城市(city): unknown
省份(region): unknown
国家(country): United States of America (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 205.248.53.49
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 9013
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;205.248.53.49. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020400 1800 900 604800 86400
;; Query time: 37 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 04 20:13:39 CST 2025
;; MSG SIZE rcvd: 106Host 49.53.248.205.in-addr.arpa not found: 2(SERVFAIL);; Got SERVFAIL reply from 183.60.83.19, trying next server
Server: 183.60.82.98
Address: 183.60.82.98#53
** server can't find 49.53.248.205.in-addr.arpa: SERVFAIL| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 212.174.99.113 | attackbots | Unauthorized connection attempt from IP address 212.174.99.113 on Port 445(SMB) |
2020-09-20 14:03:00 |
| 171.250.169.227 | attackbotsspam | Sep 14 20:07:08 www sshd[9949]: reveeclipse mapping checking getaddrinfo for dynamic-ip-adsl.viettel.vn [171.250.169.227] failed - POSSIBLE BREAK-IN ATTEMPT! Sep 14 20:07:08 www sshd[9949]: Invalid user admin from 171.250.169.227 Sep 14 20:07:09 www sshd[9949]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.250.169.227 Sep 14 20:07:11 www sshd[9949]: Failed password for invalid user admin from 171.250.169.227 port 48660 ssh2 Sep 14 20:07:12 www sshd[9949]: Connection closed by 171.250.169.227 [preauth] Sep 17 08:00:27 www sshd[4818]: Address 171.250.169.227 maps to dynamic-ip-adsl.viettel.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Sep 17 08:00:28 www sshd[4818]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.250.169.227 user=r.r Sep 17 08:00:29 www sshd[4818]: Failed password for r.r from 171.250.169.227 port 41532 ssh2 Sep 17 08:00:30 www sshd[481........ ------------------------------- |
2020-09-20 14:24:55 |
| 189.202.46.226 | attackspam | Email rejected due to spam filtering |
2020-09-20 14:23:45 |
| 128.199.28.100 | attack | Sep 20 03:18:15 XXX sshd[24439]: Invalid user user from 128.199.28.100 port 57688 |
2020-09-20 13:52:42 |
| 129.204.238.250 | attackspam | Sep 20 00:39:35 abendstille sshd\[7000\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.238.250 user=root Sep 20 00:39:37 abendstille sshd\[7000\]: Failed password for root from 129.204.238.250 port 48108 ssh2 Sep 20 00:42:02 abendstille sshd\[9222\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.238.250 user=root Sep 20 00:42:03 abendstille sshd\[9222\]: Failed password for root from 129.204.238.250 port 45794 ssh2 Sep 20 00:44:32 abendstille sshd\[12135\]: Invalid user tsuser from 129.204.238.250 Sep 20 00:44:32 abendstille sshd\[12135\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.238.250 ... |
2020-09-20 13:59:32 |
| 186.31.21.129 | attackspambots | Listed on abuseat.org plus zen-spamhaus / proto=6 . srcport=20770 . dstport=23 . (2309) |
2020-09-20 13:52:03 |
| 118.69.176.26 | attackbots | Sep 20 03:07:25 nextcloud sshd\[24571\]: Invalid user ec2-user from 118.69.176.26 Sep 20 03:07:25 nextcloud sshd\[24571\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.69.176.26 Sep 20 03:07:26 nextcloud sshd\[24571\]: Failed password for invalid user ec2-user from 118.69.176.26 port 23585 ssh2 |
2020-09-20 14:07:06 |
| 102.158.129.2 | attackspambots | Email rejected due to spam filtering |
