城市(city): unknown
省份(region): unknown
国家(country): United States of America (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 66.93.152.249
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 56329
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;66.93.152.249. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022400 1800 900 604800 86400
;; Query time: 12 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 24 17:43:35 CST 2025
;; MSG SIZE rcvd: 106
249.152.93.66.in-addr.arpa domain name pointer dsl093-152-249.phx1.dsl.speakeasy.net.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
249.152.93.66.in-addr.arpa name = dsl093-152-249.phx1.dsl.speakeasy.net.
Authoritative answers can be found from:
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 36.84.63.252 | attackspam | Attempt to attack host OS, exploiting network vulnerabilities, on 27-09-2019 13:10:22. |
2019-09-28 01:09:55 |
| 221.214.201.225 | attackspam | (Sep 27) LEN=40 TTL=49 ID=11424 TCP DPT=8080 WINDOW=32767 SYN (Sep 27) LEN=40 TTL=49 ID=22960 TCP DPT=8080 WINDOW=48972 SYN (Sep 27) LEN=40 TTL=49 ID=31558 TCP DPT=8080 WINDOW=48972 SYN (Sep 27) LEN=40 TTL=49 ID=57347 TCP DPT=8080 WINDOW=13357 SYN (Sep 27) LEN=40 TTL=49 ID=24546 TCP DPT=8080 WINDOW=48972 SYN (Sep 27) LEN=40 TTL=49 ID=57712 TCP DPT=8080 WINDOW=54308 SYN (Sep 26) LEN=40 TTL=49 ID=47100 TCP DPT=8080 WINDOW=48532 SYN (Sep 26) LEN=40 TTL=49 ID=61947 TCP DPT=8080 WINDOW=48972 SYN (Sep 25) LEN=40 TTL=49 ID=1254 TCP DPT=8080 WINDOW=15108 SYN (Sep 25) LEN=40 TTL=49 ID=35329 TCP DPT=8080 WINDOW=54308 SYN (Sep 24) LEN=40 TTL=49 ID=42551 TCP DPT=8080 WINDOW=13357 SYN (Sep 24) LEN=40 TTL=48 ID=4490 TCP DPT=8080 WINDOW=54308 SYN (Sep 24) LEN=40 TTL=48 ID=22383 TCP DPT=8080 WINDOW=48532 SYN (Sep 24) LEN=40 TTL=48 ID=57829 TCP DPT=8080 WINDOW=32767 SYN |
2019-09-28 01:01:51 |
| 175.139.242.49 | attack | Sep 27 18:04:15 meumeu sshd[30275]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.139.242.49 Sep 27 18:04:16 meumeu sshd[30275]: Failed password for invalid user qbf77101 from 175.139.242.49 port 32233 ssh2 Sep 27 18:08:54 meumeu sshd[30916]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.139.242.49 ... |
2019-09-28 01:35:07 |
| 36.85.190.57 | attackbotsspam | Attempt to attack host OS, exploiting network vulnerabilities, on 27-09-2019 13:10:23. |
2019-09-28 01:06:41 |
| 36.73.183.181 | attackbotsspam | Attempt to attack host OS, exploiting network vulnerabilities, on 27-09-2019 13:10:20. |
2019-09-28 01:14:31 |
| 125.212.247.15 | attackspam | SSH brutforce |
2019-09-28 01:39:58 |
| 47.30.254.81 | attackspam | Attempt to attack host OS, exploiting network vulnerabilities, on 27-09-2019 13:10:30. |
2019-09-28 00:55:56 |
| 39.37.223.191 | attackbotsspam | Attempt to attack host OS, exploiting network vulnerabilities, on 27-09-2019 13:10:25. |
2019-09-28 01:03:16 |
| 14.252.57.69 | attackbotsspam | Attempt to attack host OS, exploiting network vulnerabilities, on 27-09-2019 13:10:19. |
2019-09-28 01:16:53 |
| 49.204.228.152 | attackspam | Attempt to attack host OS, exploiting network vulnerabilities, on 27-09-2019 13:10:32. |
2019-09-28 00:52:09 |
| 79.137.41.208 | attackspambots | WordPress wp-login brute force :: 79.137.41.208 0.192 BYPASS [27/Sep/2019:22:10:00 1000] [censored_1] "POST /wp-login.php HTTP/1.1" 200 3972 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2019-09-28 01:36:45 |
| 95.170.203.226 | attackspambots | Sep 27 17:51:48 MainVPS sshd[6790]: Invalid user sandbox from 95.170.203.226 port 32832 Sep 27 17:51:48 MainVPS sshd[6790]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.170.203.226 Sep 27 17:51:48 MainVPS sshd[6790]: Invalid user sandbox from 95.170.203.226 port 32832 Sep 27 17:51:50 MainVPS sshd[6790]: Failed password for invalid user sandbox from 95.170.203.226 port 32832 ssh2 Sep 27 17:56:26 MainVPS sshd[7118]: Invalid user pp from 95.170.203.226 port 53788 ... |
2019-09-28 01:23:35 |
| 158.69.210.117 | attack | Sep 27 18:11:42 SilenceServices sshd[9858]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=158.69.210.117 Sep 27 18:11:45 SilenceServices sshd[9858]: Failed password for invalid user carolina from 158.69.210.117 port 54252 ssh2 Sep 27 18:16:11 SilenceServices sshd[12724]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=158.69.210.117 |
2019-09-28 01:09:00 |
| 39.52.85.185 | attackbotsspam | Attempt to attack host OS, exploiting network vulnerabilities, on 27-09-2019 13:10:25. |
2019-09-28 01:02:38 |
| 108.58.41.139 | attack | Sep 27 19:10:11 vps647732 sshd[19800]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=108.58.41.139 Sep 27 19:10:13 vps647732 sshd[19800]: Failed password for invalid user oxy from 108.58.41.139 port 2913 ssh2 ... |
2019-09-28 01:30:20 |