城市(city): unknown
省份(region): unknown
国家(country): Germany
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 89.48.44.91
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 19142
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;89.48.44.91. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012700 1800 900 604800 86400
;; Query time: 35 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jan 27 18:56:23 CST 2025
;; MSG SIZE rcvd: 104Host 91.44.48.89.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 91.44.48.89.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 42.86.30.101 | attack | Jul 3 07:54:52 srv206 sshd[27128]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.86.30.101 user=root Jul 3 07:54:53 srv206 sshd[27128]: Failed password for root from 42.86.30.101 port 40577 ssh2 Jul 3 07:54:55 srv206 sshd[27128]: Failed password for root from 42.86.30.101 port 40577 ssh2 Jul 3 07:54:52 srv206 sshd[27128]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.86.30.101 user=root Jul 3 07:54:53 srv206 sshd[27128]: Failed password for root from 42.86.30.101 port 40577 ssh2 Jul 3 07:54:55 srv206 sshd[27128]: Failed password for root from 42.86.30.101 port 40577 ssh2 ... |
2019-07-03 19:38:23 |
| 14.235.185.4 | attackbotsspam | 445/tcp [2019-07-03]1pkt |
2019-07-03 20:03:12 |
| 129.213.117.53 | attack | Jul 3 06:57:45 aat-srv002 sshd[8780]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.213.117.53 Jul 3 06:57:47 aat-srv002 sshd[8780]: Failed password for invalid user seng from 129.213.117.53 port 44919 ssh2 Jul 3 06:59:52 aat-srv002 sshd[8814]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.213.117.53 Jul 3 06:59:55 aat-srv002 sshd[8814]: Failed password for invalid user mysql from 129.213.117.53 port 57899 ssh2 ... |
2019-07-03 20:04:10 |
| 220.142.185.92 | attack | 37215/tcp [2019-07-03]1pkt |
2019-07-03 19:46:50 |
| 103.213.245.50 | attackspam | Jul 3 12:10:55 dev0-dcde-rnet sshd[27401]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.213.245.50 Jul 3 12:10:57 dev0-dcde-rnet sshd[27401]: Failed password for invalid user presta from 103.213.245.50 port 48269 ssh2 Jul 3 12:18:50 dev0-dcde-rnet sshd[27435]: Failed password for root from 103.213.245.50 port 33080 ssh2 |
2019-07-03 19:24:24 |
| 218.94.136.90 | attackbotsspam | SSH Brute Force, server-1 sshd[26917]: Failed password for invalid user ftpuser from 218.94.136.90 port 7986 ssh2 |
2019-07-03 19:33:49 |
| 49.48.34.157 | attackbotsspam | Jul 3 05:23:06 shared04 sshd[4357]: Invalid user admin from 49.48.34.157 Jul 3 05:23:06 shared04 sshd[4357]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.48.34.157 Jul 3 05:23:09 shared04 sshd[4357]: Failed password for invalid user admin from 49.48.34.157 port 36542 ssh2 Jul 3 05:23:09 shared04 sshd[4357]: Connection closed by 49.48.34.157 port 36542 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=49.48.34.157 |
2019-07-03 19:46:26 |
| 60.210.102.246 | attackspambots | 1433/tcp [2019-07-03]1pkt |
2019-07-03 19:54:53 |
| 125.161.105.134 | attack | 445/tcp [2019-07-03]1pkt |
2019-07-03 19:45:42 |
| 34.217.114.221 | attackspam | User agent spoofing, by Amazon Technologies Inc. |
2019-07-03 19:25:32 |
| 79.220.80.248 | attack | Jul 3 05:27:40 nxxxxxxx sshd[24344]: refused connect from 79.220.80.248 (79= .220.80.248) ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=79.220.80.248 |
2019-07-03 20:09:54 |
| 14.190.48.228 | attackspam | 445/tcp [2019-07-03]1pkt |
2019-07-03 19:49:32 |
| 49.72.209.53 | attack | /var/log/messages:Jul 3 03:26:18 sanyalnet-cloud-vps audispd: node=sanyalnet-cloud-vps.freeddns.org type=CRYPTO_SESSION msg=audhostname(1562124378.907:80034): pid=30097 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-server cipher=aexxxxxxx28-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group14-sha1 spid=30098 suid=74 rport=36008 laddr=104.167.106.93 lport=22 exe="/usr/sbin/sshd" hostname=? addr=49.72.209.53 terminal=? res=success' /var/log/messages:Jul 3 03:26:18 sanyalnet-cloud-vps audispd: node=sanyalnet-cloud-vps.freeddns.org type=CRYPTO_SESSION msg=audhostname(1562124378.911:80035): pid=30097 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-client cipher=aexxxxxxx28-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group14-sha1 spid=30098 suid=74 rport=36008 laddr=104.167.106.93 lport=22 exe="/usr/sbin/sshd" hostname=? addr=49.72.209.53 terminal=? res=success' /var/log/messages:Jul 3 03:26:20 sanyalnet-cloud-vps fail2ban.filte........ ------------------------------- |
2019-07-03 20:00:06 |
| 160.238.133.239 | attackbotsspam | Jul 3 05:21:12 rigel postfix/smtpd[23735]: warning: hostname 239-133-238-160.speedsat.com.br does not resolve to address 160.238.133.239: Name or service not known Jul 3 05:21:12 rigel postfix/smtpd[23735]: connect from unknown[160.238.133.239] Jul 3 05:21:15 rigel postfix/smtpd[23735]: warning: unknown[160.238.133.239]: SASL CRAM-MD5 authentication failed: authentication failure Jul 3 05:21:16 rigel postfix/smtpd[23735]: warning: unknown[160.238.133.239]: SASL PLAIN authentication failed: authentication failure Jul 3 05:21:17 rigel postfix/smtpd[23735]: warning: unknown[160.238.133.239]: SASL LOGIN authentication failed: authentication failure Jul 3 05:21:18 rigel postfix/smtpd[23735]: disconnect from unknown[160.238.133.239] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=160.238.133.239 |
2019-07-03 19:44:34 |
| 202.88.241.107 | attack | Tried sshing with brute force. |
2019-07-03 20:01:30 |