城市(city): unknown
省份(region): unknown
国家(country): China
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.14.255.54
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 44257
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;106.14.255.54. IN A
;; AUTHORITY SECTION:
. 316 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022022500 1800 900 604800 86400
;; Query time: 15 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 25 21:32:33 CST 2022
;; MSG SIZE rcvd: 106Host 54.255.14.106.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 54.255.14.106.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 128.106.195.126 | attackspam | "Fail2Ban detected SSH brute force attempt" |
2019-10-03 13:44:25 |
| 115.61.34.71 | attackspam | Unauthorised access (Oct 3) SRC=115.61.34.71 LEN=40 TTL=49 ID=25125 TCP DPT=8080 WINDOW=39830 SYN Unauthorised access (Oct 2) SRC=115.61.34.71 LEN=40 TTL=49 ID=8945 TCP DPT=8080 WINDOW=38129 SYN Unauthorised access (Oct 2) SRC=115.61.34.71 LEN=40 TTL=49 ID=8160 TCP DPT=8080 WINDOW=27414 SYN |
2019-10-03 13:27:44 |
| 131.221.80.193 | attackspambots | Oct 3 05:58:30 DAAP sshd[22388]: Invalid user aarum from 131.221.80.193 port 20001 Oct 3 05:58:30 DAAP sshd[22388]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=131.221.80.193 Oct 3 05:58:30 DAAP sshd[22388]: Invalid user aarum from 131.221.80.193 port 20001 Oct 3 05:58:31 DAAP sshd[22388]: Failed password for invalid user aarum from 131.221.80.193 port 20001 ssh2 ... |
2019-10-03 13:52:45 |
| 143.0.52.117 | attackbots | 2019-08-23 17:47:00,135 fail2ban.actions [878]: NOTICE [sshd] Ban 143.0.52.117 2019-08-23 20:52:01,668 fail2ban.actions [878]: NOTICE [sshd] Ban 143.0.52.117 2019-08-24 00:02:18,624 fail2ban.actions [878]: NOTICE [sshd] Ban 143.0.52.117 ... |
2019-10-03 13:09:29 |
| 203.110.179.26 | attack | SSH brutforce |
2019-10-03 14:01:28 |
| 157.230.208.92 | attack | Oct 3 07:48:33 eventyay sshd[4913]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.208.92 Oct 3 07:48:35 eventyay sshd[4913]: Failed password for invalid user default from 157.230.208.92 port 36878 ssh2 Oct 3 07:52:47 eventyay sshd[5000]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.208.92 ... |
2019-10-03 14:00:11 |
| 115.94.140.243 | attack | Oct 3 07:06:52 lnxweb62 sshd[14528]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.94.140.243 |
2019-10-03 13:14:19 |
| 115.146.121.236 | attackspambots | Lines containing failures of 115.146.121.236 Sep 30 19:07:57 shared06 sshd[13396]: Invalid user smbuser from 115.146.121.236 port 52944 Sep 30 19:07:57 shared06 sshd[13396]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.146.121.236 Sep 30 19:07:59 shared06 sshd[13396]: Failed password for invalid user smbuser from 115.146.121.236 port 52944 ssh2 Sep 30 19:07:59 shared06 sshd[13396]: Received disconnect from 115.146.121.236 port 52944:11: Bye Bye [preauth] Sep 30 19:07:59 shared06 sshd[13396]: Disconnected from invalid user smbuser 115.146.121.236 port 52944 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=115.146.121.236 |
2019-10-03 14:03:02 |
| 27.72.100.197 | attackbotsspam | Unauthorised access (Oct 3) SRC=27.72.100.197 LEN=52 TTL=107 ID=16576 DF TCP DPT=445 WINDOW=8192 SYN |
2019-10-03 13:29:11 |
| 185.81.193.212 | attackbotsspam | Oct 3 07:45:58 meumeu sshd[22019]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.81.193.212 Oct 3 07:46:00 meumeu sshd[22019]: Failed password for invalid user ftpuser from 185.81.193.212 port 40414 ssh2 Oct 3 07:55:52 meumeu sshd[23338]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.81.193.212 ... |
2019-10-03 14:06:26 |
| 134.175.192.246 | attackspambots | [Mon Sep 30 21:17:08 2019] Failed password for r.r from 134.175.192.246 port 33900 ssh2 [Mon Sep 30 21:17:14 2019] Failed password for r.r from 134.175.192.246 port 34028 ssh2 [Mon Sep 30 21:17:19 2019] Failed password for r.r from 134.175.192.246 port 34108 ssh2 [Mon Sep 30 21:17:24 2019] Failed password for r.r from 134.175.192.246 port 34212 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=134.175.192.246 |
2019-10-03 13:17:21 |
| 113.69.244.252 | attackspam | 3389/tcp 65529/tcp 1433/tcp... [2019-10-03]6pkt,3pt.(tcp) |
2019-10-03 13:55:13 |
| 189.109.247.149 | attackbotsspam | Oct 3 07:02:22 jane sshd[18994]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.109.247.149 Oct 3 07:02:24 jane sshd[18994]: Failed password for invalid user testxp from 189.109.247.149 port 64759 ssh2 ... |
2019-10-03 13:16:16 |
| 45.55.233.213 | attack | Oct 3 06:59:16 vps647732 sshd[3442]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.233.213 Oct 3 06:59:18 vps647732 sshd[3442]: Failed password for invalid user qg from 45.55.233.213 port 35086 ssh2 ... |
2019-10-03 13:07:21 |
| 142.93.57.62 | attack | 2019-09-27 12:58:13,203 fail2ban.actions [818]: NOTICE [sshd] Ban 142.93.57.62 2019-09-27 16:04:03,983 fail2ban.actions [818]: NOTICE [sshd] Ban 142.93.57.62 2019-09-27 19:10:46,685 fail2ban.actions [818]: NOTICE [sshd] Ban 142.93.57.62 ... |
2019-10-03 13:21:27 |