城市(city): Champaign
省份(region): Illinois
国家(country): United States
运营商(isp): AT&T
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.2.14.117
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 9488
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.2.14.117. IN A
;; AUTHORITY SECTION:
. 388 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022071801 1800 900 604800 86400
;; Query time: 76 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jul 19 03:51:19 CST 2022
;; MSG SIZE rcvd: 105
117.14.2.104.in-addr.arpa domain name pointer 104-2-14-117.lightspeed.dctril.sbcglobal.net.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
117.14.2.104.in-addr.arpa name = 104-2-14-117.lightspeed.dctril.sbcglobal.net.
Authoritative answers can be found from:
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 62.112.11.8 | attack | Cowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2020-10-09T11:29:09Z and 2020-10-09T13:25:43Z |
2020-10-09 21:35:31 |
| 203.137.119.217 | attack | (sshd) Failed SSH login from 203.137.119.217 (JP/Japan/h203-137-119-217.ablenetvps.ne.jp): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct 9 08:41:09 optimus sshd[8434]: Invalid user samantha from 203.137.119.217 Oct 9 08:41:11 optimus sshd[8434]: Failed password for invalid user samantha from 203.137.119.217 port 50462 ssh2 Oct 9 08:43:16 optimus sshd[9091]: Failed password for root from 203.137.119.217 port 46482 ssh2 Oct 9 08:45:16 optimus sshd[9648]: Failed password for root from 203.137.119.217 port 42502 ssh2 Oct 9 08:47:29 optimus sshd[10267]: Failed password for root from 203.137.119.217 port 38520 ssh2 |
2020-10-09 21:18:27 |
| 34.122.249.54 | attackspambots | Oct 9 14:48:58 s2 sshd[13618]: Failed password for root from 34.122.249.54 port 48892 ssh2 Oct 9 14:49:53 s2 sshd[13661]: Failed password for root from 34.122.249.54 port 44052 ssh2 |
2020-10-09 21:08:34 |
| 45.81.254.144 | attackbotsspam | Unauthorized connection attempt from IP address 45.81.254.144 on Port 25(SMTP) |
2020-10-09 21:25:15 |
| 49.88.112.71 | attack | Oct 9 09:06:54 NPSTNNYC01T sshd[30952]: Failed password for root from 49.88.112.71 port 28215 ssh2 Oct 9 09:08:00 NPSTNNYC01T sshd[31059]: Failed password for root from 49.88.112.71 port 14794 ssh2 ... |
2020-10-09 21:33:01 |
| 111.229.211.66 | attack | Oct 9 19:59:52 itv-usvr-01 sshd[32399]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.211.66 user=root Oct 9 19:59:54 itv-usvr-01 sshd[32399]: Failed password for root from 111.229.211.66 port 54548 ssh2 Oct 9 20:05:00 itv-usvr-01 sshd[32611]: Invalid user cyrus from 111.229.211.66 |
2020-10-09 21:43:49 |
| 134.175.249.84 | attackbots | Oct 9 12:28:26 *** sshd[11960]: Did not receive identification string from 134.175.249.84 |
2020-10-09 21:39:27 |
| 117.192.180.139 | attackspam | SORBS spam violations / proto=6 . srcport=31717 . dstport=23 Telnet . (959) |
2020-10-09 21:33:34 |
| 171.239.252.230 | attackspambots | Unauthorized SSH connection attempt |
2020-10-09 21:34:39 |
| 122.152.208.242 | attackspambots | 122.152.208.242 (CN/China/-), 3 distributed sshd attacks on account [admin] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Oct 9 07:54:49 internal2 sshd[9924]: Invalid user admin from 122.152.208.242 port 37600 Oct 9 08:23:51 internal2 sshd[22295]: Invalid user admin from 111.229.63.223 port 57916 Oct 9 08:53:03 internal2 sshd[1526]: Invalid user admin from 45.148.122.190 port 37414 IP Addresses Blocked: |
2020-10-09 21:26:34 |
| 178.128.121.137 | attackspambots | Oct 9 13:03:42 ns3164893 sshd[17538]: Failed password for root from 178.128.121.137 port 48886 ssh2 Oct 9 13:08:32 ns3164893 sshd[17747]: Invalid user duckwater from 178.128.121.137 port 33900 ... |
2020-10-09 21:13:22 |
| 5.105.248.250 | attackspam | Attempts against non-existent wp-login |
2020-10-09 21:32:19 |
| 47.28.231.234 | attack | (sshd) Failed SSH login from 47.28.231.234 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct 8 20:48:16 server2 sshd[23551]: Invalid user admin from 47.28.231.234 port 50513 Oct 8 20:48:18 server2 sshd[23551]: Failed password for invalid user admin from 47.28.231.234 port 50513 ssh2 Oct 8 20:48:18 server2 sshd[23555]: Invalid user admin from 47.28.231.234 port 50596 Oct 8 20:48:20 server2 sshd[23555]: Failed password for invalid user admin from 47.28.231.234 port 50596 ssh2 Oct 8 20:48:21 server2 sshd[23606]: Invalid user admin from 47.28.231.234 port 50670 |
2020-10-09 21:06:15 |
| 120.53.243.211 | attackbotsspam | $f2bV_matches |
2020-10-09 21:27:00 |
| 159.65.30.66 | attackspambots | Oct 9 12:57:55 vps639187 sshd\[7027\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.30.66 user=root Oct 9 12:57:57 vps639187 sshd\[7027\]: Failed password for root from 159.65.30.66 port 54912 ssh2 Oct 9 13:02:13 vps639187 sshd\[7198\]: Invalid user art1 from 159.65.30.66 port 60324 Oct 9 13:02:13 vps639187 sshd\[7198\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.30.66 ... |
2020-10-09 21:45:08 |