城市(city): unknown
省份(region): unknown
国家(country): United States of America (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 214.164.130.109
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 3911
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;214.164.130.109. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020602 1800 900 604800 86400
;; Query time: 39 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 07 13:13:55 CST 2025
;; MSG SIZE rcvd: 108Host 109.130.164.214.in-addr.arpa not found: 2(SERVFAIL)
server can't find 214.164.130.109.in-addr.arpa: SERVFAIL| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 204.188.219.130 | attack | Honeypot attack, port: 445, PTR: PTR record not found |
2019-09-24 08:35:08 |
| 89.234.156.185 | attackspambots | 2019-09-24T00:24:49.401824abusebot-4.cloudsearch.cf sshd\[29929\]: Invalid user caratvodka from 89.234.156.185 port 60528 |
2019-09-24 08:30:41 |
| 201.48.206.146 | attackspam | Sep 23 20:19:36 xtremcommunity sshd\[410429\]: Invalid user mask from 201.48.206.146 port 35597 Sep 23 20:19:36 xtremcommunity sshd\[410429\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.48.206.146 Sep 23 20:19:38 xtremcommunity sshd\[410429\]: Failed password for invalid user mask from 201.48.206.146 port 35597 ssh2 Sep 23 20:25:02 xtremcommunity sshd\[410521\]: Invalid user ph from 201.48.206.146 port 56288 Sep 23 20:25:02 xtremcommunity sshd\[410521\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.48.206.146 ... |
2019-09-24 08:30:27 |
| 195.154.55.174 | attack | Sep 23 13:21:24 php1 sshd\[15059\]: Invalid user agencia from 195.154.55.174 Sep 23 13:21:24 php1 sshd\[15059\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=temp.intempora.com Sep 23 13:21:26 php1 sshd\[15059\]: Failed password for invalid user agencia from 195.154.55.174 port 40308 ssh2 Sep 23 13:25:11 php1 sshd\[15513\]: Invalid user agnieszka from 195.154.55.174 Sep 23 13:25:11 php1 sshd\[15513\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=temp.intempora.com |
2019-09-24 08:23:42 |
| 51.38.200.249 | attackspambots | Sep 24 02:39:32 SilenceServices sshd[32348]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.200.249 Sep 24 02:39:33 SilenceServices sshd[32348]: Failed password for invalid user ts from 51.38.200.249 port 57068 ssh2 Sep 24 02:39:42 SilenceServices sshd[32389]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.200.249 |
2019-09-24 08:50:09 |
| 51.91.212.80 | attackspam | Sep 24 00:10:11 h2177944 kernel: \[2152928.387293\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=51.91.212.80 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=54321 PROTO=TCP SPT=37457 DPT=1025 WINDOW=65535 RES=0x00 SYN URGP=0 Sep 24 00:22:35 h2177944 kernel: \[2153672.784807\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=51.91.212.80 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=54321 PROTO=TCP SPT=50326 DPT=1025 WINDOW=65535 RES=0x00 SYN URGP=0 Sep 24 00:35:05 h2177944 kernel: \[2154422.356196\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=51.91.212.80 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=54321 PROTO=TCP SPT=37989 DPT=1025 WINDOW=65535 RES=0x00 SYN URGP=0 Sep 24 00:47:42 h2177944 kernel: \[2155178.846417\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=51.91.212.80 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=54321 PROTO=TCP SPT=45521 DPT=1025 WINDOW=65535 RES=0x00 SYN URGP=0 Sep 24 01:00:15 h2177944 kernel: \[2155932.015884\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=51.91.212.80 DST=85.214.117.9 |
2019-09-24 08:47:48 |
| 61.223.6.6 | attack | Honeypot attack, port: 445, PTR: 61-223-6-6.dynamic-ip.hinet.net. |
2019-09-24 08:53:17 |
| 202.179.24.104 | attackbots | 445/tcp [2019-09-23]1pkt |
2019-09-24 08:48:34 |
| 117.7.133.251 | attack | Sep 23 04:51:03 Aberdeen-m4-Access auth.info sshd[15820]: Invalid user maxime from 117.7.133.251 port 51888 Sep 23 04:51:03 Aberdeen-m4-Access auth.info sshd[15820]: Failed password for invalid user maxime from 117.7.133.251 port 51888 ssh2 Sep 23 04:51:03 Aberdeen-m4-Access auth.notice sshguard[14407]: Attack from "117.7.133.251" on service 100 whostnameh danger 10. Sep 23 04:51:03 Aberdeen-m4-Access auth.notice sshguard[14407]: Attack from "117.7.133.251" on service 100 whostnameh danger 10. Sep 23 04:51:03 Aberdeen-m4-Access auth.notice sshguard[14407]: Attack from "117.7.133.251" on service 100 whostnameh danger 10. Sep 23 04:51:03 Aberdeen-m4-Access auth.warn sshguard[14407]: Blocking "117.7.133.251/32" for 240 secs (3 attacks in 0 secs, after 2 abuses over 988 secs.) Sep 23 04:51:03 Aberdeen-m4-Access auth.info sshd[15820]: Received disconnect from 117.7.133.251 port 51888:11: Bye Bye [preauth] Sep 23 04:51:03 Aberdeen-m4-Access auth.info sshd[15820]: Disconnected ........ ------------------------------ |
2019-09-24 08:54:28 |
| 43.249.193.116 | attackspambots | 09/23/2019-20:25:46.342421 43.249.193.116 Protocol: 6 ET SCAN Suspicious inbound to mySQL port 3306 |
2019-09-24 08:56:08 |
| 1.162.109.127 | attack | Honeypot attack, port: 23, PTR: 1-162-109-127.dynamic-ip.hinet.net. |
2019-09-24 08:29:59 |
| 27.125.137.123 | attackspambots | 23/tcp [2019-09-23]1pkt |
2019-09-24 08:40:16 |
| 138.59.99.67 | attack | Unauthorized connection attempt from IP address 138.59.99.67 on Port 445(SMB) |
2019-09-24 08:45:57 |
| 106.75.75.112 | attackbotsspam | Sep 23 13:10:54 kapalua sshd\[6477\]: Invalid user sj from 106.75.75.112 Sep 23 13:10:54 kapalua sshd\[6477\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.75.112 Sep 23 13:10:57 kapalua sshd\[6477\]: Failed password for invalid user sj from 106.75.75.112 port 55936 ssh2 Sep 23 13:13:30 kapalua sshd\[6682\]: Invalid user dohona from 106.75.75.112 Sep 23 13:13:30 kapalua sshd\[6682\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.75.112 |
2019-09-24 08:54:44 |
| 182.61.132.165 | attackbots | Sep 24 00:57:51 vmanager6029 sshd\[15546\]: Invalid user temp from 182.61.132.165 port 50416 Sep 24 00:57:51 vmanager6029 sshd\[15546\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.132.165 Sep 24 00:57:53 vmanager6029 sshd\[15546\]: Failed password for invalid user temp from 182.61.132.165 port 50416 ssh2 |
2019-09-24 08:25:09 |