城市(city): unknown
省份(region): unknown
国家(country): United States of America (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 143.6.54.53
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 1248
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;143.6.54.53. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012600 1800 900 604800 86400
;; Query time: 12 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jan 26 14:24:34 CST 2025
;; MSG SIZE rcvd: 104Host 53.54.6.143.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 53.54.6.143.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 180.71.47.198 | attackspambots | Feb 5 14:10:01 sachi sshd\[1126\]: Invalid user dtf from 180.71.47.198 Feb 5 14:10:01 sachi sshd\[1126\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.71.47.198 Feb 5 14:10:03 sachi sshd\[1126\]: Failed password for invalid user dtf from 180.71.47.198 port 37108 ssh2 Feb 5 14:12:24 sachi sshd\[1296\]: Invalid user kd from 180.71.47.198 Feb 5 14:12:24 sachi sshd\[1296\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.71.47.198 |
2020-02-06 08:29:40 |
| 117.34.200.242 | attackbots | Feb 5 23:23:39 dcd-gentoo sshd[17178]: User root from 117.34.200.242 not allowed because none of user's groups are listed in AllowGroups Feb 5 23:23:41 dcd-gentoo sshd[17183]: User root from 117.34.200.242 not allowed because none of user's groups are listed in AllowGroups Feb 5 23:23:42 dcd-gentoo sshd[17187]: User root from 117.34.200.242 not allowed because none of user's groups are listed in AllowGroups ... |
2020-02-06 08:34:46 |
| 49.232.171.28 | attackspambots | Unauthorized connection attempt detected from IP address 49.232.171.28 to port 2220 [J] |
2020-02-06 08:23:46 |
| 46.38.144.215 | attack | Feb 4 03:22:22 nirvana postfix/smtpd[7866]: connect from unknown[46.38.144.215] Feb 4 03:22:22 nirvana postfix/smtpd[7866]: connect from unknown[46.38.144.215] Feb 4 03:22:24 nirvana postfix/smtpd[7869]: connect from unknown[46.38.144.215] Feb 4 03:22:24 nirvana postfix/smtpd[7869]: connect from unknown[46.38.144.215] Feb 4 03:22:28 nirvana postfix/smtpd[7869]: warning: unknown[46.38.144.215]: SASL LOGIN authentication failed: authentication failure Feb 4 03:22:28 nirvana postfix/smtpd[7869]: warning: unknown[46.38.144.215]: SASL LOGIN authentication failed: authentication failure Feb 4 03:22:28 nirvana postfix/smtpd[7869]: disconnect from unknown[46.38.144.215] Feb 4 03:22:28 nirvana postfix/smtpd[7869]: disconnect from unknown[46.38.144.215] Feb 4 03:22:29 nirvana postfix/smtpd[7869]: connect from unknown[46.38.144.215] Feb 4 03:22:29 nirvana postfix/smtpd[7869]: connect from unknown[46.38.144.215] Feb 4 03:22:31 nirvana postfix/smtpd[7866]: warning: unknow........ ------------------------------- |
2020-02-06 08:27:34 |
| 163.172.45.60 | attackbotsspam | 163.172.45.60 - - \[06/Feb/2020:01:26:27 +0100\] "POST /wp-login.php HTTP/1.0" 200 7672 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 163.172.45.60 - - \[06/Feb/2020:01:26:28 +0100\] "POST /wp-login.php HTTP/1.0" 200 7502 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 163.172.45.60 - - \[06/Feb/2020:01:26:34 +0100\] "POST /wp-login.php HTTP/1.0" 200 7496 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" |
2020-02-06 08:28:32 |
| 15.188.204.51 | attackspambots | Unauthorized connection attempt detected from IP address 15.188.204.51 to port 2220 [J] |
2020-02-06 08:31:15 |
| 106.12.48.138 | attackspam | Feb 6 00:51:17 server sshd\[28580\]: Invalid user oot from 106.12.48.138 Feb 6 00:51:17 server sshd\[28580\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.48.138 Feb 6 00:51:20 server sshd\[28580\]: Failed password for invalid user oot from 106.12.48.138 port 48870 ssh2 Feb 6 01:24:19 server sshd\[1929\]: Invalid user ql from 106.12.48.138 Feb 6 01:24:19 server sshd\[1929\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.48.138 ... |
2020-02-06 08:10:33 |
