城市(city): unknown
省份(region): unknown
国家(country): China
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.248.79.116
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 44086
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;42.248.79.116. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020602 1800 900 604800 86400
;; Query time: 413 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 07 06:06:50 CST 2025
;; MSG SIZE rcvd: 106Host 116.79.248.42.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 116.79.248.42.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 58.54.225.49 | attackspambots | Jul 26 23:09:54 eola postfix/smtpd[31437]: connect from unknown[58.54.225.49] Jul 26 23:09:54 eola postfix/smtpd[31439]: connect from unknown[58.54.225.49] Jul 26 23:09:54 eola postfix/smtpd[31437]: lost connection after CONNECT from unknown[58.54.225.49] Jul 26 23:09:54 eola postfix/smtpd[31437]: disconnect from unknown[58.54.225.49] commands=0/0 Jul 26 23:09:55 eola postfix/smtpd[31439]: lost connection after AUTH from unknown[58.54.225.49] Jul 26 23:09:55 eola postfix/smtpd[31439]: disconnect from unknown[58.54.225.49] ehlo=1 auth=0/1 commands=1/2 Jul 26 23:09:55 eola postfix/smtpd[31437]: connect from unknown[58.54.225.49] Jul 26 23:09:56 eola postfix/smtpd[31437]: lost connection after AUTH from unknown[58.54.225.49] Jul 26 23:09:56 eola postfix/smtpd[31437]: disconnect from unknown[58.54.225.49] ehlo=1 auth=0/1 commands=1/2 Jul 26 23:09:56 eola postfix/smtpd[31439]: connect from unknown[58.54.225.49] Jul 26 23:09:57 eola postfix/smtpd[31439]: lost connection after........ ------------------------------- |
2019-07-29 09:51:47 |
| 115.178.24.72 | attackspambots | 2019-07-29T01:12:05.283480abusebot-6.cloudsearch.cf sshd\[4877\]: Invalid user 12345y from 115.178.24.72 port 53100 |
2019-07-29 09:33:30 |
| 128.199.154.85 | attackbots | Jul 27 03:19:46 nandi sshd[21371]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.154.85 user=r.r Jul 27 03:19:48 nandi sshd[21371]: Failed password for r.r from 128.199.154.85 port 51520 ssh2 Jul 27 03:19:48 nandi sshd[21371]: Received disconnect from 128.199.154.85: 11: Bye Bye [preauth] Jul 27 03:26:26 nandi sshd[24686]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.154.85 user=r.r Jul 27 03:26:28 nandi sshd[24686]: Failed password for r.r from 128.199.154.85 port 35126 ssh2 Jul 27 03:26:28 nandi sshd[24686]: Received disconnect from 128.199.154.85: 11: Bye Bye [preauth] Jul 27 03:31:37 nandi sshd[26830]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.154.85 user=r.r Jul 27 03:31:39 nandi sshd[26830]: Failed password for r.r from 128.199.154.85 port 58676 ssh2 Jul 27 03:31:39 nandi sshd[26830]: Received disconnect from........ ------------------------------- |
2019-07-29 09:34:53 |
| 128.199.249.8 | attackspam | xmlrpc attack |
2019-07-29 09:53:44 |
| 95.111.59.210 | attack | Jul 27 04:39:06 pl3server sshd[2555911]: Bad protocol version identification '' from 95.111.59.210 port 41134 Jul 27 04:39:12 pl3server sshd[2555912]: reveeclipse mapping checking getaddrinfo for ip-95-111-59-210.home.megalan.bg [95.111.59.210] failed - POSSIBLE BREAK-IN ATTEMPT! Jul 27 04:39:12 pl3server sshd[2555912]: Invalid user nexthink from 95.111.59.210 Jul 27 04:39:12 pl3server sshd[2555912]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.111.59.210 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=95.111.59.210 |
2019-07-29 09:28:10 |
| 198.100.144.154 | attackbotsspam | Lines containing failures of 198.100.144.154 Jul 27 02:33:10 f sshd[5606]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.100.144.154 user=r.r Jul 27 02:33:12 f sshd[5606]: Failed password for r.r from 198.100.144.154 port 48706 ssh2 Jul 27 02:33:12 f sshd[5606]: Received disconnect from 198.100.144.154 port 48706:11: Bye Bye [preauth] Jul 27 02:33:12 f sshd[5606]: Disconnected from 198.100.144.154 port 48706 [preauth] Jul 27 10:03:23 f sshd[13164]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.100.144.154 user=r.r Jul 27 10:03:25 f sshd[13164]: Failed password for r.r from 198.100.144.154 port 50164 ssh2 Jul 27 10:03:25 f sshd[13164]: Received disconnect from 198.100.144.154 port 50164:11: Bye Bye [preauth] Jul 27 10:03:25 f sshd[13164]: Disconnected from 198.100.144.154 port 50164 [preauth] Jul 27 10:07:53 f sshd[13201]: Invalid user 123 from 198.100.144.154 port 46648 Jul 27 1........ ------------------------------ |
