城市(city): unknown
省份(region): unknown
国家(country): United States of America (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 48.169.62.139
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 59400
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;48.169.62.139. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022601 1800 900 604800 86400
;; Query time: 38 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 27 01:22:23 CST 2025
;; MSG SIZE rcvd: 106
Host 139.62.169.48.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 139.62.169.48.in-addr.arpa: NXDOMAIN
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 45.146.201.253 | attackspambots | Postfix RBL failed |
2020-02-04 08:58:07 |
| 31.210.181.151 | attackbotsspam | Feb 4 02:15:34 grey postfix/smtpd\[26492\]: NOQUEUE: reject: RCPT from unknown\[31.210.181.151\]: 554 5.7.1 Service unavailable\; Client host \[31.210.181.151\] blocked using cbl.abuseat.org\; Blocked - see http://www.abuseat.org/lookup.cgi\?ip=31.210.181.151\; from=\ |
2020-02-04 09:33:13 |
| 92.126.222.172 | attackspam | 'IP reached maximum auth failures for a one day block' |
2020-02-04 09:16:17 |
| 37.186.215.176 | attack | Unauthorized connection attempt detected from IP address 37.186.215.176 to port 2220 [J] |
2020-02-04 09:03:53 |
| 222.186.15.18 | attackbots | Feb 4 01:52:30 OPSO sshd\[18750\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.18 user=root Feb 4 01:52:32 OPSO sshd\[18750\]: Failed password for root from 222.186.15.18 port 57678 ssh2 Feb 4 01:52:34 OPSO sshd\[18750\]: Failed password for root from 222.186.15.18 port 57678 ssh2 Feb 4 01:52:36 OPSO sshd\[18750\]: Failed password for root from 222.186.15.18 port 57678 ssh2 Feb 4 01:53:49 OPSO sshd\[18832\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.18 user=root |
2020-02-04 09:01:48 |
| 91.211.247.153 | attack | Feb 4 01:53:43 MK-Soft-VM3 sshd[19265]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.211.247.153 Feb 4 01:53:45 MK-Soft-VM3 sshd[19265]: Failed password for invalid user webmaster from 91.211.247.153 port 64370 ssh2 Feb 4 02:01:49 MK-Soft-VM3 sshd[19539]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.211.247.153 Feb 4 02:01:50 MK-Soft-VM3 sshd[19539]: Failed password for invalid user frappe from 91.211.247.153 port 55152 ssh2 ... |
2020-02-04 09:29:31 |
| 190.235.229.45 | attack | Feb 4 01:06:33 grey postfix/smtpd\[26316\]: NOQUEUE: reject: RCPT from unknown\[190.235.229.45\]: 554 5.7.1 Service unavailable\; Client host \[190.235.229.45\] blocked using cbl.abuseat.org\; Blocked - see http://www.abuseat.org/lookup.cgi\?ip=190.235.229.45\; from=\ |
2020-02-04 09:09:27 |
| 83.11.254.246 | attackbots | Unauthorized connection attempt detected from IP address 83.11.254.246 to port 2220 [J] |
2020-02-04 08:53:38 |
| 183.13.120.121 | attackspambots | Feb 4 01:55:14 dedicated sshd[13070]: Invalid user lr from 183.13.120.121 port 36374 |
2020-02-04 09:10:48 |
| 37.114.181.217 | attack | Feb 4 00:50:08 pl3server sshd[29080]: Invalid user admin from 37.114.181.217 Feb 4 00:50:08 pl3server sshd[29080]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.114.181.217 Feb 4 00:50:10 pl3server sshd[29080]: Failed password for invalid user admin from 37.114.181.217 port 35306 ssh2 Feb 4 00:50:10 pl3server sshd[29080]: Connection closed by 37.114.181.217 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=37.114.181.217 |
2020-02-04 09:16:46 |
| 46.38.144.22 | attackspam | Feb 4 02:15:40 relay postfix/smtpd\[3820\]: warning: unknown\[46.38.144.22\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Feb 4 02:16:06 relay postfix/smtpd\[24924\]: warning: unknown\[46.38.144.22\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Feb 4 02:16:08 relay postfix/smtpd\[31857\]: warning: unknown\[46.38.144.22\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Feb 4 02:16:31 relay postfix/smtpd\[25764\]: warning: unknown\[46.38.144.22\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Feb 4 02:16:42 relay postfix/smtpd\[452\]: warning: unknown\[46.38.144.22\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2020-02-04 09:25:51 |
| 154.160.23.233 | attack | Lines containing failures of 154.160.23.233 Feb 4 00:51:35 shared04 sshd[18340]: Invalid user supervisor from 154.160.23.233 port 39705 Feb 4 00:51:36 shared04 sshd[18340]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.160.23.233 Feb 4 00:51:37 shared04 sshd[18340]: Failed password for invalid user supervisor from 154.160.23.233 port 39705 ssh2 Feb 4 00:51:38 shared04 sshd[18340]: Connection closed by invalid user supervisor 154.160.23.233 port 39705 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=154.160.23.233 |
2020-02-04 09:22:38 |
| 123.234.165.49 | attackbots | ** MIRAI HOST ** Mon Feb 3 17:06:41 2020 - Child process 35817 handling connection Mon Feb 3 17:06:41 2020 - New connection from: 123.234.165.49:44609 Mon Feb 3 17:06:41 2020 - Sending data to client: [Login: ] Mon Feb 3 17:06:41 2020 - Got data: root Mon Feb 3 17:06:42 2020 - Sending data to client: [Password: ] Mon Feb 3 17:06:43 2020 - Got data: 00000000 Mon Feb 3 17:06:45 2020 - Child 35818 granting shell Mon Feb 3 17:06:45 2020 - Child 35817 exiting Mon Feb 3 17:06:45 2020 - Sending data to client: [Logged in] Mon Feb 3 17:06:45 2020 - Sending data to client: [Welcome to MX990 Embedded Linux] Mon Feb 3 17:06:45 2020 - Sending data to client: [[root@dvrdvs /]# ] Mon Feb 3 17:06:45 2020 - Got data: enable system shell sh Mon Feb 3 17:06:45 2020 - Sending data to client: [Command not found] Mon Feb 3 17:06:45 2020 - Sending data to client: [[root@dvrdvs /]# ] Mon Feb 3 17:06:46 2020 - Got data: cat /proc/mounts; /bin/busybox LIYWY Mon Feb 3 17:06:46 2020 - Sending data to clien |
2020-02-04 08:52:28 |
| 95.167.243.148 | attack | Feb 4 01:33:18 markkoudstaal sshd[3797]: Failed password for list from 95.167.243.148 port 56903 ssh2 Feb 4 01:37:06 markkoudstaal sshd[4521]: Failed password for root from 95.167.243.148 port 43250 ssh2 |
2020-02-04 08:59:24 |
| 189.216.158.186 | attackspambots | Feb 4 01:06:58 grey postfix/smtpd\[6294\]: NOQUEUE: reject: RCPT from unknown\[189.216.158.186\]: 554 5.7.1 Service unavailable\; Client host \[189.216.158.186\] blocked using cbl.abuseat.org\; Blocked - see http://www.abuseat.org/lookup.cgi\?ip=189.216.158.186\; from=\ |
2020-02-04 08:50:29 |