城市(city): unknown
省份(region): unknown
国家(country): Korea Republic of
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.129.114.43
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 14579
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;14.129.114.43. IN A
;; AUTHORITY SECTION:
. 418 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022022700 1800 900 604800 86400
;; Query time: 109 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 27 17:44:06 CST 2022
;; MSG SIZE rcvd: 10643.114.129.14.in-addr.arpa domain name pointer gasan-servers-114.makeshop.co.kr.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
43.114.129.14.in-addr.arpa name = gasan-servers-114.makeshop.co.kr.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 222.186.42.241 | attackspam | 2019-09-20T16:11:29.823895abusebot-2.cloudsearch.cf sshd\[20270\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.241 user=root |
2019-09-21 00:20:22 |
| 37.59.183.54 | attack | Brute force attempt |
2019-09-20 23:57:40 |
| 68.183.191.99 | attackspam | Sep 20 06:05:41 kapalua sshd\[6322\]: Invalid user Password from 68.183.191.99 Sep 20 06:05:41 kapalua sshd\[6322\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.191.99 Sep 20 06:05:43 kapalua sshd\[6322\]: Failed password for invalid user Password from 68.183.191.99 port 33098 ssh2 Sep 20 06:10:48 kapalua sshd\[6882\]: Invalid user 123456 from 68.183.191.99 Sep 20 06:10:48 kapalua sshd\[6882\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.191.99 |
2019-09-21 00:13:07 |
| 103.62.239.77 | attackbotsspam | Sep 20 02:07:31 web1 sshd\[9290\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.62.239.77 user=root Sep 20 02:07:33 web1 sshd\[9290\]: Failed password for root from 103.62.239.77 port 41352 ssh2 Sep 20 02:12:39 web1 sshd\[9772\]: Invalid user sababo from 103.62.239.77 Sep 20 02:12:39 web1 sshd\[9772\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.62.239.77 Sep 20 02:12:41 web1 sshd\[9772\]: Failed password for invalid user sababo from 103.62.239.77 port 54010 ssh2 |
2019-09-20 23:58:02 |
| 124.88.112.48 | attack | Sep 20 11:13:09 mail kernel: [1083736.396503] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3d:86:ee:00:08:e3:ff:fd:90:08:00 SRC=124.88.112.48 DST=91.205.173.180 LEN=52 TOS=0x00 PREC=0x00 TTL=112 ID=14352 DF PROTO=TCP SPT=1737 DPT=4899 WINDOW=8192 RES=0x00 SYN URGP=0 Sep 20 11:13:12 mail kernel: [1083739.397731] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3d:86:ee:00:08:e3:ff:fd:90:08:00 SRC=124.88.112.48 DST=91.205.173.180 LEN=52 TOS=0x00 PREC=0x00 TTL=112 ID=14517 DF PROTO=TCP SPT=1737 DPT=4899 WINDOW=8192 RES=0x00 SYN URGP=0 Sep 20 11:13:18 mail kernel: [1083745.399791] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3d:86:ee:00:08:e3:ff:fd:90:08:00 SRC=124.88.112.48 DST=91.205.173.180 LEN=48 TOS=0x00 PREC=0x00 TTL=112 ID=14796 DF PROTO=TCP SPT=1737 DPT=4899 WINDOW=65535 RES=0x00 SYN URGP=0 |
2019-09-21 00:27:18 |
| 78.44.243.210 | attackspam | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/78.44.243.210/ DE - 1H : (40) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : DE NAME ASN : ASN6830 IP : 78.44.243.210 CIDR : 78.44.0.0/16 PREFIX COUNT : 755 UNIQUE IP COUNT : 12137216 WYKRYTE ATAKI Z ASN6830 : 1H - 1 3H - 1 6H - 3 12H - 6 24H - 10 INFO : SYN Flood DDoS Attack Denial-of-Service Attack (DoS) Detected and Blocked by ADMIN - data recovery |
2019-09-21 00:04:26 |
