城市(city): unknown
省份(region): unknown
国家(country): India
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 49.248.138.239
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 4120
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;49.248.138.239. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020300 1800 900 604800 86400
;; Query time: 37 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 03 23:11:47 CST 2025
;; MSG SIZE rcvd: 107239.138.248.49.in-addr.arpa domain name pointer static-239.138.248.49-tataidc.co.in.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
239.138.248.49.in-addr.arpa name = static-239.138.248.49-tataidc.co.in.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 91.231.121.4 | attack | failed_logins |
2020-09-12 17:36:07 |
| 218.92.0.199 | attack | Sep 12 11:09:36 dcd-gentoo sshd[16591]: User root from 218.92.0.199 not allowed because none of user's groups are listed in AllowGroups Sep 12 11:09:38 dcd-gentoo sshd[16591]: error: PAM: Authentication failure for illegal user root from 218.92.0.199 Sep 12 11:09:38 dcd-gentoo sshd[16591]: Failed keyboard-interactive/pam for invalid user root from 218.92.0.199 port 43523 ssh2 ... |
2020-09-12 17:11:47 |
| 209.212.194.195 | attackspam | Automatic report - Port Scan Attack |
2020-09-12 17:06:15 |
| 183.136.222.142 | attackbotsspam | detected by Fail2Ban |
2020-09-12 17:03:18 |
| 106.53.114.5 | attackbots | 106.53.114.5 (CN/China/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep 12 00:41:30 jbs1 sshd[11968]: Failed password for root from 54.38.190.48 port 42520 ssh2 Sep 12 00:47:02 jbs1 sshd[13601]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.112.23.105 user=root Sep 12 00:39:25 jbs1 sshd[11186]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.168.204.133 user=root Sep 12 00:39:27 jbs1 sshd[11186]: Failed password for root from 104.168.204.133 port 57302 ssh2 Sep 12 00:47:04 jbs1 sshd[13601]: Failed password for root from 193.112.23.105 port 37506 ssh2 Sep 12 00:47:51 jbs1 sshd[13801]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.53.114.5 user=root IP Addresses Blocked: 54.38.190.48 (FR/France/-) 193.112.23.105 (CN/China/-) 104.168.204.133 (US/United States/-) |
2020-09-12 17:26:37 |
| 145.239.87.35 | attackspambots | 2020-09-12T07:48:29.314002abusebot-2.cloudsearch.cf sshd[13620]: Invalid user admin from 145.239.87.35 port 38838 2020-09-12T07:48:29.319540abusebot-2.cloudsearch.cf sshd[13620]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.ip-145-239-87.eu 2020-09-12T07:48:29.314002abusebot-2.cloudsearch.cf sshd[13620]: Invalid user admin from 145.239.87.35 port 38838 2020-09-12T07:48:31.718491abusebot-2.cloudsearch.cf sshd[13620]: Failed password for invalid user admin from 145.239.87.35 port 38838 ssh2 2020-09-12T07:52:48.762232abusebot-2.cloudsearch.cf sshd[13627]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.ip-145-239-87.eu user=root 2020-09-12T07:52:51.049855abusebot-2.cloudsearch.cf sshd[13627]: Failed password for root from 145.239.87.35 port 52484 ssh2 2020-09-12T07:56:52.970893abusebot-2.cloudsearch.cf sshd[13639]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhos ... |
2020-09-12 17:25:55 |
| 177.155.252.103 | attack | Sep 11 18:43:20 mail.srvfarm.net postfix/smtps/smtpd[3896338]: warning: unknown[177.155.252.103]: SASL PLAIN authentication failed: Sep 11 18:43:21 mail.srvfarm.net postfix/smtps/smtpd[3896338]: lost connection after AUTH from unknown[177.155.252.103] Sep 11 18:43:21 mail.srvfarm.net postfix/smtps/smtpd[3892326]: warning: unknown[177.155.252.103]: SASL PLAIN authentication failed: Sep 11 18:43:22 mail.srvfarm.net postfix/smtps/smtpd[3892326]: lost connection after AUTH from unknown[177.155.252.103] Sep 11 18:48:11 mail.srvfarm.net postfix/smtps/smtpd[3896991]: warning: unknown[177.155.252.103]: SASL PLAIN authentication failed: |
2020-09-12 17:34:03 |
| 103.123.8.75 | attackspam | $f2bV_matches |
2020-09-12 17:11:21 |
| 103.25.21.34 | attackbotsspam | Invalid user master from 103.25.21.34 port 14876 |
2020-09-12 17:26:54 |
| 27.6.78.101 | attack | SIP Server BruteForce Attack |
2020-09-12 17:18:51 |
| 185.220.101.211 | attackspam | SSH Brute-Forcing (server1) |
2020-09-12 17:28:17 |
| 157.245.54.200 | attack | <6 unauthorized SSH connections |
2020-09-12 17:13:46 |
| 89.222.181.58 | attack | Sep 12 10:04:21 vpn01 sshd[12986]: Failed password for root from 89.222.181.58 port 50702 ssh2 ... |
2020-09-12 17:09:16 |
| 61.154.96.124 | attackspam | Time: Sat Sep 12 04:52:13 2020 -0300 IP: 61.154.96.124 (CN/China/124.96.154.61.broad.qz.fj.dynamic.163data.com.cn) Failures: 30 (smtpauth) Interval: 3600 seconds Blocked: Permanent Block |
2020-09-12 17:20:12 |
| 51.91.239.11 | attack | WordPress wp-login brute force :: 51.91.239.11 0.068 BYPASS [12/Sep/2020:06:31:49 0000] [censored_2] "POST /wp-login.php HTTP/1.1" 200 2577 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-09-12 17:00:00 |