城市(city): unknown
省份(region): unknown
国家(country): United States of America (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 214.200.242.74
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 38604
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;214.200.242.74. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020901 1800 900 604800 86400
;; Query time: 11 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 10 05:21:22 CST 2025
;; MSG SIZE rcvd: 107b'Host 74.242.200.214.in-addr.arpa not found: 2(SERVFAIL)
'server can't find 214.200.242.74.in-addr.arpa: SERVFAIL| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 5.39.217.214 | attack | Multiport scan 6 ports : 161 520 3702 5353(x2) 10001 32414 |
2020-02-21 07:21:46 |
| 140.246.182.127 | attackbotsspam | Feb 21 04:12:58 gw1 sshd[30701]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.182.127 Feb 21 04:13:00 gw1 sshd[30701]: Failed password for invalid user administrator from 140.246.182.127 port 56854 ssh2 ... |
2020-02-21 07:33:08 |
| 185.53.88.113 | attack | Feb 20 23:49:13 vps339862 kernel: \[1457868.812053\] \[iptables\] PORT DENIED: IN=eth0 OUT= MAC=fa:16:3e:65:a1:f6:06:39:8f:aa:3b:a2:08:00 SRC=185.53.88.113 DST=51.254.206.43 LEN=443 TOS=0x00 PREC=0x00 TTL=54 ID=28765 DF PROTO=UDP SPT=7230 DPT=5062 LEN=423 Feb 20 23:49:13 vps339862 kernel: \[1457868.812079\] \[iptables\] PORT DENIED: IN=eth0 OUT= MAC=fa:16:3e:65:a1:f6:06:39:8f:aa:3b:a2:08:00 SRC=185.53.88.113 DST=51.254.206.43 LEN=442 TOS=0x00 PREC=0x00 TTL=54 ID=28766 DF PROTO=UDP SPT=7230 DPT=5063 LEN=422 Feb 20 23:49:13 vps339862 kernel: \[1457868.812155\] \[iptables\] PORT DENIED: IN=eth0 OUT= MAC=fa:16:3e:65:a1:f6:06:39:8f:aa:3b:a2:08:00 SRC=185.53.88.113 DST=51.254.206.43 LEN=439 TOS=0x00 PREC=0x00 TTL=54 ID=28767 DF PROTO=UDP SPT=7230 DPT=5064 LEN=419 Feb 20 23:49:13 vps339862 kernel: \[1457868.812204\] \[iptables\] PORT DENIED: IN=eth0 OUT= MAC=fa:16:3e:65:a1:f6:06:39:8f:aa:3b:a2:08:00 SRC=185.53.88.113 DST=51.254.206.43 LEN=443 TOS=0x00 PREC=0x00 TTL=54 ID=28768 DF PROTO=UDP ... |
2020-02-21 07:29:10 |
| 220.142.68.201 | attackbotsspam | Scanning random ports - tries to find possible vulnerable services |
2020-02-21 07:54:48 |
| 115.79.37.202 | attackbots | Automatic report - Port Scan Attack |
2020-02-21 07:43:59 |
| 106.12.2.223 | attackbots | Feb 21 00:33:05 www sshd\[56055\]: Invalid user tomcat from 106.12.2.223 Feb 21 00:33:05 www sshd\[56055\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.2.223 Feb 21 00:33:08 www sshd\[56055\]: Failed password for invalid user tomcat from 106.12.2.223 port 50724 ssh2 ... |
2020-02-21 07:37:45 |
| 82.77.68.79 | attackspambots | Unauthorised access (Feb 20) SRC=82.77.68.79 LEN=44 TTL=56 ID=10017 TCP DPT=23 WINDOW=13228 SYN Unauthorised access (Feb 19) SRC=82.77.68.79 LEN=44 TTL=56 ID=5966 TCP DPT=23 WINDOW=32284 SYN |
2020-02-21 07:40:36 |
| 147.102.46.169 | attack | Feb 20 22:28:19 pl2server sshd[1192]: Invalid user pi from 147.102.46.169 Feb 20 22:28:19 pl2server sshd[1195]: Invalid user pi from 147.102.46.169 Feb 20 22:28:19 pl2server sshd[1195]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=147.102.46.169 Feb 20 22:28:19 pl2server sshd[1192]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=147.102.46.169 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=147.102.46.169 |
2020-02-21 07:35:59 |
| 223.207.219.15 | attackspam | Scanning random ports - tries to find possible vulnerable services |
2020-02-21 07:45:59 |
| 222.254.76.73 | attack | Scanning random ports - tries to find possible vulnerable services |
2020-02-21 07:49:31 |
| 223.17.74.66 | attackbotsspam | Scanning random ports - tries to find possible vulnerable services |
2020-02-21 07:48:01 |
| 49.146.8.8 | attackbots | Lines containing failures of 49.146.8.8 Feb 20 22:26:21 shared11 sshd[24925]: Invalid user pocAdmin from 49.146.8.8 port 36504 Feb 20 22:26:22 shared11 sshd[24925]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.146.8.8 Feb 20 22:26:24 shared11 sshd[24925]: Failed password for invalid user pocAdmin from 49.146.8.8 port 36504 ssh2 Feb 20 22:26:24 shared11 sshd[24925]: Connection closed by invalid user pocAdmin 49.146.8.8 port 36504 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=49.146.8.8 |
2020-02-21 07:26:00 |
| 148.241.97.166 | attack | SSH/22 MH Probe, BF, Hack - |
2020-02-21 07:34:44 |
| 187.18.115.25 | attackspambots | Feb 20 19:47:53 firewall sshd[3473]: Invalid user Michelle from 187.18.115.25 Feb 20 19:47:55 firewall sshd[3473]: Failed password for invalid user Michelle from 187.18.115.25 port 49188 ssh2 Feb 20 19:56:03 firewall sshd[3622]: Invalid user bruno from 187.18.115.25 ... |
2020-02-21 07:35:44 |
| 99.230.88.203 | attack | DATE:2020-02-20 22:47:06, IP:99.230.88.203, PORT:telnet - Telnet brute force auth on a honeypot server (epe-dc) |
2020-02-21 07:33:22 |