城市(city): Los Angeles
省份(region): California
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 38.91.118.114
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 1701
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;38.91.118.114. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025090700 1800 900 604800 86400
;; Query time: 15 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Sep 07 20:00:28 CST 2025
;; MSG SIZE rcvd: 106Host 114.118.91.38.in-addr.arpa not found: 2(SERVFAIL)
server can't find 38.91.118.114.in-addr.arpa: SERVFAIL| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 83.220.85.34 | attack | [portscan] Port scan |
2019-12-20 22:42:20 |
| 191.98.205.37 | attackbotsspam | [munged]::80 191.98.205.37 - - [20/Dec/2019:07:22:20 +0100] "POST /[munged]: HTTP/1.1" 200 5390 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0" [munged]::80 191.98.205.37 - - [20/Dec/2019:07:22:20 +0100] "POST /[munged]: HTTP/1.1" 200 5389 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0" [munged]::80 191.98.205.37 - - [20/Dec/2019:07:22:21 +0100] "POST /[munged]: HTTP/1.1" 200 5389 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0" [munged]::80 191.98.205.37 - - [20/Dec/2019:07:22:22 +0100] "POST /[munged]: HTTP/1.1" 200 5388 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0" [munged]::80 191.98.205.37 - - [20/Dec/2019:07:22:23 +0100] "POST /[munged]: HTTP/1.1" 200 5388 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0" [munged]::80 191.98.205.37 - - [20/Dec/2019:07:22:24 +0100] |
2019-12-20 22:53:15 |
| 73.64.87.211 | attackspam | Invalid user brake from 73.64.87.211 port 56202 |
2019-12-20 22:37:49 |
| 45.55.86.19 | attackbots | Dec 20 04:49:46 php1 sshd\[4703\]: Invalid user griswold from 45.55.86.19 Dec 20 04:49:46 php1 sshd\[4703\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.86.19 Dec 20 04:49:48 php1 sshd\[4703\]: Failed password for invalid user griswold from 45.55.86.19 port 45235 ssh2 Dec 20 04:55:25 php1 sshd\[5570\]: Invalid user engeli from 45.55.86.19 Dec 20 04:55:25 php1 sshd\[5570\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.86.19 |
2019-12-20 23:03:00 |
| 190.64.68.178 | attack | Dec 20 19:55:24 gw1 sshd[12079]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.64.68.178 Dec 20 19:55:27 gw1 sshd[12079]: Failed password for invalid user nfs from 190.64.68.178 port 23617 ssh2 ... |
2019-12-20 23:00:16 |
| 82.64.62.224 | attackspam | Fail2Ban - SSH Bruteforce Attempt |
2019-12-20 22:51:46 |
| 132.145.170.174 | attackspam | Invalid user saram from 132.145.170.174 port 57741 |
2019-12-20 22:55:14 |
| 218.92.0.155 | attackbotsspam | --- report --- Dec 20 11:53:31 sshd: Connection from 218.92.0.155 port 28285 Dec 20 11:53:34 sshd: Failed password for root from 218.92.0.155 port 28285 ssh2 Dec 20 11:53:36 sshd: Received disconnect from 218.92.0.155: 11: [preauth] |
2019-12-20 23:17:19 |
| 115.238.95.194 | attack | Dec 20 04:46:22 hanapaa sshd\[1340\]: Invalid user guest from 115.238.95.194 Dec 20 04:46:22 hanapaa sshd\[1340\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.238.95.194 Dec 20 04:46:25 hanapaa sshd\[1340\]: Failed password for invalid user guest from 115.238.95.194 port 3029 ssh2 Dec 20 04:55:27 hanapaa sshd\[2368\]: Invalid user tonglink from 115.238.95.194 Dec 20 04:55:27 hanapaa sshd\[2368\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.238.95.194 |
2019-12-20 22:59:53 |
| 165.227.113.2 | attackspambots | $f2bV_matches |
2019-12-20 22:56:40 |
| 184.105.143.204 | attack | Portscan or hack attempt detected by psad/fwsnort |
2019-12-20 22:34:47 |
| 79.99.107.218 | attack | Attempt to attack host OS, exploiting network vulnerabilities, on 20-12-2019 14:55:14. |
2019-12-20 23:14:09 |
| 40.92.40.39 | attackspambots | Dec 20 17:55:18 debian-2gb-vpn-nbg1-1 kernel: [1232077.692728] [UFW BLOCK] IN=eth0 OUT= MAC=96:00:00:38:96:44:d2:74:7f:6e:37:e3:08:00 SRC=40.92.40.39 DST=78.46.192.101 LEN=52 TOS=0x02 PREC=0x00 TTL=106 ID=26053 DF PROTO=TCP SPT=11744 DPT=25 WINDOW=8192 RES=0x00 CWR ECE SYN URGP=0 |
2019-12-20 23:07:38 |
| 40.92.67.19 | attack | Dec 20 09:22:50 debian-2gb-vpn-nbg1-1 kernel: [1201330.113746] [UFW BLOCK] IN=eth0 OUT= MAC=96:00:00:38:96:44:d2:74:7f:6e:37:e3:08:00 SRC=40.92.67.19 DST=78.46.192.101 LEN=40 TOS=0x00 PREC=0x00 TTL=238 ID=21302 DF PROTO=TCP SPT=5006 DPT=25 WINDOW=0 RES=0x00 ACK RST URGP=0 |
2019-12-20 22:35:19 |
| 222.186.180.9 | attackspam | Dec 20 16:02:47 MK-Soft-VM7 sshd[17280]: Failed password for root from 222.186.180.9 port 47632 ssh2 Dec 20 16:02:50 MK-Soft-VM7 sshd[17280]: Failed password for root from 222.186.180.9 port 47632 ssh2 ... |
2019-12-20 23:06:31 |