城市(city): unknown
省份(region): unknown
国家(country): United States of America (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 164.111.78.117
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 47625
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;164.111.78.117. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022000 1800 900 604800 86400
;; Query time: 11 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 21 00:34:06 CST 2025
;; MSG SIZE rcvd: 107
117.78.111.164.in-addr.arpa domain name pointer global78-117.pix.hs.uab.edu.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
117.78.111.164.in-addr.arpa name = global78-117.pix.hs.uab.edu.
Authoritative answers can be found from:
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 45.74.207.200 | attackbotsspam | Honeypot attack, port: 5555, PTR: broadband-user.acndigital.net. |
2020-02-05 06:32:32 |
| 185.234.219.103 | attackspam | Feb 4 21:53:33 mail postfix/smtpd\[14652\]: warning: unknown\[185.234.219.103\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Feb 4 22:09:52 mail postfix/smtpd\[15265\]: warning: unknown\[185.234.219.103\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Feb 4 22:26:42 mail postfix/smtpd\[15557\]: warning: unknown\[185.234.219.103\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Feb 4 22:59:22 mail postfix/smtpd\[16146\]: warning: unknown\[185.234.219.103\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ |
2020-02-05 06:37:18 |
| 163.172.90.3 | attack | Feb 4 11:15:46 host sshd[10950]: reveeclipse mapping checking getaddrinfo for 163-172-90-3.rev.poneytelecom.eu [163.172.90.3] failed - POSSIBLE BREAK-IN ATTEMPT! Feb 4 11:15:46 host sshd[10950]: Invalid user fake from 163.172.90.3 Feb 4 11:15:46 host sshd[10950]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.90.3 Feb 4 11:15:49 host sshd[10950]: Failed password for invalid user fake from 163.172.90.3 port 55440 ssh2 Feb 4 11:15:49 host sshd[10950]: Received disconnect from 163.172.90.3: 11: Bye Bye [preauth] Feb 4 11:15:50 host sshd[11147]: reveeclipse mapping checking getaddrinfo for 163-172-90-3.rev.poneytelecom.eu [163.172.90.3] failed - POSSIBLE BREAK-IN ATTEMPT! Feb 4 11:15:50 host sshd[11147]: Invalid user admin from 163.172.90.3 Feb 4 11:15:50 host sshd[11147]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.90.3 Feb 4 11:15:52 host sshd[11147]: Failed pas........ ------------------------------- |
2020-02-05 06:20:43 |
| 112.85.42.174 | attack | Feb 5 03:28:29 gw1 sshd[5230]: Failed password for root from 112.85.42.174 port 15823 ssh2 Feb 5 03:28:42 gw1 sshd[5230]: error: maximum authentication attempts exceeded for root from 112.85.42.174 port 15823 ssh2 [preauth] ... |
2020-02-05 06:30:47 |
| 199.249.230.115 | attack | 02/04/2020-21:18:46.603188 199.249.230.115 Protocol: 6 ET TOR Known Tor Exit Node Traffic group 47 |
2020-02-05 06:47:43 |
| 192.144.155.63 | attackspam | Feb 4 17:39:34 plusreed sshd[27297]: Invalid user shaunci from 192.144.155.63 ... |
2020-02-05 06:46:48 |
| 151.22.182.106 | attackspam | 1580847547 - 02/04/2020 21:19:07 Host: 151.22.182.106/151.22.182.106 Port: 445 TCP Blocked |
2020-02-05 06:26:32 |
| 131.72.222.205 | attack | Scanning random ports - tries to find possible vulnerable services |
2020-02-05 06:34:59 |
| 176.235.208.210 | attack | Unauthorized connection attempt detected from IP address 176.235.208.210 to port 2220 [J] |
2020-02-05 06:43:24 |
| 91.127.212.101 | attack | Honeypot attack, port: 81, PTR: adsl-dyn101.91-127-212.t-com.sk. |
2020-02-05 06:52:02 |
| 91.137.241.92 | attackbotsspam | Unauthorized connection attempt detected from IP address 91.137.241.92 to port 23 [J] |
2020-02-05 06:51:48 |
| 132.145.196.193 | attackbots | Unauthorized connection attempt detected from IP address 132.145.196.193 to port 2220 [J] |
2020-02-05 06:52:14 |
| 118.39.108.242 | attack | Unauthorized connection attempt detected from IP address 118.39.108.242 to port 5555 [J] |
2020-02-05 07:00:10 |
| 45.238.32.151 | attack | Scanning random ports - tries to find possible vulnerable services |
2020-02-05 06:50:00 |
| 104.236.61.100 | attackspam | 2020-02-04T16:41:18.8616411495-001 sshd[31368]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.61.100 user=root 2020-02-04T16:41:20.5707451495-001 sshd[31368]: Failed password for root from 104.236.61.100 port 50987 ssh2 2020-02-04T16:43:49.6525891495-001 sshd[31827]: Invalid user wksys from 104.236.61.100 port 33469 2020-02-04T16:43:49.6634631495-001 sshd[31827]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.61.100 2020-02-04T16:43:49.6525891495-001 sshd[31827]: Invalid user wksys from 104.236.61.100 port 33469 2020-02-04T16:43:51.7691691495-001 sshd[31827]: Failed password for invalid user wksys from 104.236.61.100 port 33469 ssh2 2020-02-04T16:46:28.2194781495-001 sshd[31923]: Invalid user doug from 104.236.61.100 port 44164 2020-02-04T16:46:28.2229061495-001 sshd[31923]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.61.100 2020-02-04T ... |
2020-02-05 06:29:20 |