城市(city): unknown
省份(region): unknown
国家(country): Switzerland
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 199.53.0.12
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 64512
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;199.53.0.12. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022200 1800 900 604800 86400
;; Query time: 31 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 23 00:34:30 CST 2025
;; MSG SIZE rcvd: 104Host 12.0.53.199.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 12.0.53.199.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 129.211.76.101 | attackbots | Dec 24 16:40:31 markkoudstaal sshd[2667]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.76.101 Dec 24 16:40:33 markkoudstaal sshd[2667]: Failed password for invalid user sqoop from 129.211.76.101 port 46686 ssh2 Dec 24 16:44:38 markkoudstaal sshd[3013]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.76.101 |
2019-12-25 05:45:11 |
| 187.189.63.82 | attackspambots | Dec 24 21:29:46 localhost sshd\[4994\]: Invalid user www from 187.189.63.82 port 49622 Dec 24 21:29:46 localhost sshd\[4994\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.189.63.82 Dec 24 21:29:47 localhost sshd\[4994\]: Failed password for invalid user www from 187.189.63.82 port 49622 ssh2 |
2019-12-25 05:11:48 |
| 45.125.66.202 | attack | 2019-12-24 dovecot_login authenticator failed for \(User\) \[45.125.66.202\]: 535 Incorrect authentication data \(set_id=colorado\) 2019-12-24 dovecot_login authenticator failed for \(User\) \[45.125.66.202\]: 535 Incorrect authentication data \(set_id=zzzzzz\) 2019-12-24 dovecot_login authenticator failed for \(User\) \[45.125.66.202\]: 535 Incorrect authentication data \(set_id=apollo1\) |
2019-12-25 05:14:15 |
| 45.80.69.24 | attackspam | Dec 24 16:34:19 nbi-636 sshd[662]: Invalid user admin from 45.80.69.24 port 34474 Dec 24 16:34:21 nbi-636 sshd[662]: Failed password for invalid user admin from 45.80.69.24 port 34474 ssh2 Dec 24 16:34:21 nbi-636 sshd[662]: Received disconnect from 45.80.69.24 port 34474:11: Bye Bye [preauth] Dec 24 16:34:21 nbi-636 sshd[662]: Disconnected from 45.80.69.24 port 34474 [preauth] Dec 24 16:40:25 nbi-636 sshd[1950]: Invalid user yukkei from 45.80.69.24 port 51042 Dec 24 16:40:27 nbi-636 sshd[1950]: Failed password for invalid user yukkei from 45.80.69.24 port 51042 ssh2 Dec 24 16:40:27 nbi-636 sshd[1950]: Received disconnect from 45.80.69.24 port 51042:11: Bye Bye [preauth] Dec 24 16:40:27 nbi-636 sshd[1950]: Disconnected from 45.80.69.24 port 51042 [preauth] Dec 24 16:45:00 nbi-636 sshd[3095]: User r.r from 45.80.69.24 not allowed because not listed in AllowUsers Dec 24 16:45:00 nbi-636 sshd[3095]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ........ ------------------------------- |
2019-12-25 05:35:54 |
| 103.242.200.38 | attack | Dec 24 11:51:05 plusreed sshd[20775]: Invalid user boyar from 103.242.200.38 ... |
2019-12-25 05:28:07 |
| 213.82.114.206 | attackbotsspam | Dec 24 16:25:18 minden010 sshd[26056]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.82.114.206 Dec 24 16:25:20 minden010 sshd[26056]: Failed password for invalid user drottning from 213.82.114.206 port 33946 ssh2 Dec 24 16:28:48 minden010 sshd[30175]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.82.114.206 ... |
2019-12-25 05:37:49 |
| 31.57.207.201 | attackbots | php WP PHPmyadamin ABUSE blocked for 12h |
2019-12-25 05:31:40 |
