城市(city): unknown
省份(region): unknown
国家(country): Taiwan (Province of China)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 118.99.217.189
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 5426
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;118.99.217.189. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020302 1800 900 604800 86400
;; Query time: 15 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 04 07:15:57 CST 2025
;; MSG SIZE rcvd: 107
189.217.99.118.in-addr.arpa domain name pointer 189-217-99-118.savecom.net.tw.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
189.217.99.118.in-addr.arpa name = 189-217-99-118.savecom.net.tw.
Authoritative answers can be found from:
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 157.245.168.215 | attackbotsspam | 2019-10-15T13:52:14.817912ldap.arvenenaske.de sshd[12033]: Connection from 157.245.168.215 port 38946 on 5.199.128.55 port 22 2019-10-15T13:52:15.737372ldap.arvenenaske.de sshd[12033]: Invalid user user3 from 157.245.168.215 port 38946 2019-10-15T13:52:15.741290ldap.arvenenaske.de sshd[12033]: pam_sss(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.168.215 user=user3 2019-10-15T13:52:15.742312ldap.arvenenaske.de sshd[12033]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.168.215 2019-10-15T13:52:14.817912ldap.arvenenaske.de sshd[12033]: Connection from 157.245.168.215 port 38946 on 5.199.128.55 port 22 2019-10-15T13:52:15.737372ldap.arvenenaske.de sshd[12033]: Invalid user user3 from 157.245.168.215 port 38946 2019-10-15T13:52:18.039010ldap.arvenenaske.de sshd[12033]: Failed password for invalid user user3 from 157.245.168.215 port 38946 ssh2 2019-10-15T13:56:16.149142ldap.arvenenaske........ ------------------------------ |
2019-10-16 10:41:37 |
| 222.232.29.235 | attackbots | vps1:pam-generic |
2019-10-16 10:52:28 |
| 187.190.81.217 | attackbotsspam | Oct 15 16:47:19 ws22vmsma01 sshd[229453]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.190.81.217 Oct 15 16:47:22 ws22vmsma01 sshd[229453]: Failed password for invalid user admin from 187.190.81.217 port 34435 ssh2 ... |
2019-10-16 10:56:36 |
| 221.193.221.164 | attackbots | Oct 16 02:48:53 localhost postfix/smtpd\[30239\]: warning: unknown\[221.193.221.164\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 16 02:49:12 localhost postfix/smtpd\[30006\]: warning: unknown\[221.193.221.164\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 16 02:49:28 localhost postfix/smtpd\[30006\]: warning: unknown\[221.193.221.164\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 16 02:49:45 localhost postfix/smtpd\[30006\]: warning: unknown\[221.193.221.164\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 16 02:50:03 localhost postfix/smtpd\[30239\]: warning: unknown\[221.193.221.164\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2019-10-16 11:17:23 |
| 201.179.187.190 | attackbotsspam | Unauthorised access (Oct 15) SRC=201.179.187.190 LEN=40 TOS=0x10 PREC=0x40 TTL=52 ID=23290 TCP DPT=8080 WINDOW=2507 SYN Unauthorised access (Oct 15) SRC=201.179.187.190 LEN=40 TOS=0x10 PREC=0x40 TTL=52 ID=51684 TCP DPT=8080 WINDOW=2507 SYN Unauthorised access (Oct 15) SRC=201.179.187.190 LEN=40 TOS=0x10 PREC=0x40 TTL=52 ID=27003 TCP DPT=8080 WINDOW=2507 SYN |
2019-10-16 11:16:20 |
| 3.17.129.4 | attackbotsspam | Oct 15 16:53:43 server6 sshd[30710]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=em3-3-17-129-4.us-east-2.compute.amazonaws.com Oct 15 16:53:45 server6 sshd[30710]: Failed password for invalid user cst from 3.17.129.4 port 44664 ssh2 Oct 15 16:53:45 server6 sshd[30710]: Received disconnect from 3.17.129.4: 11: Bye Bye [preauth] Oct 15 17:06:57 server6 sshd[30874]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=em3-3-17-129-4.us-east-2.compute.amazonaws.com user=r.r Oct 15 17:06:59 server6 sshd[30874]: Failed password for r.r from 3.17.129.4 port 45084 ssh2 Oct 15 17:06:59 server6 sshd[30874]: Received disconnect from 3.17.129.4: 11: Bye Bye [preauth] Oct 15 17:10:31 server6 sshd[1949]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=em3-3-17-129-4.us-east-2.compute.amazonaws.com user=r.r Oct 15 17:10:32 server6 sshd[1949]: Failed password for r......... ------------------------------- |
2019-10-16 10:59:08 |
| 14.63.194.162 | attackspambots | $f2bV_matches |
2019-10-16 10:52:39 |
| 91.134.227.180 | attackspambots | Oct 16 01:21:55 MK-Soft-VM3 sshd[30459]: Failed password for root from 91.134.227.180 port 58178 ssh2 Oct 16 01:25:44 MK-Soft-VM3 sshd[30659]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.134.227.180 ... |
2019-10-16 10:51:18 |
| 200.87.7.61 | attackspam | 2019-10-15T22:53:58.834244 sshd[18713]: Invalid user guinness123 from 200.87.7.61 port 56132 2019-10-15T22:53:58.850927 sshd[18713]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.87.7.61 2019-10-15T22:53:58.834244 sshd[18713]: Invalid user guinness123 from 200.87.7.61 port 56132 2019-10-15T22:54:01.244253 sshd[18713]: Failed password for invalid user guinness123 from 200.87.7.61 port 56132 ssh2 2019-10-15T23:05:04.605301 sshd[18895]: Invalid user resumix from 200.87.7.61 port 44741 ... |
2019-10-16 10:50:01 |
| 112.85.42.227 | attackbots | Oct 15 23:04:32 TORMINT sshd\[28942\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.227 user=root Oct 15 23:04:33 TORMINT sshd\[28942\]: Failed password for root from 112.85.42.227 port 44290 ssh2 Oct 15 23:05:51 TORMINT sshd\[29088\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.227 user=root ... |
2019-10-16 11:14:21 |
| 92.223.73.155 | attackspam | "Inject etc/passwd" |
2019-10-16 10:57:49 |
| 111.231.239.143 | attackbots | SSH-BruteForce |
2019-10-16 11:17:03 |
| 94.191.89.180 | attackbots | Automatic report - Banned IP Access |
2019-10-16 11:11:25 |
| 122.224.129.234 | attackspam | port scan and connect, tcp 22 (ssh) |
2019-10-16 10:46:18 |
| 124.16.139.243 | attackspambots | $f2bV_matches |
2019-10-16 10:42:11 |