城市(city): unknown
省份(region): unknown
国家(country): China
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 1.14.186.54
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 64708
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;1.14.186.54. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019071801 1800 900 604800 86400
;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Fri Jul 19 06:05:42 CST 2019
;; MSG SIZE rcvd: 115Host 54.186.14.1.in-addr.arpa. not found: 3(NXDOMAIN)Server: 67.207.67.2
Address: 67.207.67.2#53
** server can't find 54.186.14.1.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 185.153.199.2 | attackbotsspam | Nov 29 19:03:54 h2177944 kernel: \[7925907.357223\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.153.199.2 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=34232 PROTO=TCP SPT=51322 DPT=25888 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 29 19:16:13 h2177944 kernel: \[7926645.860034\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.153.199.2 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=41838 PROTO=TCP SPT=51322 DPT=4100 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 29 19:36:49 h2177944 kernel: \[7927881.938699\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.153.199.2 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=12997 PROTO=TCP SPT=51322 DPT=2012 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 29 19:57:25 h2177944 kernel: \[7929117.971657\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.153.199.2 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=27030 PROTO=TCP SPT=51322 DPT=5959 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 29 19:59:36 h2177944 kernel: \[7929248.955870\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.153.199.2 DST=85.214.117. |
2019-11-30 03:15:42 |
| 141.98.81.38 | attackbots | Nov 29 19:42:45 serwer sshd\[12391\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.98.81.38 user=admin Nov 29 19:42:47 serwer sshd\[12391\]: Failed password for admin from 141.98.81.38 port 42981 ssh2 Nov 29 19:42:47 serwer sshd\[12395\]: Invalid user ubnt from 141.98.81.38 port 35408 Nov 29 19:42:47 serwer sshd\[12395\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.98.81.38 ... |
2019-11-30 03:12:38 |
| 185.53.88.6 | attack | SIPVicious Scanner Detection |
2019-11-30 03:09:17 |
| 81.18.66.4 | attack | (Nov 29) LEN=52 TTL=117 ID=17806 DF TCP DPT=445 WINDOW=8192 SYN (Nov 29) LEN=52 TTL=119 ID=17591 DF TCP DPT=1433 WINDOW=8192 SYN (Nov 29) LEN=52 TTL=117 ID=17640 DF TCP DPT=1433 WINDOW=8192 SYN (Nov 29) LEN=52 TTL=117 ID=9433 DF TCP DPT=1433 WINDOW=8192 SYN (Nov 29) LEN=52 TTL=117 ID=6197 DF TCP DPT=445 WINDOW=8192 SYN (Nov 29) LEN=52 TTL=117 ID=10429 DF TCP DPT=445 WINDOW=8192 SYN (Nov 29) LEN=52 TTL=119 ID=30972 DF TCP DPT=445 WINDOW=8192 SYN (Nov 29) LEN=52 TTL=119 ID=1747 DF TCP DPT=1433 WINDOW=8192 SYN (Nov 28) LEN=52 TTL=117 ID=16693 DF TCP DPT=1433 WINDOW=8192 SYN (Nov 28) LEN=52 TTL=117 ID=30874 DF TCP DPT=445 WINDOW=8192 SYN (Nov 28) LEN=52 TTL=119 ID=13306 DF TCP DPT=1433 WINDOW=8192 SYN (Nov 28) LEN=52 TTL=117 ID=22418 DF TCP DPT=1433 WINDOW=8192 SYN (Nov 28) LEN=52 TTL=119 ID=16847 DF TCP DPT=445 WINDOW=8192 SYN (Nov 28) LEN=52 TTL=119 ID=26963 DF TCP DPT=445 WINDOW=8192 SYN (Nov 27) LEN=52 TTL=119 ID=28110 DF TCP DPT=445 WINDOW=8... |
2019-11-30 03:13:56 |
| 14.167.178.250 | attack | ILLEGAL ACCESS smtp |
2019-11-30 02:59:12 |
| 64.118.200.27 | attackbotsspam | port scan/probe/communication attempt |
2019-11-30 02:56:31 |
| 188.213.49.60 | attackspam | Nov 29 18:10:44 v22018076622670303 sshd\[6450\]: Invalid user pass7777 from 188.213.49.60 port 58878 Nov 29 18:10:44 v22018076622670303 sshd\[6450\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.213.49.60 Nov 29 18:10:46 v22018076622670303 sshd\[6450\]: Failed password for invalid user pass7777 from 188.213.49.60 port 58878 ssh2 ... |
2019-11-30 03:10:46 |
| 2001:41d0:203:545c:: | attackspam | xmlrpc attack |
2019-11-30 02:59:43 |
| 195.22.225.19 | attack | Nov 29 18:26:12 venus sshd\[24137\]: Invalid user snedden from 195.22.225.19 port 36012 Nov 29 18:26:12 venus sshd\[24137\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.22.225.19 Nov 29 18:26:14 venus sshd\[24137\]: Failed password for invalid user snedden from 195.22.225.19 port 36012 ssh2 ... |
2019-11-30 03:33:13 |
| 2a04:4e42::223 | attack | 11/29/2019-19:46:13.056922 2a04:4e42:0000:0000:0000:0000:0000:0223 Protocol: 6 SURICATA TLS invalid record/traffic |
2019-11-30 03:22:12 |
| 118.178.119.198 | attackbots | 2019-11-29T19:13:35.360149abusebot-3.cloudsearch.cf sshd\[10257\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.178.119.198 user=root |
2019-11-30 03:24:41 |
| 104.227.191.170 | attack | (From katherine@kathreadwrites.net) Hello Is your website copy outdated? I run a copywriting agency & for the next 3 days only, I'm running a 20% discount on our services. If you want to elevate your business above the competition, you need engaging content that search engines and people love. What does that mean for you? More traffic, more customers and a bright future for your business. I would love to help you get more sales with copy that converts. Learn more: https://kathreadwrites.net/promo/ (Get your 20% discount now) Be Fantastic Katherine P.S. To get in touch, please use the contact form on my website instead of emailing me. Unsubscribe |
2019-11-30 03:07:35 |
| 36.108.170.176 | attackspambots | 2019-09-13T14:23:18.808953suse-nuc sshd[5909]: Invalid user shashank from 36.108.170.176 port 45155 ... |
2019-11-30 03:09:02 |
| 82.196.4.66 | attack | Nov 29 20:06:23 vps691689 sshd[2209]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.196.4.66 Nov 29 20:06:25 vps691689 sshd[2209]: Failed password for invalid user jos from 82.196.4.66 port 51684 ssh2 Nov 29 20:09:27 vps691689 sshd[2257]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.196.4.66 ... |
2019-11-30 03:14:31 |
| 14.187.178.60 | attackspambots | Unauthorized IMAP connection attempt |
2019-11-30 03:12:09 |