城市(city): unknown
省份(region): unknown
国家(country): Viet Nam
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.170.89.214
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 3922
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;14.170.89.214. IN A
;; AUTHORITY SECTION:
. 572 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022030803 1800 900 604800 86400
;; Query time: 24 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 08:48:39 CST 2022
;; MSG SIZE rcvd: 106214.89.170.14.in-addr.arpa domain name pointer static.vnpt.vn.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
214.89.170.14.in-addr.arpa name = static.vnpt.vn.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 193.29.15.150 | attackspam | 2020-09-13 19:21:22.049418-0500 localhost screensharingd[16789]: Authentication: FAILED :: User Name: N/A :: Viewer Address: 193.29.15.150 :: Type: VNC DES |
2020-09-14 15:52:41 |
| 128.199.102.242 | attackbotsspam | *Port Scan* detected from 128.199.102.242 (SG/Singapore/-/Singapore (Pioneer)/-). 4 hits in the last 260 seconds |
2020-09-14 15:42:23 |
| 51.158.65.150 | attackspam | Sep 14 04:45:35 firewall sshd[14950]: Failed password for root from 51.158.65.150 port 34214 ssh2 Sep 14 04:49:25 firewall sshd[15041]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.158.65.150 user=root Sep 14 04:49:27 firewall sshd[15041]: Failed password for root from 51.158.65.150 port 45394 ssh2 ... |
2020-09-14 15:59:06 |
| 222.186.173.226 | attackbotsspam | 2020-09-14T10:48:58.454007afi-git.jinr.ru sshd[12408]: Failed password for root from 222.186.173.226 port 14672 ssh2 2020-09-14T10:49:01.332552afi-git.jinr.ru sshd[12408]: Failed password for root from 222.186.173.226 port 14672 ssh2 2020-09-14T10:49:04.620052afi-git.jinr.ru sshd[12408]: Failed password for root from 222.186.173.226 port 14672 ssh2 2020-09-14T10:49:04.620208afi-git.jinr.ru sshd[12408]: error: maximum authentication attempts exceeded for root from 222.186.173.226 port 14672 ssh2 [preauth] 2020-09-14T10:49:04.620222afi-git.jinr.ru sshd[12408]: Disconnecting: Too many authentication failures [preauth] ... |
2020-09-14 15:49:27 |
| 92.246.76.251 | attack | Sep 14 09:53:26 *hidden* kernel: [UFW BLOCK] IN=ens192 OUT= MAC=00:50:56:bc:13:b8:00:07:7d:bd:41:7f:08:00 SRC=92.246.76.251 DST=217.198.117.163 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=20033 PROTO=TCP SPT=46121 DPT=36568 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 14 09:53:31 *hidden* kernel: [UFW BLOCK] IN=ens192 OUT= MAC=00:50:56:bc:13:b8:00:07:7d:bd:41:7f:08:00 SRC=92.246.76.251 DST=217.198.117.163 LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=58860 PROTO=TCP SPT=46121 DPT=29565 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 14 09:55:14 *hidden* kernel: [UFW BLOCK] IN=ens192 OUT= MAC=00:50:56:bc:13:b8:00:07:7d:bd:41:7f:08:00 SRC=92.246.76.251 DST=217.198.117.163 LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=7831 PROTO=TCP SPT=46121 DPT=46570 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 14 09:55:40 *hidden* kernel: [UFW BLOCK] IN=ens192 OUT= MAC=00:50:56:bc:13:b8:00:07:7d:bd:41:7f:08:00 SRC=92.246.76.251 DST=217.198.117.163 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=34908 PROTO=TCP SPT=46121 DPT=5562 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 14 ... |
2020-09-14 15:58:23 |
