城市(city): unknown
省份(region): unknown
国家(country): United States of America (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 207.48.90.43
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 21622
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;207.48.90.43. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020401 1800 900 604800 86400
;; Query time: 41 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 05 02:59:22 CST 2025
;; MSG SIZE rcvd: 105b'Host 43.90.48.207.in-addr.arpa not found: 2(SERVFAIL)
'server can't find 207.48.90.43.in-addr.arpa: SERVFAIL| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 58.23.16.254 | attackspambots | Bruteforce detected by fail2ban |
2020-06-05 18:51:01 |
| 139.59.60.220 | attack | Invalid user backup from 139.59.60.220 port 52900 |
2020-06-05 18:41:26 |
| 189.62.76.139 | attackbotsspam | Unauthorized connection attempt detected from IP address 189.62.76.139 to port 23 |
2020-06-05 18:59:58 |
| 61.133.232.250 | attackbotsspam | (sshd) Failed SSH login from 61.133.232.250 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jun 5 12:44:42 s1 sshd[4838]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.133.232.250 user=root Jun 5 12:44:44 s1 sshd[4838]: Failed password for root from 61.133.232.250 port 46378 ssh2 Jun 5 12:47:59 s1 sshd[4944]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.133.232.250 user=root Jun 5 12:48:01 s1 sshd[4944]: Failed password for root from 61.133.232.250 port 24436 ssh2 Jun 5 12:59:10 s1 sshd[5252]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.133.232.250 user=root |
2020-06-05 18:36:14 |
| 198.108.66.115 | attack | Jun 5 11:19:27 debian kernel: [247729.628913] [UFW BLOCK] IN=eth0 OUT= MAC=52:54:00:be:e4:65:08:e8:4f:6e:48:0c:08:00 SRC=198.108.66.115 DST=89.252.131.35 LEN=45 TOS=0x00 PREC=0x00 TTL=238 ID=54321 PROTO=UDP SPT=35679 DPT=47808 LEN=25 |
2020-06-05 18:39:53 |
| 209.217.192.148 | attack | Jun 5 06:56:14 localhost sshd\[16119\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.217.192.148 user=root Jun 5 06:56:16 localhost sshd\[16119\]: Failed password for root from 209.217.192.148 port 52578 ssh2 Jun 5 06:59:24 localhost sshd\[16236\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.217.192.148 user=root Jun 5 06:59:26 localhost sshd\[16236\]: Failed password for root from 209.217.192.148 port 56274 ssh2 Jun 5 07:02:33 localhost sshd\[16434\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.217.192.148 user=root ... |
2020-06-05 19:10:57 |
| 84.38.185.137 | attackspambots | Jun 5 13:21:42 debian kernel: [255064.537060] [UFW BLOCK] IN=eth0 OUT= MAC=52:54:00:be:e4:65:08:e8:4f:6e:48:0c:08:00 SRC=84.38.185.137 DST=89.252.131.35 LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=22297 PROTO=TCP SPT=43690 DPT=2222 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-06-05 18:52:16 |
| 193.112.104.178 | attack | Unauthorized connection attempt detected from IP address 193.112.104.178 to port 23 |
2020-06-05 19:07:10 |
| 118.89.16.139 | attack | Jun 5 10:45:21 h2779839 sshd[3405]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.89.16.139 user=root Jun 5 10:45:23 h2779839 sshd[3405]: Failed password for root from 118.89.16.139 port 54010 ssh2 Jun 5 10:47:21 h2779839 sshd[3416]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.89.16.139 user=root Jun 5 10:47:22 h2779839 sshd[3416]: Failed password for root from 118.89.16.139 port 50864 ssh2 Jun 5 10:49:12 h2779839 sshd[3447]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.89.16.139 user=root Jun 5 10:49:14 h2779839 sshd[3447]: Failed password for root from 118.89.16.139 port 47716 ssh2 Jun 5 10:51:04 h2779839 sshd[3480]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.89.16.139 user=root Jun 5 10:51:06 h2779839 sshd[3480]: Failed password for root from 118.89.16.139 port 44570 ssh2 Jun 5 10:53 ... |
2020-06-05 18:41:45 |
| 219.85.55.93 | attackbots |
|
2020-06-05 18:34:06 |
| 68.183.157.97 | attackbots | Jun 5 09:40:53 v22019038103785759 sshd\[1944\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.157.97 user=root Jun 5 09:40:55 v22019038103785759 sshd\[1944\]: Failed password for root from 68.183.157.97 port 36506 ssh2 Jun 5 09:46:51 v22019038103785759 sshd\[2320\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.157.97 user=root Jun 5 09:46:53 v22019038103785759 sshd\[2320\]: Failed password for root from 68.183.157.97 port 60338 ssh2 Jun 5 09:49:02 v22019038103785759 sshd\[2426\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.157.97 user=root ... |
2020-06-05 18:53:37 |
| 180.76.143.116 | attackspambots | Lines containing failures of 180.76.143.116 Jun 1 05:20:45 dns01 sshd[3307]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.143.116 user=r.r Jun 1 05:20:47 dns01 sshd[3307]: Failed password for r.r from 180.76.143.116 port 35414 ssh2 Jun 1 05:20:47 dns01 sshd[3307]: Received disconnect from 180.76.143.116 port 35414:11: Bye Bye [preauth] Jun 1 05:20:47 dns01 sshd[3307]: Disconnected from authenticating user r.r 180.76.143.116 port 35414 [preauth] Jun 1 05:37:38 dns01 sshd[7319]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.143.116 user=r.r Jun 1 05:37:40 dns01 sshd[7319]: Failed password for r.r from 180.76.143.116 port 51930 ssh2 Jun 1 05:37:40 dns01 sshd[7319]: Received disconnect from 180.76.143.116 port 51930:11: Bye Bye [preauth] Jun 1 05:37:40 dns01 sshd[7319]: Disconnected from authenticating user r.r 180.76.143.116 port 51930 [preauth] Jun 1 05:41:06 dns01........ ------------------------------ |
2020-06-05 18:35:15 |
| 212.64.91.114 | attack | Brute force SMTP login attempted. ... |
2020-06-05 18:55:37 |
| 114.67.73.71 | attackspam | Jun 5 09:55:34 jumpserver sshd[81729]: Failed password for root from 114.67.73.71 port 57720 ssh2 Jun 5 09:57:10 jumpserver sshd[81753]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.67.73.71 user=root Jun 5 09:57:12 jumpserver sshd[81753]: Failed password for root from 114.67.73.71 port 52542 ssh2 ... |
2020-06-05 18:44:43 |
| 222.239.28.178 | attackspam | $f2bV_matches |
2020-06-05 18:37:25 |