| 222.186.175.163 | attack | Dec 24 22:33:04 root sshd[32437]: Failed password for root from 222.186.175.163 port 52726 ssh2 Dec 24 22:33:09 root sshd[32437]: Failed password for root from 222.186.175.163 port 52726 ssh2 Dec 24 22:33:12 root sshd[32437]: Failed password for root from 222.186.175.163 port 52726 ssh2 Dec 24 22:33:16 root sshd[32437]: Failed password for root from 222.186.175.163 port 52726 ssh2 ... |
2019-12-25 05:36:43 |
| 45.125.66.68 | attackbots | Dec 24 10:29:31 web1 postfix/smtpd[7807]: warning: unknown[45.125.66.68]: SASL LOGIN authentication failed: authentication failure ... |
2019-12-25 05:10:40 |
| 77.252.68.106 | attackbots | Unauthorised access (Dec 24) SRC=77.252.68.106 LEN=40 TTL=243 ID=31896 TCP DPT=1433 WINDOW=1024 SYN Unauthorised access (Dec 23) SRC=77.252.68.106 LEN=40 TTL=243 ID=21524 TCP DPT=445 WINDOW=1024 SYN |
2019-12-25 05:22:22 |
| 91.240.86.223 | attack | Lines containing failures of 91.240.86.223 Dec 23 23:18:43 *** sshd[107950]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.240.86.223 user=r.r Dec 23 23:18:46 *** sshd[107950]: Failed password for r.r from 91.240.86.223 port 51738 ssh2 Dec 23 23:18:46 *** sshd[107950]: Received disconnect from 91.240.86.223 port 51738:11: Bye Bye [preauth] Dec 23 23:18:46 *** sshd[107950]: Disconnected from authenticating user r.r 91.240.86.223 port 51738 [preauth] Dec 23 23:24:44 *** sshd[108583]: Invalid user laure from 91.240.86.223 port 56740 Dec 23 23:24:44 *** sshd[108583]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.240.86.223 Dec 23 23:24:46 *** sshd[108583]: Failed password for invalid user laure from 91.240.86.223 port 56740 ssh2 Dec 23 23:24:46 *** sshd[108583]: Received disconnect from 91.240.86.223 port 56740:11: Bye Bye [preauth] Dec 23 23:24:46 *** sshd[108583]: Disconnected from i........ ------------------------------ |
2019-12-25 05:45:23 |
| 213.114.94.208 | attackbots | 20 attempts against mh-ssh on milky.magehost.pro |
2019-12-25 05:32:01 |
| 63.83.78.254 | attack | Dec 24 16:02:26 web01 postfix/smtpd[13364]: connect from sign.qdzpjgc.com[63.83.78.254] Dec 24 16:02:27 web01 policyd-spf[13395]: None; identhostnamey=helo; client-ip=63.83.78.254; helo=sign.rezamap.com; envelope-from=x@x Dec 24 16:02:27 web01 policyd-spf[13395]: Pass; identhostnamey=mailfrom; client-ip=63.83.78.254; helo=sign.rezamap.com; envelope-from=x@x Dec x@x Dec 24 16:02:27 web01 postfix/smtpd[13364]: disconnect from sign.qdzpjgc.com[63.83.78.254] Dec 24 16:05:37 web01 postfix/smtpd[13364]: connect from sign.qdzpjgc.com[63.83.78.254] Dec 24 16:05:38 web01 policyd-spf[13395]: None; identhostnamey=helo; client-ip=63.83.78.254; helo=sign.rezamap.com; envelope-from=x@x Dec 24 16:05:38 web01 policyd-spf[13395]: Pass; identhostnamey=mailfrom; client-ip=63.83.78.254; helo=sign.rezamap.com; envelope-from=x@x Dec x@x Dec 24 16:05:38 web01 postfix/smtpd[13364]: disconnect from sign.qdzpjgc.com[63.83.78.254] Dec 24 16:10:15 web01 postfix/smtpd[13364]: connect from sign.qdzp........ ------------------------------- |
2019-12-25 05:17:58 |
| 61.222.56.80 | attackbotsspam | Dec 24 22:03:18 lnxmysql61 sshd[16878]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.222.56.80 Dec 24 22:03:20 lnxmysql61 sshd[16878]: Failed password for invalid user ching from 61.222.56.80 port 47402 ssh2 Dec 24 22:07:49 lnxmysql61 sshd[17416]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.222.56.80 |
2019-12-25 05:19:57 |
| 209.141.40.181 | attackspambots | (sshd) Failed SSH login from 209.141.40.181 (-): 5 in the last 3600 secs |
2019-12-25 05:24:47 |