城市(city): unknown
省份(region): unknown
国家(country): Germany
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 53.140.132.136
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 56122
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;53.140.132.136. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021102 1800 900 604800 86400
;; Query time: 151 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 12 07:59:37 CST 2025
;; MSG SIZE rcvd: 107Host 136.132.140.53.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 136.132.140.53.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 93.95.240.245 | attack | Sep 14 10:34:43 dhoomketu sshd[3079792]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.95.240.245 user=root Sep 14 10:34:45 dhoomketu sshd[3079792]: Failed password for root from 93.95.240.245 port 49944 ssh2 Sep 14 10:35:35 dhoomketu sshd[3079820]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.95.240.245 user=root Sep 14 10:35:37 dhoomketu sshd[3079820]: Failed password for root from 93.95.240.245 port 59886 ssh2 Sep 14 10:36:24 dhoomketu sshd[3079830]: Invalid user internet from 93.95.240.245 port 41598 ... |
2020-09-14 18:58:45 |
| 82.177.80.73 | attackspambots | Sep 13 18:46:48 mail.srvfarm.net postfix/smtpd[1233117]: warning: unknown[82.177.80.73]: SASL PLAIN authentication failed: Sep 13 18:46:48 mail.srvfarm.net postfix/smtpd[1233117]: lost connection after AUTH from unknown[82.177.80.73] Sep 13 18:49:44 mail.srvfarm.net postfix/smtpd[1232282]: warning: unknown[82.177.80.73]: SASL PLAIN authentication failed: Sep 13 18:49:44 mail.srvfarm.net postfix/smtpd[1232282]: lost connection after AUTH from unknown[82.177.80.73] Sep 13 18:50:08 mail.srvfarm.net postfix/smtpd[1231911]: warning: unknown[82.177.80.73]: SASL PLAIN authentication failed: |
2020-09-14 19:14:56 |
| 201.55.142.243 | attackspambots | Sep 13 18:26:49 mail.srvfarm.net postfix/smtps/smtpd[1230736]: warning: unknown[201.55.142.243]: SASL PLAIN authentication failed: Sep 13 18:26:49 mail.srvfarm.net postfix/smtps/smtpd[1230736]: lost connection after AUTH from unknown[201.55.142.243] Sep 13 18:32:14 mail.srvfarm.net postfix/smtpd[1230212]: warning: unknown[201.55.142.243]: SASL PLAIN authentication failed: Sep 13 18:32:15 mail.srvfarm.net postfix/smtpd[1230212]: lost connection after AUTH from unknown[201.55.142.243] Sep 13 18:33:48 mail.srvfarm.net postfix/smtpd[1232021]: warning: unknown[201.55.142.243]: SASL PLAIN authentication failed: |
2020-09-14 19:33:28 |
| 47.56.255.87 | attackbotsspam | 47.56.255.87 - [13/Sep/2020:19:50:06 +0300] "POST /xmlrpc.php HTTP/1.1" 200 228 "https://www.nsfb.se/xmlrpc.php" "python-requests/2.22.0" "1.90" 47.56.255.87 - [13/Sep/2020:19:50:08 +0300] "POST /xmlrpc.php HTTP/1.1" 200 228 "https://www.nsfb.se/xmlrpc.php" "python-requests/2.22.0" "1.90" ... |
2020-09-14 19:32:13 |
| 85.186.38.228 | attack | $f2bV_matches |
2020-09-14 18:52:15 |
| 61.163.192.88 | attackspambots | 2020-09-14 13:34:32 dovecot_login authenticator failed for (smd-m.ru) [61.163.192.88]: 535 Incorrect authentication data (set_id=nologin) 2020-09-14 13:34:40 dovecot_login authenticator failed for (smd-m.ru) [61.163.192.88]: 535 Incorrect authentication data (set_id=mailer@smd-m.ru) 2020-09-14 13:34:52 dovecot_login authenticator failed for (smd-m.ru) [61.163.192.88]: 535 Incorrect authentication data (set_id=mailer) ... |
2020-09-14 18:53:32 |
| 183.57.46.131 | attackbots | Port scan: Attack repeated for 24 hours |
2020-09-14 19:26:14 |
| 125.40.90.188 | attackspambots | Invalid user ubuntu from 125.40.90.188 port 58802 |
2020-09-14 19:08:24 |
| 37.18.255.242 | attackspam | RDP brute-forcing |
2020-09-14 19:25:20 |
| 51.37.199.219 | attackspam | (sshd) Failed SSH login from 51.37.199.219 (IE/Ireland/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 14 03:08:28 optimus sshd[22194]: Invalid user zabbix from 51.37.199.219 Sep 14 03:08:28 optimus sshd[22194]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.37.199.219 Sep 14 03:08:30 optimus sshd[22194]: Failed password for invalid user zabbix from 51.37.199.219 port 45278 ssh2 Sep 14 03:21:56 optimus sshd[26019]: Invalid user zabbix from 51.37.199.219 Sep 14 03:21:56 optimus sshd[26019]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.37.199.219 |
2020-09-14 19:22:03 |
| 49.233.75.234 | attack | SSH bruteforce |
2020-09-14 19:01:45 |
| 114.67.105.7 | attackspambots | Sep 14 04:54:41 fwweb01 sshd[9148]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.67.105.7 user=r.r Sep 14 04:54:42 fwweb01 sshd[9148]: Failed password for r.r from 114.67.105.7 port 55683 ssh2 Sep 14 04:54:43 fwweb01 sshd[9148]: Received disconnect from 114.67.105.7: 11: Bye Bye [preauth] Sep 14 05:02:44 fwweb01 sshd[9682]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.67.105.7 user=r.r Sep 14 05:02:46 fwweb01 sshd[9682]: Failed password for r.r from 114.67.105.7 port 37331 ssh2 Sep 14 05:02:46 fwweb01 sshd[9682]: Received disconnect from 114.67.105.7: 11: Bye Bye [preauth] Sep 14 05:06:12 fwweb01 sshd[9951]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.67.105.7 user=r.r Sep 14 05:06:14 fwweb01 sshd[9951]: Failed password for r.r from 114.67.105.7 port 55756 ssh2 Sep 14 05:06:14 fwweb01 sshd[9951]: Received disconnect from 114.67........ ------------------------------- |
2020-09-14 19:10:12 |
| 180.166.208.56 | attackbotsspam | failed_logins |
2020-09-14 19:31:26 |
| 138.36.200.12 | attackbots | Sep 13 18:26:11 mail.srvfarm.net postfix/smtpd[1232020]: warning: unknown[138.36.200.12]: SASL PLAIN authentication failed: Sep 13 18:26:12 mail.srvfarm.net postfix/smtpd[1232020]: lost connection after AUTH from unknown[138.36.200.12] Sep 13 18:26:24 mail.srvfarm.net postfix/smtpd[1232282]: warning: unknown[138.36.200.12]: SASL PLAIN authentication failed: Sep 13 18:26:24 mail.srvfarm.net postfix/smtpd[1232282]: lost connection after AUTH from unknown[138.36.200.12] Sep 13 18:35:02 mail.srvfarm.net postfix/smtps/smtpd[1230769]: warning: unknown[138.36.200.12]: SASL PLAIN authentication failed: |
2020-09-14 19:36:01 |
| 91.41.115.210 | attackbotsspam | Sep 13 18:55:05 eventyay sshd[15451]: Failed password for root from 91.41.115.210 port 46736 ssh2 Sep 13 18:59:26 eventyay sshd[15590]: Failed password for root from 91.41.115.210 port 56208 ssh2 ... |
2020-09-14 19:16:18 |