城市(city): unknown
省份(region): unknown
国家(country): Japan
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.132.115.64
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 58255
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;14.132.115.64. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020600 1800 900 604800 86400
;; Query time: 12 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 07 00:22:41 CST 2025
;; MSG SIZE rcvd: 10664.115.132.14.in-addr.arpa domain name pointer 14-132-115-64.area7b.commufa.jp.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
64.115.132.14.in-addr.arpa name = 14-132-115-64.area7b.commufa.jp.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 186.71.57.18 | attack | Dec 14 06:47:52 hpm sshd\[460\]: Invalid user granheim from 186.71.57.18 Dec 14 06:47:52 hpm sshd\[460\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.71.57.18 Dec 14 06:47:54 hpm sshd\[460\]: Failed password for invalid user granheim from 186.71.57.18 port 35630 ssh2 Dec 14 06:54:19 hpm sshd\[1074\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.71.57.18 user=lp Dec 14 06:54:22 hpm sshd\[1074\]: Failed password for lp from 186.71.57.18 port 43312 ssh2 |
2019-12-15 01:10:52 |
| 218.92.0.173 | attackbots | 2019-12-14T17:12:51.435797abusebot-4.cloudsearch.cf sshd\[14919\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.173 user=root 2019-12-14T17:12:53.411171abusebot-4.cloudsearch.cf sshd\[14919\]: Failed password for root from 218.92.0.173 port 3219 ssh2 2019-12-14T17:12:56.387022abusebot-4.cloudsearch.cf sshd\[14919\]: Failed password for root from 218.92.0.173 port 3219 ssh2 2019-12-14T17:13:00.109731abusebot-4.cloudsearch.cf sshd\[14919\]: Failed password for root from 218.92.0.173 port 3219 ssh2 |
2019-12-15 01:14:57 |
| 139.199.13.142 | attack | Dec 14 10:00:45 linuxvps sshd\[62754\]: Invalid user mmmmmm from 139.199.13.142 Dec 14 10:00:45 linuxvps sshd\[62754\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.13.142 Dec 14 10:00:47 linuxvps sshd\[62754\]: Failed password for invalid user mmmmmm from 139.199.13.142 port 52970 ssh2 Dec 14 10:07:17 linuxvps sshd\[1999\]: Invalid user abcdefghij from 139.199.13.142 Dec 14 10:07:17 linuxvps sshd\[1999\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.13.142 |
2019-12-15 00:56:43 |
| 61.219.45.81 | attack | Dec 14 17:58:28 microserver sshd[39745]: Invalid user murson from 61.219.45.81 port 47868 Dec 14 17:58:28 microserver sshd[39745]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.219.45.81 Dec 14 17:58:30 microserver sshd[39745]: Failed password for invalid user murson from 61.219.45.81 port 47868 ssh2 Dec 14 18:04:25 microserver sshd[40805]: Invalid user mozillaz from 61.219.45.81 port 56016 Dec 14 18:04:25 microserver sshd[40805]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.219.45.81 Dec 14 18:16:17 microserver sshd[42841]: Invalid user admin from 61.219.45.81 port 43780 Dec 14 18:16:17 microserver sshd[42841]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.219.45.81 Dec 14 18:16:19 microserver sshd[42841]: Failed password for invalid user admin from 61.219.45.81 port 43780 ssh2 Dec 14 18:24:02 microserver sshd[43812]: Invalid user www from 61.219.45.81 port 52130 Dec 14 18:2 |
2019-12-15 01:18:00 |
| 51.75.255.166 | attack | 2019-12-14T15:48:50.232307homeassistant sshd[12647]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.255.166 user=root 2019-12-14T15:48:52.168556homeassistant sshd[12647]: Failed password for root from 51.75.255.166 port 38230 ssh2 ... |
2019-12-15 01:03:43 |
| 209.53.166.19 | attackbots | /var/log/messages:Dec 14 06:32:04 sanyalnet-cloud-vps audispd: node=sanyalnet-cloud-vps.freeddns.org type=CRYPTO_SESSION msg=audhostname(1576305124.905:8240): pid=22816 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-server cipher=aes256-ctr ksize=256 mac=hmac-sha1 pfs=ecdh-sha2-nistp256 spid=22817 suid=74 rport=17979 laddr=104.167.106.93 lport=22 exe="/usr/sbin/sshd" hostname=? addr=209.53.166.19 terminal=? res=success' /var/log/messages:Dec 14 06:32:04 sanyalnet-cloud-vps audispd: node=sanyalnet-cloud-vps.freeddns.org type=CRYPTO_SESSION msg=audhostname(1576305124.908:8241): pid=22816 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-client cipher=aes256-ctr ksize=256 mac=hmac-sha1 pfs=ecdh-sha2-nistp256 spid=22817 suid=74 rport=17979 laddr=104.167.106.93 lport=22 exe="/usr/sbin/sshd" hostname=? addr=209.53.166.19 terminal=? res=success' /var/log/messages:Dec 14 06:32:05 sanyalnet-cloud-vps fail2ban.filter[1551]: INFO [sshd] Found 2........ ------------------------------- |
