城市(city): unknown
省份(region): unknown
国家(country): United States of America (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 48.106.8.193
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 13390
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;48.106.8.193. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020901 1800 900 604800 86400
;; Query time: 12 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 10 07:13:57 CST 2025
;; MSG SIZE rcvd: 105Host 193.8.106.48.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 193.8.106.48.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 150.107.140.213 | attackspam | Jun 17 17:21:10 xb0 sshd[5623]: Failed password for invalid user cybele from 150.107.140.213 port 42298 ssh2 Jun 17 17:21:10 xb0 sshd[5623]: Received disconnect from 150.107.140.213: 11: Bye Bye [preauth] Jun 17 17:24:54 xb0 sshd[15729]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.107.140.213 user=r.r Jun 17 17:24:56 xb0 sshd[15729]: Failed password for r.r from 150.107.140.213 port 50988 ssh2 Jun 17 17:24:57 xb0 sshd[15729]: Received disconnect from 150.107.140.213: 11: Bye Bye [preauth] Jun 17 17:27:12 xb0 sshd[8320]: Failed password for invalid user pgsql1 from 150.107.140.213 port 44718 ssh2 Jun 17 17:27:12 xb0 sshd[8320]: Received disconnect from 150.107.140.213: 11: Bye Bye [preauth] Jun 17 17:29:35 xb0 sshd[13829]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.107.140.213 user=mysql Jun 17 17:29:37 xb0 sshd[13829]: Failed password for mysql from 150.107.140.213 port 38........ ------------------------------- |
2019-06-22 18:06:03 |
| 92.242.198.250 | attackspambots | Jun 22 06:20:42 mxgate1 postfix/postscreen[10273]: CONNECT from [92.242.198.250]:60679 to [176.31.12.44]:25 Jun 22 06:20:42 mxgate1 postfix/dnsblog[10315]: addr 92.242.198.250 listed by domain cbl.abuseat.org as 127.0.0.2 Jun 22 06:20:42 mxgate1 postfix/dnsblog[10311]: addr 92.242.198.250 listed by domain zen.spamhaus.org as 127.0.0.3 Jun 22 06:20:42 mxgate1 postfix/dnsblog[10311]: addr 92.242.198.250 listed by domain zen.spamhaus.org as 127.0.0.4 Jun 22 06:20:42 mxgate1 postfix/dnsblog[10312]: addr 92.242.198.250 listed by domain ix.dnsbl.xxxxxx.net as 127.0.0.2 Jun 22 06:20:42 mxgate1 postfix/dnsblog[10314]: addr 92.242.198.250 listed by domain bl.spamcop.net as 127.0.0.2 Jun 22 06:20:42 mxgate1 postfix/dnsblog[10313]: addr 92.242.198.250 listed by domain b.barracudacentral.org as 127.0.0.2 Jun 22 06:20:43 mxgate1 postfix/postscreen[10273]: PREGREET 18 after 0.99 from [92.242.198.250]:60679: HELO ijytkek.com Jun 22 06:20:43 mxgate1 postfix/postscreen[10273]: DNSBL ra........ ------------------------------- |
2019-06-22 18:44:41 |
| 116.111.116.80 | attackspambots | Automatic report - SSH Brute-Force Attack |
2019-06-22 18:22:53 |
| 205.185.124.95 | attack | ZTE Router Exploit Scanner |
2019-06-22 18:37:56 |
| 77.27.40.96 | attackspambots | Jun 18 21:47:11 h2421860 postfix/postscreen[8772]: CONNECT from [77.27.40.96]:37730 to [85.214.119.52]:25 Jun 18 21:47:11 h2421860 postfix/dnsblog[8775]: addr 77.27.40.96 listed by domain ix.dnsbl.xxxxxx.net as 127.0.0.2 Jun 18 21:47:11 h2421860 postfix/dnsblog[8776]: addr 77.27.40.96 listed by domain bl.spamcop.net as 127.0.0.2 Jun 18 21:47:11 h2421860 postfix/dnsblog[8776]: addr 77.27.40.96 listed by domain zen.spamhaus.org as 127.0.0.3 Jun 18 21:47:11 h2421860 postfix/dnsblog[8776]: addr 77.27.40.96 listed by domain zen.spamhaus.org as 127.0.0.4 Jun 18 21:47:11 h2421860 postfix/dnsblog[8776]: addr 77.27.40.96 listed by domain Unknown.trblspam.com as 185.53.179.7 Jun 18 21:47:11 h2421860 postfix/dnsblog[8777]: addr 77.27.40.96 listed by domain b.barracudacentral.org as 127.0.0.2 Jun 18 21:47:11 h2421860 postfix/dnsblog[8780]: addr 77.27.40.96 listed by domain dnsbl.sorbs.net as 127.0.0.6 Jun 18 21:47:12 h2421860 postfix/postscreen[8772]: PREGREET 46 after 1.2 from [77........ ------------------------------- |
