30.266398abusebot.cloudsearch.cf sshd\[4908\]: Invalid user test from 128.199.154.60 port 34784 |
2019-09-25 00:24:14 |
| 157.230.168.4 | attackbots | Sep 24 13:18:06 work-partkepr sshd\[31446\]: Invalid user redereporter from 157.230.168.4 port 49758 Sep 24 13:18:06 work-partkepr sshd\[31446\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.168.4 ... |
2019-09-25 00:20:43 |
| 115.159.237.70 | attack | Sep 24 18:47:01 server sshd\[5512\]: Invalid user mharm from 115.159.237.70 port 56318 Sep 24 18:47:01 server sshd\[5512\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.159.237.70 Sep 24 18:47:03 server sshd\[5512\]: Failed password for invalid user mharm from 115.159.237.70 port 56318 ssh2 Sep 24 18:51:44 server sshd\[24285\]: Invalid user ftpuser from 115.159.237.70 port 60078 Sep 24 18:51:44 server sshd\[24285\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.159.237.70 |
2019-09-25 00:07:48 |
| 14.18.32.156 | attackbots | SSH invalid-user multiple login attempts |
2019-09-24 23:56:36 |
| 113.162.177.97 | attackbotsspam | 2019-09-24T14:28:23.518619 server010.mediaedv.de sshd[1766]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.162.177.97 user=r.r 2019-09-24T14:28:25.255128 server010.mediaedv.de sshd[1766]: Failed password for r.r from 113.162.177.97 port 53592 ssh2 2019-09-24T14:28:27.213252 server010.mediaedv.de sshd[1766]: Failed password for r.r from 113.162.177.97 port 53592 ssh2 2019-09-24T14:28:29.780422 server010.mediaedv.de sshd[1766]: Failed password for r.r from 113.162.177.97 port 53592 ssh2 2019-09-24T14:28:32.084259 server010.mediaedv.de sshd[1766]: Failed password for r.r from 113.162.177.97 port 53592 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=113.162.177.97 |
2019-09-25 00:08:19 |
| 222.186.173.154 | attackbotsspam | 2019-09-24T18:12:28.592430lon01.zurich-datacenter.net sshd\[24264\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.154 user=root 2019-09-24T18:12:30.427036lon01.zurich-datacenter.net sshd\[24264\]: Failed password for root from 222.186.173.154 port 38358 ssh2 2019-09-24T18:12:34.828213lon01.zurich-datacenter.net sshd\[24264\]: Failed password for root from 222.186.173.154 port 38358 ssh2 2019-09-24T18:12:39.585225lon01.zurich-datacenter.net sshd\[24264\]: Failed password for root from 222.186.173.154 port 38358 ssh2 2019-09-24T18:12:44.224274lon01.zurich-datacenter.net sshd\[24264\]: Failed password for root from 222.186.173.154 port 38358 ssh2 ... |
2019-09-25 00:14:13 |
| 54.236.203.153 | attack | Sep 23 10:19:49 cp1server sshd[24916]: Invalid user ubuntu from 54.236.203.153 Sep 23 10:19:49 cp1server sshd[24916]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.236.203.153 Sep 23 10:19:51 cp1server sshd[24916]: Failed password for invalid user ubuntu from 54.236.203.153 port 48172 ssh2 Sep 23 10:19:51 cp1server sshd[24917]: Received disconnect from 54.236.203.153: 11: Bye Bye Sep 23 10:41:06 cp1server sshd[27836]: Invalid user xxxxxx from 54.236.203.153 Sep 23 10:41:06 cp1server sshd[27836]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.236.203.153 Sep 23 10:41:09 cp1server sshd[27836]: Failed password for invalid user xxxxxx from 54.236.203.153 port 39129 ssh2 Sep 23 10:41:12 cp1server sshd[27837]: Received disconnect from 54.236.203.153: 11: Bye Bye Sep 23 10:54:17 cp1server sshd[28997]: Connection closed by 54.236.203.153 Sep 23 11:06:07 cp1server sshd[30688]: Invalid user........ ------------------------------- |
2019-09-24 23:51:55 |
| 206.189.239.103 | attackbots | Sep 24 17:44:59 lnxded63 sshd[25881]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.239.103 Sep 24 17:45:01 lnxded63 sshd[25881]: Failed password for invalid user pk from 206.189.239.103 port 44684 ssh2 Sep 24 17:50:02 lnxded63 sshd[26237]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.239.103 |
2019-09-24 23:52:39 |
| 184.168.46.187 | attackbotsspam | fail2ban honeypot |
2019-09-25 00:16:51 |
| 41.227.55.85 | attack | Sep 24 14:42:48 lnxmail61 postfix/smtpd[22652]: lost connection after CONNECT from unknown[41.227.55.85] Sep 24 14:42:48 lnxmail61 postfix/submission/smtpd[23917]: lost connection after CONNECT from unknown[41.227.55.85] Sep 24 14:42:48 lnxmail61 postfix/smtps/smtpd[23913]: lost connection after CONNECT from unknown[41.227.55.85] Sep 24 14:42:48 lnxmail61 postfix/submission/smtpd[23922]: lost connection after CONNECT from unknown[41.227.55.85] Sep 24 14:42:48 lnxmail61 postfix/smtps/smtpd[23921]: lost connection after CONNECT from unknown[41.227.55.85] Sep 24 14:42:48 lnxmail61 postfix/smtpd[17762]: lost connection after CONNECT from unknown[41.227.55.85] |
2019-09-24 23:55:05 |
| 142.93.18.15 | attackbots | Sep 24 05:31:49 wbs sshd\[21842\]: Invalid user cash from 142.93.18.15 Sep 24 05:31:49 wbs sshd\[21842\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.18.15 Sep 24 05:31:51 wbs sshd\[21842\]: Failed password for invalid user cash from 142.93.18.15 port 34391 ssh2 Sep 24 05:36:19 wbs sshd\[22204\]: Invalid user raspberry from 142.93.18.15 Sep 24 05:36:19 wbs sshd\[22204\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.18.15 |
2019-09-25 00:02:27 |
| 183.148.147.157 | attackspambots | Sep 24 14:31:13 mail postfix/smtpd[11353]: warning: unknown[183.148.147.157]: SASL LOGIN authentication failed: authentication failure Sep 24 14:31:28 mail postfix/smtpd[11353]: warning: unknown[183.148.147.157]: SASL LOGIN authentication failed: authentication failure Sep 24 14:31:37 mail postfix/smtpd[11250]: warning: unknown[183.148.147.157]: SASL LOGIN authentication failed: authentication failure Sep 24 14:31:43 mail postfix/smtpd[11353]: warning: unknown[183.148.147.157]: SASL LOGIN authentication failed: authentication failure Sep 24 14:31:57 mail postfix/smtpd[11250]: warning: unknown[183.148.147.157]: SASL LOGIN authentication failed: authentication failure ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=183.148.147.157 |
2019-09-25 00:19:12 |
| 114.143.139.38 | attack | Automated report - ssh fail2ban: Sep 24 17:31:36 authentication failure Sep 24 17:31:38 wrong password, user=prueba, port=55554, ssh2 Sep 24 17:55:41 authentication failure |
2019-09-25 00:19:33 |
| 187.32.120.215 | attack | Sep 24 16:32:12 core sshd[2800]: Invalid user risparmi from 187.32.120.215 port 52104 Sep 24 16:32:14 core sshd[2800]: Failed password for invalid user risparmi from 187.32.120.215 port 52104 ssh2 ... |
2019-09-25 00:12:58 |