城市(city): unknown
省份(region): unknown
国家(country): China
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.108.18.140
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 24577
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;14.108.18.140. IN A
;; AUTHORITY SECTION:
. 192 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022022202 1800 900 604800 86400
;; Query time: 38 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 23 06:54:01 CST 2022
;; MSG SIZE rcvd: 106Host 140.18.108.14.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 140.18.108.14.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 223.71.167.155 | attackspambots | Honeypot attack, port: 81, PTR: PTR record not found |
2019-12-02 19:13:32 |
| 94.177.54.40 | attackbotsspam | Unauthorised access (Dec 2) SRC=94.177.54.40 LEN=52 TTL=115 ID=29753 DF TCP DPT=445 WINDOW=8192 SYN Unauthorised access (Dec 2) SRC=94.177.54.40 LEN=52 TTL=115 ID=31361 DF TCP DPT=1433 WINDOW=8192 SYN Unauthorised access (Dec 2) SRC=94.177.54.40 LEN=52 TTL=115 ID=22100 DF TCP DPT=1433 WINDOW=8192 SYN Unauthorised access (Dec 2) SRC=94.177.54.40 LEN=52 TTL=115 ID=12291 DF TCP DPT=1433 WINDOW=8192 SYN Unauthorised access (Dec 1) SRC=94.177.54.40 LEN=52 TTL=115 ID=10514 DF TCP DPT=1433 WINDOW=8192 SYN Unauthorised access (Dec 1) SRC=94.177.54.40 LEN=52 TTL=115 ID=15993 DF TCP DPT=445 WINDOW=8192 SYN Unauthorised access (Dec 1) SRC=94.177.54.40 LEN=52 TTL=115 ID=2873 DF TCP DPT=1433 WINDOW=8192 SYN Unauthorised access (Dec 1) SRC=94.177.54.40 LEN=52 TTL=115 ID=24726 DF TCP DPT=1433 WINDOW=8192 SYN Unauthorised access (Dec 1) SRC=94.177.54.40 LEN=52 TTL=115 ID=21370 DF TCP DPT=445 WINDOW=8192 SYN |
2019-12-02 19:08:01 |
| 197.39.214.99 | attack | Triggered by Fail2Ban at Vostok web server |
2019-12-02 18:54:01 |
| 106.12.11.160 | attackbotsspam | Dec 1 13:50:56 server sshd\[23995\]: Failed password for invalid user lxpopuser from 106.12.11.160 port 52530 ssh2 Dec 2 12:19:06 server sshd\[4915\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.11.160 user=root Dec 2 12:19:08 server sshd\[4915\]: Failed password for root from 106.12.11.160 port 58558 ssh2 Dec 2 12:32:33 server sshd\[10489\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.11.160 user=mysql Dec 2 12:32:35 server sshd\[10489\]: Failed password for mysql from 106.12.11.160 port 49930 ssh2 ... |
2019-12-02 19:07:36 |
| 106.13.73.76 | attackspam | Dec 2 08:13:22 firewall sshd[18068]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.73.76 Dec 2 08:13:22 firewall sshd[18068]: Invalid user bot from 106.13.73.76 Dec 2 08:13:24 firewall sshd[18068]: Failed password for invalid user bot from 106.13.73.76 port 52614 ssh2 ... |
2019-12-02 19:22:53 |
| 185.250.45.89 | attackspam | Fail2Ban Ban Triggered HTTP Attempted Bot Registration |
2019-12-02 18:56:03 |
| 64.52.22.216 | attackbots | Dec 2 09:48:30 lvps92-51-164-246 sshd[4544]: Address 64.52.22.216 maps to 64.52.22.216.static.skysilk.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 2 09:48:30 lvps92-51-164-246 sshd[4544]: Invalid user alusera from 64.52.22.216 Dec 2 09:48:30 lvps92-51-164-246 sshd[4544]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.52.22.216 Dec 2 09:48:32 lvps92-51-164-246 sshd[4544]: Failed password for invalid user alusera from 64.52.22.216 port 45094 ssh2 Dec 2 09:48:32 lvps92-51-164-246 sshd[4544]: Received disconnect from 64.52.22.216: 11: Bye Bye [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=64.52.22.216 |
2019-12-02 19:24:26 |
| 124.156.240.14 | attack | 5672/tcp 1604/udp 1433/tcp... [2019-10-07/12-02]7pkt,5pt.(tcp),2pt.(udp) |
2019-12-02 19:05:05 |
| 187.19.10.117 | attackspambots | 26/tcp 23/tcp [2019-11-28/12-02]2pkt |
2019-12-02 19:20:55 |
| 222.186.180.223 | attack | Dec 2 12:22:46 eventyay sshd[6274]: Failed password for root from 222.186.180.223 port 53116 ssh2 Dec 2 12:23:00 eventyay sshd[6274]: error: maximum authentication attempts exceeded for root from 222.186.180.223 port 53116 ssh2 [preauth] Dec 2 12:23:08 eventyay sshd[6293]: Failed password for root from 222.186.180.223 port 29424 ssh2 ... |
2019-12-02 19:25:05 |
| 150.95.212.72 | attackbots | Dec 2 01:12:29 web9 sshd\[30362\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.95.212.72 user=mysql Dec 2 01:12:30 web9 sshd\[30362\]: Failed password for mysql from 150.95.212.72 port 40842 ssh2 Dec 2 01:19:26 web9 sshd\[31318\]: Invalid user zhaozhua from 150.95.212.72 Dec 2 01:19:26 web9 sshd\[31318\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.95.212.72 Dec 2 01:19:28 web9 sshd\[31318\]: Failed password for invalid user zhaozhua from 150.95.212.72 port 52892 ssh2 |
2019-12-02 19:27:09 |
| 157.119.29.40 | attack | 1433/tcp 445/tcp... [2019-10-06/12-02]13pkt,2pt.(tcp) |
2019-12-02 18:54:25 |
| 181.221.192.113 | attackspambots | Dec 2 12:42:59 sauna sshd[185665]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.221.192.113 Dec 2 12:43:01 sauna sshd[185665]: Failed password for invalid user zj1234%^&* from 181.221.192.113 port 45880 ssh2 ... |
2019-12-02 18:59:44 |
| 218.92.0.158 | attackspam | pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.158 user=root Failed password for root from 218.92.0.158 port 61366 ssh2 Failed password for root from 218.92.0.158 port 61366 ssh2 Failed password for root from 218.92.0.158 port 61366 ssh2 Failed password for root from 218.92.0.158 port 61366 ssh2 |
2019-12-02 19:28:49 |
| 114.116.227.247 | attack | Port scan on 3 port(s): 2375 2377 4243 |
2019-12-02 19:26:01 |