城市(city): unknown
省份(region): unknown
国家(country): Canada
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 142.94.178.147
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 37949
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;142.94.178.147. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022703 1800 900 604800 86400
;; Query time: 63 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 28 13:07:34 CST 2025
;; MSG SIZE rcvd: 107b'Host 147.178.94.142.in-addr.arpa not found: 2(SERVFAIL)
';; Got SERVFAIL reply from 183.60.83.19, trying next server
Server: 183.60.82.98
Address: 183.60.82.98#53
** server can't find 147.178.94.142.in-addr.arpa: SERVFAIL| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 46.229.168.161 | attackspambots | Looking for resource vulnerabilities |
2019-07-14 04:15:18 |
| 114.38.34.85 | attack | 2019-07-12T19:48:48.257585stt-1.[munged] kernel: [7006949.017792] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:97:36:58:84:78:ac:57:a8:41:08:00 SRC=114.38.34.85 DST=[mungedIP1] LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=63333 PROTO=TCP SPT=63706 DPT=37215 WINDOW=8217 RES=0x00 SYN URGP=0 2019-07-12T23:55:06.767800stt-1.[munged] kernel: [7021727.479428] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:97:36:58:84:78:ac:57:aa:c1:08:00 SRC=114.38.34.85 DST=[mungedIP1] LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=39387 PROTO=TCP SPT=5652 DPT=37215 WINDOW=13872 RES=0x00 SYN URGP=0 2019-07-13T11:10:25.270177stt-1.[munged] kernel: [7062245.855515] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:97:36:58:84:78:ac:57:aa:c1:08:00 SRC=114.38.34.85 DST=[mungedIP1] LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=14217 PROTO=TCP SPT=5652 DPT=37215 WINDOW=13872 RES=0x00 SYN URGP=0 |
2019-07-14 04:07:03 |
| 186.147.34.246 | attackbotsspam | Automatic report - Port Scan Attack |
2019-07-14 04:31:42 |
| 92.118.37.97 | attackbots | Scanning (more than 2 packets) random ports - tries to find possible vulnerable services |
2019-07-14 03:55:54 |
| 89.163.209.151 | attackspam | Jul 13 19:57:51 mail sshd\[9827\]: Invalid user soap from 89.163.209.151 port 45746 Jul 13 19:57:51 mail sshd\[9827\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.163.209.151 Jul 13 19:57:53 mail sshd\[9827\]: Failed password for invalid user soap from 89.163.209.151 port 45746 ssh2 Jul 13 20:02:41 mail sshd\[9906\]: Invalid user username from 89.163.209.151 port 48422 Jul 13 20:02:41 mail sshd\[9906\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.163.209.151 ... |
2019-07-14 04:10:31 |
| 142.93.198.152 | attack | Jul 13 19:51:32 mail sshd\[9711\]: Invalid user hdfs from 142.93.198.152 port 57874 Jul 13 19:51:32 mail sshd\[9711\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.198.152 Jul 13 19:51:34 mail sshd\[9711\]: Failed password for invalid user hdfs from 142.93.198.152 port 57874 ssh2 Jul 13 19:57:16 mail sshd\[9816\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.198.152 user=redis Jul 13 19:57:18 mail sshd\[9816\]: Failed password for redis from 142.93.198.152 port 59830 ssh2 ... |
2019-07-14 04:22:13 |
| 118.24.255.191 | attackspambots | Jul 13 21:35:36 s64-1 sshd[2924]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.255.191 Jul 13 21:35:37 s64-1 sshd[2924]: Failed password for invalid user ftptest from 118.24.255.191 port 52126 ssh2 Jul 13 21:41:48 s64-1 sshd[3005]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.255.191 ... |
2019-07-14 03:52:06 |
| 160.238.241.130 | attackbots | Automatic report - Port Scan Attack |
2019-07-14 04:35:33 |
| 46.101.88.10 | attack | Jul 8 19:24:44 *** sshd[28780]: Failed password for invalid user creative from 46.101.88.10 port 17323 ssh2 Jul 9 20:45:06 *** sshd[11784]: Failed password for invalid user austin from 46.101.88.10 port 37752 ssh2 Jul 12 14:39:53 *** sshd[9648]: Failed password for invalid user resin from 46.101.88.10 port 46146 ssh2 Jul 13 21:43:53 *** sshd[11150]: Failed password for invalid user tester from 46.101.88.10 port 39029 ssh2 |
2019-07-14 04:23:47 |
| 185.254.122.35 | attackspambots | Jul 13 21:07:36 h2177944 kernel: \[1369089.862286\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.254.122.35 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=5435 PROTO=TCP SPT=47756 DPT=9953 WINDOW=1024 RES=0x00 SYN URGP=0 Jul 13 21:07:47 h2177944 kernel: \[1369100.098142\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.254.122.35 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=34245 PROTO=TCP SPT=47756 DPT=6271 WINDOW=1024 RES=0x00 SYN URGP=0 Jul 13 21:11:54 h2177944 kernel: \[1369347.318305\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.254.122.35 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=61450 PROTO=TCP SPT=47756 DPT=20991 WINDOW=1024 RES=0x00 SYN URGP=0 Jul 13 21:14:57 h2177944 kernel: \[1369530.509541\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.254.122.35 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=7028 PROTO=TCP SPT=47756 DPT=9007 WINDOW=1024 RES=0x00 SYN URGP=0 Jul 13 21:24:21 h2177944 kernel: \[1370094.027281\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.254.122.35 DST=85.214.1 |
2019-07-14 04:16:58 |
| 192.117.186.215 | attackspambots | Jul 13 21:43:57 meumeu sshd[12246]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.117.186.215 Jul 13 21:43:59 meumeu sshd[12246]: Failed password for invalid user subhana from 192.117.186.215 port 45554 ssh2 Jul 13 21:50:15 meumeu sshd[13493]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.117.186.215 ... |
2019-07-14 04:03:34 |
| 185.53.88.129 | attackspambots | \[2019-07-13 15:38:05\] SECURITY\[22794\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-07-13T15:38:05.334-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="011441217900519",SessionID="0x7f7544449bf8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.53.88.129/55821",ACLName="no_extension_match" \[2019-07-13 15:38:59\] SECURITY\[22794\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-07-13T15:38:59.645-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="9011441217900519",SessionID="0x7f75441f1548",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.53.88.129/56291",ACLName="no_extension_match" \[2019-07-13 15:39:54\] SECURITY\[22794\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-07-13T15:39:54.085-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="9441217900519",SessionID="0x7f75441d1b08",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.53.88.129/56881",ACLName="no_e |
2019-07-14 03:49:07 |
| 58.226.129.9 | attackbotsspam | Automatic report - Port Scan Attack |
2019-07-14 03:56:13 |
| 185.86.164.107 | attackbots | WordPress brute force |
2019-07-14 04:10:05 |
| 213.32.16.127 | attackspam | Jul 13 15:47:43 plusreed sshd[19303]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.32.16.127 user=root Jul 13 15:47:45 plusreed sshd[19303]: Failed password for root from 213.32.16.127 port 43018 ssh2 ... |
2019-07-14 03:56:32 |