城市(city): unknown
省份(region): unknown
国家(country): United States of America (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 214.101.247.133
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 52532
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;214.101.247.133. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022001 1800 900 604800 86400
;; Query time: 57 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 21 05:29:16 CST 2025
;; MSG SIZE rcvd: 108b'Host 133.247.101.214.in-addr.arpa not found: 2(SERVFAIL)
'server can't find 214.101.247.133.in-addr.arpa: SERVFAIL| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 189.207.246.57 | attackbotsspam | Aug 30 06:22:39 auw2 sshd\[3981\]: Invalid user squirrelmail from 189.207.246.57 Aug 30 06:22:39 auw2 sshd\[3981\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.207.246.57 Aug 30 06:22:40 auw2 sshd\[3981\]: Failed password for invalid user squirrelmail from 189.207.246.57 port 60863 ssh2 Aug 30 06:27:37 auw2 sshd\[5156\]: Invalid user sercon from 189.207.246.57 Aug 30 06:27:37 auw2 sshd\[5156\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.207.246.57 |
2019-08-31 02:37:41 |
| 91.245.225.201 | attackbots | Aug 30 18:28:13 h2177944 kernel: \[59190.702828\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=91.245.225.201 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=58286 PROTO=TCP SPT=42488 DPT=3396 WINDOW=1024 RES=0x00 SYN URGP=0 Aug 30 18:28:13 h2177944 kernel: \[59190.970505\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=91.245.225.201 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=54740 PROTO=TCP SPT=42488 DPT=3389 WINDOW=1024 RES=0x00 SYN URGP=0 Aug 30 18:28:15 h2177944 kernel: \[59193.027696\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=91.245.225.201 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=65136 PROTO=TCP SPT=42488 DPT=3398 WINDOW=1024 RES=0x00 SYN URGP=0 Aug 30 18:28:17 h2177944 kernel: \[59195.024135\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=91.245.225.201 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=19444 PROTO=TCP SPT=42488 DPT=3395 WINDOW=1024 RES=0x00 SYN URGP=0 Aug 30 18:28:18 h2177944 kernel: \[59195.793398\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=91.245.225.201 DST=85.214.117.9 LEN= |
2019-08-31 02:10:33 |
| 139.99.62.10 | attack | Aug 30 20:12:57 meumeu sshd[18937]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.99.62.10 Aug 30 20:12:59 meumeu sshd[18937]: Failed password for invalid user qqq from 139.99.62.10 port 51166 ssh2 Aug 30 20:17:38 meumeu sshd[19498]: Failed password for root from 139.99.62.10 port 47666 ssh2 ... |
2019-08-31 02:35:10 |
| 106.12.114.26 | attackspam | Aug 30 17:31:16 ip-172-31-1-72 sshd\[6843\]: Invalid user debian from 106.12.114.26 Aug 30 17:31:16 ip-172-31-1-72 sshd\[6843\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.114.26 Aug 30 17:31:18 ip-172-31-1-72 sshd\[6843\]: Failed password for invalid user debian from 106.12.114.26 port 37066 ssh2 Aug 30 17:34:58 ip-172-31-1-72 sshd\[6937\]: Invalid user lian from 106.12.114.26 Aug 30 17:34:58 ip-172-31-1-72 sshd\[6937\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.114.26 |
2019-08-31 02:32:43 |
| 191.53.195.38 | attack | Aug 30 11:27:27 mailman postfix/smtpd[29999]: warning: unknown[191.53.195.38]: SASL PLAIN authentication failed: authentication failure |
2019-08-31 02:42:59 |
| 209.97.161.124 | attackspam | Aug 30 19:51:58 dedicated sshd[14770]: Invalid user mx from 209.97.161.124 port 50256 |
2019-08-31 01:59:00 |
| 114.236.166.163 | attackbotsspam | Aug 30 13:59:45 TORMINT sshd\[25491\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.236.166.163 user=root Aug 30 13:59:48 TORMINT sshd\[25491\]: Failed password for root from 114.236.166.163 port 57852 ssh2 Aug 30 13:59:50 TORMINT sshd\[25491\]: Failed password for root from 114.236.166.163 port 57852 ssh2 ... |
2019-08-31 02:23:43 |
| 61.142.247.210 | attack | Aug 30 11:34:18 mailman postfix/smtpd[30346]: warning: unknown[61.142.247.210]: SASL LOGIN authentication failed: authentication failure |
2019-08-31 02:25:15 |
| 79.7.206.177 | attackbots | Aug 30 19:33:57 root sshd[22532]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.7.206.177 Aug 30 19:33:59 root sshd[22532]: Failed password for invalid user foobar from 79.7.206.177 port 61337 ssh2 Aug 30 19:39:54 root sshd[22717]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.7.206.177 ... |
2019-08-31 02:36:32 |
| 49.234.199.232 | attack | Lines containing failures of 49.234.199.232 Aug 29 23:29:39 mellenthin sshd[15571]: User r.r from 49.234.199.232 not allowed because not listed in AllowUsers Aug 29 23:29:39 mellenthin sshd[15571]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.199.232 user=r.r Aug 29 23:29:40 mellenthin sshd[15571]: Failed password for invalid user r.r from 49.234.199.232 port 41136 ssh2 Aug 29 23:29:41 mellenthin sshd[15571]: Received disconnect from 49.234.199.232 port 41136:11: Bye Bye [preauth] Aug 29 23:29:41 mellenthin sshd[15571]: Disconnected from invalid user r.r 49.234.199.232 port 41136 [preauth] Aug 29 23:51:55 mellenthin sshd[15995]: Invalid user cora from 49.234.199.232 port 38522 Aug 29 23:51:55 mellenthin sshd[15995]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.199.232 Aug 29 23:51:56 mellenthin sshd[15995]: Failed password for invalid user cora from 49.234.199.232 port 38........ ------------------------------ |
2019-08-31 01:55:37 |
| 51.89.185.224 | attack | Aug 30 20:28:57 icinga sshd[30022]: Failed password for root from 51.89.185.224 port 46188 ssh2 ... |
2019-08-31 02:44:16 |
| 203.210.86.38 | attack | Aug 30 18:27:45 lnxweb62 sshd[14300]: Failed password for root from 203.210.86.38 port 54567 ssh2 Aug 30 18:27:45 lnxweb62 sshd[14300]: Failed password for root from 203.210.86.38 port 54567 ssh2 |
2019-08-31 02:33:35 |
| 74.63.226.142 | attackspam | Aug 30 20:33:34 OPSO sshd\[31482\]: Invalid user kbm from 74.63.226.142 port 53316 Aug 30 20:33:34 OPSO sshd\[31482\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=74.63.226.142 Aug 30 20:33:36 OPSO sshd\[31482\]: Failed password for invalid user kbm from 74.63.226.142 port 53316 ssh2 Aug 30 20:37:35 OPSO sshd\[32296\]: Invalid user ryana from 74.63.226.142 port 33672 Aug 30 20:37:35 OPSO sshd\[32296\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=74.63.226.142 |
2019-08-31 02:43:49 |
| 51.91.248.56 | attackspambots | 2019-08-30T18:07:20.396487abusebot-3.cloudsearch.cf sshd\[11383\]: Invalid user alison from 51.91.248.56 port 39530 |
2019-08-31 02:30:24 |
| 43.254.45.10 | attackspambots | ssh failed login |
2019-08-31 02:22:38 |