城市(city): unknown
省份(region): unknown
国家(country): United States of America (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 172.4.94.140
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 32124
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;172.4.94.140. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021800 1800 900 604800 86400
;; Query time: 15 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 18 23:53:54 CST 2025
;; MSG SIZE rcvd: 105
140.94.4.172.in-addr.arpa domain name pointer 172-4-94-140.lightspeed.sntcca.sbcglobal.net.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
140.94.4.172.in-addr.arpa name = 172-4-94-140.lightspeed.sntcca.sbcglobal.net.
Authoritative answers can be found from:
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 45.146.167.167 | attack | RDP Brute-Force (honeypot 9) |
2020-09-30 02:37:05 |
| 138.68.71.18 | attackbots | Sep 28 01:37:21 pl2server sshd[26678]: Invalid user alex from 138.68.71.18 port 38504 Sep 28 01:37:21 pl2server sshd[26678]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.71.18 Sep 28 01:37:22 pl2server sshd[26678]: Failed password for invalid user alex from 138.68.71.18 port 38504 ssh2 Sep 28 01:37:22 pl2server sshd[26678]: Received disconnect from 138.68.71.18 port 38504:11: Bye Bye [preauth] Sep 28 01:37:22 pl2server sshd[26678]: Disconnected from 138.68.71.18 port 38504 [preauth] Sep 28 01:51:34 pl2server sshd[30416]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.71.18 user=www-data Sep 28 01:51:36 pl2server sshd[30416]: Failed password for www-data from 138.68.71.18 port 44968 ssh2 Sep 28 01:51:36 pl2server sshd[30416]: Received disconnect from 138.68.71.18 port 44968:11: Bye Bye [preauth] Sep 28 01:51:36 pl2server sshd[30416]: Disconnected from 138.68.71.18 port 4496........ ------------------------------- |
2020-09-30 02:17:00 |
| 103.254.73.71 | attackspam | Invalid user dj from 103.254.73.71 port 50062 |
2020-09-30 02:35:19 |
| 34.71.117.197 | attack | 34.71.117.197 - - [29/Sep/2020:20:19:25 +0200] "POST /xmlrpc.php HTTP/1.1" 403 146 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 34.71.117.197 - - [29/Sep/2020:20:23:03 +0200] "POST /xmlrpc.php HTTP/1.1" 403 146 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-09-30 02:39:46 |
| 106.111.122.205 | attackbotsspam | Sep 28 22:33:29 dev0-dcde-rnet sshd[12879]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.111.122.205 Sep 28 22:33:31 dev0-dcde-rnet sshd[12879]: Failed password for invalid user admin from 106.111.122.205 port 43464 ssh2 Sep 28 22:33:38 dev0-dcde-rnet sshd[12881]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.111.122.205 |
2020-09-30 02:12:32 |
| 103.208.152.184 | attackbots | Telnet Server BruteForce Attack |
2020-09-30 02:12:47 |
| 208.186.113.106 | attackbots | Spam |
2020-09-30 02:41:49 |
| 103.253.42.54 | attackbots | 2020-09-29T19:07:50.428869beta postfix/smtpd[17455]: warning: unknown[103.253.42.54]: SASL LOGIN authentication failed: authentication failure 2020-09-29T19:17:55.988153beta postfix/smtpd[17596]: warning: unknown[103.253.42.54]: SASL LOGIN authentication failed: authentication failure 2020-09-29T19:27:59.012454beta postfix/smtpd[17655]: warning: unknown[103.253.42.54]: SASL LOGIN authentication failed: authentication failure ... |
2020-09-30 02:31:35 |
| 175.24.106.253 | attackspambots | SSH/22 MH Probe, BF, Hack - |
2020-09-30 02:17:52 |
| 97.74.236.154 | attack | [N3.H3.VM3] Port Scanner Detected Blocked by UFW |
2020-09-30 02:10:58 |
| 45.55.61.114 | attackbots | 45.55.61.114 - - [29/Sep/2020:18:49:41 +0200] "GET /wp-login.php HTTP/1.1" 200 8712 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 45.55.61.114 - - [29/Sep/2020:18:49:43 +0200] "POST /wp-login.php HTTP/1.1" 200 8942 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 45.55.61.114 - - [29/Sep/2020:18:49:44 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-09-30 02:42:42 |
| 91.234.128.42 | attack | Port Scan: TCP/443 |
2020-09-30 02:38:19 |
| 14.99.176.210 | attack | 2020-09-29T21:34:48.054179paragon sshd[514866]: Invalid user list from 14.99.176.210 port 26662 2020-09-29T21:34:48.057873paragon sshd[514866]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.99.176.210 2020-09-29T21:34:48.054179paragon sshd[514866]: Invalid user list from 14.99.176.210 port 26662 2020-09-29T21:34:50.245636paragon sshd[514866]: Failed password for invalid user list from 14.99.176.210 port 26662 ssh2 2020-09-29T21:36:37.516907paragon sshd[514914]: Invalid user netdump from 14.99.176.210 port 49965 ... |
2020-09-30 02:17:28 |
| 157.245.231.62 | attackbotsspam | Sep 29 18:54:59 santamaria sshd\[30363\]: Invalid user new from 157.245.231.62 Sep 29 18:54:59 santamaria sshd\[30363\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.231.62 Sep 29 18:55:01 santamaria sshd\[30363\]: Failed password for invalid user new from 157.245.231.62 port 58260 ssh2 ... |
2020-09-30 02:29:01 |
| 129.41.173.253 | attackbotsspam | Hackers please read as the following information is valuable to you. I am not NELL CALLOWAY with bill date of 15th every month now, even though she used my email address, noaccount@yahoo.com when signing up. Spectrum cable keeps sending me spam emails with customer information. Spectrum sable, per calls and emails, has chosen to not stop spamming me as they claim they can not help me as I am not a customer. So please use the information to attack and gain financial benefit Spectrum Cables expense. |
2020-09-30 02:22:23 |