城市(city): unknown
省份(region): unknown
国家(country): United States of America (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 107.114.202.215
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 5359
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;107.114.202.215. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021500 1800 900 604800 86400
;; Query time: 33 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 15 15:50:50 CST 2025
;; MSG SIZE rcvd: 108
Host 215.202.114.107.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 215.202.114.107.in-addr.arpa: NXDOMAIN
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 116.72.18.57 | attack | SSH login attempts. |
2020-03-31 20:58:39 |
| 106.12.92.70 | attackbots | Mar 31 10:43:38 powerpi2 sshd[25829]: Failed password for invalid user uq from 106.12.92.70 port 38720 ssh2 Mar 31 10:49:11 powerpi2 sshd[26122]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.92.70 user=root Mar 31 10:49:13 powerpi2 sshd[26122]: Failed password for root from 106.12.92.70 port 44854 ssh2 ... |
2020-03-31 20:27:41 |
| 222.64.108.146 | attackspambots | fail2ban |
2020-03-31 21:06:29 |
| 206.189.165.94 | attack | Mar 31 11:12:16 *** sshd[16277]: User root from 206.189.165.94 not allowed because not listed in AllowUsers |
2020-03-31 20:32:17 |
| 39.66.128.26 | attackbotsspam | Unauthorised access (Mar 31) SRC=39.66.128.26 LEN=40 TTL=49 ID=20155 TCP DPT=8080 WINDOW=23269 SYN Unauthorised access (Mar 31) SRC=39.66.128.26 LEN=40 TTL=49 ID=46808 TCP DPT=8080 WINDOW=58766 SYN Unauthorised access (Mar 30) SRC=39.66.128.26 LEN=40 TTL=49 ID=65481 TCP DPT=8080 WINDOW=35887 SYN |
2020-03-31 20:50:28 |
| 196.75.183.3 | attackspam | SSH login attempts. |
2020-03-31 20:44:32 |
| 186.185.242.68 | attackbots | IP address logged by my Netflix account after the individual hacked into and locked me out of my account. Individual also changed my account settings to the most expensive plan, which allows multiple people (profiles) to watch, and several profiles were added. The name on my account was changed to "Juan". The address, 186.185.242.68 was the first person to use my account on 25 March 2020. I contacted Netflix to have my account restored, so I was able to see the various IP addresses used. I will report all of them as well. |
2020-03-31 20:25:16 |
| 106.12.134.168 | attackspam | SSH login attempts. |
2020-03-31 20:41:38 |
| 112.64.34.165 | attack | Mar 31 02:46:58 web1 sshd\[11957\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.64.34.165 user=root Mar 31 02:46:59 web1 sshd\[11957\]: Failed password for root from 112.64.34.165 port 34235 ssh2 Mar 31 02:50:57 web1 sshd\[12386\]: Invalid user lingjian from 112.64.34.165 Mar 31 02:50:57 web1 sshd\[12386\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.64.34.165 Mar 31 02:50:59 web1 sshd\[12386\]: Failed password for invalid user lingjian from 112.64.34.165 port 54924 ssh2 |
2020-03-31 21:05:32 |
| 148.70.195.54 | attackspambots | Mar 31 15:29:22 lukav-desktop sshd\[486\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.195.54 user=root Mar 31 15:29:24 lukav-desktop sshd\[486\]: Failed password for root from 148.70.195.54 port 44894 ssh2 Mar 31 15:32:06 lukav-desktop sshd\[507\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.195.54 user=root Mar 31 15:32:08 lukav-desktop sshd\[507\]: Failed password for root from 148.70.195.54 port 45156 ssh2 Mar 31 15:34:58 lukav-desktop sshd\[523\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.195.54 user=root |
2020-03-31 20:56:00 |
| 145.239.83.89 | attack | Invalid user dmz from 145.239.83.89 port 41254 |
2020-03-31 20:37:02 |
| 124.74.137.174 | attackspambots | Mar 31 02:46:48 php1 sshd\[4827\]: Invalid user software from 124.74.137.174 Mar 31 02:46:48 php1 sshd\[4827\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.74.137.174 Mar 31 02:46:51 php1 sshd\[4827\]: Failed password for invalid user software from 124.74.137.174 port 32019 ssh2 Mar 31 02:52:16 php1 sshd\[5279\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.74.137.174 user=root Mar 31 02:52:18 php1 sshd\[5279\]: Failed password for root from 124.74.137.174 port 12601 ssh2 |
2020-03-31 21:01:28 |
| 134.122.84.223 | attackbotsspam | 03/31/2020-08:34:56.038035 134.122.84.223 Protocol: 6 ET SCAN NMAP -sS window 1024 |
2020-03-31 21:04:19 |
| 198.54.114.33 | attackbots | $f2bV_matches |
2020-03-31 20:44:13 |
| 104.127.126.70 | attackspam | Mar 31 05:47:46 debian-2gb-nbg1-2 kernel: \[7885520.675906\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=104.127.126.70 DST=195.201.40.59 LEN=44 TOS=0x00 PREC=0x00 TTL=51 ID=0 DF PROTO=TCP SPT=443 DPT=45751 WINDOW=29200 RES=0x00 ACK SYN URGP=0 |
2020-03-31 20:31:54 |