城市(city): unknown
省份(region): unknown
国家(country): United States of America (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 196.193.14.53
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 34132
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;196.193.14.53. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012900 1800 900 604800 86400
;; Query time: 11 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jan 29 22:42:44 CST 2025
;; MSG SIZE rcvd: 106Host 53.14.193.196.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 53.14.193.196.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 140.143.142.190 | attack | Lines containing failures of 140.143.142.190 (max 1000) Nov 4 00:22:35 localhost sshd[2651]: Invalid user mythtv from 140.143.142.190 port 38292 Nov 4 00:22:35 localhost sshd[2651]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.142.190 Nov 4 00:22:37 localhost sshd[2651]: Failed password for invalid user mythtv from 140.143.142.190 port 38292 ssh2 Nov 4 00:22:37 localhost sshd[2651]: Received disconnect from 140.143.142.190 port 38292:11: Bye Bye [preauth] Nov 4 00:22:37 localhost sshd[2651]: Disconnected from invalid user mythtv 140.143.142.190 port 38292 [preauth] Nov 4 00:37:24 localhost sshd[3443]: User r.r from 140.143.142.190 not allowed because listed in DenyUsers Nov 4 00:37:24 localhost sshd[3443]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.142.190 user=r.r Nov 4 00:37:26 localhost sshd[3443]: Failed password for invalid user r.r from 140.143.142.190 ........ ------------------------------ |
2019-11-05 06:37:17 |
| 121.141.5.199 | attackbots | Nov 5 03:41:40 gw1 sshd[8937]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.141.5.199 Nov 5 03:41:42 gw1 sshd[8937]: Failed password for invalid user usuario from 121.141.5.199 port 52756 ssh2 ... |
2019-11-05 07:00:50 |
| 40.114.127.149 | attackspam | 2019-11-04T22:41:24.853657abusebot-6.cloudsearch.cf sshd\[19400\]: Invalid user testuser from 40.114.127.149 port 57244 |
2019-11-05 07:12:33 |
| 91.73.136.38 | attack | Abuse |
2019-11-05 06:42:26 |
| 192.241.161.115 | attackbots | fail2ban honeypot |
2019-11-05 07:00:20 |
| 148.70.63.175 | attackspam | Nov 4 16:32:29 srv01 sshd[3574]: Invalid user kendrick from 148.70.63.175 Nov 4 16:32:29 srv01 sshd[3574]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.63.175 Nov 4 16:32:29 srv01 sshd[3574]: Invalid user kendrick from 148.70.63.175 Nov 4 16:32:31 srv01 sshd[3574]: Failed password for invalid user kendrick from 148.70.63.175 port 43072 ssh2 Nov 4 16:37:46 srv01 sshd[3829]: Invalid user teszt from 148.70.63.175 ... |
2019-11-05 06:41:01 |
| 70.55.42.22 | attack | Nov 4 23:26:39 xxxxxxx0 sshd[12146]: Failed password for r.r from 70.55.42.22 port 33179 ssh2 Nov 4 23:26:42 xxxxxxx0 sshd[12146]: Failed password for r.r from 70.55.42.22 port 33179 ssh2 Nov 4 23:26:43 xxxxxxx0 sshd[12146]: Failed password for r.r from 70.55.42.22 port 33179 ssh2 Nov 4 23:26:45 xxxxxxx0 sshd[12146]: Failed password for r.r from 70.55.42.22 port 33179 ssh2 Nov 4 23:26:47 xxxxxxx0 sshd[12146]: Failed password for r.r from 70.55.42.22 port 33179 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=70.55.42.22 |
2019-11-05 06:57:53 |
| 45.80.65.83 | attack | Nov 4 07:06:33 web9 sshd\[30277\]: Invalid user admin from 45.80.65.83 Nov 4 07:06:33 web9 sshd\[30277\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.80.65.83 Nov 4 07:06:35 web9 sshd\[30277\]: Failed password for invalid user admin from 45.80.65.83 port 52476 ssh2 Nov 4 07:10:48 web9 sshd\[30827\]: Invalid user nathaniel from 45.80.65.83 Nov 4 07:10:49 web9 sshd\[30827\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.80.65.83 |
2019-11-05 06:39:46 |
| 149.202.218.7 | attack | Nov 4 23:41:42 mail sshd\[10230\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.202.218.7 user=daemon Nov 4 23:41:44 mail sshd\[10230\]: Failed password for daemon from 149.202.218.7 port 41310 ssh2 Nov 4 23:41:45 mail sshd\[10232\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.202.218.7 user=bin ... |
2019-11-05 06:55:11 |
