城市(city): Tainan
省份(region): Tainan
国家(country): Taiwan, China
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 140.116.215.210
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 3446
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;140.116.215.210. IN A
;; AUTHORITY SECTION:
. 265 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2023062800 1800 900 604800 86400
;; Query time: 59 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jun 28 20:01:37 CST 2023
;; MSG SIZE rcvd: 108210.215.116.140.in-addr.arpa domain name pointer devmodel.ee.ncku.edu.tw.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
210.215.116.140.in-addr.arpa name = devmodel.ee.ncku.edu.tw.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 189.27.112.240 | attackspambots | Unauthorized connection attempt from IP address 189.27.112.240 on Port 445(SMB) |
2020-09-23 08:36:24 |
| 111.67.207.82 | attack | SSHD brute force attack detected from [111.67.207.82] |
2020-09-23 08:35:38 |
| 156.209.149.34 | attackbots | Unauthorized connection attempt from IP address 156.209.149.34 on Port 445(SMB) |
2020-09-23 08:30:28 |
| 142.44.161.132 | attackspambots | Sep 23 01:54:52 piServer sshd[7411]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.44.161.132 Sep 23 01:54:54 piServer sshd[7411]: Failed password for invalid user roberto from 142.44.161.132 port 33434 ssh2 Sep 23 01:59:19 piServer sshd[7885]: Failed password for root from 142.44.161.132 port 42582 ssh2 ... |
2020-09-23 08:35:10 |
| 154.213.22.34 | attackspam | 20 attempts against mh-ssh on echoip |
2020-09-23 08:34:39 |
| 128.199.120.148 | attackspam | Sep 22 07:52:52 HOST sshd[15635]: Failed password for invalid user dev from 128.199.120.148 port 24743 ssh2 Sep 22 07:52:52 HOST sshd[15635]: Received disconnect from 128.199.120.148: 11: Bye Bye [preauth] Sep 22 08:05:22 HOST sshd[16103]: Failed password for invalid user chrome from 128.199.120.148 port 47263 ssh2 Sep 22 08:05:23 HOST sshd[16103]: Received disconnect from 128.199.120.148: 11: Bye Bye [preauth] Sep 22 08:09:50 HOST sshd[16225]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.120.148 user=r.r Sep 22 08:09:52 HOST sshd[16225]: Failed password for r.r from 128.199.120.148 port 50892 ssh2 Sep 22 08:09:52 HOST sshd[16225]: Received disconnect from 128.199.120.148: 11: Bye Bye [preauth] Sep 22 08:14:09 HOST sshd[16390]: Failed password for invalid user ted from 128.199.120.148 port 54519 ssh2 Sep 22 08:14:09 HOST sshd[16390]: Received disconnect from 128.199.120.148: 11: Bye Bye [preauth] Sep 22 08:18:31 HOST s........ ------------------------------- |
2020-09-23 08:30:51 |
| 85.221.140.52 | attackbots | Email Subject: 'Commercial offer.' |
2020-09-23 08:17:47 |
| 89.248.162.164 | attackbotsspam | Multiport scan : 322 ports scanned 15001 15004 15005 15010 15012 15016 15018 15020 15023 15024 15026 15031 15035 15036 15037 15040 15041 15042 15043 15047 15050 15056 15058 15059 15060 15064 15067 15071 15075 15091 15097 15110 15118 15125 15126 15130 15133 15135 15136 15138 15145 15147 15154 15157 15165 15166 15168 15170 15171 15173 15176 15180 15182 15183 15185 15186 15188 15192 15194 15195 15196 15199 15204 15205 15206 15209 15214 ..... |
2020-09-23 08:14:30 |
| 189.213.45.127 | attackbots | 20/9/22@13:02:28: FAIL: Alarm-Network address from=189.213.45.127 20/9/22@13:02:28: FAIL: Alarm-Network address from=189.213.45.127 ... |
2020-09-23 08:44:29 |
| 180.168.95.234 | attackbotsspam | Sep 22 21:15:31 localhost sshd[130776]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.168.95.234 user=root Sep 22 21:15:33 localhost sshd[130776]: Failed password for root from 180.168.95.234 port 36016 ssh2 Sep 22 21:19:00 localhost sshd[438]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.168.95.234 user=root Sep 22 21:19:03 localhost sshd[438]: Failed password for root from 180.168.95.234 port 38312 ssh2 Sep 22 21:22:25 localhost sshd[873]: Invalid user joshua from 180.168.95.234 port 40626 ... |
2020-09-23 08:42:30 |
| 114.35.44.253 | attack | Invalid user vnc from 114.35.44.253 port 39727 |
2020-09-23 08:20:43 |
| 200.73.132.127 | attackbotsspam | 200.73.132.127 (AR/Argentina/-), 10 distributed imapd attacks on account [hr@fondationcrevier.ca] in the last 3600 secs |
2020-09-23 08:53:29 |
| 174.217.15.31 | attackspam | Brute forcing email accounts |
2020-09-23 08:45:52 |
| 173.201.196.146 | attackspam | 173.201.196.146 - - [23/Sep/2020:01:31:01 +0200] "GET /wp-login.php HTTP/1.1" 200 8712 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 173.201.196.146 - - [23/Sep/2020:01:31:04 +0200] "POST /wp-login.php HTTP/1.1" 200 9008 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 173.201.196.146 - - [23/Sep/2020:01:31:05 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-09-23 08:34:18 |
| 189.208.238.212 | attackbots | Automatic report - Port Scan Attack |
2020-09-23 08:47:22 |