城市(city): unknown
省份(region): unknown
国家(country): China
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.212.249.14
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 60999
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;14.212.249.14. IN A
;; AUTHORITY SECTION:
. 403 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022022700 1800 900 604800 86400
;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 27 18:01:52 CST 2022
;; MSG SIZE rcvd: 106Host 14.249.212.14.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 14.249.212.14.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 185.234.219.85 | attack | Portscan or hack attempt detected by psad/fwsnort |
2019-06-25 06:30:48 |
| 188.251.197.31 | attackspam | Autoban 188.251.197.31 AUTH/CONNECT |
2019-06-25 06:31:19 |
| 188.75.179.227 | attack | Autoban 188.75.179.227 AUTH/CONNECT |
2019-06-25 06:14:52 |
| 188.134.27.156 | attackspam | Autoban 188.134.27.156 AUTH/CONNECT |
2019-06-25 06:57:02 |
| 177.69.177.12 | attack | Jun 24 21:46:28 sanyalnet-cloud-vps3 sshd[5494]: Connection from 177.69.177.12 port 10400 on 45.62.248.66 port 22 Jun 24 21:46:30 sanyalnet-cloud-vps3 sshd[5494]: reveeclipse mapping checking getaddrinfo for 177-069-177-012.static.ctbctelecom.com.br [177.69.177.12] failed - POSSIBLE BREAK-IN ATTEMPT! Jun 24 21:46:30 sanyalnet-cloud-vps3 sshd[5494]: Invalid user tcpdump from 177.69.177.12 Jun 24 21:46:30 sanyalnet-cloud-vps3 sshd[5494]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.69.177.12 Jun 24 21:46:32 sanyalnet-cloud-vps3 sshd[5494]: Failed password for invalid user tcpdump from 177.69.177.12 port 10400 ssh2 Jun 24 21:46:32 sanyalnet-cloud-vps3 sshd[5494]: Received disconnect from 177.69.177.12: 11: Bye Bye [preauth] Jun 24 21:50:16 sanyalnet-cloud-vps3 sshd[5590]: Connection from 177.69.177.12 port 10400 on 45.62.248.66 port 22 Jun 24 21:50:17 sanyalnet-cloud-vps3 sshd[5590]: reveeclipse mapping checking getaddrinfo f........ ------------------------------- |
2019-06-25 06:39:56 |
| 133.242.160.253 | attackbotsspam | Jun 24 14:49:43 woof sshd[16684]: Invalid user build from 133.242.160.253 Jun 24 14:49:45 woof sshd[16684]: Failed password for invalid user build from 133.242.160.253 port 53288 ssh2 Jun 24 14:49:45 woof sshd[16684]: Received disconnect from 133.242.160.253: 11: Bye Bye [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=133.242.160.253 |
2019-06-25 06:21:36 |
| 188.29.165.194 | attackspambots | Autoban 188.29.165.194 AUTH/CONNECT |
2019-06-25 06:24:34 |
| 188.18.255.231 | attackbots | Autoban 188.18.255.231 AUTH/CONNECT |
2019-06-25 06:44:26 |
| 188.191.29.141 | attackspam | Autoban 188.191.29.141 AUTH/CONNECT |
2019-06-25 06:41:46 |
| 188.75.144.68 | attackbotsspam | Autoban 188.75.144.68 AUTH/CONNECT |
2019-06-25 06:16:38 |
| 188.124.12.74 | attackspam | Autoban 188.124.12.74 AUTH/CONNECT |
2019-06-25 06:59:27 |
| 188.253.225.59 | attackbots | Autoban 188.253.225.59 AUTH/CONNECT |
2019-06-25 06:27:56 |
| 72.141.234.242 | attackspam | Unauthorised access (Jun 25) SRC=72.141.234.242 LEN=40 TOS=0x08 PREC=0x40 TTL=45 ID=60576 TCP DPT=8080 WINDOW=57348 SYN |
2019-06-25 06:57:54 |
| 157.82.41.131 | attack | Jun 24 23:42:37 mxgate1 postfix/postscreen[24205]: CONNECT from [157.82.41.131]:49493 to [176.31.12.44]:25 Jun 24 23:42:43 mxgate1 postfix/postscreen[24205]: PASS NEW [157.82.41.131]:49493 Jun 24 23:42:47 mxgate1 postfix/smtpd[24360]: connect from gregorio.c.u-tokyo.ac.jp[157.82.41.131] Jun x@x Jun 24 23:42:48 mxgate1 postfix/smtpd[24360]: disconnect from gregorio.c.u-tokyo.ac.jp[157.82.41.131] ehlo=1 mail=1 rcpt=0/1 quhostname=1 commands=3/4 Jun 24 23:43:23 mxgate1 postfix/postscreen[24205]: CONNECT from [157.82.41.131]:49651 to [176.31.12.44]:25 Jun 24 23:43:23 mxgate1 postfix/postscreen[24205]: PASS OLD [157.82.41.131]:49651 Jun 24 23:43:23 mxgate1 postfix/smtpd[24360]: connect from gregorio.c.u-tokyo.ac.jp[157.82.41.131] Jun x@x Jun 24 23:43:24 mxgate1 postfix/smtpd[24360]: disconnect from gregorio.c.u-tokyo.ac.jp[157.82.41.131] ehlo=1 mail=1 rcpt=0/1 quhostname=1 commands=3/4 Jun 24 23:48:22 mxgate1 postfix/postscreen[24205]: CONNECT from [157.82.41.131]:62335 to [........ ------------------------------- |
2019-06-25 06:46:46 |
| 168.90.49.126 | attack | Jun 25 00:19:43 vmd17057 sshd\[11825\]: Invalid user clone from 168.90.49.126 port 47904 Jun 25 00:19:43 vmd17057 sshd\[11825\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.90.49.126 Jun 25 00:19:46 vmd17057 sshd\[11825\]: Failed password for invalid user clone from 168.90.49.126 port 47904 ssh2 ... |
2019-06-25 06:35:35 |