城市(city): unknown
省份(region): unknown
国家(country): Puerto Rico
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 64.89.205.254
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 13162
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;64.89.205.254. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021400 1800 900 604800 86400
;; Query time: 35 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 14 23:58:14 CST 2025
;; MSG SIZE rcvd: 106254.205.89.64.in-addr.arpa domain name pointer 64-89-205-254.static.wntpr.net.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
254.205.89.64.in-addr.arpa name = 64-89-205-254.static.wntpr.net.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 125.164.114.149 | attackbotsspam | Unauthorized connection attempt from IP address 125.164.114.149 on Port 445(SMB) |
2019-08-31 16:00:43 |
| 60.14.198.230 | attack | Unauthorised access (Aug 31) SRC=60.14.198.230 LEN=40 TTL=49 ID=53498 TCP DPT=8080 WINDOW=52036 SYN Unauthorised access (Aug 31) SRC=60.14.198.230 LEN=40 TTL=49 ID=12688 TCP DPT=8080 WINDOW=59778 SYN Unauthorised access (Aug 30) SRC=60.14.198.230 LEN=40 TTL=49 ID=63837 TCP DPT=8080 WINDOW=15186 SYN Unauthorised access (Aug 29) SRC=60.14.198.230 LEN=40 TTL=49 ID=51202 TCP DPT=8080 WINDOW=15186 SYN |
2019-08-31 16:19:52 |
| 108.36.94.38 | attackspambots | 2019-08-31T09:33:32.863543 sshd[29499]: Invalid user ams from 108.36.94.38 port 30471 2019-08-31T09:33:32.878386 sshd[29499]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=108.36.94.38 2019-08-31T09:33:32.863543 sshd[29499]: Invalid user ams from 108.36.94.38 port 30471 2019-08-31T09:33:34.785755 sshd[29499]: Failed password for invalid user ams from 108.36.94.38 port 30471 ssh2 2019-08-31T09:37:40.681637 sshd[29555]: Invalid user mdestroy from 108.36.94.38 port 50700 ... |
2019-08-31 16:01:13 |
| 222.188.29.56 | attackspambots | Scanning random ports - tries to find possible vulnerable services |
2019-08-31 16:20:18 |
| 219.90.67.89 | attack | ssh failed login |
2019-08-31 16:40:48 |
| 45.236.188.4 | attackspambots | Aug 31 03:46:26 OPSO sshd\[29526\]: Invalid user openldap from 45.236.188.4 port 45516 Aug 31 03:46:26 OPSO sshd\[29526\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.236.188.4 Aug 31 03:46:27 OPSO sshd\[29526\]: Failed password for invalid user openldap from 45.236.188.4 port 45516 ssh2 Aug 31 03:51:22 OPSO sshd\[30184\]: Invalid user popa3d from 45.236.188.4 port 33184 Aug 31 03:51:22 OPSO sshd\[30184\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.236.188.4 |
2019-08-31 16:26:38 |
| 132.255.148.98 | attack | email spam |
2019-08-31 16:21:50 |
| 125.161.137.2 | attackbots | Aug 30 15:58:16 tdfoods sshd\[7448\]: Invalid user tmp from 125.161.137.2 Aug 30 15:58:16 tdfoods sshd\[7448\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.161.137.2 Aug 30 15:58:18 tdfoods sshd\[7448\]: Failed password for invalid user tmp from 125.161.137.2 port 57421 ssh2 Aug 30 16:03:40 tdfoods sshd\[7914\]: Invalid user hcat from 125.161.137.2 Aug 30 16:03:40 tdfoods sshd\[7914\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.161.137.2 |
2019-08-31 16:47:47 |
| 31.163.56.147 | attackspambots | Aug 31 03:32:14 nginx sshd[4188]: error: maximum authentication attempts exceeded for root from 31.163.56.147 port 48676 ssh2 [preauth] Aug 31 03:32:14 nginx sshd[4188]: Disconnecting: Too many authentication failures [preauth] |
2019-08-31 16:06:10 |
| 51.68.97.191 | attack | Aug 30 22:34:52 lcprod sshd\[29555\]: Invalid user laur from 51.68.97.191 Aug 30 22:34:52 lcprod sshd\[29555\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip191.ip-51-68-97.eu Aug 30 22:34:54 lcprod sshd\[29555\]: Failed password for invalid user laur from 51.68.97.191 port 35196 ssh2 Aug 30 22:36:55 lcprod sshd\[29727\]: Invalid user pop3 from 51.68.97.191 Aug 30 22:36:55 lcprod sshd\[29727\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip191.ip-51-68-97.eu |
2019-08-31 16:52:28 |
| 68.183.237.224 | attackbotsspam | 2019-08-31T04:55:34.822739abusebot-6.cloudsearch.cf sshd\[19433\]: Invalid user cs from 68.183.237.224 port 39838 |
2019-08-31 16:51:58 |
| 23.129.64.168 | attackspam | $f2bV_matches |
2019-08-31 16:35:48 |
| 217.182.73.148 | attack | Invalid user mint from 217.182.73.148 port 37000 |
2019-08-31 16:16:38 |
| 14.225.17.9 | attackspam | Aug 31 05:45:51 [host] sshd[5983]: Invalid user teamspeak3-user from 14.225.17.9 Aug 31 05:45:51 [host] sshd[5983]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.225.17.9 Aug 31 05:45:53 [host] sshd[5983]: Failed password for invalid user teamspeak3-user from 14.225.17.9 port 49362 ssh2 |
2019-08-31 15:56:22 |
| 222.76.187.33 | attackspam | 22/tcp [2019-08-31]1pkt |
2019-08-31 16:07:12 |