城市(city): unknown
省份(region): unknown
国家(country): China
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 125.72.52.14
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 19058
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;125.72.52.14. IN A
;; AUTHORITY SECTION:
. 277 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021301 1800 900 604800 86400
;; Query time: 63 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 14 07:04:38 CST 2022
;; MSG SIZE rcvd: 10514.52.72.125.in-addr.arpa domain name pointer 14.52.72.125.broad.xn.qh.dynamic.163data.com.cn.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
14.52.72.125.in-addr.arpa name = 14.52.72.125.broad.xn.qh.dynamic.163data.com.cn.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 140.143.222.95 | attackspam | 2019-10-21T08:36:52.334952abusebot-2.cloudsearch.cf sshd\[619\]: Invalid user plumber from 140.143.222.95 port 51320 |
2019-10-21 16:56:05 |
| 92.119.160.10 | attackbots | Oct 21 10:45:22 mc1 kernel: \[2933876.189409\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=92.119.160.10 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=52286 PROTO=TCP SPT=59151 DPT=9228 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 21 10:47:37 mc1 kernel: \[2934012.025140\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=92.119.160.10 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=55484 PROTO=TCP SPT=59151 DPT=8625 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 21 10:50:00 mc1 kernel: \[2934154.602569\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=92.119.160.10 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=9949 PROTO=TCP SPT=59151 DPT=8821 WINDOW=1024 RES=0x00 SYN URGP=0 ... |
2019-10-21 17:01:45 |
| 182.61.162.54 | attackspambots | $f2bV_matches |
2019-10-21 17:08:50 |
| 106.13.6.116 | attackspam | SSH Brute Force, server-1 sshd[4432]: Failed password for invalid user Coeur@123 from 106.13.6.116 port 55020 ssh2 |
2019-10-21 16:51:17 |
| 162.243.158.198 | attack | 2019-10-21T05:23:53.121042shield sshd\[2477\]: Invalid user desploy from 162.243.158.198 port 55454 2019-10-21T05:23:53.125242shield sshd\[2477\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.243.158.198 2019-10-21T05:23:55.085529shield sshd\[2477\]: Failed password for invalid user desploy from 162.243.158.198 port 55454 ssh2 2019-10-21T05:27:59.559611shield sshd\[3660\]: Invalid user contact from 162.243.158.198 port 37542 2019-10-21T05:27:59.563608shield sshd\[3660\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.243.158.198 |
2019-10-21 16:34:12 |
| 192.99.166.179 | attackspam | SSH invalid-user multiple login attempts |
2019-10-21 17:02:53 |
| 177.191.188.73 | attackspam | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/177.191.188.73/ BR - 1H : (240) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : BR NAME ASN : ASN53006 IP : 177.191.188.73 CIDR : 177.191.0.0/16 PREFIX COUNT : 15 UNIQUE IP COUNT : 599808 ATTACKS DETECTED ASN53006 : 1H - 1 3H - 2 6H - 4 12H - 7 24H - 14 DateTime : 2019-10-21 05:48:12 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery |
2019-10-21 16:45:01 |
| 36.229.67.146 | attack | Unauthorised access (Oct 21) SRC=36.229.67.146 LEN=52 PREC=0x20 TTL=116 ID=25575 DF TCP DPT=445 WINDOW=8192 SYN |
2019-10-21 17:10:15 |
| 159.89.165.36 | attackspambots | Automatic report - Banned IP Access |
2019-10-21 16:58:40 |
| 84.22.2.137 | attackspambots | Automatic report - Port Scan Attack |
2019-10-21 17:00:22 |
| 106.13.98.148 | attackspambots | Oct 21 09:52:03 vmanager6029 sshd\[14302\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.98.148 user=root Oct 21 09:52:05 vmanager6029 sshd\[14302\]: Failed password for root from 106.13.98.148 port 36822 ssh2 Oct 21 09:57:11 vmanager6029 sshd\[14376\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.98.148 user=root |
2019-10-21 16:43:30 |
| 104.131.14.14 | attack | Lines containing failures of 104.131.14.14 Oct 21 02:16:02 shared03 sshd[13293]: Invalid user vanderlei from 104.131.14.14 port 40849 Oct 21 02:16:02 shared03 sshd[13293]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.14.14 Oct 21 02:16:03 shared03 sshd[13293]: Failed password for invalid user vanderlei from 104.131.14.14 port 40849 ssh2 Oct 21 02:16:04 shared03 sshd[13293]: Received disconnect from 104.131.14.14 port 40849:11: Bye Bye [preauth] Oct 21 02:16:04 shared03 sshd[13293]: Disconnected from invalid user vanderlei 104.131.14.14 port 40849 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=104.131.14.14 |
2019-10-21 17:12:56 |
| 91.121.136.44 | attackspambots | Oct 21 01:02:26 home sshd[571]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.121.136.44 user=root Oct 21 01:02:28 home sshd[571]: Failed password for root from 91.121.136.44 port 50112 ssh2 Oct 21 01:18:22 home sshd[772]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.121.136.44 user=root Oct 21 01:18:24 home sshd[772]: Failed password for root from 91.121.136.44 port 33568 ssh2 Oct 21 01:22:09 home sshd[778]: Invalid user ts from 91.121.136.44 port 44570 Oct 21 01:22:09 home sshd[778]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.121.136.44 Oct 21 01:22:09 home sshd[778]: Invalid user ts from 91.121.136.44 port 44570 Oct 21 01:22:11 home sshd[778]: Failed password for invalid user ts from 91.121.136.44 port 44570 ssh2 Oct 21 01:25:45 home sshd[864]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.121.136.44 user=root Oct 21 01:25 |
2019-10-21 16:45:46 |
| 202.65.154.162 | attackspam | Oct 21 05:51:48 vtv3 sshd\[11969\]: Invalid user admin from 202.65.154.162 port 17804 Oct 21 05:51:48 vtv3 sshd\[11969\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.65.154.162 Oct 21 05:51:50 vtv3 sshd\[11969\]: Failed password for invalid user admin from 202.65.154.162 port 17804 ssh2 Oct 21 05:56:02 vtv3 sshd\[14154\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.65.154.162 user=root Oct 21 05:56:03 vtv3 sshd\[14154\]: Failed password for root from 202.65.154.162 port 35482 ssh2 Oct 21 06:43:24 vtv3 sshd\[5243\]: Invalid user server from 202.65.154.162 port 37269 Oct 21 06:43:24 vtv3 sshd\[5243\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.65.154.162 Oct 21 06:43:26 vtv3 sshd\[5243\]: Failed password for invalid user server from 202.65.154.162 port 37269 ssh2 Oct 21 06:48:04 vtv3 sshd\[7487\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 |
2019-10-21 16:47:45 |
| 185.40.14.13 | attack | " " |
2019-10-21 16:38:55 |