| 88.88.193.230 | attack | Sep 20 15:46:42 Ubuntu-1404-trusty-64-minimal sshd\[6866\]: Invalid user admin from 88.88.193.230 Sep 20 15:46:42 Ubuntu-1404-trusty-64-minimal sshd\[6866\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=88.88.193.230 Sep 20 15:46:44 Ubuntu-1404-trusty-64-minimal sshd\[6866\]: Failed password for invalid user admin from 88.88.193.230 port 60289 ssh2 Sep 20 15:54:32 Ubuntu-1404-trusty-64-minimal sshd\[13384\]: Invalid user suniltex from 88.88.193.230 Sep 20 15:54:32 Ubuntu-1404-trusty-64-minimal sshd\[13384\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=88.88.193.230 |
2019-09-21 00:19:36 |
| 111.230.151.134 | attackspambots | Sep 20 18:00:15 markkoudstaal sshd[32686]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.230.151.134 Sep 20 18:00:17 markkoudstaal sshd[32686]: Failed password for invalid user lpa from 111.230.151.134 port 54664 ssh2 Sep 20 18:05:29 markkoudstaal sshd[707]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.230.151.134 |
2019-09-21 00:11:34 |
| 89.248.160.193 | attackbotsspam | 09/20/2019-10:20:41.257857 89.248.160.193 Protocol: 6 ET SCAN NMAP -sS window 1024 |
2019-09-21 00:27:41 |
| 46.38.144.57 | attackspambots | Sep 20 17:10:26 mail postfix/smtpd\[15163\]: warning: unknown\[46.38.144.57\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Sep 20 17:11:45 mail postfix/smtpd\[15163\]: warning: unknown\[46.38.144.57\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Sep 20 17:13:02 mail postfix/smtpd\[16056\]: warning: unknown\[46.38.144.57\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Sep 20 17:44:10 mail postfix/smtpd\[17047\]: warning: unknown\[46.38.144.57\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ |
2019-09-20 23:47:57 |
| 45.136.109.34 | attack | firewall-block, port(s): 3009/tcp, 3037/tcp, 3052/tcp, 3054/tcp, 3090/tcp, 3118/tcp, 3120/tcp, 3213/tcp, 3382/tcp, 3413/tcp, 3545/tcp, 3561/tcp, 3659/tcp, 3789/tcp, 3827/tcp, 3839/tcp, 3908/tcp, 3923/tcp, 3948/tcp, 3951/tcp, 3954/tcp, 3957/tcp, 3963/tcp |
2019-09-21 00:24:02 |
| 139.59.135.84 | attackbotsspam | Sep 20 01:01:52 sachi sshd\[21800\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.135.84 user=root Sep 20 01:01:54 sachi sshd\[21800\]: Failed password for root from 139.59.135.84 port 41494 ssh2 Sep 20 01:06:15 sachi sshd\[22190\]: Invalid user edrip from 139.59.135.84 Sep 20 01:06:15 sachi sshd\[22190\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.135.84 Sep 20 01:06:17 sachi sshd\[22190\]: Failed password for invalid user edrip from 139.59.135.84 port 55338 ssh2 |
2019-09-21 00:08:41 |
| 182.126.212.213 | attackspambots | Unauthorised access (Sep 20) SRC=182.126.212.213 LEN=40 TTL=49 ID=65275 TCP DPT=8080 WINDOW=59321 SYN Unauthorised access (Sep 20) SRC=182.126.212.213 LEN=40 TTL=49 ID=22682 TCP DPT=8080 WINDOW=59321 SYN Unauthorised access (Sep 20) SRC=182.126.212.213 LEN=40 TTL=49 ID=39299 TCP DPT=8080 WINDOW=59321 SYN |
2019-09-21 00:28:12 |
| 178.128.57.96 | attack | Sep 20 05:53:36 hanapaa sshd\[8075\]: Invalid user simsadmin from 178.128.57.96 Sep 20 05:53:36 hanapaa sshd\[8075\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.57.96 Sep 20 05:53:38 hanapaa sshd\[8075\]: Failed password for invalid user simsadmin from 178.128.57.96 port 55226 ssh2 Sep 20 05:58:12 hanapaa sshd\[8513\]: Invalid user serverpilot from 178.128.57.96 Sep 20 05:58:12 hanapaa sshd\[8513\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.57.96 |
2019-09-21 00:04:43 |
| 84.80.223.130 | attack | Lines containing failures of 84.80.223.130 Sep 20 11:45:19 shared12 sshd[21340]: Invalid user pi from 84.80.223.130 port 46588 Sep 20 11:45:19 shared12 sshd[21342]: Invalid user pi from 84.80.223.130 port 46592 Sep 20 11:45:19 shared12 sshd[21340]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=84.80.223.130 Sep 20 11:45:19 shared12 sshd[21342]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=84.80.223.130 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=84.80.223.130 |
2019-09-21 00:05:35 |