城市(city): unknown
省份(region): unknown
国家(country): United States of America (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 47.14.142.206
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 17964
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;47.14.142.206. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021600 1800 900 604800 86400
;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 16 22:43:32 CST 2025
;; MSG SIZE rcvd: 106206.142.14.47.in-addr.arpa domain name pointer syn-047-014-142-206.res.spectrum.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
206.142.14.47.in-addr.arpa name = syn-047-014-142-206.res.spectrum.com.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 170.84.224.240 | attackspambots | Jun 2 16:07:20 vps sshd[34420]: Failed password for invalid user PLAINtext\r from 170.84.224.240 port 45633 ssh2 Jun 2 16:11:50 vps sshd[56705]: Invalid user huawei123\r from 170.84.224.240 port 48843 Jun 2 16:11:50 vps sshd[56705]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.84.224.240 Jun 2 16:11:52 vps sshd[56705]: Failed password for invalid user huawei123\r from 170.84.224.240 port 48843 ssh2 Jun 2 16:16:14 vps sshd[77225]: Invalid user 8gwnpo2n\r from 170.84.224.240 port 52053 ... |
2020-06-02 22:33:03 |
| 49.235.87.213 | attackspambots | Jun 2 08:06:40 Tower sshd[7383]: Connection from 49.235.87.213 port 51934 on 192.168.10.220 port 22 rdomain "" Jun 2 08:06:42 Tower sshd[7383]: Failed password for root from 49.235.87.213 port 51934 ssh2 Jun 2 08:06:43 Tower sshd[7383]: Received disconnect from 49.235.87.213 port 51934:11: Bye Bye [preauth] Jun 2 08:06:43 Tower sshd[7383]: Disconnected from authenticating user root 49.235.87.213 port 51934 [preauth] |
2020-06-02 22:18:45 |
| 178.33.169.134 | attack | Lines containing failures of 178.33.169.134 Jun 1 09:10:55 shared03 sshd[16399]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.33.169.134 user=r.r Jun 1 09:10:58 shared03 sshd[16399]: Failed password for r.r from 178.33.169.134 port 47797 ssh2 Jun 1 09:10:58 shared03 sshd[16399]: Received disconnect from 178.33.169.134 port 47797:11: Bye Bye [preauth] Jun 1 09:10:58 shared03 sshd[16399]: Disconnected from authenticating user r.r 178.33.169.134 port 47797 [preauth] Jun 1 09:19:47 shared03 sshd[19180]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.33.169.134 user=r.r Jun 1 09:19:48 shared03 sshd[19180]: Failed password for r.r from 178.33.169.134 port 45281 ssh2 Jun 1 09:19:48 shared03 sshd[19180]: Received disconnect from 178.33.169.134 port 45281:11: Bye Bye [preauth] Jun 1 09:19:48 shared03 sshd[19180]: Disconnected from authenticating user r.r 178.33.169.134 port 45281........ ------------------------------ |
2020-06-02 22:53:43 |
| 109.159.194.226 | attack | Jun 2 14:02:54 ns381471 sshd[11788]: Failed password for root from 109.159.194.226 port 50244 ssh2 |
2020-06-02 22:38:47 |
| 185.220.101.134 | attackspam | xn--netzfundstckderwoche-yec.de 185.220.101.134 [02/Jun/2020:14:06:53 +0200] "POST /xmlrpc.php HTTP/1.0" 301 537 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.92 Safari/537.36" www.xn--netzfundstckderwoche-yec.de 185.220.101.134 [02/Jun/2020:14:06:56 +0200] "POST /xmlrpc.php HTTP/1.0" 200 3547 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.92 Safari/537.36" |
2020-06-02 22:20:14 |
| 212.92.104.55 | attackbots | RDP brute forcing (r) |
2020-06-02 22:45:37 |
| 165.22.245.231 | attackbots | Jun 2 14:06:29 karger wordpress(buerg)[23707]: Authentication attempt for unknown user domi from 165.22.245.231 Jun 2 14:06:30 karger wordpress(buerg)[23707]: XML-RPC authentication attempt for unknown user [login] from 165.22.245.231 ... |