2019-12-15 01:19:55 |
| 78.128.113.130 | attackspambots | --- report --- Dec 14 12:48:54 sshd: Connection from 78.128.113.130 port 54944 Dec 14 12:49:23 sshd: Invalid user admin from 78.128.113.130 Dec 14 12:49:23 sshd: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.128.113.130 Dec 14 12:49:23 sshd: reverse mapping checking getaddrinfo for ip-113-130.4vendeta.com [78.128.113.130] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 12:49:25 sshd: Failed password for invalid user admin from 78.128.113.130 port 54944 ssh2 |
2019-12-15 00:42:06 |
| 82.118.242.108 | attackbots | 82.118.242.108 was recorded 5 times by 5 hosts attempting to connect to the following ports: 27015. Incident counter (4h, 24h, all-time): 5, 20, 39 |
2019-12-15 00:51:05 |
| 185.162.235.107 | attack | Dec 14 15:44:25 srv01 postfix/smtpd\[7965\]: warning: unknown\[185.162.235.107\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Dec 14 15:44:25 srv01 postfix/smtpd\[11387\]: warning: unknown\[185.162.235.107\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Dec 14 15:44:25 srv01 postfix/smtpd\[11558\]: warning: unknown\[185.162.235.107\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Dec 14 15:44:29 srv01 postfix/smtpd\[11968\]: warning: unknown\[185.162.235.107\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Dec 14 15:44:29 srv01 postfix/smtpd\[11967\]: warning: unknown\[185.162.235.107\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Dec 14 15:44:29 srv01 postfix/smtpd\[11970\]: warning: unknown\[185.162.235.107\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Dec 14 15:44:29 srv01 postfix/smtpd\[11969\]: warning: unknown\[185.162.235.107\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Dec 14 15:44:29 srv01 postfix/smtpd\[11971\]: warning: unknown\[185.162.235.107\]: SASL LOG ... |
2019-12-15 00:54:44 |
| 149.56.142.220 | attackspam | Dec 14 06:27:41 eddieflores sshd\[3893\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.ip-149-56-142.net user=backup Dec 14 06:27:42 eddieflores sshd\[3893\]: Failed password for backup from 149.56.142.220 port 54838 ssh2 Dec 14 06:33:17 eddieflores sshd\[4441\]: Invalid user shinichn from 149.56.142.220 Dec 14 06:33:17 eddieflores sshd\[4441\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.ip-149-56-142.net Dec 14 06:33:19 eddieflores sshd\[4441\]: Failed password for invalid user shinichn from 149.56.142.220 port 35254 ssh2 |
2019-12-15 00:39:59 |
| 80.211.86.245 | attackspam | Dec 14 19:06:32 hosting sshd[27143]: Invalid user minority from 80.211.86.245 port 33544 ... |
2019-12-15 00:47:30 |
| 162.210.196.98 | attack | Automatic report - Banned IP Access |
2019-12-15 00:41:32 |
| 165.227.157.168 | attackbotsspam | Dec 12 16:15:58 ns382633 sshd\[25754\]: Invalid user gunnek from 165.227.157.168 port 38190 Dec 12 16:15:58 ns382633 sshd\[25754\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.157.168 Dec 12 16:15:59 ns382633 sshd\[25754\]: Failed password for invalid user gunnek from 165.227.157.168 port 38190 ssh2 Dec 12 16:20:58 ns382633 sshd\[26591\]: Invalid user admin from 165.227.157.168 port 46202 Dec 12 16:20:58 ns382633 sshd\[26591\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.157.168 |
2019-12-15 00:59:24 |
| 185.232.30.130 | attackspam | Dec 14 17:28:42 mc1 kernel: \[499751.224898\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=185.232.30.130 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=39125 PROTO=TCP SPT=53147 DPT=33897 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 14 17:30:08 mc1 kernel: \[499837.166456\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=185.232.30.130 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=36071 PROTO=TCP SPT=53147 DPT=4001 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 14 17:34:45 mc1 kernel: \[500114.189716\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=185.232.30.130 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=35040 PROTO=TCP SPT=53147 DPT=55589 WINDOW=1024 RES=0x00 SYN URGP=0 ... |
2019-12-15 00:50:13 |
| 122.51.156.53 | attack | Dec 14 19:14:42 server sshd\[30399\]: Invalid user backup from 122.51.156.53 Dec 14 19:14:42 server sshd\[30399\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.156.53 Dec 14 19:14:44 server sshd\[30399\]: Failed password for invalid user backup from 122.51.156.53 port 53124 ssh2 Dec 14 19:34:16 server sshd\[3868\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.156.53 user=mysql Dec 14 19:34:18 server sshd\[3868\]: Failed password for mysql from 122.51.156.53 port 43644 ssh2 ... |
2019-12-15 00:52:03 |