城市(city): unknown
省份(region): unknown
国家(country): South Africa
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 105.208.158.214
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49993
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;105.208.158.214. IN A
;; AUTHORITY SECTION:
. 251 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022011000 1800 900 604800 86400
;; Query time: 61 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jan 11 01:08:30 CST 2022
;; MSG SIZE rcvd: 108b'214.158.208.105.in-addr.arpa domain name pointer 105-208-158-214.access.mtnbusiness.co.za.
'Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
214.158.208.105.in-addr.arpa name = 105-208-158-214.access.mtnbusiness.co.za.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 128.199.162.2 | attackspam | Jun 1 13:01:54 ajax sshd[9330]: Failed password for root from 128.199.162.2 port 56353 ssh2 |
2020-06-01 23:29:54 |
| 1.22.179.29 | attackbots | 2019-10-24 07:45:04 1iNVvj-00085x-VG SMTP connection from \(\[1.22.179.29\]\) \[1.22.179.29\]:23390 I=\[193.107.90.29\]:25 closed by DROP in ACL 2019-10-24 07:45:30 1iNVw9-00086U-J0 SMTP connection from \(\[1.22.179.29\]\) \[1.22.179.29\]:23587 I=\[193.107.90.29\]:25 closed by DROP in ACL 2019-10-24 07:45:42 1iNVwL-00086e-HO SMTP connection from \(\[1.22.179.29\]\) \[1.22.179.29\]:23685 I=\[193.107.90.29\]:25 closed by DROP in ACL ... |
2020-06-01 23:44:00 |
| 27.65.192.34 | attack | Icarus honeypot on github |
2020-06-01 23:28:23 |
| 113.172.100.241 | attackbotsspam | Jun 1 15:07:20 www4 sshd\[39150\]: Invalid user admin from 113.172.100.241 Jun 1 15:07:20 www4 sshd\[39150\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.172.100.241 Jun 1 15:07:22 www4 sshd\[39150\]: Failed password for invalid user admin from 113.172.100.241 port 33661 ssh2 ... |
2020-06-01 23:03:59 |
| 157.97.80.205 | attackbotsspam | Jun 1 15:11:07 server sshd[22776]: Failed password for root from 157.97.80.205 port 37075 ssh2 Jun 1 15:14:49 server sshd[22958]: Failed password for root from 157.97.80.205 port 39514 ssh2 ... |
2020-06-01 23:12:50 |
| 167.114.3.158 | attackspambots | Jun 1 14:52:47 legacy sshd[10150]: Failed password for root from 167.114.3.158 port 53810 ssh2 Jun 1 14:56:26 legacy sshd[10303]: Failed password for root from 167.114.3.158 port 59424 ssh2 ... |
2020-06-01 23:08:07 |
| 1.232.139.240 | attackbots | 2020-03-14 13:11:41 1jD5dj-0008LA-LF SMTP connection from \(\[1.232.139.240\]\) \[1.232.139.240\]:19028 I=\[193.107.88.166\]:25 closed by DROP in ACL 2020-03-14 13:12:01 1jD5e4-0008Lb-0l SMTP connection from \(\[1.232.139.240\]\) \[1.232.139.240\]:19147 I=\[193.107.88.166\]:25 closed by DROP in ACL 2020-03-14 13:12:16 1jD5eI-0008Lw-BT SMTP connection from \(\[1.232.139.240\]\) \[1.232.139.240\]:19246 I=\[193.107.88.166\]:25 closed by DROP in ACL ... |
2020-06-01 23:34:29 |
| 103.4.217.138 | attackspambots | May 31 19:27:20 serwer sshd\[20359\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.4.217.138 user=root May 31 19:27:22 serwer sshd\[20359\]: Failed password for root from 103.4.217.138 port 44235 ssh2 May 31 19:32:34 serwer sshd\[20923\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.4.217.138 user=root May 31 19:32:36 serwer sshd\[20923\]: Failed password for root from 103.4.217.138 port 54631 ssh2 May 31 19:37:42 serwer sshd\[21432\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.4.217.138 user=root May 31 19:37:44 serwer sshd\[21432\]: Failed password for root from 103.4.217.138 port 54336 ssh2 May 31 19:43:01 serwer sshd\[22038\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.4.217.138 user=root May 31 19:43:04 serwer sshd\[22038\]: Failed password for root from 103.4.217.138 port 539 ... |
2020-06-01 23:13:19 |
| 36.81.213.116 | attackbotsspam | IP 36.81.213.116 attacked honeypot on port: 81 at 6/1/2020 1:06:59 PM |
2020-06-01 23:23:01 |
| 111.229.142.98 | attackbots | May 31 07:55:18 h2040555 sshd[7158]: Invalid user ftpuser from 111.229.142.98 May 31 07:55:18 h2040555 sshd[7158]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.142.98 May 31 07:55:20 h2040555 sshd[7158]: Failed password for invalid user ftpuser from 111.229.142.98 port 37052 ssh2 May 31 07:55:20 h2040555 sshd[7158]: Received disconnect from 111.229.142.98: 11: Bye Bye [preauth] Jun 1 12:43:44 h2040555 sshd[1830]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.142.98 user=r.r Jun 1 12:43:46 h2040555 sshd[1830]: Failed password for r.r from 111.229.142.98 port 45796 ssh2 Jun 1 12:43:47 h2040555 sshd[1830]: Received disconnect from 111.229.142.98: 11: Bye Bye [preauth] Jun 1 12:47:41 h2040555 sshd[2007]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.142.98 user=r.r Jun 1 12:47:43 h2040555 sshd[2007]: Failed password f........ ------------------------------- |
2020-06-01 23:18:37 |
| 104.248.144.208 | attackbots | 104.248.144.208 - - [01/Jun/2020:14:27:58 +0200] "GET /wp-login.php HTTP/1.1" 200 6364 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 104.248.144.208 - - [01/Jun/2020:14:28:00 +0200] "POST /wp-login.php HTTP/1.1" 200 6615 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 104.248.144.208 - - [01/Jun/2020:14:28:07 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-06-01 23:04:31 |
| 106.54.121.45 | attack | Tried sshing with brute force. |
2020-06-01 23:38:16 |
| 162.243.137.96 | attackbotsspam | Port scan: Attack repeated for 24 hours |
2020-06-01 23:21:08 |
| 103.44.248.87 | attack | May 30 16:17:25 serwer sshd\[28673\]: Invalid user testuser1 from 103.44.248.87 port 42929 May 30 16:17:25 serwer sshd\[28673\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.44.248.87 May 30 16:17:28 serwer sshd\[28673\]: Failed password for invalid user testuser1 from 103.44.248.87 port 42929 ssh2 May 30 16:23:46 serwer sshd\[29223\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.44.248.87 user=root May 30 16:23:47 serwer sshd\[29223\]: Failed password for root from 103.44.248.87 port 44186 ssh2 May 30 16:27:16 serwer sshd\[29566\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.44.248.87 user=root May 30 16:27:17 serwer sshd\[29566\]: Failed password for root from 103.44.248.87 port 58939 ssh2 May 30 16:30:05 serwer sshd\[29856\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.44.248.87 us ... |
2020-06-01 23:01:16 |
| 142.93.211.52 | attackspam | Jun 1 16:18:42 home sshd[20537]: Failed password for root from 142.93.211.52 port 59430 ssh2 Jun 1 16:23:05 home sshd[20983]: Failed password for root from 142.93.211.52 port 36398 ssh2 ... |
2020-06-01 23:12:03 |