2020-06-02 22:42:16 |
| 130.162.71.237 | attackspambots | 2020-06-02 14:11:25,618 fail2ban.actions [937]: NOTICE [sshd] Ban 130.162.71.237 2020-06-02 14:51:52,933 fail2ban.actions [937]: NOTICE [sshd] Ban 130.162.71.237 2020-06-02 15:29:36,767 fail2ban.actions [937]: NOTICE [sshd] Ban 130.162.71.237 2020-06-02 16:08:15,991 fail2ban.actions [937]: NOTICE [sshd] Ban 130.162.71.237 2020-06-02 16:47:06,174 fail2ban.actions [937]: NOTICE [sshd] Ban 130.162.71.237 ... |
2020-06-02 22:50:35 |
| 196.52.43.120 | attackspambots | Automatic report - Banned IP Access |
2020-06-02 22:13:28 |
| 87.251.74.141 | attackspam | Blocked until: 2020.07.19 10:28:24 TCPMSS LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=1436 PROTO=TCP WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-06-02 22:56:46 |
| 119.28.21.55 | attackbots | 2020-06-02T06:53:18.054514morrigan.ad5gb.com sshd[22369]: Failed password for root from 119.28.21.55 port 48366 ssh2 2020-06-02T06:53:18.889469morrigan.ad5gb.com sshd[22369]: Disconnected from authenticating user root 119.28.21.55 port 48366 [preauth] 2020-06-02T07:06:20.833502morrigan.ad5gb.com sshd[27739]: Connection closed by 119.28.21.55 port 52388 [preauth] |
2020-06-02 22:50:49 |
| 149.56.121.105 | attackspambots | Lines containing failures of 149.56.121.105 Jun 1 19:11:57 shared03 sshd[27069]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.56.121.105 user=r.r Jun 1 19:11:59 shared03 sshd[27069]: Failed password for r.r from 149.56.121.105 port 55974 ssh2 Jun 1 19:11:59 shared03 sshd[27069]: Received disconnect from 149.56.121.105 port 55974:11: Bye Bye [preauth] Jun 1 19:11:59 shared03 sshd[27069]: Disconnected from authenticating user r.r 149.56.121.105 port 55974 [preauth] Jun 1 19:25:17 shared03 sshd[31576]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.56.121.105 user=r.r Jun 1 19:25:19 shared03 sshd[31576]: Failed password for r.r from 149.56.121.105 port 60152 ssh2 Jun 1 19:25:19 shared03 sshd[31576]: Received disconnect from 149.56.121.105 port 60152:11: Bye Bye [preauth] Jun 1 19:25:19 shared03 sshd[31576]: Disconnected from authenticating user r.r 149.56.121.105 port 60152........ ------------------------------ |
2020-06-02 22:37:42 |
| 129.28.180.174 | attack | SSH Brute-Force Attack |
2020-06-02 22:43:54 |
| 144.34.210.56 | attackspam | May 27 07:26:10 v2202003116398111542 sshd[3419]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.34.210.56 user=root |
2020-06-02 22:35:38 |
| 193.9.46.63 | attack | Jun 1 16:55:10 UTC__SANYALnet-Labs__cac14 sshd[27186]: Connection from 193.9.46.63 port 37164 on 64.137.176.112 port 22 Jun 1 16:55:12 UTC__SANYALnet-Labs__cac14 sshd[27186]: User r.r from 193.9.46.63 not allowed because not listed in AllowUsers Jun 1 16:55:12 UTC__SANYALnet-Labs__cac14 sshd[27186]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.9.46.63 user=r.r Jun 1 16:55:14 UTC__SANYALnet-Labs__cac14 sshd[27186]: Failed password for invalid user r.r from 193.9.46.63 port 37164 ssh2 Jun 1 16:55:14 UTC__SANYALnet-Labs__cac14 sshd[27186]: Received disconnect from 193.9.46.63: 11: Bye Bye [preauth] Jun 1 16:58:26 UTC__SANYALnet-Labs__cac14 sshd[27234]: Connection from 193.9.46.63 port 51278 on 64.137.176.112 port 22 Jun 1 16:58:27 UTC__SANYALnet-Labs__cac14 sshd[27234]: User r.r from 193.9.46.63 not allowed because not listed in AllowUsers Jun 1 16:58:27 UTC__SANYALnet-Labs__cac14 sshd[27234]: pam_unix(sshd:auth): aut........ ------------------------------- |
2020-06-02 22:30:57 |