城市(city): unknown
省份(region): unknown
国家(country): Republic of China (ROC)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 119.14.118.37
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 47199
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;119.14.118.37. IN A
;; AUTHORITY SECTION:
. 259 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022030800 1800 900 604800 86400
;; Query time: 64 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Mar 08 18:03:57 CST 2022
;; MSG SIZE rcvd: 10637.118.14.119.in-addr.arpa domain name pointer host-37.118-14-119.dynamic.totalbb.net.tw.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
37.118.14.119.in-addr.arpa name = host-37.118-14-119.dynamic.totalbb.net.tw.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 106.54.253.41 | attack | Apr 13 07:42:31 hosting sshd[5284]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.253.41 user=root Apr 13 07:42:32 hosting sshd[5284]: Failed password for root from 106.54.253.41 port 45388 ssh2 ... |
2020-04-13 12:53:35 |
| 101.140.17.85 | attackspam | Apr 13 05:59:18 debian-2gb-nbg1-2 kernel: \[9009354.244026\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=101.140.17.85 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=29761 PROTO=TCP SPT=51542 DPT=23 WINDOW=47073 RES=0x00 SYN URGP=0 |
2020-04-13 12:37:55 |
| 51.38.238.205 | attackbots | Apr 13 06:46:31 vps sshd[288331]: Failed password for root from 51.38.238.205 port 60611 ssh2 Apr 13 06:50:08 vps sshd[310093]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=205.ip-51-38-238.eu user=root Apr 13 06:50:09 vps sshd[310093]: Failed password for root from 51.38.238.205 port 36160 ssh2 Apr 13 06:53:46 vps sshd[326706]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=205.ip-51-38-238.eu user=root Apr 13 06:53:48 vps sshd[326706]: Failed password for root from 51.38.238.205 port 39939 ssh2 ... |
2020-04-13 12:56:39 |
| 222.186.15.158 | attackspam | Apr 12 18:34:30 sachi sshd\[18439\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.158 user=root Apr 12 18:34:31 sachi sshd\[18439\]: Failed password for root from 222.186.15.158 port 43673 ssh2 Apr 12 18:34:33 sachi sshd\[18439\]: Failed password for root from 222.186.15.158 port 43673 ssh2 Apr 12 18:34:36 sachi sshd\[18439\]: Failed password for root from 222.186.15.158 port 43673 ssh2 Apr 12 18:41:02 sachi sshd\[19106\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.158 user=root |
2020-04-13 12:46:23 |
| 119.29.2.157 | attack | k+ssh-bruteforce |
2020-04-13 12:33:57 |
| 125.162.24.134 | attack | 1586750369 - 04/13/2020 05:59:29 Host: 125.162.24.134/125.162.24.134 Port: 445 TCP Blocked |
2020-04-13 12:30:34 |
| 120.201.2.189 | attack | Apr 13 06:59:41 |
2020-04-13 13:00:57 |
| 191.252.222.148 | attackbotsspam | Lines containing failures of 191.252.222.148 Apr 13 06:03:22 shared11 sshd[28344]: Invalid user kaare from 191.252.222.148 port 54948 Apr 13 06:03:22 shared11 sshd[28344]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.252.222.148 Apr 13 06:03:24 shared11 sshd[28344]: Failed password for invalid user kaare from 191.252.222.148 port 54948 ssh2 Apr 13 06:03:24 shared11 sshd[28344]: Received disconnect from 191.252.222.148 port 54948:11: Bye Bye [preauth] Apr 13 06:03:24 shared11 sshd[28344]: Disconnected from invalid user kaare 191.252.222.148 port 54948 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=191.252.222.148 |
2020-04-13 12:27:38 |
| 104.236.239.60 | attack | Apr 12 18:53:18 sachi sshd\[20275\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.239.60 user=root Apr 12 18:53:21 sachi sshd\[20275\]: Failed password for root from 104.236.239.60 port 38411 ssh2 Apr 12 18:56:51 sachi sshd\[20634\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.239.60 user=root Apr 12 18:56:53 sachi sshd\[20634\]: Failed password for root from 104.236.239.60 port 42420 ssh2 Apr 12 19:00:22 sachi sshd\[20923\]: Invalid user fearless from 104.236.239.60 |
2020-04-13 13:02:06 |
| 71.246.210.34 | attack | Apr 13 05:55:51 host01 sshd[29727]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=71.246.210.34 Apr 13 05:55:53 host01 sshd[29727]: Failed password for invalid user audrey from 71.246.210.34 port 41434 ssh2 Apr 13 05:59:02 host01 sshd[30417]: Failed password for root from 71.246.210.34 port 47684 ssh2 ... |
2020-04-13 12:49:42 |
| 14.99.36.108 | attackspam | detected by Fail2Ban |
2020-04-13 12:44:08 |
| 106.3.130.53 | attackspam | 2020-04-13T05:56:22.191878vps773228.ovh.net sshd[24800]: Invalid user gasiago from 106.3.130.53 port 47588 2020-04-13T05:56:22.206238vps773228.ovh.net sshd[24800]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.3.130.53 2020-04-13T05:56:22.191878vps773228.ovh.net sshd[24800]: Invalid user gasiago from 106.3.130.53 port 47588 2020-04-13T05:56:24.291124vps773228.ovh.net sshd[24800]: Failed password for invalid user gasiago from 106.3.130.53 port 47588 ssh2 2020-04-13T05:59:30.701781vps773228.ovh.net sshd[25931]: Invalid user test from 106.3.130.53 port 40336 ... |
2020-04-13 12:30:07 |
| 52.230.52.97 | attack | Apr 13 06:33:12 vps sshd[211177]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.230.52.97 user=root Apr 13 06:33:14 vps sshd[211177]: Failed password for root from 52.230.52.97 port 42174 ssh2 Apr 13 06:37:28 vps sshd[235228]: Invalid user file from 52.230.52.97 port 52702 Apr 13 06:37:28 vps sshd[235228]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.230.52.97 Apr 13 06:37:30 vps sshd[235228]: Failed password for invalid user file from 52.230.52.97 port 52702 ssh2 ... |
2020-04-13 12:55:03 |
| 49.235.10.177 | attackbotsspam | Apr 13 05:53:55 host01 sshd[29332]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.10.177 Apr 13 05:53:57 host01 sshd[29332]: Failed password for invalid user dustan from 49.235.10.177 port 53454 ssh2 Apr 13 05:58:55 host01 sshd[30370]: Failed password for root from 49.235.10.177 port 53078 ssh2 ... |
2020-04-13 12:57:08 |
| 122.96.29.252 | attackspambots | [Mon Apr 13 10:58:58.777700 2020] [:error] [pid 6724:tid 140294940964608] [client 122.96.29.252:60518] [client 122.96.29.252] ModSecurity: Access denied with code 403 (phase 2). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "696"] [id "920350"] [msg "Host header is a numeric IP address"] [data "123.125.114.144"] [severity "WARNING"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/IP_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "123.125.114.144"] [uri "/"] [unique_id "XpPjgrtIjIAEk8wJU9WtigAAAIk"] ... |
2020-04-13 12:51:28 |