城市(city): unknown
省份(region): unknown
国家(country): Korea (the Republic of)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 211.243.14.110
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 28378
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;211.243.14.110. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022800 1800 900 604800 86400
;; Query time: 27 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 28 19:19:44 CST 2025
;; MSG SIZE rcvd: 107Host 110.14.243.211.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 110.14.243.211.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 46.38.145.5 | attackspambots | Apr 2 11:11:23 srv01 postfix/smtpd\[23451\]: warning: unknown\[46.38.145.5\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Apr 2 11:11:53 srv01 postfix/smtpd\[11748\]: warning: unknown\[46.38.145.5\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Apr 2 11:12:24 srv01 postfix/smtpd\[23451\]: warning: unknown\[46.38.145.5\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Apr 2 11:12:54 srv01 postfix/smtpd\[4371\]: warning: unknown\[46.38.145.5\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Apr 2 11:13:25 srv01 postfix/smtpd\[4371\]: warning: unknown\[46.38.145.5\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2020-04-02 17:25:40 |
| 139.215.217.181 | attackbots | Apr 2 08:40:27 mail sshd[1241]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.215.217.181 user=root Apr 2 08:40:28 mail sshd[1241]: Failed password for root from 139.215.217.181 port 34243 ssh2 Apr 2 08:59:26 mail sshd[30660]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.215.217.181 user=root Apr 2 08:59:29 mail sshd[30660]: Failed password for root from 139.215.217.181 port 38090 ssh2 Apr 2 09:03:34 mail sshd[4693]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.215.217.181 user=root Apr 2 09:03:36 mail sshd[4693]: Failed password for root from 139.215.217.181 port 33130 ssh2 ... |
2020-04-02 16:53:25 |
| 150.109.126.175 | attackspam | 2020-04-02T09:20:08.801422randservbullet-proofcloud-66.localdomain sshd[419]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.109.126.175 user=root 2020-04-02T09:20:10.368494randservbullet-proofcloud-66.localdomain sshd[419]: Failed password for root from 150.109.126.175 port 56454 ssh2 2020-04-02T09:22:52.040394randservbullet-proofcloud-66.localdomain sshd[435]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.109.126.175 user=root 2020-04-02T09:22:54.123992randservbullet-proofcloud-66.localdomain sshd[435]: Failed password for root from 150.109.126.175 port 39104 ssh2 ... |
2020-04-02 17:30:40 |
| 49.232.146.216 | attackbotsspam | Apr 2 08:59:07 powerpi2 sshd[13891]: Invalid user yangyg from 49.232.146.216 port 37272 Apr 2 08:59:09 powerpi2 sshd[13891]: Failed password for invalid user yangyg from 49.232.146.216 port 37272 ssh2 Apr 2 09:06:58 powerpi2 sshd[14377]: Invalid user jh from 49.232.146.216 port 51800 ... |
2020-04-02 17:28:42 |
| 124.238.113.126 | attackbots | Apr 2 10:01:33 server2 sshd\[12310\]: User root from 124.238.113.126 not allowed because not listed in AllowUsers Apr 2 10:01:35 server2 sshd\[12311\]: User root from 124.238.113.126 not allowed because not listed in AllowUsers Apr 2 10:01:39 server2 sshd\[12323\]: User root from 124.238.113.126 not allowed because not listed in AllowUsers Apr 2 10:01:39 server2 sshd\[12321\]: User root from 124.238.113.126 not allowed because not listed in AllowUsers Apr 2 10:01:42 server2 sshd\[12325\]: User root from 124.238.113.126 not allowed because not listed in AllowUsers Apr 2 10:01:45 server2 sshd\[12329\]: User root from 124.238.113.126 not allowed because not listed in AllowUsers |
2020-04-02 17:07:19 |
