城市(city): unknown
省份(region): unknown
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 214.90.114.132
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 53368
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;214.90.114.132. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021002 1800 900 604800 86400
;; Query time: 59 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 11 11:18:11 CST 2025
;; MSG SIZE rcvd: 107Host 132.114.90.214.in-addr.arpa not found: 2(SERVFAIL)
server can't find 214.90.114.132.in-addr.arpa: SERVFAIL| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 209.67.128.156 | attackbots | SpamScore above: 10.0 |
2020-07-21 02:26:25 |
| 117.169.95.98 | attack | Lines containing failures of 117.169.95.98 Jul 20 18:57:54 zeta sshd[26135]: Did not receive identification string from 117.169.95.98 port 41072 Jul 20 18:58:51 zeta sshd[26218]: Received disconnect from 117.169.95.98 port 43996:11: Normal Shutdown, Thank you for playing [preauth] Jul 20 18:58:51 zeta sshd[26218]: Disconnected from authenticating user r.r 117.169.95.98 port 43996 [preauth] Jul 20 18:58:59 zeta sshd[26235]: Received disconnect from 117.169.95.98 port 59906:11: Normal Shutdown, Thank you for playing [preauth] Jul 20 18:58:59 zeta sshd[26235]: Disconnected from authenticating user r.r 117.169.95.98 port 59906 [preauth] Jul 20 18:59:17 zeta sshd[26250]: Received disconnect from 117.169.95.98 port 47584:11: Normal Shutdown, Thank you for playing [preauth] Jul 20 18:59:17 zeta sshd[26250]: Disconnected from authenticating user r.r 117.169.95.98 port 47584 [preauth] Jul 20 18:59:24 zeta sshd[26263]: Received disconnect from 117.169.95.98 port 35262:11: Normal S........ ------------------------------ |
2020-07-21 02:00:25 |
| 129.204.231.225 | attackspam | Jul 20 15:10:01 124388 sshd[12944]: Invalid user cw from 129.204.231.225 port 60942 Jul 20 15:10:01 124388 sshd[12944]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.231.225 Jul 20 15:10:01 124388 sshd[12944]: Invalid user cw from 129.204.231.225 port 60942 Jul 20 15:10:03 124388 sshd[12944]: Failed password for invalid user cw from 129.204.231.225 port 60942 ssh2 Jul 20 15:12:58 124388 sshd[13070]: Invalid user gnuhealth from 129.204.231.225 port 37334 |
2020-07-21 01:58:25 |
| 122.166.192.26 | attack | 2020-07-19T02:19:07.645563hostname sshd[20396]: Failed password for invalid user shanmugam from 122.166.192.26 port 58370 ssh2 ... |
2020-07-21 02:15:12 |
| 162.241.65.175 | attack | 10529/tcp 6635/tcp 782/tcp... [2020-06-22/07-20]57pkt,21pt.(tcp) |
2020-07-21 02:27:26 |
| 144.34.130.211 | attackbots | Invalid user mona from 144.34.130.211 port 53494 |
2020-07-21 01:54:43 |
| 84.191.48.210 | attackbots | Telnet Server BruteForce Attack |
2020-07-21 02:04:49 |
| 162.243.129.115 | attack | 179/tcp 47808/tcp 27017/tcp... [2020-06-25/07-20]9pkt,8pt.(tcp) |
2020-07-21 02:18:11 |
| 185.200.77.236 | attack | "XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES: |
2020-07-21 02:09:22 |
| 62.234.193.119 | attackspam | Jul 20 20:03:32 vmd36147 sshd[8719]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.193.119 Jul 20 20:03:34 vmd36147 sshd[8719]: Failed password for invalid user v from 62.234.193.119 port 54886 ssh2 ... |
2020-07-21 02:14:01 |
| 118.71.29.126 | attackbotsspam | 20/7/20@08:27:17: FAIL: Alarm-Network address from=118.71.29.126 ... |
2020-07-21 02:22:08 |
| 120.53.119.213 | attackbots | Event 'Ataque de red detectado' has occurred on device SRV-EXPLOTACION in Windows domain KAURKI on Wednesday, July 15, 2020 9:17:43 AM (GMT+00:00) Tipo de evento: Ataque de red detectado Aplicación: Kaspersky Endpoint Security para Windows Aplicación\Ruta: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Endpoint Security for Windows\ Usuario: SRV-EXPLOTACION\Administrador (Usuario activo) Componente: Protección frente a amenazas en la red Resultado\Descripción: Bloqueado Resultado\Nombre: Intrusion.Generic.CVE-2018-1273.exploit Objeto: TCP de 120.53.119.213 at 192.168.0.80:8080 |
2020-07-21 02:05:42 |
| 109.116.7.179 | attack | 81/tcp 23/tcp [2020-07-02/20]2pkt |
2020-07-21 02:03:46 |
| 61.133.194.58 | attackspambots |
|
2020-07-21 02:10:59 |
| 202.29.80.133 | attack | 2020-07-20T16:19:40.880367shield sshd\[1462\]: Invalid user materna from 202.29.80.133 port 47655 2020-07-20T16:19:40.889134shield sshd\[1462\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.80.133 2020-07-20T16:19:42.924605shield sshd\[1462\]: Failed password for invalid user materna from 202.29.80.133 port 47655 ssh2 2020-07-20T16:24:46.384248shield sshd\[3460\]: Invalid user tgu from 202.29.80.133 port 55204 2020-07-20T16:24:46.395007shield sshd\[3460\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.80.133 |
2020-07-21 02:29:16 |