城市(city): unknown
省份(region): unknown
国家(country): Australia
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 49.3.47.5
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 51181
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;49.3.47.5. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021102 1800 900 604800 86400
;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 12 07:09:49 CST 2025
;; MSG SIZE rcvd: 102Host 5.47.3.49.in-addr.arpa not found: 2(SERVFAIL)
server can't find 49.3.47.5.in-addr.arpa: SERVFAIL| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 24.63.224.206 | attack | Nov 26 16:47:36 tux-35-217 sshd\[9956\]: Invalid user keegstra from 24.63.224.206 port 44043 Nov 26 16:47:36 tux-35-217 sshd\[9956\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=24.63.224.206 Nov 26 16:47:38 tux-35-217 sshd\[9956\]: Failed password for invalid user keegstra from 24.63.224.206 port 44043 ssh2 Nov 26 16:56:19 tux-35-217 sshd\[10037\]: Invalid user oracle from 24.63.224.206 port 40663 Nov 26 16:56:19 tux-35-217 sshd\[10037\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=24.63.224.206 ... |
2019-11-27 00:22:33 |
| 117.82.206.67 | attackspam | Nov 26 09:27:53 esmtp postfix/smtpd[10856]: lost connection after AUTH from unknown[117.82.206.67] Nov 26 09:27:54 esmtp postfix/smtpd[11080]: lost connection after AUTH from unknown[117.82.206.67] Nov 26 09:27:58 esmtp postfix/smtpd[10856]: lost connection after AUTH from unknown[117.82.206.67] Nov 26 09:28:13 esmtp postfix/smtpd[10856]: lost connection after AUTH from unknown[117.82.206.67] Nov 26 09:28:15 esmtp postfix/smtpd[11080]: lost connection after AUTH from unknown[117.82.206.67] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=117.82.206.67 |
2019-11-26 23:34:55 |
| 125.163.72.150 | attackspambots | Unauthorized connection attempt from IP address 125.163.72.150 on Port 445(SMB) |
2019-11-27 00:11:06 |
| 85.104.7.200 | attack | Port 1433 Scan |
2019-11-27 00:17:38 |
| 49.88.112.68 | attackspambots | Nov 26 17:54:33 sauna sshd[12696]: Failed password for root from 49.88.112.68 port 17639 ssh2 ... |
2019-11-27 00:04:12 |
| 111.231.137.158 | attackspambots | Nov 26 15:47:57 MK-Soft-VM5 sshd[498]: Failed password for root from 111.231.137.158 port 39388 ssh2 ... |
2019-11-26 23:49:31 |
| 14.176.152.7 | attackbots | Unauthorized connection attempt from IP address 14.176.152.7 on Port 445(SMB) |
2019-11-27 00:01:58 |
| 93.39.104.224 | attack | Nov 25 21:05:27 sanyalnet-cloud-vps3 sshd[12329]: Connection from 93.39.104.224 port 40822 on 45.62.248.66 port 22 Nov 25 21:05:28 sanyalnet-cloud-vps3 sshd[12329]: Invalid user hassy from 93.39.104.224 Nov 25 21:05:28 sanyalnet-cloud-vps3 sshd[12329]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=93-39-104-224.ip75.fastwebnet.hostname Nov 25 21:05:30 sanyalnet-cloud-vps3 sshd[12329]: Failed password for invalid user hassy from 93.39.104.224 port 40822 ssh2 Nov 25 21:05:30 sanyalnet-cloud-vps3 sshd[12329]: Received disconnect from 93.39.104.224: 11: Bye Bye [preauth] Nov 25 21:29:40 sanyalnet-cloud-vps3 sshd[12824]: Connection from 93.39.104.224 port 45110 on 45.62.248.66 port 22 Nov 25 21:29:41 sanyalnet-cloud-vps3 sshd[12824]: User r.r from 93-39-104-224.ip75.fastwebnet.hostname not allowed because not listed in AllowUsers Nov 25 21:29:41 sanyalnet-cloud-vps3 sshd[12824]: pam_unix(sshd:auth): authentication failure; logname= ........ ------------------------------- |
2019-11-26 23:38:23 |
| 190.39.141.185 | attackspambots | Unauthorized connection attempt from IP address 190.39.141.185 on Port 445(SMB) |
2019-11-27 00:15:45 |
| 37.224.72.13 | attackbotsspam | Unauthorized connection attempt from IP address 37.224.72.13 on Port 445(SMB) |
2019-11-27 00:12:16 |
| 84.236.42.155 | attackspam | Unauthorized connection attempt from IP address 84.236.42.155 on Port 445(SMB) |
2019-11-26 23:36:26 |
| 148.70.249.72 | attack | Nov 26 16:31:59 lnxmysql61 sshd[11214]: Failed password for root from 148.70.249.72 port 45462 ssh2 Nov 26 16:31:59 lnxmysql61 sshd[11214]: Failed password for root from 148.70.249.72 port 45462 ssh2 |
2019-11-27 00:10:04 |
| 160.153.244.195 | attackspambots | Just another failing script kidde - SAD! |
2019-11-27 00:02:22 |
| 202.191.200.227 | attack | Nov 26 10:01:02 server6 sshd[9857]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.191.200.227 user=r.r Nov 26 10:01:04 server6 sshd[9857]: Failed password for r.r from 202.191.200.227 port 50172 ssh2 Nov 26 10:01:04 server6 sshd[9857]: Received disconnect from 202.191.200.227: 11: Bye Bye [preauth] Nov 26 10:14:09 server6 sshd[19705]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.191.200.227 user=proxy Nov 26 10:14:12 server6 sshd[19705]: Failed password for proxy from 202.191.200.227 port 49552 ssh2 Nov 26 10:14:12 server6 sshd[19705]: Received disconnect from 202.191.200.227: 11: Bye Bye [preauth] Nov 26 10:21:58 server6 sshd[25919]: Failed password for invalid user yekyazarian from 202.191.200.227 port 41954 ssh2 Nov 26 10:21:59 server6 sshd[25919]: Received disconnect from 202.191.200.227: 11: Bye Bye [preauth] Nov 26 10:29:27 server6 sshd[32041]: pam_unix(sshd:auth): authe........ ------------------------------- |
2019-11-26 23:52:48 |
| 45.227.253.211 | attackbots | Nov 26 17:08:57 andromeda postfix/smtpd\[52661\]: warning: unknown\[45.227.253.211\]: SASL LOGIN authentication failed: authentication failure Nov 26 17:08:58 andromeda postfix/smtpd\[55058\]: warning: unknown\[45.227.253.211\]: SASL LOGIN authentication failed: authentication failure Nov 26 17:09:38 andromeda postfix/smtpd\[55058\]: warning: unknown\[45.227.253.211\]: SASL LOGIN authentication failed: authentication failure Nov 26 17:09:39 andromeda postfix/smtpd\[490\]: warning: unknown\[45.227.253.211\]: SASL LOGIN authentication failed: authentication failure Nov 26 17:09:52 andromeda postfix/smtpd\[52661\]: warning: unknown\[45.227.253.211\]: SASL LOGIN authentication failed: authentication failure |
2019-11-27 00:11:43 |