城市(city): unknown
省份(region): unknown
国家(country): United States of America (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 214.104.58.51
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 44728
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;214.104.58.51. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020602 1800 900 604800 86400
;; Query time: 36 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 07 07:40:52 CST 2025
;; MSG SIZE rcvd: 106b'Host 51.58.104.214.in-addr.arpa not found: 2(SERVFAIL)
'server can't find 214.104.58.51.in-addr.arpa: SERVFAIL| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 223.156.186.1 | attack | Automatic report - Port Scan Attack |
2020-09-14 19:15:39 |
| 182.208.112.240 | attackspambots | (sshd) Failed SSH login from 182.208.112.240 (KR/South Korea/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 14 05:49:29 optimus sshd[7954]: Invalid user lreyes from 182.208.112.240 Sep 14 05:49:29 optimus sshd[7954]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.208.112.240 Sep 14 05:49:30 optimus sshd[7954]: Failed password for invalid user lreyes from 182.208.112.240 port 63972 ssh2 Sep 14 05:54:06 optimus sshd[9067]: Invalid user mineria from 182.208.112.240 Sep 14 05:54:06 optimus sshd[9067]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.208.112.240 |
2020-09-14 19:05:29 |
| 185.250.205.84 | attackspambots | firewall-block, port(s): 5491/tcp, 21264/tcp, 49398/tcp, 59114/tcp, 65205/tcp |
2020-09-14 19:27:10 |
| 91.83.161.153 | attack | Sep 13 18:33:46 mail.srvfarm.net postfix/smtpd[1233116]: warning: unknown[91.83.161.153]: SASL PLAIN authentication failed: Sep 13 18:33:46 mail.srvfarm.net postfix/smtpd[1233116]: lost connection after AUTH from unknown[91.83.161.153] Sep 13 18:38:17 mail.srvfarm.net postfix/smtpd[1232281]: warning: unknown[91.83.161.153]: SASL PLAIN authentication failed: Sep 13 18:38:17 mail.srvfarm.net postfix/smtpd[1232281]: lost connection after AUTH from unknown[91.83.161.153] Sep 13 18:41:52 mail.srvfarm.net postfix/smtpd[1234121]: warning: unknown[91.83.161.153]: SASL PLAIN authentication failed: |
2020-09-14 19:37:39 |
| 51.77.140.111 | attackbots | Invalid user admin from 51.77.140.111 port 55596 |
2020-09-14 19:03:38 |
| 189.91.5.42 | attack | Sep 13 18:29:11 mail.srvfarm.net postfix/smtpd[1231911]: warning: unknown[189.91.5.42]: SASL PLAIN authentication failed: Sep 13 18:29:11 mail.srvfarm.net postfix/smtpd[1231911]: lost connection after AUTH from unknown[189.91.5.42] Sep 13 18:30:22 mail.srvfarm.net postfix/smtpd[1214684]: warning: unknown[189.91.5.42]: SASL PLAIN authentication failed: Sep 13 18:30:23 mail.srvfarm.net postfix/smtpd[1214684]: lost connection after AUTH from unknown[189.91.5.42] Sep 13 18:30:41 mail.srvfarm.net postfix/smtpd[1232278]: warning: unknown[189.91.5.42]: SASL PLAIN authentication failed: |
2020-09-14 19:42:44 |
| 131.0.61.107 | attackbots | DATE:2020-09-13 18:49:01, IP:131.0.61.107, PORT:telnet Telnet brute force auth on honeypot server (epe-honey1-hq) |
2020-09-14 19:12:43 |
| 20.48.102.92 | attackspambots | Time: Sun Sep 13 23:23:21 2020 -0300 IP: 20.48.102.92 (US/United States/-) Failures: 30 (smtpauth) Interval: 3600 seconds Blocked: Permanent Block |
2020-09-14 19:39:54 |
| 116.125.141.56 | attack | Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-09-14T09:06:53Z and 2020-09-14T09:14:57Z |
2020-09-14 19:27:34 |
| 162.142.125.23 | attackspambots | Port scan detected |
2020-09-14 19:29:21 |
| 49.233.75.234 | attack | SSH bruteforce |
2020-09-14 19:01:45 |
| 183.57.46.131 | attackbots | Port scan: Attack repeated for 24 hours |
2020-09-14 19:26:14 |
| 192.35.168.231 | attackbotsspam |
|
2020-09-14 19:24:01 |
| 218.92.0.175 | attackbots | Sep 14 04:03:28 dignus sshd[26269]: Failed password for root from 218.92.0.175 port 33450 ssh2 Sep 14 04:03:32 dignus sshd[26269]: Failed password for root from 218.92.0.175 port 33450 ssh2 Sep 14 04:03:36 dignus sshd[26269]: Failed password for root from 218.92.0.175 port 33450 ssh2 Sep 14 04:03:39 dignus sshd[26269]: Failed password for root from 218.92.0.175 port 33450 ssh2 Sep 14 04:03:43 dignus sshd[26269]: Failed password for root from 218.92.0.175 port 33450 ssh2 ... |
2020-09-14 19:05:12 |
| 218.92.0.250 | attack | Sep 14 12:04:20 ns308116 sshd[4404]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.250 user=root Sep 14 12:04:22 ns308116 sshd[4404]: Failed password for root from 218.92.0.250 port 28017 ssh2 Sep 14 12:04:25 ns308116 sshd[4404]: Failed password for root from 218.92.0.250 port 28017 ssh2 Sep 14 12:04:27 ns308116 sshd[4404]: Failed password for root from 218.92.0.250 port 28017 ssh2 Sep 14 12:04:31 ns308116 sshd[4404]: Failed password for root from 218.92.0.250 port 28017 ssh2 ... |
2020-09-14 19:17:26 |