城市(city): unknown
省份(region): unknown
国家(country): Multicast Address
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 230.142.249.140
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 62347
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;230.142.249.140. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021501 1800 900 604800 86400
;; Query time: 10 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 16 13:47:32 CST 2025
;; MSG SIZE rcvd: 108Host 140.249.142.230.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 140.249.142.230.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 117.50.27.57 | attack | SSH Brute Force, server-1 sshd[22207]: Failed password for invalid user bonec from 117.50.27.57 port 44211 ssh2 |
2019-07-17 11:27:09 |
| 195.154.61.206 | attack | 16.07.2019 21:03:35 HTTPs access blocked by firewall |
2019-07-17 11:26:25 |
| 181.49.254.230 | attack | Jul 17 04:59:45 legacy sshd[13629]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.49.254.230 Jul 17 04:59:47 legacy sshd[13629]: Failed password for invalid user ubuntu from 181.49.254.230 port 60542 ssh2 Jul 17 05:05:04 legacy sshd[13800]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.49.254.230 ... |
2019-07-17 11:10:46 |
| 163.172.76.253 | attack | SIPVicious Scanner Detection |
2019-07-17 10:56:42 |
| 134.209.35.183 | attackspambots | Jul 17 05:18:47 eventyay sshd[8347]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.35.183 Jul 17 05:18:48 eventyay sshd[8347]: Failed password for invalid user tmax from 134.209.35.183 port 42859 ssh2 Jul 17 05:23:31 eventyay sshd[9368]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.35.183 ... |
2019-07-17 11:25:52 |
| 178.128.241.99 | attackspambots | Jul 17 03:53:59 localhost sshd\[36924\]: Invalid user admin from 178.128.241.99 port 39268 Jul 17 03:53:59 localhost sshd\[36924\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.241.99 ... |
2019-07-17 10:55:15 |
| 117.27.139.56 | attack | fraudulent SSH attempt |
2019-07-17 11:34:20 |
| 41.35.53.114 | attackbots | Honeypot attack, port: 23, PTR: host-41.35.53.114.tedata.net. |
2019-07-17 11:33:36 |
| 79.137.82.213 | attack | Jul 17 04:23:39 bouncer sshd\[15089\]: Invalid user rodrigo from 79.137.82.213 port 53608 Jul 17 04:23:39 bouncer sshd\[15089\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.137.82.213 Jul 17 04:23:42 bouncer sshd\[15089\]: Failed password for invalid user rodrigo from 79.137.82.213 port 53608 ssh2 ... |
2019-07-17 11:07:13 |
| 115.124.94.146 | attackspam | Jul 16 21:43:47 aat-srv002 sshd[23243]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.124.94.146 Jul 16 21:43:49 aat-srv002 sshd[23243]: Failed password for invalid user diamond from 115.124.94.146 port 39474 ssh2 Jul 16 21:49:25 aat-srv002 sshd[23326]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.124.94.146 Jul 16 21:49:28 aat-srv002 sshd[23326]: Failed password for invalid user es from 115.124.94.146 port 37032 ssh2 ... |
2019-07-17 11:03:53 |
| 117.0.35.153 | attackspam | Jul 17 02:53:13 sshgateway sshd\[16505\]: Invalid user admin from 117.0.35.153 Jul 17 02:53:13 sshgateway sshd\[16505\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.0.35.153 Jul 17 02:53:16 sshgateway sshd\[16505\]: Failed password for invalid user admin from 117.0.35.153 port 56573 ssh2 |
2019-07-17 10:55:33 |
| 185.137.111.123 | attackbots | Jul 17 03:52:15 mail postfix/smtpd\[14567\]: warning: unknown\[185.137.111.123\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Jul 17 03:52:46 mail postfix/smtpd\[15777\]: warning: unknown\[185.137.111.123\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Jul 17 03:53:17 mail postfix/smtpd\[15804\]: warning: unknown\[185.137.111.123\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Jul 17 04:23:24 mail postfix/smtpd\[17333\]: warning: unknown\[185.137.111.123\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ |
2019-07-17 11:01:02 |
| 3.92.126.240 | attack | Jul 16 21:03:40 TCP Attack: SRC=3.92.126.240 DST=[Masked] LEN=250 TOS=0x00 PREC=0x00 TTL=235 DF PROTO=TCP SPT=38996 DPT=80 WINDOW=913 RES=0x00 ACK PSH URGP=0 |
2019-07-17 11:23:41 |
| 104.152.52.36 | attackbotsspam | Jul 17 00:04:59 mail kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3c:4d:20:28:99:3a:4d:23:91:08:00 SRC=104.152.52.36 DST=213.136.73.128 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=63094 PROTO=TCP SPT=54699 DPT=6000 WINDOW=1024 RES=0x00 SYN URGP=0 Jul 17 00:05:01 mail kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3c:4d:20:28:99:3a:4d:23:91:08:00 SRC=104.152.52.36 DST=213.136.73.128 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=990 PROTO=TCP SPT=54699 DPT=8009 WINDOW=1024 RES=0x00 SYN URGP=0 Jul 17 00:05:02 mail kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3c:4d:20:28:99:3a:4d:23:91:08:00 SRC=104.152.52.36 DST=213.136.73.128 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=4075 PROTO=TCP SPT=54699 DPT=138 WINDOW=1024 RES=0x00 SYN URGP=0 Jul 17 00:05:02 mail kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3c:4d:20:28:99:3a:4d:23:91:08:00 SRC=104.152.52.36 DST=213.136.73.128 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=46767 PROTO=TCP SPT=54699 DPT=8172 WINDOW=1024 RES=0x00 SYN URGP=0 Jul 17 00:05:02 mail kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00 |
2019-07-17 11:18:52 |
| 212.83.145.12 | attack | \[2019-07-16 21:34:48\] SECURITY\[20812\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-07-16T21:34:48.034-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="9000000011972592277524",SessionID="0x7f06f804c2c8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/212.83.145.12/51269",ACLName="no_extension_match" \[2019-07-16 21:38:29\] SECURITY\[20812\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-07-16T21:38:29.422-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="90000000011972592277524",SessionID="0x7f06f81021a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/212.83.145.12/49502",ACLName="no_extension_match" \[2019-07-16 21:42:06\] SECURITY\[20812\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-07-16T21:42:06.619-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="900000000011972592277524",SessionID="0x7f06f823f758",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/212.83.14 |
2019-07-17 10:56:11 |