城市(city): unknown
省份(region): unknown
国家(country): Taiwan (Province of China)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 140.111.243.114
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 6786
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;140.111.243.114. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021102 1800 900 604800 86400
;; Query time: 37 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 12 10:09:12 CST 2025
;; MSG SIZE rcvd: 108Host 114.243.111.140.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 114.243.111.140.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 198.211.123.183 | attackbots | <6 unauthorized SSH connections |
2019-10-29 15:20:16 |
| 14.102.146.52 | attackbots | Automatic report - XMLRPC Attack |
2019-10-29 15:18:50 |
| 159.65.112.93 | attackspam | SSH Brute-Force attacks |
2019-10-29 14:48:17 |
| 92.246.147.151 | attackbotsspam | Automatic report - Banned IP Access |
2019-10-29 15:20:42 |
| 220.76.83.240 | attack | techno.ws 220.76.83.240 \[29/Oct/2019:04:53:36 +0100\] "POST /wp-login.php HTTP/1.1" 200 5604 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" techno.ws 220.76.83.240 \[29/Oct/2019:04:53:38 +0100\] "POST /xmlrpc.php HTTP/1.1" 200 4070 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" |
2019-10-29 15:08:28 |
| 138.197.13.103 | attackbotsspam | xmlrpc attack |
2019-10-29 15:16:54 |
| 79.188.68.90 | attack | Oct 29 07:00:55 srv01 sshd[16635]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=hmq90.internetdsl.tpnet.pl user=root Oct 29 07:00:58 srv01 sshd[16635]: Failed password for root from 79.188.68.90 port 42956 ssh2 Oct 29 07:05:53 srv01 sshd[16903]: Invalid user kral from 79.188.68.90 Oct 29 07:05:53 srv01 sshd[16903]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=hmq90.internetdsl.tpnet.pl Oct 29 07:05:53 srv01 sshd[16903]: Invalid user kral from 79.188.68.90 Oct 29 07:05:54 srv01 sshd[16903]: Failed password for invalid user kral from 79.188.68.90 port 35070 ssh2 ... |
2019-10-29 15:13:54 |
| 185.81.157.154 | attack | IP address launched attack on many directories on my self hosted Wordpress blog. This is a direct example of what many of the URL's that were attacked look like: /up14.php?x=upload&mode=upload&upload=&ssp=RfVbHu&u=&action=upload&chdir=./&do=upload&pass=wcwc2016&login=go%21&H= |
2019-10-29 15:06:30 |
| 52.179.180.63 | attackspambots | Oct 29 07:56:20 localhost sshd\[14942\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.179.180.63 user=root Oct 29 07:56:22 localhost sshd\[14942\]: Failed password for root from 52.179.180.63 port 38152 ssh2 Oct 29 08:00:36 localhost sshd\[15190\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.179.180.63 user=root Oct 29 08:00:37 localhost sshd\[15190\]: Failed password for root from 52.179.180.63 port 50068 ssh2 Oct 29 08:04:55 localhost sshd\[15294\]: Invalid user aurore from 52.179.180.63 ... |
2019-10-29 15:24:47 |
| 46.143.207.127 | attack | Automatic report - Port Scan Attack |
2019-10-29 15:25:00 |
| 178.128.236.202 | attackbotsspam | WordPress login Brute force / Web App Attack on client site. |
2019-10-29 14:50:17 |
| 78.22.89.35 | attackspambots | Brute force SMTP login attempted. ... |
2019-10-29 14:49:03 |
| 104.245.145.4 | attackbotsspam | (From vail.gregg@gmail.com) Hello! If you're reading this then you just proved that contact form advertising works! We can send your promotional message to people via their contact us form on their website. The advantage of this kind of advertising is that messages sent through feedback forms are automatically whitelisted. This dramatically improves the likelihood that your message will be opened. Never any PPC costs! Pay one flat rate and reach millions of people. To get more info send a message to: william4212sau@gmail.com |
2019-10-29 15:10:53 |
| 115.68.32.228 | attackspam | Automatic report - Port Scan Attack |
2019-10-29 15:24:30 |
| 37.193.108.101 | attackbots | Oct 29 06:27:50 venus sshd\[25415\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.193.108.101 user=root Oct 29 06:27:52 venus sshd\[25415\]: Failed password for root from 37.193.108.101 port 31314 ssh2 Oct 29 06:32:08 venus sshd\[25539\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.193.108.101 user=root ... |
2019-10-29 15:09:23 |