城市(city): Columbus
省份(region): Ohio
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 18.119.131.114
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 56828
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;18.119.131.114. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025041601 1800 900 604800 86400
;; Query time: 64 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Apr 17 06:00:10 CST 2025
;; MSG SIZE rcvd: 107
114.131.119.18.in-addr.arpa domain name pointer ec2-18-119-131-114.us-east-2.compute.amazonaws.com.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
114.131.119.18.in-addr.arpa name = ec2-18-119-131-114.us-east-2.compute.amazonaws.com.
Authoritative answers can be found from:
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 200.35.56.89 | attackbotsspam | SPAM Delivery Attempt |
2019-09-30 01:21:50 |
| 222.186.173.180 | attackspam | Triggered by Fail2Ban at Ares web server |
2019-09-30 01:22:47 |
| 220.140.7.72 | attackspam | Port scan |
2019-09-30 01:04:59 |
| 1.186.45.250 | attack | Sep 29 19:25:13 dedicated sshd[17116]: Invalid user pankaj from 1.186.45.250 port 41124 |
2019-09-30 01:28:02 |
| 45.12.4.126 | attack | 𝖦𝖾𝖿𝖾𝗅𝗂𝖼𝗂𝗍𝖾𝖾𝗋𝖽, 𝗃𝖾 𝖻𝖾𝗇𝗍 𝖾𝖾𝗇 𝖿𝗂𝗇𝖺𝗅𝗂𝗌𝗍 𝖺𝗅𝗌 𝗃𝖾 𝖻𝖾𝗏𝖾𝗌𝗍𝗂𝗀𝗍 ! |
2019-09-30 01:32:02 |
| 193.201.224.232 | attackbots | Sep 29 15:56:19 icinga sshd[12829]: Failed none for invalid user admin from 193.201.224.232 port 23854 ssh2 Sep 29 15:56:19 icinga sshd[12829]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.201.224.232 ... |
2019-09-30 01:40:34 |
| 94.191.50.114 | attack | Sep 29 22:15:49 areeb-Workstation sshd[18722]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.50.114 Sep 29 22:15:51 areeb-Workstation sshd[18722]: Failed password for invalid user elasticsearch from 94.191.50.114 port 42948 ssh2 ... |
2019-09-30 01:05:34 |
| 140.213.24.174 | attackspambots | 445/tcp [2019-09-29]1pkt |
2019-09-30 01:18:34 |
| 178.214.254.251 | attackbots | Lines containing failures of 178.214.254.251 Sep 26 11:18:32 shared04 sshd[5714]: Invalid user martin from 178.214.254.251 port 51227 Sep 26 11:18:32 shared04 sshd[5714]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.214.254.251 Sep 26 11:18:34 shared04 sshd[5714]: Failed password for invalid user martin from 178.214.254.251 port 51227 ssh2 Sep 26 11:18:34 shared04 sshd[5714]: Received disconnect from 178.214.254.251 port 51227:11: Bye Bye [preauth] Sep 26 11:18:34 shared04 sshd[5714]: Disconnected from invalid user martin 178.214.254.251 port 51227 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=178.214.254.251 |
2019-09-30 01:29:53 |
| 222.163.15.82 | attackbots | 23/tcp 23/tcp [2019-09-27]2pkt |
2019-09-30 01:07:28 |
| 125.227.189.224 | attackspambots | 445/tcp 445/tcp 445/tcp... [2019-09-14/28]7pkt,1pt.(tcp) |
2019-09-30 00:49:56 |
| 104.192.109.140 | attackspam | Sep 29 08:10:03 localhost kernel: [3496822.005490] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=104.192.109.140 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=54759 PROTO=TCP SPT=44617 DPT=7676 SEQ=3966675045 ACK=0 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 29 10:24:08 localhost kernel: [3504867.049597] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=104.192.109.140 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=2403 PROTO=TCP SPT=44617 DPT=106 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 29 10:24:08 localhost kernel: [3504867.049626] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=104.192.109.140 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=2403 PROTO=TCP SPT=44617 DPT=106 SEQ=3535038839 ACK=0 WINDOW=1024 RES=0x00 SYN URGP=0 |
2019-09-30 01:30:51 |
| 94.23.215.90 | attackbotsspam | Sep 29 22:41:56 areeb-Workstation sshd[23806]: Failed password for games from 94.23.215.90 port 63390 ssh2 ... |
2019-09-30 01:35:46 |
| 193.164.6.142 | attackspambots | Sep 27 12:16:36 penfold postfix/smtpd[827]: connect from car2.careerdre.info[193.164.6.142] Sep 27 12:16:37 penfold postfix/smtpd[827]: Anonymous TLS connection established from car2.careerdre.info[193.164.6.142]: TLSv1.2 whostnameh cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bhostnames) Sep 27 12:16:37 penfold postfix/smtpd[827]: C756520F6B: client=car2.careerdre.info[193.164.6.142] Sep 27 12:16:38 penfold opendkim[2690]: C756520F6B: car2.careerdre.info [193.164.6.142] not internal Sep 27 12:16:39 penfold postfix/smtpd[827]: disconnect from car2.careerdre.info[193.164.6.142] ehlo=2 starttls=1 mail=1 rcpt=1 data=1 quhostname=1 commands=7 Sep 27 13:23:00 penfold postfix/smtpd[4753]: connect from car2.careerdre.info[193.164.6.142] Sep 27 13:23:01 penfold postfix/smtpd[4753]: Anonymous TLS connection established from car2.careerdre.info[193.164.6.142]: TLSv1.2 whostnameh cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bhostnames) Sep x@x Sep 27 13:23:02 penfold postfix/smtpd[4........ ------------------------------- |
2019-09-30 00:48:36 |
| 42.237.45.59 | attack | Unauthorised access (Sep 29) SRC=42.237.45.59 LEN=40 TTL=49 ID=61536 TCP DPT=8080 WINDOW=13409 SYN Unauthorised access (Sep 29) SRC=42.237.45.59 LEN=40 TTL=49 ID=34164 TCP DPT=8080 WINDOW=60065 SYN |
2019-09-30 00:59:44 |