| 85.14.127.99 | attackspambots | Feb 6 00:17:48 DAAP sshd[10071]: Invalid user xhh from 85.14.127.99 port 33072 Feb 6 00:17:48 DAAP sshd[10071]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.14.127.99 Feb 6 00:17:48 DAAP sshd[10071]: Invalid user xhh from 85.14.127.99 port 33072 Feb 6 00:17:50 DAAP sshd[10071]: Failed password for invalid user xhh from 85.14.127.99 port 33072 ssh2 Feb 6 00:20:36 DAAP sshd[10112]: Invalid user fjw from 85.14.127.99 port 34726 ... |
2020-02-06 08:13:57 |
| 49.234.64.252 | attack | Feb 6 01:16:08 server sshd\[700\]: Invalid user zwb from 49.234.64.252 Feb 6 01:16:08 server sshd\[700\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.64.252 Feb 6 01:16:10 server sshd\[700\]: Failed password for invalid user zwb from 49.234.64.252 port 51750 ssh2 Feb 6 01:24:45 server sshd\[1969\]: Invalid user tj from 49.234.64.252 Feb 6 01:24:45 server sshd\[1969\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.64.252 ... |
2020-02-06 07:57:09 |
| 81.22.45.182 | attackspambots | Feb 6 01:19:32 mail kernel: [357831.266667] [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:05:0d:89:f8:66:f2:68:66:ff:08:00 SRC=81.22.45.182 DST=77.73.69.240 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=40878 PROTO=TCP SPT=50336 DPT=10137 WINDOW=1024 RES=0x00 SYN URGP=0 ... |
2020-02-06 08:29:58 |
| 185.176.27.178 | attack | Feb 6 00:55:07 h2177944 kernel: \[4144994.221284\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.176.27.178 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=55983 PROTO=TCP SPT=57576 DPT=58602 WINDOW=1024 RES=0x00 SYN URGP=0 Feb 6 00:55:07 h2177944 kernel: \[4144994.221301\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.176.27.178 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=55983 PROTO=TCP SPT=57576 DPT=58602 WINDOW=1024 RES=0x00 SYN URGP=0 Feb 6 00:55:11 h2177944 kernel: \[4144998.982945\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.176.27.178 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=17895 PROTO=TCP SPT=57576 DPT=28924 WINDOW=1024 RES=0x00 SYN URGP=0 Feb 6 00:55:11 h2177944 kernel: \[4144998.982959\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.176.27.178 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=17895 PROTO=TCP SPT=57576 DPT=28924 WINDOW=1024 RES=0x00 SYN URGP=0 Feb 6 00:55:28 h2177944 kernel: \[4145015.419643\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.176.27.178 DST=85. |
2020-02-06 08:29:17 |
| 49.12.4.131 | attackspambots | Feb 3 16:21:47 garuda sshd[105205]: Invalid user musicbot1 from 49.12.4.131 Feb 3 16:21:49 garuda sshd[105205]: Failed password for invalid user musicbot1 from 49.12.4.131 port 57830 ssh2 Feb 3 16:21:49 garuda sshd[105205]: Received disconnect from 49.12.4.131: 11: Bye Bye [preauth] Feb 3 16:36:08 garuda sshd[109989]: Invalid user ghostname from 49.12.4.131 Feb 3 16:36:10 garuda sshd[109989]: Failed password for invalid user ghostname from 49.12.4.131 port 57596 ssh2 Feb 3 16:36:10 garuda sshd[109989]: Received disconnect from 49.12.4.131: 11: Bye Bye [preauth] Feb 3 16:38:50 garuda sshd[110503]: Invalid user test from 49.12.4.131 Feb 3 16:38:53 garuda sshd[110503]: Failed password for invalid user test from 49.12.4.131 port 57124 ssh2 Feb 3 16:38:53 garuda sshd[110503]: Received disconnect from 49.12.4.131: 11: Bye Bye [preauth] Feb 3 16:43:23 garuda sshd[112537]: Invalid user test from 49.12.4.131 Feb 3 16:43:25 garuda sshd[112537]: Failed password for inva........ ------------------------------- |
2020-02-06 08:01:06 |
| 80.82.77.212 | attackbotsspam | 80.82.77.212 was recorded 17 times by 11 hosts attempting to connect to the following ports: 49154,49152. Incident counter (4h, 24h, all-time): 17, 111, 3541 |
2020-02-06 08:02:00 |
| 203.146.116.237 | attack | Feb 6 00:16:52 MK-Soft-VM8 sshd[21627]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.146.116.237 Feb 6 00:16:54 MK-Soft-VM8 sshd[21627]: Failed password for invalid user qbq from 203.146.116.237 port 41078 ssh2 ... |
2020-02-06 08:10:06 |
| 14.248.83.163 | attackspambots | Feb 6 00:17:31 legacy sshd[31293]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.248.83.163 Feb 6 00:17:32 legacy sshd[31293]: Failed password for invalid user midnight from 14.248.83.163 port 53806 ssh2 Feb 6 00:21:09 legacy sshd[31547]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.248.83.163 ... |
2020-02-06 08:11:33 |