城市(city): unknown
省份(region): unknown
国家(country): South Korea
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): Korea Telecom
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.90.122.221
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 38895
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;14.90.122.221. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019062201 1800 900 604800 86400
;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sat Jun 22 23:12:53 CST 2019
;; MSG SIZE rcvd: 117Host 221.122.90.14.in-addr.arpa. not found: 3(NXDOMAIN)Server: 67.207.67.2
Address: 67.207.67.2#53
** server can't find 221.122.90.14.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 81.45.56.199 | attackspam | Oct 29 02:20:51 web1 sshd[27586]: Invalid user smmsp from 81.45.56.199 Oct 29 02:20:53 web1 sshd[27586]: Failed password for invalid user smmsp from 81.45.56.199 port 33080 ssh2 Oct 29 02:20:53 web1 sshd[27586]: Received disconnect from 81.45.56.199: 11: Bye Bye [preauth] Oct 29 02:37:13 web1 sshd[28928]: Failed password for r.r from 81.45.56.199 port 52834 ssh2 Oct 29 02:37:13 web1 sshd[28928]: Received disconnect from 81.45.56.199: 11: Bye Bye [preauth] Oct 29 02:41:18 web1 sshd[29353]: Invalid user odoo from 81.45.56.199 Oct 29 02:41:20 web1 sshd[29353]: Failed password for invalid user odoo from 81.45.56.199 port 35946 ssh2 Oct 29 02:41:20 web1 sshd[29353]: Received disconnect from 81.45.56.199: 11: Bye Bye [preauth] Oct 29 02:45:38 web1 sshd[29744]: Failed password for r.r from 81.45.56.199 port 47296 ssh2 Oct 29 02:45:38 web1 sshd[29744]: Received disconnect from 81.45.56.199: 11: Bye Bye [preauth] Oct 29 02:50:16 web1 sshd[30094]: Invalid user netbank from 81.45......... ------------------------------- |
2019-11-03 06:13:56 |
| 109.169.198.122 | attack | DATE:2019-11-02 21:18:35, IP:109.169.198.122, PORT:telnet - Telnet brute force auth on a honeypot server (epe-dc) |
2019-11-03 05:56:08 |
| 117.139.166.27 | attackspambots | Oct 28 17:17:01 roadrisk sshd[9562]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.139.166.27 user=r.r Oct 28 17:17:04 roadrisk sshd[9562]: Failed password for r.r from 117.139.166.27 port 2055 ssh2 Oct 28 17:17:04 roadrisk sshd[9562]: Received disconnect from 117.139.166.27: 11: Bye Bye [preauth] Oct 28 17:32:08 roadrisk sshd[9831]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.139.166.27 user=r.r Oct 28 17:32:10 roadrisk sshd[9831]: Failed password for r.r from 117.139.166.27 port 2060 ssh2 Oct 28 17:32:10 roadrisk sshd[9831]: Received disconnect from 117.139.166.27: 11: Bye Bye [preauth] Oct 28 17:37:31 roadrisk sshd[9900]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.139.166.27 user=r.r Oct 28 17:37:33 roadrisk sshd[9900]: Failed password for r.r from 117.139.166.27 port 2062 ssh2 Oct 28 17:37:33 roadrisk sshd[9900]: Received ........ ------------------------------- |
2019-11-03 06:00:23 |
| 45.82.153.133 | attack | Fail2Ban - SMTP Bruteforce Attempt |
2019-11-03 06:18:29 |
| 193.112.173.96 | attack | 2019-11-02T21:56:25.045686abusebot-8.cloudsearch.cf sshd\[9098\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.112.173.96 user=root |
2019-11-03 06:03:46 |
| 92.100.84.70 | attackspambots | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/92.100.84.70/ RU - 1H : (172) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : RU NAME ASN : ASN12389 IP : 92.100.84.70 CIDR : 92.100.64.0/19 PREFIX COUNT : 2741 UNIQUE IP COUNT : 8699648 ATTACKS DETECTED ASN12389 : 1H - 4 3H - 11 6H - 21 12H - 44 24H - 84 DateTime : 2019-11-02 21:50:30 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery |
2019-11-03 05:50:07 |
| 60.8.196.230 | attackspambots | $f2bV_matches |
2019-11-03 06:00:52 |
| 104.129.191.242 | attackspambots | 3389BruteforceFW21 |
2019-11-03 05:55:22 |
| 46.101.249.232 | attackbots | Nov 2 22:31:48 localhost sshd\[6917\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.249.232 user=root Nov 2 22:31:50 localhost sshd\[6917\]: Failed password for root from 46.101.249.232 port 43703 ssh2 Nov 2 22:36:24 localhost sshd\[7380\]: Invalid user tom from 46.101.249.232 port 34533 Nov 2 22:36:24 localhost sshd\[7380\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.249.232 |
2019-11-03 05:48:48 |
| 14.186.24.93 | attack | Nov 2 16:18:15 web1 postfix/smtpd[30869]: warning: unknown[14.186.24.93]: SASL PLAIN authentication failed: authentication failure ... |
2019-11-03 06:03:20 |
| 218.92.0.190 | attackspambots | Nov 2 22:46:36 legacy sshd[4670]: Failed password for root from 218.92.0.190 port 31078 ssh2 Nov 2 22:46:38 legacy sshd[4670]: Failed password for root from 218.92.0.190 port 31078 ssh2 Nov 2 22:46:40 legacy sshd[4670]: Failed password for root from 218.92.0.190 port 31078 ssh2 ... |
2019-11-03 05:54:37 |
| 106.54.114.208 | attack | Oct 28 14:03:20 nxxxxxxx0 sshd[1598]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.114.208 user=r.r Oct 28 14:03:22 nxxxxxxx0 sshd[1598]: Failed password for r.r from 106.54.114.208 port 35356 ssh2 Oct 28 14:03:22 nxxxxxxx0 sshd[1598]: Received disconnect from 106.54.114.208: 11: Bye Bye [preauth] Oct 28 14:16:28 nxxxxxxx0 sshd[3754]: Connection closed by 106.54.114.208 [preauth] Oct 28 14:28:02 nxxxxxxx0 sshd[5185]: Connection closed by 106.54.114.208 [preauth] Oct 28 14:33:23 nxxxxxxx0 sshd[6093]: Connection closed by 106.54.114.208 [preauth] Oct 28 14:38:59 nxxxxxxx0 sshd[6656]: Invalid user postgres from 106.54.114.208 Oct 28 14:38:59 nxxxxxxx0 sshd[6656]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.114.208 Oct 28 14:39:01 nxxxxxxx0 sshd[6656]: Failed password for invalid user postgres from 106.54.114.208 port 55548 ssh2 Oct 28 14:39:01 nxxxxxxx0 sshd[6656]: Receiv........ ------------------------------- |
2019-11-03 05:51:00 |
| 173.255.234.194 | attackbotsspam | " " |
2019-11-03 06:01:33 |
| 172.105.71.24 | attackbotsspam | scan z |
2019-11-03 06:23:27 |
| 14.187.62.118 | attackspam | Nov 2 16:18:09 web1 postfix/smtpd[30994]: warning: unknown[14.187.62.118]: SASL PLAIN authentication failed: authentication failure ... |
2019-11-03 06:08:19 |