| 45.133.99.7 | attack | Apr 2 11:14:11 relay postfix/smtpd\[1914\]: warning: unknown\[45.133.99.7\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Apr 2 11:14:27 relay postfix/smtpd\[1841\]: warning: unknown\[45.133.99.7\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Apr 2 11:17:50 relay postfix/smtpd\[1843\]: warning: unknown\[45.133.99.7\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Apr 2 11:18:10 relay postfix/smtpd\[1914\]: warning: unknown\[45.133.99.7\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Apr 2 11:18:27 relay postfix/smtpd\[1914\]: warning: unknown\[45.133.99.7\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2020-04-02 17:26:43 |
| 113.88.124.133 | attackspam | (ftpd) Failed FTP login from 113.88.124.133 (CN/China/-): 10 in the last 3600 secs |
2020-04-02 17:32:44 |
| 36.79.255.235 | attackbotsspam | Attempt to attack host OS, exploiting network vulnerabilities, on 02-04-2020 04:55:11. |
2020-04-02 16:54:16 |
| 120.70.100.2 | attack | Apr 2 10:18:59 odroid64 sshd\[20748\]: User root from 120.70.100.2 not allowed because not listed in AllowUsers Apr 2 10:19:00 odroid64 sshd\[20748\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.70.100.2 user=root ... |
2020-04-02 17:15:46 |
| 120.43.48.74 | attack | CN China 74.48.43.120.broad.nd.fj.dynamic.163data.com.cn Failures: 20 ftpd |
2020-04-02 17:09:11 |
| 5.196.140.219 | attack | Apr 2 11:15:02 lukav-desktop sshd\[15254\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.196.140.219 user=root Apr 2 11:15:04 lukav-desktop sshd\[15254\]: Failed password for root from 5.196.140.219 port 35375 ssh2 Apr 2 11:22:01 lukav-desktop sshd\[15524\]: Invalid user leiyt from 5.196.140.219 Apr 2 11:22:01 lukav-desktop sshd\[15524\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.196.140.219 Apr 2 11:22:03 lukav-desktop sshd\[15524\]: Failed password for invalid user leiyt from 5.196.140.219 port 50682 ssh2 |
2020-04-02 17:28:00 |
| 59.56.99.130 | attackspam | Invalid user nikki from 59.56.99.130 port 34077 |
2020-04-02 17:16:49 |
| 80.82.77.234 | attackbots | 04/02/2020-04:31:24.444571 80.82.77.234 Protocol: 6 ET SCAN NMAP -sS window 1024 |
2020-04-02 17:17:20 |
| 69.94.131.42 | attackspambots | Apr 2 04:09:55 web01 postfix/smtpd[14004]: warning: hostname 69-94-131-42.nca.datanoc.com does not resolve to address 69.94.131.42 Apr 2 04:09:55 web01 postfix/smtpd[14004]: connect from unknown[69.94.131.42] Apr 2 04:09:55 web01 policyd-spf[14007]: None; identhostnamey=helo; client-ip=69.94.131.42; helo=righteous.gpslens.co; envelope-from=x@x Apr 2 04:09:55 web01 policyd-spf[14007]: Pass; identhostnamey=mailfrom; client-ip=69.94.131.42; helo=righteous.gpslens.co; envelope-from=x@x Apr x@x Apr 2 04:09:55 web01 postfix/smtpd[14004]: disconnect from unknown[69.94.131.42] Apr 2 04:11:05 web01 postfix/smtpd[13729]: warning: hostname 69-94-131-42.nca.datanoc.com does not resolve to address 69.94.131.42 Apr 2 04:11:05 web01 postfix/smtpd[13729]: connect from unknown[69.94.131.42] Apr 2 04:11:05 web01 policyd-spf[14191]: None; identhostnamey=helo; client-ip=69.94.131.42; helo=righteous.gpslens.co; envelope-from=x@x Apr 2 04:11:05 web01 policyd-spf[14191]: Pass; identh........ ------------------------------- |
2020-04-02 17:23:25 |
| 82.148.18.109 | attackspambots | Lines containing failures of 82.148.18.109 Apr 1 20:33:38 shared11 sshd[26037]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.148.18.109 user=r.r Apr 1 20:33:41 shared11 sshd[26037]: Failed password for r.r from 82.148.18.109 port 60300 ssh2 Apr 1 20:33:41 shared11 sshd[26037]: Received disconnect from 82.148.18.109 port 60300:11: Bye Bye [preauth] Apr 1 20:33:41 shared11 sshd[26037]: Disconnected from authenticating user r.r 82.148.18.109 port 60300 [preauth] Apr 1 20:50:47 shared11 sshd[32092]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.148.18.109 user=r.r Apr 1 20:50:50 shared11 sshd[32092]: Failed password for r.r from 82.148.18.109 port 44600 ssh2 Apr 1 20:50:50 shared11 sshd[32092]: Received disconnect from 82.148.18.109 port 44600:11: Bye Bye [preauth] Apr 1 20:50:50 shared11 sshd[32092]: Disconnected from authenticating user r.r 82.148.18.109 port 44600 [preauth........ ------------------------------ |
2020-04-02 17:14:05 |