2019-07-29 09:08:15 |
| 51.38.232.163 | attackbotsspam | Jul 29 03:07:43 SilenceServices sshd[6488]: Failed password for root from 51.38.232.163 port 60802 ssh2 Jul 29 03:12:03 SilenceServices sshd[9152]: Failed password for root from 51.38.232.163 port 56322 ssh2 |
2019-07-29 09:34:02 |
| 112.85.42.180 | attackbots | Jul 17 05:00:27 vtv3 sshd\[13994\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.180 user=root Jul 17 05:00:28 vtv3 sshd\[13994\]: Failed password for root from 112.85.42.180 port 15421 ssh2 Jul 17 05:00:32 vtv3 sshd\[13994\]: Failed password for root from 112.85.42.180 port 15421 ssh2 Jul 17 05:00:35 vtv3 sshd\[13994\]: Failed password for root from 112.85.42.180 port 15421 ssh2 Jul 17 05:00:38 vtv3 sshd\[13994\]: Failed password for root from 112.85.42.180 port 15421 ssh2 Jul 18 11:52:21 vtv3 sshd\[22581\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.180 user=root Jul 18 11:52:23 vtv3 sshd\[22581\]: Failed password for root from 112.85.42.180 port 59326 ssh2 Jul 18 11:52:26 vtv3 sshd\[22581\]: Failed password for root from 112.85.42.180 port 59326 ssh2 Jul 18 11:52:28 vtv3 sshd\[22581\]: Failed password for root from 112.85.42.180 port 59326 ssh2 Jul 18 11:52:31 vtv3 sshd\[22581\]: Failed passw |
2019-07-29 09:36:25 |
| 118.25.231.17 | attackspambots | Jul 29 00:19:10 s64-1 sshd[20447]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.231.17 Jul 29 00:19:12 s64-1 sshd[20447]: Failed password for invalid user fansite from 118.25.231.17 port 42866 ssh2 Jul 29 00:22:19 s64-1 sshd[20476]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.231.17 ... |
2019-07-29 09:19:59 |
| 222.90.83.110 | attackbotsspam | Lines containing failures of 222.90.83.110 (max 1000) Jul 27 08:13:20 Server sshd[28916]: Invalid user ubuntu from 222.90.83.110 port 39424 Jul 27 08:13:20 Server sshd[28916]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.90.83.110 Jul 27 08:13:22 Server sshd[28916]: Failed password for invalid user ubuntu from 222.90.83.110 port 39424 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=222.90.83.110 |
2019-07-29 09:11:34 |
| 196.20.229.43 | attackbots | Jul 27 04:05:32 mail1 sshd[4340]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.20.229.43 user=r.r Jul 27 04:05:34 mail1 sshd[4340]: Failed password for r.r from 196.20.229.43 port 1682 ssh2 Jul 27 04:05:35 mail1 sshd[4340]: Received disconnect from 196.20.229.43 port 1682:11: Bye Bye [preauth] Jul 27 04:05:35 mail1 sshd[4340]: Disconnected from 196.20.229.43 port 1682 [preauth] Jul 27 04:14:02 mail1 sshd[4805]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.20.229.43 user=r.r ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=196.20.229.43 |
2019-07-29 09:13:19 |
| 51.75.125.124 | attackbotsspam | Jul 29 02:23:24 dedicated sshd[30176]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.125.124 user=root Jul 29 02:23:26 dedicated sshd[30176]: Failed password for root from 51.75.125.124 port 39822 ssh2 |
2019-07-29 09:12:16 |
| 223.167.18.193 | attackspambots | Jul 28 23:26:01 pornomens sshd\[21502\]: Invalid user passw0wd from 223.167.18.193 port 47580 Jul 28 23:26:01 pornomens sshd\[21502\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.167.18.193 Jul 28 23:26:02 pornomens sshd\[21502\]: Failed password for invalid user passw0wd from 223.167.18.193 port 47580 ssh2 ... |
2019-07-29 09:55:33 |
| 51.15.118.122 | attack | Jul 29 04:02:44 server01 sshd\[25567\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.15.118.122 user=root Jul 29 04:02:46 server01 sshd\[25567\]: Failed password for root from 51.15.118.122 port 58754 ssh2 Jul 29 04:10:31 server01 sshd\[25696\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.15.118.122 user=root ... |
2019-07-29 09:19:20 |
| 14.248.75.136 | attackbots | Jul 29 00:26:45 srv-4 sshd\[2567\]: Invalid user admin from 14.248.75.136 Jul 29 00:26:45 srv-4 sshd\[2567\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.248.75.136 Jul 29 00:26:48 srv-4 sshd\[2567\]: Failed password for invalid user admin from 14.248.75.136 port 57425 ssh2 ... |
2019-07-29 09:35:59 |