城市(city): New Orleans
省份(region): Louisiana
国家(country): United States
运营商(isp): Softcom Internet Communications, Inc
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 70.168.45.236
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 17139
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;70.168.45.236. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022000 1800 900 604800 86400
;; Query time: 43 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 20 15:56:23 CST 2025
;; MSG SIZE rcvd: 106Host 236.45.168.70.in-addr.arpa not found: 2(SERVFAIL)
;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server: 183.60.82.98
Address: 183.60.82.98#53
** server can't find 236.45.168.70.in-addr.arpa: SERVFAIL
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 122.200.93.11 | attackbots | Feb 24 21:45:30 XXX sshd[8791]: Invalid user tom from 122.200.93.11 port 51306 |
2020-02-25 08:04:21 |
| 106.13.190.122 | attackbotsspam | Feb 25 00:24:50 pornomens sshd\[8397\]: Invalid user ken from 106.13.190.122 port 34422 Feb 25 00:24:50 pornomens sshd\[8397\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.190.122 Feb 25 00:24:52 pornomens sshd\[8397\]: Failed password for invalid user ken from 106.13.190.122 port 34422 ssh2 ... |
2020-02-25 08:15:13 |
| 59.44.12.54 | attack | Port probing on unauthorized port 23 |
2020-02-25 08:22:23 |
| 218.104.146.29 | attack | Lines containing failures of 218.104.146.29 Feb 25 01:02:41 shared09 sshd[22836]: Invalid user alexis from 218.104.146.29 port 35553 Feb 25 01:02:41 shared09 sshd[22836]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.104.146.29 Feb 25 01:02:43 shared09 sshd[22836]: Failed password for invalid user alexis from 218.104.146.29 port 35553 ssh2 Feb 25 01:02:44 shared09 sshd[22836]: Received disconnect from 218.104.146.29 port 35553:11: Bye Bye [preauth] Feb 25 01:02:44 shared09 sshd[22836]: Disconnected from invalid user alexis 218.104.146.29 port 35553 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=218.104.146.29 |
2020-02-25 08:27:41 |
| 222.82.253.106 | attack | Lines containing failures of 222.82.253.106 Feb 24 22:14:21 jarvis sshd[18185]: Invalid user cod4 from 222.82.253.106 port 38882 Feb 24 22:14:21 jarvis sshd[18185]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.82.253.106 Feb 24 22:14:22 jarvis sshd[18185]: Failed password for invalid user cod4 from 222.82.253.106 port 38882 ssh2 Feb 24 22:14:23 jarvis sshd[18185]: Received disconnect from 222.82.253.106 port 38882:11: Bye Bye [preauth] Feb 24 22:14:23 jarvis sshd[18185]: Disconnected from invalid user cod4 222.82.253.106 port 38882 [preauth] Feb 24 22:19:52 jarvis sshd[19327]: Invalid user marco from 222.82.253.106 port 39270 Feb 24 22:19:52 jarvis sshd[19327]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.82.253.106 Feb 24 22:19:53 jarvis sshd[19327]: Failed password for invalid user marco from 222.82.253.106 port 39270 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view |
2020-02-25 08:03:05 |
| 181.90.252.26 | attackspam | Honeypot attack, port: 5555, PTR: host26.181-90-252.telecom.net.ar. |
2020-02-25 08:15:49 |
| 139.99.238.48 | attackbotsspam | Feb 24 13:38:44 hpm sshd\[27797\]: Invalid user sandbox from 139.99.238.48 Feb 24 13:38:44 hpm sshd\[27797\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=48.ip-139-99-238.net Feb 24 13:38:46 hpm sshd\[27797\]: Failed password for invalid user sandbox from 139.99.238.48 port 36084 ssh2 Feb 24 13:45:48 hpm sshd\[28416\]: Invalid user digital from 139.99.238.48 Feb 24 13:45:48 hpm sshd\[28416\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=48.ip-139-99-238.net |
2020-02-25 07:58:38 |
| 183.47.138.109 | attackbotsspam | 2020-02-25T00:24:52.883693 X postfix/smtpd[5329]: lost connection after AUTH from unknown[183.47.138.109] 2020-02-25T00:24:53.773296 X postfix/smtpd[5999]: lost connection after AUTH from unknown[183.47.138.109] 2020-02-25T00:24:54.656406 X postfix/smtpd[5329]: lost connection after AUTH from unknown[183.47.138.109] |
2020-02-25 08:13:53 |
| 42.159.9.62 | attackbots | Feb 25 00:40:02 lnxded64 sshd[10797]: Failed password for news from 42.159.9.62 port 58506 ssh2 Feb 25 00:40:02 lnxded64 sshd[10797]: Failed password for news from 42.159.9.62 port 58506 ssh2 |
2020-02-25 08:05:02 |
| 92.246.85.154 | attackspambots | 92.246.85.154 was recorded 5 times by 5 hosts attempting to connect to the following ports: 5060. Incident counter (4h, 24h, all-time): 5, 8, 61 |
2020-02-25 08:13:26 |
| 2.94.20.137 | attackbots | Unauthorized access detected from black listed ip! |
2020-02-25 07:55:59 |
| 80.211.116.102 | attackbotsspam | 5x Failed Password |
2020-02-25 07:50:35 |
| 41.190.36.210 | attackbotsspam | Feb 25 01:02:20 sd-53420 sshd\[29215\]: Invalid user owncloud from 41.190.36.210 Feb 25 01:02:20 sd-53420 sshd\[29215\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.190.36.210 Feb 25 01:02:22 sd-53420 sshd\[29215\]: Failed password for invalid user owncloud from 41.190.36.210 port 45108 ssh2 Feb 25 01:10:59 sd-53420 sshd\[30248\]: User root from 41.190.36.210 not allowed because none of user's groups are listed in AllowGroups Feb 25 01:10:59 sd-53420 sshd\[30248\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.190.36.210 user=root ... |
2020-02-25 08:24:51 |
| 178.151.171.26 | attackspam | trying to access non-authorized port |
2020-02-25 08:14:54 |
| 209.85.220.69 | attackbots | Received: from mail-sor-f69.google.com (mail-sor-f69.google.com. [209.85.220.69])
by mx.google.com with SMTPS id n29sor15400294pgc.73.2020.02.24.15.09.26
for <@gmail.com>
(Google Transport Security);
Mon, 24 Feb 2020 15:09:27 -0800 (PST)
CareyHolzman just uploaded a video
How Do I Know Which Files Or Directories Are Safe To Delete?
http://www.youtube.com/watch?v=WhxuCnLKcBE&feature=em-uploademail
Name: Carey Alan Holzman
Michelle Lee Holzman
Address: 5381 N 87th Ave, Glendale, Arizona, 85305
https://careyholzman.com
Phone Numbers:
(602) 527-9723
(623) 628-4266
carey@tech-vets.com carey.holzman@yahoo.com cholzman@cox.net
carey@careyholzman.com ,cholzman@outlook.com,cholzman@gmail.com
IP Number : 68.231.131.39
x-originating-ip: [199.189.26.30] |
2020-02-25 07:56:22 |