城市(city): unknown
省份(region): unknown
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 206.164.31.139
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 16061
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;206.164.31.139. IN A
;; AUTHORITY SECTION:
. 468 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022012301 1800 900 604800 86400
;; Query time: 59 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jan 24 04:32:05 CST 2022
;; MSG SIZE rcvd: 107Host 139.31.164.206.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 139.31.164.206.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 190.201.38.175 | attackbotsspam | port scan and connect, tcp 1433 (ms-sql-s) |
2020-06-14 08:55:29 |
| 87.246.7.70 | attackbotsspam | Jun 14 02:03:23 mail postfix/smtpd\[5380\]: warning: unknown\[87.246.7.70\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Jun 14 02:04:11 mail postfix/smtpd\[3996\]: warning: unknown\[87.246.7.70\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Jun 14 02:04:55 mail postfix/smtpd\[3996\]: warning: unknown\[87.246.7.70\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Jun 14 02:35:05 mail postfix/smtpd\[6655\]: warning: unknown\[87.246.7.70\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ |
2020-06-14 08:38:34 |
| 139.162.72.191 | attackbotsspam | SmallBizIT.US 1 packets to tcp(3127) |
2020-06-14 08:28:53 |
| 208.78.227.212 | attack | 20 attempts against mh-misbehave-ban on web |
2020-06-14 08:23:15 |
| 46.38.145.253 | attackspambots | Jun 14 02:12:45 mail.srvfarm.net postfix/smtpd[1514512]: warning: unknown[46.38.145.253]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jun 14 02:14:24 mail.srvfarm.net postfix/smtpd[1518552]: warning: unknown[46.38.145.253]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jun 14 02:16:00 mail.srvfarm.net postfix/smtpd[1518555]: warning: unknown[46.38.145.253]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jun 14 02:17:40 mail.srvfarm.net postfix/smtpd[1536616]: warning: unknown[46.38.145.253]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jun 14 02:19:23 mail.srvfarm.net postfix/smtpd[1536617]: warning: unknown[46.38.145.253]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 |
2020-06-14 08:41:09 |
| 111.230.226.124 | attack | Jun 14 02:07:06 home sshd[19086]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.230.226.124 Jun 14 02:07:08 home sshd[19086]: Failed password for invalid user dovecot from 111.230.226.124 port 53428 ssh2 Jun 14 02:08:33 home sshd[20161]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.230.226.124 ... |
2020-06-14 08:15:40 |
| 165.22.252.126 | attackspambots | Jun 13 20:14:59 h2022099 sshd[26847]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.252.126 user=r.r Jun 13 20:15:02 h2022099 sshd[26847]: Failed password for r.r from 165.22.252.126 port 42332 ssh2 Jun 13 20:15:02 h2022099 sshd[26847]: Received disconnect from 165.22.252.126: 11: Bye Bye [preauth] Jun 13 20:22:56 h2022099 sshd[28410]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.252.126 user=r.r Jun 13 20:22:58 h2022099 sshd[28410]: Failed password for r.r from 165.22.252.126 port 54722 ssh2 Jun 13 20:22:59 h2022099 sshd[28410]: Received disconnect from 165.22.252.126: 11: Bye Bye [preauth] Jun 13 20:25:57 h2022099 sshd[29173]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.252.126 user=r.r Jun 13 20:25:59 h2022099 sshd[29173]: Failed password for r.r from 165.22.252.126 port 46938 ssh2 Jun 13 20:25:59 h2022099 sshd[29173........ ------------------------------- |
2020-06-14 08:54:44 |
| 116.196.123.143 | attackspam | leo_www |
2020-06-14 08:25:53 |
