城市(city): unknown
省份(region): unknown
国家(country): United States of America (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 40.216.213.66
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 5698
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;40.216.213.66. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020400 1800 900 604800 86400
;; Query time: 10 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 04 20:36:34 CST 2025
;; MSG SIZE rcvd: 106
Host 66.213.216.40.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 66.213.216.40.in-addr.arpa: NXDOMAIN
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 103.105.216.39 | attack | Oct 21 11:45:34 MK-Soft-VM7 sshd[2398]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.105.216.39 Oct 21 11:45:36 MK-Soft-VM7 sshd[2398]: Failed password for invalid user mysftp from 103.105.216.39 port 49840 ssh2 ... |
2019-10-21 19:22:47 |
| 103.26.99.143 | attackspam | Oct 21 12:34:18 ovpn sshd\[28512\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.26.99.143 user=root Oct 21 12:34:20 ovpn sshd\[28512\]: Failed password for root from 103.26.99.143 port 50468 ssh2 Oct 21 12:53:17 ovpn sshd\[32251\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.26.99.143 user=root Oct 21 12:53:19 ovpn sshd\[32251\]: Failed password for root from 103.26.99.143 port 55526 ssh2 Oct 21 12:57:30 ovpn sshd\[586\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.26.99.143 user=root |
2019-10-21 19:40:59 |
| 51.4.195.188 | attackspam | Oct 21 12:05:27 bouncer sshd\[4954\]: Invalid user admin from 51.4.195.188 port 43082 Oct 21 12:05:27 bouncer sshd\[4954\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.4.195.188 Oct 21 12:05:30 bouncer sshd\[4954\]: Failed password for invalid user admin from 51.4.195.188 port 43082 ssh2 ... |
2019-10-21 19:25:45 |
| 222.186.15.18 | attack | Oct 21 13:55:11 fr01 sshd[12377]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.18 user=root Oct 21 13:55:13 fr01 sshd[12377]: Failed password for root from 222.186.15.18 port 38652 ssh2 ... |
2019-10-21 19:55:17 |
| 123.207.99.21 | attackbots | Oct 20 18:56:22 hpm sshd\[30214\]: Invalid user 123456 from 123.207.99.21 Oct 20 18:56:22 hpm sshd\[30214\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.207.99.21 Oct 20 18:56:24 hpm sshd\[30214\]: Failed password for invalid user 123456 from 123.207.99.21 port 60454 ssh2 Oct 20 19:01:57 hpm sshd\[30634\]: Invalid user emo from 123.207.99.21 Oct 20 19:01:57 hpm sshd\[30634\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.207.99.21 |
2019-10-21 19:23:55 |
| 62.98.42.239 | attackspambots | 2019-10-21 x@x 2019-10-21 13:22:03 unexpected disconnection while reading SMTP command from (ppp-239-42.98-62.wind.hostname) [62.98.42.239]:28180 I=[10.100.18.20]:25 (error: Connection reset by peer) 2019-10-21 x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=62.98.42.239 |
2019-10-21 19:56:04 |
| 218.78.15.235 | attackbots | Oct 21 02:10:04 shadeyouvpn sshd[7537]: Address 218.78.15.235 maps to 235.15.78.218.dial.xw.sh.dynamic.163data.com.cn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Oct 21 02:10:04 shadeyouvpn sshd[7537]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.78.15.235 user=r.r Oct 21 02:10:06 shadeyouvpn sshd[7537]: Failed password for r.r from 218.78.15.235 port 43486 ssh2 Oct 21 02:10:06 shadeyouvpn sshd[7537]: Received disconnect from 218.78.15.235: 11: Bye Bye [preauth] Oct 21 02:19:50 shadeyouvpn sshd[12805]: Address 218.78.15.235 maps to 235.15.78.218.dial.xw.sh.dynamic.163data.com.cn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Oct 21 02:19:50 shadeyouvpn sshd[12805]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.78.15.235 user=r.r Oct 21 02:19:52 shadeyouvpn sshd[12805]: Failed password for r.r from 218.78.15.235 port 47026 ss........ ------------------------------- |
2019-10-21 19:30:54 |
| 198.211.123.183 | attackspambots | Oct 21 11:46:10 thevastnessof sshd[2075]: Failed password for root from 198.211.123.183 port 53528 ssh2 ... |
2019-10-21 19:56:39 |
| 150.95.27.59 | attack | Oct 21 13:41:32 minden010 sshd[15710]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.95.27.59 Oct 21 13:41:34 minden010 sshd[15710]: Failed password for invalid user changeme from 150.95.27.59 port 37370 ssh2 Oct 21 13:46:18 minden010 sshd[20786]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.95.27.59 ... |
2019-10-21 19:54:10 |
| 184.71.160.218 | attackspambots | Unauthorised access (Oct 21) SRC=184.71.160.218 LEN=40 TTL=241 ID=11614 TCP DPT=445 WINDOW=1024 SYN |
2019-10-21 19:35:55 |
| 151.80.41.64 | attackspam | Oct 21 00:08:23 sachi sshd\[19809\]: Invalid user ankesh from 151.80.41.64 Oct 21 00:08:23 sachi sshd\[19809\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns398062.ip-151-80-41.eu Oct 21 00:08:25 sachi sshd\[19809\]: Failed password for invalid user ankesh from 151.80.41.64 port 46723 ssh2 Oct 21 00:12:24 sachi sshd\[20193\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns398062.ip-151-80-41.eu user=root Oct 21 00:12:26 sachi sshd\[20193\]: Failed password for root from 151.80.41.64 port 37854 ssh2 |
2019-10-21 19:21:09 |
| 51.75.22.154 | attackbots | Oct 21 13:42:34 vps647732 sshd[5518]: Failed password for root from 51.75.22.154 port 35150 ssh2 ... |
2019-10-21 19:53:45 |
| 81.43.54.220 | attack | 2019-10-21 x@x 2019-10-21 12:29:59 unexpected disconnection while reading SMTP command from 220.red-81-43-54.staticip.rima-tde.net [81.43.54.220]:29147 I=[10.100.18.25]:25 (error: Connection reset by peer) 2019-10-21 x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=81.43.54.220 |
2019-10-21 19:46:45 |
| 185.176.27.242 | attackspambots | Oct 21 13:37:35 mc1 kernel: \[2944209.414277\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=185.176.27.242 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=17927 PROTO=TCP SPT=47834 DPT=46188 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 21 13:43:18 mc1 kernel: \[2944552.724478\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=185.176.27.242 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=13306 PROTO=TCP SPT=47834 DPT=14845 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 21 13:46:09 mc1 kernel: \[2944723.249674\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=185.176.27.242 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=56813 PROTO=TCP SPT=47834 DPT=54008 WINDOW=1024 RES=0x00 SYN URGP=0 ... |
2019-10-21 19:58:06 |
| 106.13.219.171 | attackbots | Oct 21 05:41:51 MK-Soft-VM7 sshd[31305]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.219.171 Oct 21 05:41:53 MK-Soft-VM7 sshd[31305]: Failed password for invalid user screener from 106.13.219.171 port 38548 ssh2 ... |
2019-10-21 19:41:29 |