2019-06-22 18:48:01 |
| 218.92.0.207 | attackbotsspam | Jun 22 11:34:45 MK-Soft-Root2 sshd\[18340\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.207 user=root Jun 22 11:34:48 MK-Soft-Root2 sshd\[18340\]: Failed password for root from 218.92.0.207 port 41996 ssh2 Jun 22 11:34:50 MK-Soft-Root2 sshd\[18340\]: Failed password for root from 218.92.0.207 port 41996 ssh2 ... |
2019-06-22 18:23:53 |
| 171.241.60.190 | attackspambots | SMB Server BruteForce Attack |
2019-06-22 17:52:57 |
| 181.197.90.190 | attackbotsspam | *Port Scan* detected from 181.197.90.190 (PA/Panama/-). 4 hits in the last 35 seconds |
2019-06-22 18:42:56 |
| 118.24.89.243 | attack | $f2bV_matches |
2019-06-22 18:38:57 |
| 93.118.104.149 | attack | Jun 19 12:07:07 our-server-hostname postfix/smtpd[5618]: connect from unknown[93.118.104.149] Jun x@x Jun 19 12:07:10 our-server-hostname postfix/smtpd[5618]: lost connection after RCPT from unknown[93.118.104.149] Jun 19 12:07:10 our-server-hostname postfix/smtpd[5618]: disconnect from unknown[93.118.104.149] Jun 19 12:39:24 our-server-hostname postfix/smtpd[16176]: connect from unknown[93.118.104.149] Jun x@x Jun x@x Jun x@x Jun 19 12:39:29 our-server-hostname postfix/smtpd[16176]: lost connection after RCPT from unknown[93.118.104.149] Jun 19 12:39:29 our-server-hostname postfix/smtpd[16176]: disconnect from unknown[93.118.104.149] Jun 19 12:52:13 our-server-hostname postfix/smtpd[24174]: connect from unknown[93.118.104.149] Jun 19 12:52:17 our-server-hostname postfix/smtpd[24044]: connect from unknown[93.118.104.149] Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun 19 12:52:30 our-server-hostname postfix/smtpd[24174]: lost connecti........ ------------------------------- |
2019-06-22 17:56:24 |
| 61.143.138.74 | attackbots | Port scan: Attack repeated for 24 hours |
2019-06-22 18:19:09 |
| 58.242.83.38 | attack | Jun 22 04:26:20 **** sshd[22561]: User root from 58.242.83.38 not allowed because not listed in AllowUsers |
2019-06-22 18:32:39 |
| 111.246.96.40 | attackspambots | 2019-06-22T06:24:59.419739mail01 postfix/smtpd[8482]: warning: 111-246-96-40.dynamic-ip.hinet.net[111.246.96.40]: SASL PLAIN authentication failed: 2019-06-22T06:25:09.127508mail01 postfix/smtpd[8482]: warning: 111-246-96-40.dynamic-ip.hinet.net[111.246.96.40]: SASL PLAIN authentication failed: 2019-06-22T06:25:17.365761mail01 postfix/smtpd[8482]: warning: 111-246-96-40.dynamic-ip.hinet.net[111.246.96.40]: SASL PLAIN authentication failed: |
2019-06-22 18:37:23 |
| 62.173.151.168 | attackbotsspam | *Port Scan* detected from 62.173.151.168 (RU/Russia/www.jhh.ij). 4 hits in the last 90 seconds |
2019-06-22 18:42:20 |
| 106.12.21.123 | attackspam | 2019-06-22T06:46:44.594460test01.cajus.name sshd\[32171\]: Invalid user tomcat from 106.12.21.123 port 41406 2019-06-22T06:46:44.614310test01.cajus.name sshd\[32171\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.21.123 2019-06-22T06:46:46.534469test01.cajus.name sshd\[32171\]: Failed password for invalid user tomcat from 106.12.21.123 port 41406 ssh2 |
2019-06-22 18:33:28 |