| 111.231.62.217 | attackbotsspam | Failed password for invalid user anymus from 111.231.62.217 port 53412 ssh2 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.62.217 user=root Failed password for root from 111.231.62.217 port 43982 ssh2 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.62.217 user=root Failed password for root from 111.231.62.217 port 34504 ssh2 |
2020-09-14 15:30:28 |
| 35.237.180.104 | attackspambots | Automated report (2020-09-14T01:55:41+02:00). Misbehaving bot detected at this address. |
2020-09-14 15:23:43 |
| 95.169.9.46 | attackbotsspam | SSH invalid-user multiple login try |
2020-09-14 15:22:34 |
| 117.50.8.230 | attack | Sep 13 18:00:36 hanapaa sshd\[20746\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.8.230 user=root Sep 13 18:00:38 hanapaa sshd\[20746\]: Failed password for root from 117.50.8.230 port 58692 ssh2 Sep 13 18:05:55 hanapaa sshd\[21113\]: Invalid user ftpuser from 117.50.8.230 Sep 13 18:05:55 hanapaa sshd\[21113\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.8.230 Sep 13 18:05:57 hanapaa sshd\[21113\]: Failed password for invalid user ftpuser from 117.50.8.230 port 57906 ssh2 |
2020-09-14 16:05:36 |
| 211.253.24.250 | attackspambots | Time: Mon Sep 14 07:30:05 2020 +0000 IP: 211.253.24.250 (KR/South Korea/-) Failures: 5 (sshd) Interval: 3600 seconds Blocked: Permanent Block [LF_SSHD] Log entries: Sep 14 07:23:56 ca-29-ams1 sshd[1336]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.253.24.250 user=root Sep 14 07:23:58 ca-29-ams1 sshd[1336]: Failed password for root from 211.253.24.250 port 38466 ssh2 Sep 14 07:27:42 ca-29-ams1 sshd[1876]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.253.24.250 user=root Sep 14 07:27:43 ca-29-ams1 sshd[1876]: Failed password for root from 211.253.24.250 port 58589 ssh2 Sep 14 07:30:04 ca-29-ams1 sshd[2262]: Invalid user tommy from 211.253.24.250 port 40764 |
2020-09-14 15:52:12 |
| 139.155.35.47 | attackbotsspam | Sep 14 07:50:21 rush sshd[25963]: Failed password for root from 139.155.35.47 port 36758 ssh2 Sep 14 07:53:50 rush sshd[26097]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.35.47 Sep 14 07:53:52 rush sshd[26097]: Failed password for invalid user zev from 139.155.35.47 port 56970 ssh2 ... |
2020-09-14 16:04:40 |
| 116.75.241.53 | attack | 20/9/13@12:54:59: FAIL: IoT-Telnet address from=116.75.241.53 ... |
2020-09-14 16:05:00 |
| 114.96.69.146 | attack | 114.96.69.146 (CN/China/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep 14 03:05:50 jbs1 sshd[4113]: Failed password for root from 51.83.185.192 port 48550 ssh2 Sep 14 03:10:15 jbs1 sshd[5653]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.96.69.146 user=root Sep 14 03:06:06 jbs1 sshd[4269]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.95.124.103 user=root Sep 14 03:06:08 jbs1 sshd[4269]: Failed password for root from 187.95.124.103 port 42723 ssh2 Sep 14 03:09:44 jbs1 sshd[5470]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.249.74 user=root Sep 14 03:09:46 jbs1 sshd[5470]: Failed password for root from 180.76.249.74 port 57246 ssh2 IP Addresses Blocked: 51.83.185.192 (FR/France/-) |
2020-09-14 15:25:34 |
| 37.98.196.42 | attackspambots | Sep 14 08:43:51 vmd26974 sshd[3561]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.98.196.42 Sep 14 08:43:53 vmd26974 sshd[3561]: Failed password for invalid user harley from 37.98.196.42 port 63776 ssh2 ... |
2020-09-14 16:03:52 |
| 173.231.59.218 | attackbotsspam | Automatic report - Banned IP Access |
2020-09-14 15:37:44 |