城市(city): unknown
省份(region): unknown
国家(country): Netherlands
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 145.214.21.68
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 25430
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;145.214.21.68. IN A
;; AUTHORITY SECTION:
. 154 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020083001 1800 900 604800 86400
;; Query time: 101 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Aug 31 06:08:45 CST 2020
;; MSG SIZE rcvd: 11768.21.214.145.in-addr.arpa domain name pointer 145.214.early-registration.of.surfnet.invalid.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
68.21.214.145.in-addr.arpa name = 145.214.early-registration.of.surfnet.invalid.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 103.89.91.177 | attack | Port scan: Attack repeated for 24 hours |
2019-07-17 15:23:10 |
| 217.182.158.104 | attack | Jul 17 02:32:54 plusreed sshd[30818]: Invalid user steven from 217.182.158.104 ... |
2019-07-17 14:37:32 |
| 212.83.148.177 | attackbotsspam | SIP Server BruteForce Attack |
2019-07-17 14:30:31 |
| 217.182.68.146 | attackspam | Jul 17 09:42:35 server01 sshd\[7051\]: Invalid user ftp_test from 217.182.68.146 Jul 17 09:42:35 server01 sshd\[7051\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.182.68.146 Jul 17 09:42:37 server01 sshd\[7051\]: Failed password for invalid user ftp_test from 217.182.68.146 port 44580 ssh2 ... |
2019-07-17 14:46:04 |
| 103.108.187.4 | attackbotsspam | Triggered by Fail2Ban |
2019-07-17 14:58:04 |
| 188.165.250.228 | attackbots | Jul 17 08:45:40 eventyay sshd[27711]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.165.250.228 Jul 17 08:45:42 eventyay sshd[27711]: Failed password for invalid user mysql from 188.165.250.228 port 44981 ssh2 Jul 17 08:50:10 eventyay sshd[28699]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.165.250.228 ... |
2019-07-17 15:00:33 |
| 209.97.147.208 | attack | Jul 17 08:08:45 tux-35-217 sshd\[15531\]: Invalid user quercia from 209.97.147.208 port 50764 Jul 17 08:08:45 tux-35-217 sshd\[15531\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.97.147.208 Jul 17 08:08:47 tux-35-217 sshd\[15531\]: Failed password for invalid user quercia from 209.97.147.208 port 50764 ssh2 Jul 17 08:13:30 tux-35-217 sshd\[15557\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.97.147.208 user=root ... |
2019-07-17 15:18:10 |
| 194.208.52.4 | attackspambots | Lines containing failures of 194.208.52.4 Jul 16 11:09:35 siirappi sshd[21560]: Invalid user alessandra from 194.208.52.4 port 52674 Jul 16 11:09:35 siirappi sshd[21560]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.208.52.4 Jul 16 11:09:37 siirappi sshd[21560]: Failed password for invalid user alessandra from 194.208.52.4 port 52674 ssh2 Jul 16 11:09:37 siirappi sshd[21560]: Received disconnect from 194.208.52.4 port 52674:11: Bye Bye [preauth] Jul 16 11:09:37 siirappi sshd[21560]: Disconnected from 194.208.52.4 port 52674 [preauth] Jul 16 12:11:46 siirappi sshd[22122]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.208.52.4 user=r.r Jul 16 12:11:48 siirappi sshd[22122]: Failed password for r.r from 194.208.52.4 port 58574 ssh2 Jul 16 12:11:48 siirappi sshd[22122]: Received disconnect from 194.208.52.4 port 58574:11: Bye Bye [preauth] Jul 16 12:11:48 siirappi sshd[22122]: Discon........ ------------------------------ |
2019-07-17 14:52:00 |
| 92.253.111.93 | attackbots | Jul 17 08:08:50 dev0-dcde-rnet sshd[20240]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.253.111.93 Jul 17 08:08:51 dev0-dcde-rnet sshd[20240]: Failed password for invalid user inssserver from 92.253.111.93 port 38994 ssh2 Jul 17 08:26:53 dev0-dcde-rnet sshd[20311]: Failed password for root from 92.253.111.93 port 60560 ssh2 |
2019-07-17 14:56:17 |
| 95.59.58.184 | attackspambots | Automatic report - Port Scan Attack |
2019-07-17 14:39:34 |
| 36.66.8.101 | attack | xmlrpc attack |
2019-07-17 15:08:42 |
| 103.137.10.2 | attackspam | ENG,WP GET //wp-login.php |
2019-07-17 14:43:13 |
| 27.73.27.219 | attack | Jul 17 06:14:18 MK-Soft-VM5 sshd\[27395\]: Invalid user sinus from 27.73.27.219 port 53908 Jul 17 06:14:18 MK-Soft-VM5 sshd\[27395\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.73.27.219 Jul 17 06:14:20 MK-Soft-VM5 sshd\[27395\]: Failed password for invalid user sinus from 27.73.27.219 port 53908 ssh2 ... |
2019-07-17 14:47:31 |
| 122.114.10.7 | attackbotsspam | Automatic report generated by Wazuh |
2019-07-17 14:52:53 |
| 46.101.163.220 | attack | 17.07.2019 06:14:30 SSH access blocked by firewall |
2019-07-17 14:36:51 |