| 103.48.180.117 | attackspambots | Nov 3 17:58:57 eola sshd[26727]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.48.180.117 user=r.r Nov 3 17:58:59 eola sshd[26727]: Failed password for r.r from 103.48.180.117 port 61825 ssh2 Nov 3 17:58:59 eola sshd[26727]: Received disconnect from 103.48.180.117 port 61825:11: Bye Bye [preauth] Nov 3 17:58:59 eola sshd[26727]: Disconnected from 103.48.180.117 port 61825 [preauth] Nov 3 18:09:42 eola sshd[26960]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.48.180.117 user=r.r Nov 3 18:09:44 eola sshd[26960]: Failed password for r.r from 103.48.180.117 port 10241 ssh2 Nov 3 18:09:44 eola sshd[26960]: Received disconnect from 103.48.180.117 port 10241:11: Bye Bye [preauth] Nov 3 18:09:44 eola sshd[26960]: Disconnected from 103.48.180.117 port 10241 [preauth] Nov 3 18:13:50 eola sshd[27131]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh rus........ ------------------------------- |
2019-11-05 07:02:55 |
| 101.36.152.13 | attackbots | Lines containing failures of 101.36.152.13 Nov 4 21:55:44 jarvis sshd[11261]: Invalid user zahore from 101.36.152.13 port 36434 Nov 4 21:55:44 jarvis sshd[11261]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.36.152.13 Nov 4 21:55:46 jarvis sshd[11261]: Failed password for invalid user zahore from 101.36.152.13 port 36434 ssh2 Nov 4 21:55:48 jarvis sshd[11261]: Received disconnect from 101.36.152.13 port 36434:11: Bye Bye [preauth] Nov 4 21:55:48 jarvis sshd[11261]: Disconnected from invalid user zahore 101.36.152.13 port 36434 [preauth] Nov 4 22:08:50 jarvis sshd[14084]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.36.152.13 user=r.r Nov 4 22:08:52 jarvis sshd[14084]: Failed password for r.r from 101.36.152.13 port 51558 ssh2 Nov 4 22:08:54 jarvis sshd[14084]: Received disconnect from 101.36.152.13 port 51558:11: Bye Bye [preauth] Nov 4 22:08:54 jarvis sshd[14084]: Di........ ------------------------------ |
2019-11-05 06:51:52 |
| 14.231.201.16 | attackbotsspam | Received: from mail.bnpb.go.id (14.231.201.16) by HQEXSV01.bnpb.go.id (192.168.253.252) with Microsoft SMTP Server (TLS) id 15.0.847.32; Mon, 4 Nov 2019 08:29:07 +0700 From: rosstefano29 <rifai@bnpb.go.id> To: [...] Subject: Fw:Mi auguro che stia avendo una meravigliosa giornata Thread-Topic: Fw:Mi auguro che stia avendo una meravigliosa giornata Thread-Index: AQHVkq9JXUsuy80aNka1yH/VL93LWQ== X-MS-Exchange-MessageSentRepresentingType: 1 Date: Mon, 4 Nov 2019 02:31:22 +0100 Message-ID: <8295ebb9-101f-4b32-b6ff-44914f4b36cd@bnpb.go.id> |
2019-11-05 06:44:37 |
| 78.149.212.3 | attack | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/78.149.212.3/ GB - 1H : (86) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : GB NAME ASN : ASN13285 IP : 78.149.212.3 CIDR : 78.148.0.0/14 PREFIX COUNT : 35 UNIQUE IP COUNT : 3565824 ATTACKS DETECTED ASN13285 : 1H - 1 3H - 1 6H - 1 12H - 10 24H - 16 DateTime : 2019-11-04 15:25:44 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery |
2019-11-05 06:38:59 |
| 54.37.14.3 | attackspambots | 2019-11-04T06:34:02.614467ns547587 sshd\[10010\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=3.ip-54-37-14.eu user=root 2019-11-04T06:34:04.832211ns547587 sshd\[10010\]: Failed password for root from 54.37.14.3 port 59032 ssh2 2019-11-04T06:37:34.320805ns547587 sshd\[19603\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=3.ip-54-37-14.eu user=root 2019-11-04T06:37:36.468560ns547587 sshd\[19603\]: Failed password for root from 54.37.14.3 port 40120 ssh2 2019-11-04T06:41:06.484638ns547587 sshd\[29217\]: Invalid user webusers from 54.37.14.3 port 49458 2019-11-04T06:41:06.489490ns547587 sshd\[29217\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=3.ip-54-37-14.eu 2019-11-04T06:41:08.578809ns547587 sshd\[29217\]: Failed password for invalid user webusers from 54.37.14.3 port 49458 ssh2 2019-11-04T06:44:34.016386ns547587 sshd\[6413\]: pam_unix\(sshd:aut ... |
2019-11-05 06:37:55 |
| 175.20.42.5 | attackspam | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/175.20.42.5/ CN - 1H : (592) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : CN NAME ASN : ASN4837 IP : 175.20.42.5 CIDR : 175.16.0.0/13 PREFIX COUNT : 1262 UNIQUE IP COUNT : 56665856 ATTACKS DETECTED ASN4837 : 1H - 9 3H - 26 6H - 63 12H - 109 24H - 202 DateTime : 2019-11-04 23:41:45 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery |
2019-11-05 06:56:32 |