城市(city): Mesquite
省份(region): Texas
国家(country): United States
运营商(isp): AT&T
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 70.129.245.214
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 37771
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;70.129.245.214. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021902 1800 900 604800 86400
;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 20 08:15:52 CST 2025
;; MSG SIZE rcvd: 107
Host 214.245.129.70.in-addr.arpa not found: 2(SERVFAIL)
server can't find 70.129.245.214.in-addr.arpa: SERVFAIL
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 134.209.150.94 | attackspam |
|
2020-09-07 02:49:47 |
| 212.33.199.121 | attack | SSH Brute-Forcing (server1) |
2020-09-07 03:10:18 |
| 182.105.98.2 | attackspam | (ftpd) Failed FTP login from 182.105.98.2 (CN/China/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Sep 6 18:11:15 ir1 pure-ftpd: (?@182.105.98.2) [WARNING] Authentication failed for user [anonymous] |
2020-09-07 03:27:47 |
| 64.227.66.252 | attackbots | Honeypot attack, port: 5555, PTR: PTR record not found |
2020-09-07 03:24:52 |
| 121.254.100.149 | attackspambots | 5555/tcp [2020-09-06]1pkt |
2020-09-07 02:56:49 |
| 177.98.143.64 | attackspambots | port scan and connect, tcp 23 (telnet) |
2020-09-07 03:28:16 |
| 112.85.42.181 | attackbots | Sep 6 21:10:16 vpn01 sshd[18821]: Failed password for root from 112.85.42.181 port 24582 ssh2 Sep 6 21:10:29 vpn01 sshd[18821]: error: maximum authentication attempts exceeded for root from 112.85.42.181 port 24582 ssh2 [preauth] ... |
2020-09-07 03:14:44 |
| 185.81.157.220 | attackbots | WordPress vulnerability sniffing (looking for /wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php) |
2020-09-07 03:27:15 |
| 198.100.146.65 | attack | Sep 6 17:36:34 marvibiene sshd[15339]: Failed password for root from 198.100.146.65 port 41580 ssh2 Sep 6 17:40:14 marvibiene sshd[15670]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.100.146.65 Sep 6 17:40:16 marvibiene sshd[15670]: Failed password for invalid user melonero from 198.100.146.65 port 45798 ssh2 |
2020-09-07 02:54:37 |
| 185.220.101.216 | attack | Multiple SSH authentication failures from 185.220.101.216 |
2020-09-07 03:03:40 |
| 94.237.76.134 | attackbots | Lines containing failures of 94.237.76.134 Sep 4 14:13:31 dns01 sshd[7571]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.237.76.134 user=r.r Sep 4 14:13:32 dns01 sshd[7571]: Failed password for r.r from 94.237.76.134 port 45324 ssh2 Sep 4 14:13:33 dns01 sshd[7571]: Received disconnect from 94.237.76.134 port 45324:11: Bye Bye [preauth] Sep 4 14:13:33 dns01 sshd[7571]: Disconnected from authenticating user r.r 94.237.76.134 port 45324 [preauth] Sep 4 14:33:00 dns01 sshd[11460]: Invalid user lina from 94.237.76.134 port 46330 Sep 4 14:33:00 dns01 sshd[11460]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.237.76.134 Sep 4 14:33:02 dns01 sshd[11460]: Failed password for invalid user lina from 94.237.76.134 port 46330 ssh2 Sep 4 14:33:03 dns01 sshd[11460]: Received disconnect from 94.237.76.134 port 46330:11: Bye Bye [preauth] Sep 4 14:33:03 dns01 sshd[11460]: Disconnected fro........ ------------------------------ |
2020-09-07 02:55:49 |
| 113.119.135.147 | attack | 2020-09-05T20:06:59.844340correo.[domain] sshd[1849]: Failed password for root from 113.119.135.147 port 8500 ssh2 2020-09-05T20:09:52.035774correo.[domain] sshd[2141]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.119.135.147 user=root 2020-09-05T20:09:54.095736correo.[domain] sshd[2141]: Failed password for root from 113.119.135.147 port 8501 ssh2 ... |
2020-09-07 03:15:23 |
| 49.50.236.213 | attackspam | Unauthorized connection attempt from IP address 49.50.236.213 on Port 445(SMB) |
2020-09-07 03:26:58 |
| 116.72.92.148 | attackspambots | TCP Port Scanning |
2020-09-07 03:24:04 |
| 175.213.178.217 | attack | Honeypot attack, port: 81, PTR: PTR record not found |
2020-09-07 02:54:22 |