2020-09-20 14:25:35 |
| 121.142.87.218 | attack | prod6 ... |
2020-09-20 14:21:19 |
| 92.154.95.236 | attackbotsspam | Port scan on 85 port(s) from 92.154.95.236 detected: 7 (12:29:52) 13 (13:01:32) 42 (10:44:24) 83 (06:04:05) 106 (01:31:43) 163 (21:31:32) 443 (19:07:47) 458 (10:53:38) 464 (08:00:33) 514 (04:21:21) 720 (17:58:43) 898 (11:10:34) 990 (07:25:09) 1051 (07:10:03) 1057 (09:37:35) 1074 (02:32:36) 1091 (14:40:05) 1096 (01:43:07) 1113 (05:31:11) 1151 (22:50:30) 1247 (06:15:21) 1719 (12:58:03) 1840 (03:34:47) 1900 (21:06:45) 1999 (00:01:51) 2003 (03:26:53) 2021 (11:43:31) 2042 (17:17:43) 2144 (16:31:05) 2196 (17:22:55) 2200 (21:07:57) 2251 (09:37:30) 2638 (03:37:27) 2920 (12:06:18) 3517 (10:52:46) 3580 (10:07:51) 3766 (05:17:55) 3945 (03:43:09) 4000 (09:56:45) 4321 (22:45:48) 4506 (17:36:53) 5100 (10:45:59) 5200 (15:26:44) 5550 (07:24:22) 5555 (21:03:32) 5601 (23:16:32) 5631 (14:36:48) 5800 (02:47:58) 5815 (16:45:43) 5862 (07:09:38) 5960 (08:39:47) 5989 (19:14:43) 6002 (18:29:48) 6106 (03:26:32) 7001 (21:05:19) 7100 (13:20:26) 7496 (23:26:43) 8082 (12:28:29) 8100 (22:33:10) 9594 (15:18:51) |
2020-09-20 14:26:04 |
| 50.233.148.74 | attackspam |
|
2020-09-20 13:55:57 |
| 145.239.211.242 | attackbots | "XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES: |
2020-09-20 14:20:31 |
| 82.221.131.5 | attackbots | (sshd) Failed SSH login from 82.221.131.5 (IS/Iceland/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 20 06:14:58 rainbow sshd[3427271]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.221.131.5 user=root Sep 20 06:15:00 rainbow sshd[3427271]: Failed password for root from 82.221.131.5 port 33300 ssh2 Sep 20 06:15:03 rainbow sshd[3427271]: Failed password for root from 82.221.131.5 port 33300 ssh2 Sep 20 06:15:07 rainbow sshd[3427271]: Failed password for root from 82.221.131.5 port 33300 ssh2 Sep 20 06:15:11 rainbow sshd[3427271]: Failed password for root from 82.221.131.5 port 33300 ssh2 |
2020-09-20 13:53:14 |
| 164.90.204.74 | attack | Lines containing failures of 164.90.204.74 Sep 20 02:26:37 zabbix sshd[84279]: Invalid user media from 164.90.204.74 port 32782 Sep 20 02:26:37 zabbix sshd[84279]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.90.204.74 Sep 20 02:26:40 zabbix sshd[84279]: Failed password for invalid user media from 164.90.204.74 port 32782 ssh2 Sep 20 02:26:40 zabbix sshd[84279]: Received disconnect from 164.90.204.74 port 32782:11: Bye Bye [preauth] Sep 20 02:26:40 zabbix sshd[84279]: Disconnected from invalid user media 164.90.204.74 port 32782 [preauth] Sep 20 02:41:52 zabbix sshd[85630]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.90.204.74 user=r.r Sep 20 02:41:54 zabbix sshd[85630]: Failed password for r.r from 164.90.204.74 port 60382 ssh2 Sep 20 02:41:54 zabbix sshd[85630]: Received disconnect from 164.90.204.74 port 60382:11: Bye Bye [preauth] Sep 20 02:41:54 zabbix sshd[85630]: Discon........ ------------------------------ |
2020-09-20 14:16:32 |
| 192.241.139.236 | attackbotsspam | Sep 20 06:47:53 piServer sshd[21187]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.241.139.236 Sep 20 06:47:55 piServer sshd[21187]: Failed password for invalid user steve from 192.241.139.236 port 44446 ssh2 Sep 20 06:53:16 piServer sshd[21843]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.241.139.236 ... |
2020-09-20 14:12:06 |