城市(city): Laporte
省份(region): Colorado
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 164.104.32.118
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 28556
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;164.104.32.118. IN A
;; AUTHORITY SECTION:
. 453 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2021122801 1800 900 604800 86400
;; Query time: 21 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Dec 29 10:49:27 CST 2021
;; MSG SIZE rcvd: 107
118.32.104.164.in-addr.arpa domain name pointer host164-104-32-118.dhcp.psdschools.org.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
118.32.104.164.in-addr.arpa name = host164-104-32-118.dhcp.psdschools.org.
Authoritative answers can be found from:
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 118.124.238.188 | attack | Honeypot attack, port: 445, PTR: PTR record not found |
2020-05-29 07:03:56 |
| 106.75.28.38 | attackspam | May 28 22:23:02 haigwepa sshd[10496]: Failed password for root from 106.75.28.38 port 39049 ssh2 ... |
2020-05-29 06:56:54 |
| 45.64.237.125 | attack | Invalid user jking from 45.64.237.125 port 41146 |
2020-05-29 07:06:32 |
| 217.126.211.142 | attack | port scan and connect, tcp 1433 (ms-sql-s) |
2020-05-29 07:01:04 |
| 121.46.26.126 | attackbots | May 29 00:05:46 PorscheCustomer sshd[27857]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.46.26.126 May 29 00:05:47 PorscheCustomer sshd[27857]: Failed password for invalid user birton from 121.46.26.126 port 54874 ssh2 May 29 00:09:08 PorscheCustomer sshd[27916]: Failed password for root from 121.46.26.126 port 49840 ssh2 ... |
2020-05-29 07:00:50 |
| 76.214.112.45 | attackbotsspam | Invalid user pfa from 76.214.112.45 port 52051 |
2020-05-29 06:54:26 |
| 87.15.151.168 | attackspam | Honeypot attack, port: 81, PTR: host168-151-dynamic.15-87-r.retail.telecomitalia.it. |
2020-05-29 06:38:46 |
| 49.248.3.10 | attackbotsspam | May 28 14:40:41 dignus sshd[6406]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.248.3.10 May 28 14:40:42 dignus sshd[6406]: Failed password for invalid user admin from 49.248.3.10 port 53629 ssh2 May 28 14:44:33 dignus sshd[6700]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.248.3.10 user=root May 28 14:44:35 dignus sshd[6700]: Failed password for root from 49.248.3.10 port 55840 ssh2 May 28 14:48:18 dignus sshd[6977]: Invalid user shenleiyu from 49.248.3.10 port 58319 ... |
2020-05-29 06:41:43 |
| 200.148.62.120 | attack | IP 200.148.62.120 attacked honeypot on port: 8080 at 5/28/2020 9:07:44 PM |
2020-05-29 06:46:53 |
| 27.147.224.221 | attackspambots | "XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES: |
2020-05-29 06:42:17 |
| 121.237.250.31 | attackspambots | May 28 19:52:42 zimbra sshd[3732]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.237.250.31 user=r.r May 28 19:52:44 zimbra sshd[3732]: Failed password for r.r from 121.237.250.31 port 54854 ssh2 May 28 19:52:44 zimbra sshd[3732]: Received disconnect from 121.237.250.31 port 54854:11: Bye Bye [preauth] May 28 19:52:44 zimbra sshd[3732]: Disconnected from 121.237.250.31 port 54854 [preauth] May 28 20:11:13 zimbra sshd[18639]: Invalid user edwin from 121.237.250.31 May 28 20:11:13 zimbra sshd[18639]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.237.250.31 May 28 20:11:15 zimbra sshd[18639]: Failed password for invalid user edwin from 121.237.250.31 port 45684 ssh2 May 28 20:11:15 zimbra sshd[18639]: Received disconnect from 121.237.250.31 port 45684:11: Bye Bye [preauth] May 28 20:11:15 zimbra sshd[18639]: Disconnected from 121.237.250.31 port 45684 [preauth] May 28 20:15:10 zimb........ ------------------------------- |
2020-05-29 07:04:45 |
| 222.186.169.192 | attack | May 29 00:49:12 ns381471 sshd[17825]: Failed password for root from 222.186.169.192 port 13806 ssh2 May 29 00:49:24 ns381471 sshd[17825]: error: maximum authentication attempts exceeded for root from 222.186.169.192 port 13806 ssh2 [preauth] |
2020-05-29 07:09:00 |
| 202.137.141.242 | attackbots | 'IP reached maximum auth failures for a one day block' |
2020-05-29 06:47:34 |
| 167.172.163.162 | attack | May 29 00:37:18 sxvn sshd[856015]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.172.163.162 |
2020-05-29 07:15:03 |
| 112.85.42.172 | attackspambots | May 29 00:33:10 ns381471 sshd[17009]: Failed password for root from 112.85.42.172 port 18409 ssh2 May 29 00:33:24 ns381471 sshd[17009]: error: maximum authentication attempts exceeded for root from 112.85.42.172 port 18409 ssh2 [preauth] |
2020-05-29 06:37:57 |