城市(city): unknown
省份(region): unknown
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 149.73.45.20
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 16512
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;149.73.45.20. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021902 1800 900 604800 86400
;; Query time: 37 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 20 13:12:16 CST 2025
;; MSG SIZE rcvd: 105
Host 20.45.73.149.in-addr.arpa not found: 2(SERVFAIL)
server can't find 149.73.45.20.in-addr.arpa: SERVFAIL
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 106.13.230.219 | attackbots | Nov 19 14:48:52 km20725 sshd[3699]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.230.219 user=r.r Nov 19 14:48:54 km20725 sshd[3699]: Failed password for r.r from 106.13.230.219 port 47260 ssh2 Nov 19 14:48:54 km20725 sshd[3699]: Received disconnect from 106.13.230.219: 11: Bye Bye [preauth] Nov 19 15:12:13 km20725 sshd[5077]: Invalid user iyengar from 106.13.230.219 Nov 19 15:12:13 km20725 sshd[5077]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.230.219 Nov 19 15:12:15 km20725 sshd[5077]: Failed password for invalid user iyengar from 106.13.230.219 port 48562 ssh2 Nov 19 15:12:15 km20725 sshd[5077]: Received disconnect from 106.13.230.219: 11: Bye Bye [preauth] Nov 19 15:17:15 km20725 sshd[5343]: Invalid user test from 106.13.230.219 Nov 19 15:17:15 km20725 sshd[5343]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.230.219........ ------------------------------- |
2019-11-20 07:47:22 |
| 68.183.48.172 | attack | Nov 19 13:37:54 php1 sshd\[25464\]: Invalid user aud from 68.183.48.172 Nov 19 13:37:54 php1 sshd\[25464\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.48.172 Nov 19 13:37:56 php1 sshd\[25464\]: Failed password for invalid user aud from 68.183.48.172 port 39163 ssh2 Nov 19 13:41:48 php1 sshd\[25891\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.48.172 user=root Nov 19 13:41:50 php1 sshd\[25891\]: Failed password for root from 68.183.48.172 port 57272 ssh2 |
2019-11-20 07:52:07 |
| 54.36.148.169 | attackbotsspam | www noscript ... |
2019-11-20 07:22:36 |
| 111.231.85.239 | attackspambots | SMTP Fraud Orders |
2019-11-20 07:35:44 |
| 91.121.2.33 | attack | $f2bV_matches |
2019-11-20 07:25:33 |
| 212.92.101.89 | attackspam | Lines containing failures of 212.92.101.89 Nov x@x Nov x@x Nov x@x Nov 19 20:59:09 omfg postfix-submission/smtpd[13285]: connect from unknown[212.92.101.89] Nov 19 20:59:09 omfg postfix-submission/smtpd[13285]: lost connection after UNKNOWN from unknown[212.92.101.89] Nov 19 20:59:09 omfg postfix-submission/smtpd[13285]: disconnect from unknown[212.92.101.89] unknown=0/1 commands=0/1 Nov 19 20:59:14 omfg postfix-submission/smtpd[13285]: connect from unknown[212.92.101.89] Nov 19 20:59:14 omfg postfix-submission/smtpd[13285]: lost connection after UNKNOWN from unknown[212.92.101.89] Nov 19 20:59:14 omfg postfix-submission/smtpd[13285]: disconnect from unknown[212.92.101.89] unknown=0/1 commands=0/1 Nov 19 20:59:27 omfg postfix-submission/smtpd[13285]: connect from unknown[212.92.101.89] Nov 19 20:59:27 omfg postfix-submission/smtpd[13285]: lost connection after UNKNOWN from unknown[212.92.101.89] Nov 19 20:59:27 omfg postfix-submission/smtpd[13285]: disconnect from unknow........ ------------------------------ |
2019-11-20 07:46:10 |
| 123.205.104.16 | attack | 9527/tcp 9001/tcp... [2019-10-18/11-19]10pkt,2pt.(tcp) |
2019-11-20 07:53:51 |
| 89.248.169.95 | attackbots | firewall-block, port(s): 2013/tcp, 2019/tcp, 3003/tcp, 3390/tcp, 3400/tcp, 4001/tcp, 4002/tcp, 4003/tcp, 5002/tcp, 5003/tcp, 5005/tcp, 7777/tcp, 8000/tcp, 8888/tcp, 10003/tcp, 10005/tcp, 10007/tcp, 10008/tcp, 10012/tcp, 10020/tcp, 13390/tcp, 13391/tcp, 23390/tcp, 30000/tcp, 30002/tcp, 33893/tcp, 33894/tcp, 33895/tcp, 43390/tcp, 59999/tcp |
2019-11-20 07:21:35 |
| 77.247.110.58 | attackbots | ET SCAN Sipvicious Scan - port: 5060 proto: UDP cat: Attempted Information Leak |
2019-11-20 07:47:54 |
| 106.53.90.75 | attackbots | 2019-11-19T23:14:18.027266abusebot-6.cloudsearch.cf sshd\[24812\]: Invalid user fvial from 106.53.90.75 port 54762 |
2019-11-20 07:39:16 |
| 45.148.235.11 | attackspambots | Ein möglicherweise gefährlicher Request.Form-Wert wurde vom Client (mp$ContentZone$TxtMessage=" |
2019-11-20 07:30:18 |
| 140.143.198.170 | attackspam | 2019-11-20T00:00:25.974132struts4.enskede.local sshd\[32025\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.198.170 user=root 2019-11-20T00:00:28.698739struts4.enskede.local sshd\[32025\]: Failed password for root from 140.143.198.170 port 59772 ssh2 2019-11-20T00:09:43.928161struts4.enskede.local sshd\[32107\]: Invalid user deats from 140.143.198.170 port 50542 2019-11-20T00:09:43.934548struts4.enskede.local sshd\[32107\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.198.170 2019-11-20T00:09:46.070876struts4.enskede.local sshd\[32107\]: Failed password for invalid user deats from 140.143.198.170 port 50542 ssh2 ... |
2019-11-20 07:17:05 |
| 185.234.216.137 | attackspambots | Nov 19 23:00:44 ncomp postfix/smtpd[7311]: warning: unknown[185.234.216.137]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 19 23:06:32 ncomp postfix/smtpd[7446]: warning: unknown[185.234.216.137]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 19 23:12:11 ncomp postfix/smtpd[7669]: warning: unknown[185.234.216.137]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 |
2019-11-20 07:26:18 |
| 203.69.6.190 | attackspambots | 445/tcp 445/tcp 445/tcp... [2019-09-21/11-19]7pkt,1pt.(tcp) |
2019-11-20 07:46:24 |
| 23.129.64.204 | attackbots | proto=tcp . spt=50247 . dpt=25 . (Found on The Onion Router Exit Node) (640) |
2019-11-20 07:19:04 |