城市(city): unknown
省份(region): unknown
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 214.3.211.7
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 2007
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;214.3.211.7. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020602 1800 900 604800 86400
;; Query time: 33 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 07 08:07:24 CST 2025
;; MSG SIZE rcvd: 104b'Host 7.211.3.214.in-addr.arpa not found: 2(SERVFAIL)
'server can't find 214.3.211.7.in-addr.arpa: SERVFAIL| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 192.241.237.71 | attackspambots | 44818/tcp 22/tcp 3389/tcp... [2020-02-18/04-12]31pkt,26pt.(tcp),3pt.(udp) |
2020-04-13 05:36:37 |
| 217.111.239.37 | attackbotsspam | SSH Bruteforce attack |
2020-04-13 05:40:44 |
| 191.189.30.241 | attack | Apr 12 23:44:14 vpn01 sshd[18067]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.189.30.241 Apr 12 23:44:16 vpn01 sshd[18067]: Failed password for invalid user mysql from 191.189.30.241 port 60635 ssh2 ... |
2020-04-13 05:49:15 |
| 185.216.140.31 | attackspam | 5120/tcp 5101/tcp 5062/tcp... [2020-02-12/04-12]213pkt,73pt.(tcp) |
2020-04-13 05:53:21 |
| 101.89.95.77 | attackspam | Apr 12 23:04:32 srv-ubuntu-dev3 sshd[51010]: Invalid user bmm from 101.89.95.77 Apr 12 23:04:32 srv-ubuntu-dev3 sshd[51010]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.89.95.77 Apr 12 23:04:32 srv-ubuntu-dev3 sshd[51010]: Invalid user bmm from 101.89.95.77 Apr 12 23:04:34 srv-ubuntu-dev3 sshd[51010]: Failed password for invalid user bmm from 101.89.95.77 port 53440 ssh2 Apr 12 23:08:26 srv-ubuntu-dev3 sshd[51646]: Invalid user bjconsultants from 101.89.95.77 Apr 12 23:08:26 srv-ubuntu-dev3 sshd[51646]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.89.95.77 Apr 12 23:08:26 srv-ubuntu-dev3 sshd[51646]: Invalid user bjconsultants from 101.89.95.77 Apr 12 23:08:29 srv-ubuntu-dev3 sshd[51646]: Failed password for invalid user bjconsultants from 101.89.95.77 port 49678 ssh2 Apr 12 23:12:19 srv-ubuntu-dev3 sshd[52264]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= ... |
2020-04-13 05:32:31 |
| 78.84.154.91 | attackspam | Apr 12 16:16:35 cumulus sshd[6384]: Invalid user sheila from 78.84.154.91 port 58032 Apr 12 16:16:35 cumulus sshd[6384]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.84.154.91 Apr 12 16:16:37 cumulus sshd[6384]: Failed password for invalid user sheila from 78.84.154.91 port 58032 ssh2 Apr 12 16:16:38 cumulus sshd[6384]: Received disconnect from 78.84.154.91 port 58032:11: Bye Bye [preauth] Apr 12 16:16:38 cumulus sshd[6384]: Disconnected from 78.84.154.91 port 58032 [preauth] Apr 12 16:28:34 cumulus sshd[7209]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.84.154.91 user=r.r Apr 12 16:28:36 cumulus sshd[7209]: Failed password for r.r from 78.84.154.91 port 43620 ssh2 Apr 12 16:28:36 cumulus sshd[7209]: Received disconnect from 78.84.154.91 port 43620:11: Bye Bye [preauth] Apr 12 16:28:36 cumulus sshd[7209]: Disconnected from 78.84.154.91 port 43620 [preauth] Apr 12 16:32:10 cumul........ ------------------------------- |
2020-04-13 05:18:05 |
| 192.241.238.17 | attack | 2343/tcp 1434/udp 5601/tcp... [2020-02-14/04-12]45pkt,36pt.(tcp),3pt.(udp) |
2020-04-13 05:49:26 |
| 188.166.42.120 | attackbots | Apr 12 22:52:54 srv01 sshd[414]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.42.120 user=root Apr 12 22:52:56 srv01 sshd[414]: Failed password for root from 188.166.42.120 port 47736 ssh2 Apr 12 22:56:01 srv01 sshd[637]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.42.120 user=root Apr 12 22:56:03 srv01 sshd[637]: Failed password for root from 188.166.42.120 port 45854 ssh2 Apr 12 22:59:03 srv01 sshd[875]: Invalid user ubuntu from 188.166.42.120 port 43970 ... |
2020-04-13 05:20:49 |
| 188.126.113.158 | attackspam | Apr 12 22:55:53 srv01 postfix/smtpd[32716]: warning: unknown[188.126.113.158]: SASL PLAIN authentication failed: authentication failure Apr 12 22:55:53 srv01 postfix/smtpd[32716]: warning: unknown[188.126.113.158]: SASL LOGIN authentication failed: authentication failure Apr 12 22:55:53 srv01 postfix/smtpd[32716]: warning: unknown[188.126.113.158]: SASL CRAM-MD5 authentication failed: authentication failure ... |
2020-04-13 05:46:19 |
| 66.117.12.196 | attackbots | 15248/tcp 32354/tcp 2107/tcp... [2020-04-04/12]28pkt,10pt.(tcp) |
2020-04-13 05:19:41 |
| 220.102.43.235 | attackbots | SSH connection attempt |
2020-04-13 05:37:24 |
| 49.88.112.71 | attackbotsspam | 2020-04-12T21:02:45.871531shield sshd\[3829\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.71 user=root 2020-04-12T21:02:48.018882shield sshd\[3829\]: Failed password for root from 49.88.112.71 port 25414 ssh2 2020-04-12T21:02:50.122256shield sshd\[3829\]: Failed password for root from 49.88.112.71 port 25414 ssh2 2020-04-12T21:02:52.165529shield sshd\[3829\]: Failed password for root from 49.88.112.71 port 25414 ssh2 2020-04-12T21:04:56.964983shield sshd\[4419\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.71 user=root |
2020-04-13 05:16:09 |
| 198.108.66.106 | attackspam | Apr 12 22:40:55 debian-2gb-nbg1-2 kernel: \[8983052.903221\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=198.108.66.106 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=237 ID=54321 PROTO=TCP SPT=45222 DPT=143 WINDOW=65535 RES=0x00 SYN URGP=0 |
2020-04-13 05:46:07 |
| 162.243.133.137 | attackspambots | 7001/tcp 2082/tcp 2404/tcp... [2020-03-13/04-10]35pkt,33pt.(tcp),1pt.(udp) |
2020-04-13 05:46:37 |
| 162.243.130.125 | attack | 5902/tcp 808/tcp 8080/tcp... [2020-02-13/04-10]30pkt,24pt.(tcp),3pt.(udp) |
2020-04-13 05:32:15 |