城市(city): Saskatoon
省份(region): Saskatchewan
国家(country): Canada
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 174.2.214.199
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 4695
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;174.2.214.199. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2024121100 1800 900 604800 86400
;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Dec 11 20:42:02 CST 2024
;; MSG SIZE rcvd: 106Host 199.214.2.174.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 199.214.2.174.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 45.141.84.29 | attack | 45.141.84.29 was recorded 5 times by 5 hosts attempting to connect to the following ports: 9575,9001,9574,9344,9166. Incident counter (4h, 24h, all-time): 5, 46, 379 |
2019-11-13 00:35:00 |
| 37.49.231.159 | attackbots | Unauthorised access (Nov 12) SRC=37.49.231.159 LEN=40 TTL=52 ID=36062 TCP DPT=8080 WINDOW=38130 SYN Unauthorised access (Nov 12) SRC=37.49.231.159 LEN=40 TTL=52 ID=6285 TCP DPT=8080 WINDOW=38130 SYN Unauthorised access (Nov 12) SRC=37.49.231.159 LEN=40 TTL=52 ID=22885 TCP DPT=8080 WINDOW=38130 SYN Unauthorised access (Nov 12) SRC=37.49.231.159 LEN=40 TTL=52 ID=49965 TCP DPT=8080 WINDOW=15896 SYN Unauthorised access (Nov 11) SRC=37.49.231.159 LEN=40 TTL=52 ID=36181 TCP DPT=8080 WINDOW=38130 SYN Unauthorised access (Nov 11) SRC=37.49.231.159 LEN=40 TTL=52 ID=13382 TCP DPT=8080 WINDOW=15896 SYN |
2019-11-13 00:22:24 |
| 92.119.160.107 | attackspam | Nov 12 17:10:29 mc1 kernel: \[4861307.769594\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=92.119.160.107 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=37997 PROTO=TCP SPT=45682 DPT=62632 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 12 17:15:30 mc1 kernel: \[4861609.042694\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=92.119.160.107 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=4516 PROTO=TCP SPT=45682 DPT=62748 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 12 17:17:22 mc1 kernel: \[4861720.758466\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=92.119.160.107 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=46879 PROTO=TCP SPT=45682 DPT=63442 WINDOW=1024 RES=0x00 SYN URGP=0 ... |
2019-11-13 00:43:05 |
| 191.242.113.196 | attackspambots | Honeypot attack, port: 23, PTR: PTR record not found |
2019-11-13 00:56:55 |
| 182.61.54.213 | attack | Nov 12 15:50:16 localhost sshd\[13291\]: Invalid user 12 from 182.61.54.213 Nov 12 15:50:16 localhost sshd\[13291\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.54.213 Nov 12 15:50:18 localhost sshd\[13291\]: Failed password for invalid user 12 from 182.61.54.213 port 43702 ssh2 Nov 12 15:55:28 localhost sshd\[13583\]: Invalid user \&\&\&\&\& from 182.61.54.213 Nov 12 15:55:28 localhost sshd\[13583\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.54.213 ... |
2019-11-13 00:30:58 |
| 40.83.171.103 | attack | firewall-block, port(s): 3306/tcp |
2019-11-13 00:39:51 |
| 219.155.247.27 | attack | Caught in portsentry honeypot |
2019-11-13 00:41:41 |
| 23.126.140.33 | attack | Nov 12 16:43:09 * sshd[30657]: Failed password for mysql from 23.126.140.33 port 43930 ssh2 |
2019-11-13 00:34:29 |
| 49.234.79.176 | attack | Nov 12 15:40:11 lnxmail61 sshd[10815]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.79.176 |
2019-11-13 00:29:51 |
| 90.224.11.107 | attackbots | Automatic report - XMLRPC Attack |
2019-11-13 00:19:03 |
| 222.186.175.148 | attack | pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.148 user=root Failed password for root from 222.186.175.148 port 42644 ssh2 Failed password for root from 222.186.175.148 port 42644 ssh2 Failed password for root from 222.186.175.148 port 42644 ssh2 Failed password for root from 222.186.175.148 port 42644 ssh2 |
2019-11-13 00:59:59 |
| 37.49.231.157 | attackbotsspam | *Port Scan* detected from 37.49.231.157 (NL/Netherlands/-). 4 hits in the last 295 seconds |
2019-11-13 00:33:03 |
| 223.81.65.62 | attackbotsspam | Unauthorised access (Nov 12) SRC=223.81.65.62 LEN=40 TOS=0x04 TTL=49 ID=49425 TCP DPT=8080 WINDOW=57936 SYN Unauthorised access (Nov 12) SRC=223.81.65.62 LEN=40 TOS=0x04 TTL=50 ID=56593 TCP DPT=8080 WINDOW=57936 SYN Unauthorised access (Nov 11) SRC=223.81.65.62 LEN=40 TOS=0x04 TTL=48 ID=54943 TCP DPT=8080 WINDOW=46856 SYN |
2019-11-13 00:45:36 |
| 109.244.96.201 | attackbotsspam | Nov 12 05:43:06 auw2 sshd\[32101\]: Invalid user nhat from 109.244.96.201 Nov 12 05:43:06 auw2 sshd\[32101\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.244.96.201 Nov 12 05:43:08 auw2 sshd\[32101\]: Failed password for invalid user nhat from 109.244.96.201 port 59996 ssh2 Nov 12 05:48:54 auw2 sshd\[32597\]: Invalid user timberlake from 109.244.96.201 Nov 12 05:48:54 auw2 sshd\[32597\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.244.96.201 |
2019-11-13 00:23:51 |
| 129.204.25.248 | attack | Nov 12 18:00:13 www sshd\[43494\]: Invalid user abys from 129.204.25.248 Nov 12 18:00:13 www sshd\[43494\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.25.248 Nov 12 18:00:15 www sshd\[43494\]: Failed password for invalid user abys from 129.204.25.248 port 32868 ssh2 ... |
2019-11-13 00:40:54 |