城市(city): unknown
省份(region): unknown
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 143.68.0.148
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 23177
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;143.68.0.148. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019082501 1800 900 604800 86400
;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Mon Aug 26 09:01:39 CST 2019
;; MSG SIZE rcvd: 116Host 148.0.68.143.in-addr.arpa. not found: 3(NXDOMAIN)Server: 67.207.67.2
Address: 67.207.67.2#53
** server can't find 148.0.68.143.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 91.121.231.233 | attackspambots | Automatic report - Port Scan Attack |
2020-04-22 21:12:49 |
| 194.152.206.93 | attackbotsspam | leo_www |
2020-04-22 21:17:21 |
| 27.154.225.186 | attackbots | leo_www |
2020-04-22 21:32:26 |
| 50.104.13.15 | spambotsattack | This is 1 of several ip addresses stalking and hard my kids and me on internet for 2 in a half years. They have my credit card info all my passwords stole 7 email ACCTS that r still active and used with different names. They edit right on the screen everything even legal documents. My ip is 192.168.254.254 please look into this issue and block these psycho paths. Also they have my apps cloned so they can run them...they are blocking this from coming to u......also they edit the logs so PULL ever single one ther |
2020-04-22 21:30:09 |
| 66.55.69.106 | attack | Apr 22 14:04:03 debian-2gb-nbg1-2 kernel: \[9815997.277148\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=66.55.69.106 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=39579 PROTO=TCP SPT=46051 DPT=15173 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-04-22 21:22:42 |
| 37.75.127.240 | attack | Apr 22 14:36:29 prod4 vsftpd\[5955\]: \[anonymous\] FAIL LOGIN: Client "37.75.127.240" Apr 22 14:36:32 prod4 vsftpd\[5957\]: \[www\] FAIL LOGIN: Client "37.75.127.240" Apr 22 14:36:33 prod4 vsftpd\[5959\]: \[www\] FAIL LOGIN: Client "37.75.127.240" Apr 22 14:36:36 prod4 vsftpd\[5961\]: \[www\] FAIL LOGIN: Client "37.75.127.240" Apr 22 14:36:38 prod4 vsftpd\[5965\]: \[www\] FAIL LOGIN: Client "37.75.127.240" ... |
2020-04-22 21:13:43 |
| 64.225.106.133 | attack | (sshd) Failed SSH login from 64.225.106.133 (DE/Germany/-): 5 in the last 3600 secs |
2020-04-22 21:22:56 |
| 123.17.56.137 | attackbotsspam | " " |
2020-04-22 21:42:35 |
| 50.104.13.15 | spambotsattack | This is 1 of several ip addresses stalking and hard my kids and me on internet for 2 in a half years. They have my credit card info all my passwords stole 7 email ACCTS that r still active and used with different names. They edit right on the screen everything even legal documents. My ip is 192.168.254.254 please look into this issue and block these psycho paths. Also they have my apps cloned so they can run them |
2020-04-22 21:28:56 |
| 106.13.99.107 | attackbotsspam | Apr 22 12:03:57 scw-6657dc sshd[8106]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.99.107 Apr 22 12:03:57 scw-6657dc sshd[8106]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.99.107 Apr 22 12:03:59 scw-6657dc sshd[8106]: Failed password for invalid user yo from 106.13.99.107 port 60334 ssh2 ... |
2020-04-22 21:28:11 |
| 117.157.111.113 | attackbots | failed_logins |
2020-04-22 21:41:09 |
| 111.206.198.76 | attack | Bad bot/spoofed identity |
2020-04-22 21:47:27 |
| 203.150.54.75 | attack | Honeypot attack, port: 445, PTR: 203-150-54-75.inter.net.th. |
2020-04-22 21:35:24 |
| 104.254.245.169 | attackbots | 2020-04-22T14:07:27.448896amanda2.illicoweb.com sshd\[10225\]: Invalid user nl from 104.254.245.169 port 53472 2020-04-22T14:07:27.454220amanda2.illicoweb.com sshd\[10225\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.254.245.169 2020-04-22T14:07:29.837058amanda2.illicoweb.com sshd\[10225\]: Failed password for invalid user nl from 104.254.245.169 port 53472 ssh2 2020-04-22T14:12:22.899007amanda2.illicoweb.com sshd\[10665\]: Invalid user aw from 104.254.245.169 port 48068 2020-04-22T14:12:22.903969amanda2.illicoweb.com sshd\[10665\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.254.245.169 ... |
2020-04-22 21:26:26 |
| 184.105.247.248 | attackbotsspam | Apr 22 14:04:01 debian-2gb-nbg1-2 kernel: \[9815994.549658\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=184.105.247.248 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=54321 PROTO=TCP SPT=48633 DPT=6379 WINDOW=65535 RES=0x00 SYN URGP=0 |
2020-04-22 21:23:29 |