城市(city): unknown
省份(region): unknown
国家(country): United States of America (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 147.154.119.14
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 28980
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;147.154.119.14. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020301 1800 900 604800 86400
;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 04 01:52:14 CST 2025
;; MSG SIZE rcvd: 107Host 14.119.154.147.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 14.119.154.147.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 106.52.89.128 | attackspam | Aug 4 14:16:04 microserver sshd[11209]: Invalid user hanna from 106.52.89.128 port 48260 Aug 4 14:16:04 microserver sshd[11209]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.89.128 Aug 4 14:16:05 microserver sshd[11209]: Failed password for invalid user hanna from 106.52.89.128 port 48260 ssh2 Aug 4 14:21:24 microserver sshd[12191]: Invalid user zope from 106.52.89.128 port 41568 Aug 4 14:21:24 microserver sshd[12191]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.89.128 Aug 4 14:36:18 microserver sshd[15011]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.89.128 user=gnats Aug 4 14:36:20 microserver sshd[15011]: Failed password for gnats from 106.52.89.128 port 49518 ssh2 Aug 4 14:41:24 microserver sshd[15980]: Invalid user jeanine from 106.52.89.128 port 42734 Aug 4 14:41:24 microserver sshd[15980]: pam_unix(sshd:auth): authentication failure; logname= |
2019-08-04 20:52:57 |
| 112.85.42.194 | attack | Aug 4 19:48:27 lcl-usvr-02 sshd[11472]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.194 user=root Aug 4 19:48:29 lcl-usvr-02 sshd[11472]: Failed password for root from 112.85.42.194 port 45770 ssh2 ... |
2019-08-04 21:01:44 |
| 74.94.246.82 | attackbots | k+ssh-bruteforce |
2019-08-04 21:18:25 |
| 61.76.169.138 | attack | Aug 4 09:04:29 TORMINT sshd\[10829\]: Invalid user melinda from 61.76.169.138 Aug 4 09:04:29 TORMINT sshd\[10829\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.76.169.138 Aug 4 09:04:30 TORMINT sshd\[10829\]: Failed password for invalid user melinda from 61.76.169.138 port 18288 ssh2 ... |
2019-08-04 21:05:05 |
| 125.160.207.158 | attackbotsspam | Automatic report - Port Scan Attack |
2019-08-04 21:12:59 |
| 123.168.88.130 | attack | Unauthorized SSH login attempts |
2019-08-04 20:50:41 |
| 222.10.27.243 | attackbots | Aug 4 13:55:21 microserver sshd[7751]: Invalid user flora from 222.10.27.243 port 36828 Aug 4 13:55:21 microserver sshd[7751]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.10.27.243 Aug 4 13:55:23 microserver sshd[7751]: Failed password for invalid user flora from 222.10.27.243 port 36828 ssh2 Aug 4 14:00:32 microserver sshd[8632]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.10.27.243 user=mysql Aug 4 14:00:34 microserver sshd[8632]: Failed password for mysql from 222.10.27.243 port 59726 ssh2 Aug 4 14:15:57 microserver sshd[11196]: Invalid user rancid from 222.10.27.243 port 43360 Aug 4 14:15:57 microserver sshd[11196]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.10.27.243 Aug 4 14:15:59 microserver sshd[11196]: Failed password for invalid user rancid from 222.10.27.243 port 43360 ssh2 Aug 4 14:21:05 microserver sshd[12165]: Invalid user fucker from 222.10.2 |
2019-08-04 20:47:29 |
| 213.144.71.100 | attack | Automatic report - Port Scan Attack |
2019-08-04 21:08:12 |
| 185.143.221.105 | attack | 08/04/2019-08:35:16.546346 185.143.221.105 Protocol: 6 ET SCAN NMAP -sS window 1024 |
2019-08-04 20:56:47 |
| 91.119.85.39 | attackspam | Aug 4 13:31:29 localhost sshd\[55699\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.119.85.39 user=root Aug 4 13:31:30 localhost sshd\[55699\]: Failed password for root from 91.119.85.39 port 57563 ssh2 ... |
2019-08-04 20:51:15 |
| 42.115.55.42 | attackspam | Unauthorised access (Aug 4) SRC=42.115.55.42 LEN=40 TTL=44 ID=55217 TCP DPT=8080 WINDOW=27076 SYN Unauthorised access (Jul 29) SRC=42.115.55.42 LEN=40 TTL=44 ID=27119 TCP DPT=8080 WINDOW=9689 SYN Unauthorised access (Jul 28) SRC=42.115.55.42 LEN=40 TTL=44 ID=5268 TCP DPT=8080 WINDOW=9689 SYN |
2019-08-04 20:38:39 |
| 223.112.190.70 | attackbotsspam | 223.112.190.70 - - \[04/Aug/2019:12:55:51 +0200\] "GET /w00tw00t.at.blackhats.romanian.anti-sec:\) HTTP/1.1" 403 487 "-" "ZmEu" 223.112.190.70 - - \[04/Aug/2019:12:55:52 +0200\] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 403 474 "-" "ZmEu" 223.112.190.70 - - \[04/Aug/2019:12:55:54 +0200\] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 403 474 "-" "ZmEu" ... |
2019-08-04 21:20:47 |
| 187.122.102.4 | attackbotsspam | SSH Bruteforce @ SigaVPN honeypot |
2019-08-04 20:54:09 |
| 104.59.222.185 | attackbots | Jul 26 14:35:26 vps65 perl\[7814\]: pam_unix\(webmin:auth\): authentication failure\; logname= uid=0 euid=0 tty=10000 ruser= rhost=104.59.222.185 user=root Jul 26 16:34:17 vps65 perl\[30610\]: pam_unix\(webmin:auth\): authentication failure\; logname= uid=0 euid=0 tty=10000 ruser= rhost=104.59.222.185 user=root ... |
2019-08-04 20:38:14 |
| 103.114.107.129 | attack | Unauthorised access (Aug 4) SRC=103.114.107.129 LEN=40 TTL=243 ID=26338 TCP DPT=3389 WINDOW=1024 SYN Unauthorised access (Aug 3) SRC=103.114.107.129 LEN=40 TTL=243 ID=13568 TCP DPT=3389 WINDOW=1024 SYN Unauthorised access (Aug 2) SRC=103.114.107.129 LEN=40 TTL=243 ID=20361 TCP DPT=3389 WINDOW=1024 SYN Unauthorised access (Aug 1) SRC=103.114.107.129 LEN=40 TTL=243 ID=8594 TCP DPT=3389 WINDOW=1024 SYN Unauthorised access (Jul 31) SRC=103.114.107.129 LEN=40 TTL=243 ID=59567 TCP DPT=3389 WINDOW=1024 SYN Unauthorised access (Jul 29) SRC=103.114.107.129 LEN=40 TTL=243 ID=35984 TCP DPT=3389 WINDOW=1024 SYN |
2019-08-04 21:21:23 |