城市(city): unknown
省份(region): unknown
国家(country): Thailand
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.207.72.56
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 38438
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;14.207.72.56. IN A
;; AUTHORITY SECTION:
. 588 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022022700 1800 900 604800 86400
;; Query time: 73 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 27 13:41:29 CST 2022
;; MSG SIZE rcvd: 105
56.72.207.14.in-addr.arpa domain name pointer mx-ll-14.207.72-56.dynamic.3bb.in.th.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
56.72.207.14.in-addr.arpa name = mx-ll-14.207.72-56.dynamic.3bb.in.th.
Authoritative answers can be found from:
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 37.49.227.12 | attackspam | 04.07.2019 15:30:18 Connection to port 81 blocked by firewall |
2019-07-05 02:23:39 |
| 51.68.81.112 | attack | Jul 4 18:58:41 srv03 sshd\[30909\]: Invalid user info from 51.68.81.112 port 44976 Jul 4 18:58:41 srv03 sshd\[30909\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.81.112 Jul 4 18:58:43 srv03 sshd\[30909\]: Failed password for invalid user info from 51.68.81.112 port 44976 ssh2 |
2019-07-05 01:40:58 |
| 222.122.202.35 | attackbots | SSH Brute Force |
2019-07-05 02:27:02 |
| 90.148.230.114 | attackspambots | 2019-07-04 13:15:48 unexpected disconnection while reading SMTP command from (90.148.230.114.dynamic.saudi.net.sa) [90.148.230.114]:40463 I=[10.100.18.20]:25 (error: Connection reset by peer) 2019-07-04 14:34:16 unexpected disconnection while reading SMTP command from (90.148.230.114.dynamic.saudi.net.sa) [90.148.230.114]:50987 I=[10.100.18.20]:25 (error: Connection reset by peer) 2019-07-04 15:02:12 unexpected disconnection while reading SMTP command from (90.148.230.114.dynamic.saudi.net.sa) [90.148.230.114]:49773 I=[10.100.18.20]:25 (error: Connection reset by peer) ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=90.148.230.114 |
2019-07-05 02:17:02 |
| 153.36.236.35 | attackbots | Jul 4 21:23:28 srv-4 sshd\[25494\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=153.36.236.35 user=root Jul 4 21:23:29 srv-4 sshd\[25496\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=153.36.236.35 user=root Jul 4 21:23:30 srv-4 sshd\[25494\]: Failed password for root from 153.36.236.35 port 32944 ssh2 ... |
2019-07-05 02:27:19 |
| 49.72.12.85 | attack | SASL broute force |
2019-07-05 02:16:19 |
| 188.117.151.197 | attackspambots | Jul 4 17:52:21 hosting sshd[1116]: Invalid user yao from 188.117.151.197 port 27372 ... |
2019-07-05 02:03:12 |
| 132.232.101.100 | attackbots | Reported by AbuseIPDB proxy server. |
2019-07-05 01:47:33 |
| 78.186.205.208 | attack | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-03 11:56:39,730 INFO [shellcode_manager] (78.186.205.208) no match, writing hexdump (18a8c3d6872d9a227df418223a2fc968 :12222) - SMB (Unknown) |
2019-07-05 01:49:29 |
| 221.7.253.18 | attack | Jul 4 18:58:32 ns37 sshd[21583]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.7.253.18 |
2019-07-05 01:37:28 |
| 46.176.2.5 | attackbotsspam | Telnet Server BruteForce Attack |
2019-07-05 02:15:21 |
| 190.244.61.203 | attack | 2019-07-04 15:01:20 unexpected disconnection while reading SMTP command from (203-61-244-190.fibertel.com.ar) [190.244.61.203]:9787 I=[10.100.18.20]:25 (error: Connection reset by peer) 2019-07-04 15:02:05 unexpected disconnection while reading SMTP command from (203-61-244-190.fibertel.com.ar) [190.244.61.203]:52074 I=[10.100.18.20]:25 (error: Connection reset by peer) 2019-07-04 15:02:24 unexpected disconnection while reading SMTP command from (203-61-244-190.fibertel.com.ar) [190.244.61.203]:16106 I=[10.100.18.20]:25 (error: Connection reset by peer) ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=190.244.61.203 |
2019-07-05 02:13:10 |
| 113.183.67.144 | attackspam | Jul 4 14:52:50 lvps92-51-164-246 sshd[2861]: Address 113.183.67.144 maps to static.vnpt.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Jul 4 14:52:50 lvps92-51-164-246 sshd[2861]: Invalid user admin from 113.183.67.144 Jul 4 14:52:50 lvps92-51-164-246 sshd[2861]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.183.67.144 Jul 4 14:52:52 lvps92-51-164-246 sshd[2861]: Failed password for invalid user admin from 113.183.67.144 port 50537 ssh2 Jul 4 14:52:52 lvps92-51-164-246 sshd[2861]: Connection closed by 113.183.67.144 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=113.183.67.144 |
2019-07-05 02:04:52 |
| 185.216.140.6 | attack | port scan and connect, tcp 10000 (snet-sensor-mgmt) |
2019-07-05 02:07:08 |
| 103.86.157.243 | attackspambots | WP Authentication failure |
2019-07-05 02:25:26 |