城市(city): Cheongju-si
省份(region): Chungcheongbuk-do
国家(country): South Korea
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 49.142.149.130
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 59887
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;49.142.149.130. IN A
;; AUTHORITY SECTION:
. 300 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022122901 1800 900 604800 86400
;; Query time: 67 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Dec 30 12:02:25 CST 2022
;; MSG SIZE rcvd: 107
Host 130.149.142.49.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 130.149.142.49.in-addr.arpa: NXDOMAIN
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 152.136.90.196 | attackspam | Mar 30 21:11:19 localhost sshd\[24152\]: Invalid user hemmings from 152.136.90.196 Mar 30 21:11:19 localhost sshd\[24152\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.90.196 Mar 30 21:11:21 localhost sshd\[24152\]: Failed password for invalid user hemmings from 152.136.90.196 port 39216 ssh2 Mar 30 21:17:42 localhost sshd\[24623\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.90.196 user=root Mar 30 21:17:45 localhost sshd\[24623\]: Failed password for root from 152.136.90.196 port 51782 ssh2 ... |
2020-03-31 03:48:23 |
| 218.59.139.12 | attack | Mar 30 19:23:04 yesfletchmain sshd\[7315\]: User root from 218.59.139.12 not allowed because not listed in AllowUsers Mar 30 19:23:04 yesfletchmain sshd\[7315\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.59.139.12 user=root Mar 30 19:23:07 yesfletchmain sshd\[7315\]: Failed password for invalid user root from 218.59.139.12 port 33972 ssh2 Mar 30 19:29:44 yesfletchmain sshd\[7459\]: User root from 218.59.139.12 not allowed because not listed in AllowUsers Mar 30 19:29:44 yesfletchmain sshd\[7459\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.59.139.12 user=root ... |
2020-03-31 03:42:26 |
| 222.252.30.25 | attackbots | Brute force SMTP login attempted. ... |
2020-03-31 03:42:11 |
| 124.118.129.5 | attackbots | Mar 30 20:25:43 ns381471 sshd[8534]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.118.129.5 Mar 30 20:25:45 ns381471 sshd[8534]: Failed password for invalid user lixx from 124.118.129.5 port 35792 ssh2 |
2020-03-31 03:55:36 |
| 187.189.77.95 | attackbotsspam | Honeypot attack, port: 445, PTR: fixed-187-189-77-95.totalplay.net. |
2020-03-31 04:04:28 |
| 14.249.112.71 | attackbots | 1585583118 - 03/30/2020 17:45:18 Host: 14.249.112.71/14.249.112.71 Port: 445 TCP Blocked |
2020-03-31 04:11:27 |
| 27.247.94.59 | attackspambots | Email rejected due to spam filtering |
2020-03-31 03:45:47 |
| 207.154.234.102 | attackbotsspam | Mar 30 15:50:55 mail sshd\[38294\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.154.234.102 user=root ... |
2020-03-31 03:52:49 |
| 92.118.37.53 | attackspam | Mar 30 22:01:31 debian-2gb-nbg1-2 kernel: \[7857547.431653\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=92.118.37.53 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=21109 PROTO=TCP SPT=49570 DPT=10091 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-03-31 04:03:21 |
| 180.164.255.12 | attackspam | 20 attempts against mh-ssh on cloud |
2020-03-31 03:42:56 |
| 83.250.23.203 | attackbots | Honeypot attack, port: 5555, PTR: c83-250-23-203.bredband.comhem.se. |
2020-03-31 04:01:44 |
| 222.252.22.247 | attack | Brute force SMTP login attempted. ... |
2020-03-31 03:47:09 |
| 106.52.102.190 | attackspam | Mar 30 17:25:53 vps333114 sshd[29199]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.102.190 user=root Mar 30 17:25:55 vps333114 sshd[29199]: Failed password for root from 106.52.102.190 port 59965 ssh2 ... |
2020-03-31 04:07:08 |
| 218.255.3.235 | attackspam | Mar 30 15:31:37 vz239 sshd[9197]: reveeclipse mapping checking getaddrinfo for static.reserve.wtt.net.hk [218.255.3.235] failed - POSSIBLE BREAK-IN ATTEMPT! Mar 30 15:31:37 vz239 sshd[9197]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.255.3.235 user=r.r Mar 30 15:31:39 vz239 sshd[9197]: Failed password for r.r from 218.255.3.235 port 47081 ssh2 Mar 30 15:31:39 vz239 sshd[9197]: Received disconnect from 218.255.3.235: 11: Bye Bye [preauth] Mar 30 15:38:57 vz239 sshd[9258]: reveeclipse mapping checking getaddrinfo for static.reserve.wtt.net.hk [218.255.3.235] failed - POSSIBLE BREAK-IN ATTEMPT! Mar 30 15:38:57 vz239 sshd[9258]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.255.3.235 user=r.r Mar 30 15:39:00 vz239 sshd[9258]: Failed password for r.r from 218.255.3.235 port 41206 ssh2 Mar 30 15:39:00 vz239 sshd[9258]: Received disconnect from 218.255.3.235: 11: Bye Bye [preauth] ........ ------------------------------- |
2020-03-31 03:46:33 |
| 151.0.162.53 | attackspambots | Mar 30 15:52:57 debian-2gb-nbg1-2 kernel: \[7835434.155072\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=151.0.162.53 DST=195.201.40.59 LEN=44 TOS=0x00 PREC=0x00 TTL=51 ID=0 DF PROTO=TCP SPT=25 DPT=1504 WINDOW=29200 RES=0x00 ACK SYN URGP=0 |
2020-03-31 04:06:53 |