城市(city): unknown
省份(region): unknown
国家(country): IANA Special-Purpose Address
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 243.138.123.91
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 21208
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;243.138.123.91. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020901 1800 900 604800 86400
;; Query time: 10 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 10 03:39:28 CST 2025
;; MSG SIZE rcvd: 107Host 91.123.138.243.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 91.123.138.243.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 167.248.133.68 | attack | Found on CINS badguys / proto=6 . srcport=59067 . dstport=8058 . (1817) |
2020-09-19 02:33:01 |
| 188.254.0.160 | attackspam | Sep 18 10:48:37 scw-tender-jepsen sshd[5332]: Failed password for root from 188.254.0.160 port 52208 ssh2 |
2020-09-19 02:36:19 |
| 79.111.84.94 | attackbots | 23/tcp [2020-09-18]1pkt |
2020-09-19 02:35:35 |
| 91.231.244.113 | attackbots | Sep 17 18:01:24 mail.srvfarm.net postfix/smtps/smtpd[140754]: warning: unknown[91.231.244.113]: SASL PLAIN authentication failed: Sep 17 18:01:25 mail.srvfarm.net postfix/smtps/smtpd[140754]: lost connection after AUTH from unknown[91.231.244.113] Sep 17 18:04:20 mail.srvfarm.net postfix/smtps/smtpd[140188]: warning: unknown[91.231.244.113]: SASL PLAIN authentication failed: Sep 17 18:04:20 mail.srvfarm.net postfix/smtps/smtpd[140188]: lost connection after AUTH from unknown[91.231.244.113] Sep 17 18:11:18 mail.srvfarm.net postfix/smtps/smtpd[155678]: warning: unknown[91.231.244.113]: SASL PLAIN authentication failed: |
2020-09-19 02:14:23 |
| 203.99.180.229 | attackspambots | Host Scan |
2020-09-19 02:31:51 |
| 185.16.37.135 | attackspambots | 185.16.37.135 (PL/Poland/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep 18 08:12:02 server5 sshd[7303]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.62.131.106 user=root Sep 18 08:11:13 server5 sshd[6479]: Failed password for root from 163.172.119.246 port 43880 ssh2 Sep 18 08:10:18 server5 sshd[5815]: Failed password for root from 195.204.16.82 port 34944 ssh2 Sep 18 08:10:45 server5 sshd[6322]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.16.37.135 user=root Sep 18 08:10:47 server5 sshd[6322]: Failed password for root from 185.16.37.135 port 60126 ssh2 Sep 18 08:10:15 server5 sshd[5815]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.204.16.82 user=root IP Addresses Blocked: 92.62.131.106 (LT/Republic of Lithuania/-) 163.172.119.246 (FR/France/-) 195.204.16.82 (NO/Norway/-) |
2020-09-19 02:29:08 |
| 182.61.175.219 | attackspambots | 2020-09-18T18:17:49.758575shield sshd\[26351\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.175.219 user=root 2020-09-18T18:17:51.903858shield sshd\[26351\]: Failed password for root from 182.61.175.219 port 42152 ssh2 2020-09-18T18:22:07.110966shield sshd\[27721\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.175.219 user=root 2020-09-18T18:22:09.007233shield sshd\[27721\]: Failed password for root from 182.61.175.219 port 52136 ssh2 2020-09-18T18:26:28.219716shield sshd\[29366\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.175.219 user=root |
2020-09-19 02:40:58 |
| 62.210.194.7 | attackbotsspam | Sep 18 19:22:25 mail.srvfarm.net postfix/smtpd[869222]: lost connection after STARTTLS from r7.news.eu.rvca.com[62.210.194.7] Sep 18 19:24:09 mail.srvfarm.net postfix/smtpd[882424]: lost connection after STARTTLS from r7.news.eu.rvca.com[62.210.194.7] Sep 18 19:24:47 mail.srvfarm.net postfix/smtpd[882425]: lost connection after STARTTLS from r7.news.eu.rvca.com[62.210.194.7] Sep 18 19:28:16 mail.srvfarm.net postfix/smtpd[869259]: lost connection after STARTTLS from r7.news.eu.rvca.com[62.210.194.7] Sep 18 19:30:08 mail.srvfarm.net postfix/smtpd[885331]: lost connection after STARTTLS from r7.news.eu.rvca.com[62.210.194.7] |
2020-09-19 02:16:32 |
| 195.54.160.180 | attack | Sep 18 20:37:26 buvik sshd[27950]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.54.160.180 Sep 18 20:37:27 buvik sshd[27950]: Failed password for invalid user manager from 195.54.160.180 port 2432 ssh2 Sep 18 20:37:29 buvik sshd[27952]: Invalid user monitor from 195.54.160.180 ... |
2020-09-19 02:38:02 |
| 49.88.112.76 | attack | 2020-09-18 12:05:42.985746-0500 localhost sshd[5144]: Failed password for root from 49.88.112.76 port 46207 ssh2 |
2020-09-19 02:33:26 |
| 159.192.104.253 | attackbotsspam | Found on CINS badguys / proto=6 . srcport=46369 . dstport=1433 . (1597) |
2020-09-19 02:33:47 |
| 51.254.220.61 | attackbotsspam | Sep 18 16:14:05 ovpn sshd\[32311\]: Invalid user rdc from 51.254.220.61 Sep 18 16:14:05 ovpn sshd\[32311\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.254.220.61 Sep 18 16:14:06 ovpn sshd\[32311\]: Failed password for invalid user rdc from 51.254.220.61 port 58966 ssh2 Sep 18 16:20:17 ovpn sshd\[8905\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.254.220.61 user=root Sep 18 16:20:19 ovpn sshd\[8905\]: Failed password for root from 51.254.220.61 port 44063 ssh2 |
2020-09-19 02:44:53 |
| 117.121.235.3 | attackbots | Sep 17 18:13:18 mail.srvfarm.net postfix/smtpd[143214]: warning: unknown[117.121.235.3]: SASL PLAIN authentication failed: Sep 17 18:13:18 mail.srvfarm.net postfix/smtpd[143214]: lost connection after AUTH from unknown[117.121.235.3] Sep 17 18:14:35 mail.srvfarm.net postfix/smtps/smtpd[137957]: warning: unknown[117.121.235.3]: SASL PLAIN authentication failed: Sep 17 18:14:36 mail.srvfarm.net postfix/smtps/smtpd[137957]: lost connection after AUTH from unknown[117.121.235.3] Sep 17 18:15:46 mail.srvfarm.net postfix/smtps/smtpd[137957]: warning: unknown[117.121.235.3]: SASL PLAIN authentication failed: |
2020-09-19 02:13:42 |
| 73.200.119.141 | attackspam | Failed password for root from 73.200.119.141 port 38870 ssh2 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=c-73-200-119-141.hsd1.dc.comcast.net user=root Failed password for root from 73.200.119.141 port 41530 ssh2 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=c-73-200-119-141.hsd1.dc.comcast.net user=root Failed password for root from 73.200.119.141 port 44184 ssh2 |
2020-09-19 02:34:50 |
| 213.81.196.31 | attack | port scan and connect, tcp 1433 (ms-sql-s) |
2020-09-19 02:40:25 |