城市(city): unknown
省份(region): unknown
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 128.14.189.42
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 53797
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;128.14.189.42. IN A
;; AUTHORITY SECTION:
. 300 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022020702 1800 900 604800 86400
;; Query time: 21 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 08 08:45:02 CST 2022
;; MSG SIZE rcvd: 106Host 42.189.14.128.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 42.189.14.128.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 92.222.234.11 | attackspam | RDP Bruteforce |
2019-10-31 03:54:43 |
| 95.83.38.33 | attackbots | Attempt to attack host OS, exploiting network vulnerabilities, on 30-10-2019 11:45:31. |
2019-10-31 03:59:37 |
| 157.245.107.153 | attackbots | Oct 30 19:34:58 h2177944 sshd\[16187\]: Invalid user ucpss from 157.245.107.153 port 41864 Oct 30 19:34:58 h2177944 sshd\[16187\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.107.153 Oct 30 19:35:00 h2177944 sshd\[16187\]: Failed password for invalid user ucpss from 157.245.107.153 port 41864 ssh2 Oct 30 20:07:14 h2177944 sshd\[17758\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.107.153 user=root ... |
2019-10-31 03:30:22 |
| 212.64.44.246 | attackspam | $f2bV_matches |
2019-10-31 03:34:54 |
| 185.220.101.70 | attack | Oct 30 05:29:23 tdfoods sshd\[24581\]: Invalid user 22 from 185.220.101.70 Oct 30 05:29:23 tdfoods sshd\[24581\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.220.101.70 Oct 30 05:29:25 tdfoods sshd\[24581\]: Failed password for invalid user 22 from 185.220.101.70 port 43959 ssh2 Oct 30 05:29:29 tdfoods sshd\[24586\]: Invalid user 266344 from 185.220.101.70 Oct 30 05:29:29 tdfoods sshd\[24586\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.220.101.70 |
2019-10-31 03:42:42 |
| 189.90.130.102 | attackspam | 189.90.130.102:41554 - - [30/Oct/2019:10:02:48 +0100] "GET /wp-login.php HTTP/1.1" 404 294 |
2019-10-31 03:42:01 |
| 49.207.135.161 | attack | Unauthorized connection attempt from IP address 49.207.135.161 on Port 445(SMB) |
2019-10-31 03:31:16 |
| 117.248.55.34 | attackbotsspam | Unauthorized connection attempt from IP address 117.248.55.34 on Port 445(SMB) |
2019-10-31 03:41:03 |
| 116.107.50.106 | attack | Unauthorized connection attempt from IP address 116.107.50.106 on Port 445(SMB) |
2019-10-31 03:56:55 |
| 45.136.109.173 | attack | Multiport scan : 63 ports scanned 1119 1455 1777 1995 2130 2244 2350 2485 2545 3328 3545 4040 4265 4457 4493 5001 5220 5460 5547 6185 7590 7766 7778 8135 8185 8222 8250 8265 8383 8889 8900 9235 9440 9955 9978 10230 10245 10465 10550 10580 15451 16000 20500 20902 21312 22111 25852 29792 30003 31000 31513 32032 33033 33350 33891 33894 40300 47074 51000 53053 56789 60900 62026 |
2019-10-31 03:36:29 |
| 185.176.27.246 | attack | firewall-block, port(s): 3609/tcp, 4409/tcp, 5209/tcp, 6309/tcp |
2019-10-31 03:40:22 |
| 118.89.247.74 | attackspambots | Oct 30 18:49:45 v22018076622670303 sshd\[29850\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.89.247.74 user=root Oct 30 18:49:47 v22018076622670303 sshd\[29850\]: Failed password for root from 118.89.247.74 port 59120 ssh2 Oct 30 18:54:27 v22018076622670303 sshd\[29912\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.89.247.74 user=root ... |
2019-10-31 03:31:00 |
| 104.40.8.62 | attackspambots | Oct 30 20:50:51 jane sshd[24090]: Failed password for root from 104.40.8.62 port 43968 ssh2 ... |
2019-10-31 04:01:23 |
| 78.158.154.20 | attackspam | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/78.158.154.20/ CY - 1H : (2) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : CY NAME ASN : ASN16229 IP : 78.158.154.20 CIDR : 78.158.154.0/24 PREFIX COUNT : 198 UNIQUE IP COUNT : 50688 ATTACKS DETECTED ASN16229 : 1H - 1 3H - 1 6H - 1 12H - 1 24H - 1 DateTime : 2019-10-30 12:46:01 INFO : Server 403 - Looking for resource vulnerabilities Detected and Blocked by ADMIN - data recovery |
2019-10-31 03:29:15 |
| 222.186.175.161 | attackbotsspam | Oct 30 20:48:42 amit sshd\[26895\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.161 user=root Oct 30 20:48:44 amit sshd\[26895\]: Failed password for root from 222.186.175.161 port 25108 ssh2 Oct 30 20:49:10 amit sshd\[26897\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.161 user=root ... |
2019-10-31 03:50:23 |