| 103.65.195.162 | attack | Jun 13 15:19:06 gutwein sshd[15678]: Failed password for invalid user llgadmin from 103.65.195.162 port 44022 ssh2 Jun 13 15:19:06 gutwein sshd[15678]: Received disconnect from 103.65.195.162: 11: Bye Bye [preauth] Jun 13 15:27:21 gutwein sshd[17220]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.65.195.162 user=r.r Jun 13 15:27:23 gutwein sshd[17220]: Failed password for r.r from 103.65.195.162 port 38200 ssh2 Jun 13 15:27:23 gutwein sshd[17220]: Received disconnect from 103.65.195.162: 11: Bye Bye [preauth] Jun 13 15:33:30 gutwein sshd[18379]: Failed password for invalid user dale from 103.65.195.162 port 37626 ssh2 Jun 13 15:33:30 gutwein sshd[18379]: Received disconnect from 103.65.195.162: 11: Bye Bye [preauth] Jun 13 15:36:42 gutwein sshd[19024]: Failed password for invalid user doc from 103.65.195.162 port 36642 ssh2 Jun 13 15:36:43 gutwein sshd[19024]: Received disconnect from 103.65.195.162: 11: Bye Bye [preauth] J........ ------------------------------- |
2020-06-14 08:17:14 |
| 91.144.84.199 | attackbotsspam | Jun 13 22:50:05 mail.srvfarm.net postfix/smtps/smtpd[1295671]: warning: unknown[91.144.84.199]: SASL PLAIN authentication failed: Jun 13 22:50:05 mail.srvfarm.net postfix/smtps/smtpd[1295671]: lost connection after AUTH from unknown[91.144.84.199] Jun 13 22:51:28 mail.srvfarm.net postfix/smtpd[1295657]: lost connection after CONNECT from unknown[91.144.84.199] Jun 13 22:51:32 mail.srvfarm.net postfix/smtpd[1295658]: warning: unknown[91.144.84.199]: SASL PLAIN authentication failed: Jun 13 22:51:32 mail.srvfarm.net postfix/smtpd[1295658]: lost connection after AUTH from unknown[91.144.84.199] |
2020-06-14 08:38:02 |
| 222.186.173.215 | attack | Jun 14 02:40:39 eventyay sshd[23502]: Failed password for root from 222.186.173.215 port 63698 ssh2 Jun 14 02:40:51 eventyay sshd[23502]: error: maximum authentication attempts exceeded for root from 222.186.173.215 port 63698 ssh2 [preauth] Jun 14 02:41:04 eventyay sshd[23505]: Failed password for root from 222.186.173.215 port 58626 ssh2 ... |
2020-06-14 08:45:22 |
| 222.186.30.167 | attack | Jun 14 02:50:09 v22018053744266470 sshd[9104]: Failed password for root from 222.186.30.167 port 51751 ssh2 Jun 14 02:50:18 v22018053744266470 sshd[9115]: Failed password for root from 222.186.30.167 port 35093 ssh2 ... |
2020-06-14 08:52:14 |
| 201.55.143.245 | attackspambots | Jun 13 22:35:18 mail.srvfarm.net postfix/smtpd[1275649]: warning: unknown[201.55.143.245]: SASL PLAIN authentication failed: Jun 13 22:35:18 mail.srvfarm.net postfix/smtpd[1275649]: lost connection after AUTH from unknown[201.55.143.245] Jun 13 22:38:29 mail.srvfarm.net postfix/smtpd[1286879]: warning: unknown[201.55.143.245]: SASL PLAIN authentication failed: Jun 13 22:38:30 mail.srvfarm.net postfix/smtpd[1286879]: lost connection after AUTH from unknown[201.55.143.245] Jun 13 22:42:19 mail.srvfarm.net postfix/smtps/smtpd[1286914]: warning: unknown[201.55.143.245]: SASL PLAIN authentication failed: |
2020-06-14 08:31:34 |
| 45.141.84.40 | attackspambots | IP: 45.141.84.40
Ports affected
Simple Mail Transfer (25)
HTTP protocol over TLS/SSL (443)
Message Submission (587)
IMAP over TLS protocol (993)
Abuse Confidence rating 100%
Found in DNSBL('s)
ASN Details
AS206728 Media Land LLC
Russia (RU)
CIDR 45.141.84.0/24
Log Date: 13/06/2020 8:35:51 PM UTC |
2020-06-14 08:49:01 |
| 77.45.84.47 | attackbotsspam | Jun 13 22:55:51 mail.srvfarm.net postfix/smtpd[1294827]: lost connection after CONNECT from 77-45-84-47.sta.asta-net.com.pl[77.45.84.47] Jun 13 23:01:06 mail.srvfarm.net postfix/smtps/smtpd[1296619]: warning: 77-45-84-47.sta.asta-net.com.pl[77.45.84.47]: SASL PLAIN authentication failed: Jun 13 23:01:06 mail.srvfarm.net postfix/smtps/smtpd[1296619]: lost connection after AUTH from 77-45-84-47.sta.asta-net.com.pl[77.45.84.47] Jun 13 23:05:12 mail.srvfarm.net postfix/smtpd[1296188]: warning: 77-45-84-47.sta.asta-net.com.pl[77.45.84.47]: SASL PLAIN authentication failed: Jun 13 23:05:12 mail.srvfarm.net postfix/smtpd[1296188]: lost connection after AUTH from 77-45-84-47.sta.asta-net.com.pl[77.45.84.47] |
2020-06-14 08:40:06 |