城市(city): unknown
省份(region): unknown
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 48.108.108.106
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 64805
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;48.108.108.106. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025040200 1800 900 604800 86400
;; Query time: 154 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Apr 02 18:27:50 CST 2025
;; MSG SIZE rcvd: 107
Host 106.108.108.48.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 106.108.108.48.in-addr.arpa: NXDOMAIN
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 77.40.11.88 | attackbots | 10/04/2019-18:33:33.332621 77.40.11.88 Protocol: 6 SURICATA SMTP tls rejected |
2019-10-05 01:07:27 |
| 206.189.146.13 | attackspam | Oct 4 17:00:45 server sshd\[13299\]: Invalid user Qwer@2016 from 206.189.146.13 port 44390 Oct 4 17:00:45 server sshd\[13299\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.146.13 Oct 4 17:00:47 server sshd\[13299\]: Failed password for invalid user Qwer@2016 from 206.189.146.13 port 44390 ssh2 Oct 4 17:07:29 server sshd\[27876\]: Invalid user Qwer@2016 from 206.189.146.13 port 52017 Oct 4 17:07:29 server sshd\[27876\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.146.13 |
2019-10-05 01:11:39 |
| 51.75.52.127 | attack | 10/04/2019-19:25:51.313447 51.75.52.127 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 52 |
2019-10-05 01:27:24 |
| 138.197.146.132 | attackbotsspam | Automatic report - Banned IP Access |
2019-10-05 01:07:04 |
| 112.215.141.101 | attackspambots | Oct 4 15:14:27 vtv3 sshd\[30425\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.215.141.101 user=root Oct 4 15:14:30 vtv3 sshd\[30425\]: Failed password for root from 112.215.141.101 port 36092 ssh2 Oct 4 15:19:13 vtv3 sshd\[32663\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.215.141.101 user=root Oct 4 15:19:15 vtv3 sshd\[32663\]: Failed password for root from 112.215.141.101 port 58710 ssh2 Oct 4 15:23:55 vtv3 sshd\[2790\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.215.141.101 user=root Oct 4 15:37:39 vtv3 sshd\[9928\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.215.141.101 user=root Oct 4 15:37:41 vtv3 sshd\[9928\]: Failed password for root from 112.215.141.101 port 36522 ssh2 Oct 4 15:42:11 vtv3 sshd\[12193\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh rus |
2019-10-05 01:23:51 |
| 183.110.242.74 | attackbots | Oct 4 08:15:56 localhost kernel: [3929175.450506] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=183.110.242.74 DST=[mungedIP2] LEN=40 TOS=0x08 PREC=0x20 TTL=83 ID=44798 DF PROTO=TCP SPT=58474 DPT=25 WINDOW=29200 RES=0x00 SYN URGP=0 Oct 4 08:15:56 localhost kernel: [3929175.450538] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=183.110.242.74 DST=[mungedIP2] LEN=40 TOS=0x08 PREC=0x20 TTL=83 ID=44798 DF PROTO=TCP SPT=58474 DPT=25 SEQ=1781262955 ACK=0 WINDOW=29200 RES=0x00 SYN URGP=0 Oct 4 08:24:25 localhost kernel: [3929684.133412] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:aa:c1:08:00 SRC=183.110.242.74 DST=[mungedIP2] LEN=40 TOS=0x08 PREC=0x20 TTL=56 ID=34090 DF PROTO=TCP SPT=59209 DPT=22 WINDOW=29200 RES=0x00 SYN URGP=0 Oct 4 08:24:25 localhost kernel: [3929684.133444] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:aa:c1:08:00 SRC=183.110.242.74 DST=[mungedIP2] LEN=40 TOS=0x |
2019-10-05 01:05:25 |
| 187.45.116.204 | attackbotsspam | Oct 4 14:24:06 tuxlinux sshd[18779]: Invalid user admin from 187.45.116.204 port 43196 Oct 4 14:24:06 tuxlinux sshd[18779]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.45.116.204 Oct 4 14:24:06 tuxlinux sshd[18779]: Invalid user admin from 187.45.116.204 port 43196 Oct 4 14:24:06 tuxlinux sshd[18779]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.45.116.204 Oct 4 14:24:06 tuxlinux sshd[18779]: Invalid user admin from 187.45.116.204 port 43196 Oct 4 14:24:06 tuxlinux sshd[18779]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.45.116.204 Oct 4 14:24:08 tuxlinux sshd[18779]: Failed password for invalid user admin from 187.45.116.204 port 43196 ssh2 ... |
2019-10-05 01:16:11 |
| 45.70.167.248 | attackspambots | Oct 4 18:44:00 MK-Soft-VM7 sshd[30949]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.70.167.248 Oct 4 18:44:03 MK-Soft-VM7 sshd[30949]: Failed password for invalid user 1@3qWeaSdzXc from 45.70.167.248 port 37368 ssh2 ... |
2019-10-05 01:04:40 |
| 201.116.12.217 | attackbotsspam | Oct 4 19:15:37 localhost sshd\[12168\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.116.12.217 user=root Oct 4 19:15:39 localhost sshd\[12168\]: Failed password for root from 201.116.12.217 port 54197 ssh2 Oct 4 19:21:45 localhost sshd\[12832\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.116.12.217 user=root |
2019-10-05 01:28:07 |
| 13.71.148.11 | attackspam | Oct 4 18:09:31 kscrazy sshd\[8051\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.71.148.11 user=root Oct 4 18:09:32 kscrazy sshd\[8051\]: Failed password for root from 13.71.148.11 port 49234 ssh2 Oct 4 18:27:22 kscrazy sshd\[8848\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.71.148.11 user=root |
2019-10-05 01:02:40 |
| 185.196.55.57 | attack | Oct 4 07:24:05 mailman postfix/smtpd[27217]: NOQUEUE: reject: RCPT from s825.hubucoapp.com[185.196.55.57]: 554 5.7.1 Service unavailable; Client host [185.196.55.57] blocked using rbl.rbldns.ru; RBLDNS Server v1.1.0. Author VDV [ Site: WWW.RBLDNS.RU ]; from=<[munged][at]s825.hubucoapp.com> to= |
2019-10-05 01:16:46 |
| 46.162.193.21 | attack | proto=tcp . spt=48164 . dpt=25 . (Listed on abuseat-org plus barracuda and spamcop) (506) |
2019-10-05 01:12:47 |
| 80.82.77.33 | attack | 10/04/2019-18:13:10.072837 80.82.77.33 Protocol: 6 ET DROP Dshield Block Listed Source group 1 |
2019-10-05 01:11:07 |
| 45.82.153.34 | attackbots | 1972/tcp 1961/tcp 1949/tcp... [2019-08-17/10-04]1224pkt,539pt.(tcp) |
2019-10-05 01:32:27 |
| 144.217.83.201 | attackspam | Oct 4 19:05:56 vps647732 sshd[19732]: Failed password for root from 144.217.83.201 port 59998 ssh2 ... |
2019-10-05 01:12:11 |