城市(city): unknown
省份(region): unknown
国家(country): Italy
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 81.127.202.14
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 41192
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;81.127.202.14. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025030100 1800 900 604800 86400
;; Query time: 12 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Mar 01 20:58:26 CST 2025
;; MSG SIZE rcvd: 106
14.202.127.81.in-addr.arpa domain name pointer host-81-127-202-14.business.telecomitalia.it.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
14.202.127.81.in-addr.arpa name = host-81-127-202-14.business.telecomitalia.it.
Authoritative answers can be found from:
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 180.76.172.227 | attackspam | $f2bV_matches |
2020-03-22 19:22:50 |
| 195.54.166.28 | attackspam | Port scan: Attack repeated for 24 hours |
2020-03-22 18:47:58 |
| 222.186.15.91 | attack | Mar 22 11:46:22 dcd-gentoo sshd[7893]: User root from 222.186.15.91 not allowed because none of user's groups are listed in AllowGroups Mar 22 11:46:26 dcd-gentoo sshd[7893]: error: PAM: Authentication failure for illegal user root from 222.186.15.91 Mar 22 11:46:22 dcd-gentoo sshd[7893]: User root from 222.186.15.91 not allowed because none of user's groups are listed in AllowGroups Mar 22 11:46:26 dcd-gentoo sshd[7893]: error: PAM: Authentication failure for illegal user root from 222.186.15.91 Mar 22 11:46:22 dcd-gentoo sshd[7893]: User root from 222.186.15.91 not allowed because none of user's groups are listed in AllowGroups Mar 22 11:46:26 dcd-gentoo sshd[7893]: error: PAM: Authentication failure for illegal user root from 222.186.15.91 Mar 22 11:46:26 dcd-gentoo sshd[7893]: Failed keyboard-interactive/pam for invalid user root from 222.186.15.91 port 14335 ssh2 ... |
2020-03-22 18:53:44 |
| 198.199.120.42 | attackbotsspam | $f2bV_matches |
2020-03-22 19:15:55 |
| 106.12.193.139 | attackspam | "INDICATOR-SCAN PHP backdoor scan attempt" |
2020-03-22 18:50:45 |
| 123.4.213.134 | attack | port 23 |
2020-03-22 19:03:45 |
| 195.231.3.188 | attack | 2020-03-22 dovecot_login authenticator failed for \(USER\) \[195.231.3.188\]: 535 Incorrect authentication data \(set_id=help@**REMOVED**.de\) 2020-03-22 dovecot_login authenticator failed for \(USER\) \[195.231.3.188\]: 535 Incorrect authentication data \(set_id=help@**REMOVED**.de\) 2020-03-22 dovecot_login authenticator failed for \(USER\) \[195.231.3.188\]: 535 Incorrect authentication data \(set_id=help@**REMOVED**.de\) |
2020-03-22 18:40:42 |
| 117.160.141.43 | attack | Mar 22 11:11:21 eventyay sshd[30170]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.160.141.43 Mar 22 11:11:23 eventyay sshd[30170]: Failed password for invalid user install from 117.160.141.43 port 1675 ssh2 Mar 22 11:14:03 eventyay sshd[30235]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.160.141.43 ... |
2020-03-22 18:36:28 |
| 14.99.38.109 | attack | Invalid user narciso from 14.99.38.109 port 28570 |
2020-03-22 19:18:29 |
| 155.94.140.178 | attackbots | Mar 22 06:56:21 firewall sshd[19541]: Invalid user mapred from 155.94.140.178 Mar 22 06:56:23 firewall sshd[19541]: Failed password for invalid user mapred from 155.94.140.178 port 34348 ssh2 Mar 22 07:02:21 firewall sshd[19939]: Invalid user rustserver from 155.94.140.178 ... |
2020-03-22 18:36:02 |
| 111.67.194.84 | attackbotsspam | 2020-03-22T12:11:23.469071ns386461 sshd\[4245\]: Invalid user zb from 111.67.194.84 port 41018 2020-03-22T12:11:23.473523ns386461 sshd\[4245\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.67.194.84 2020-03-22T12:11:25.366484ns386461 sshd\[4245\]: Failed password for invalid user zb from 111.67.194.84 port 41018 ssh2 2020-03-22T12:21:59.435453ns386461 sshd\[13618\]: Invalid user xk from 111.67.194.84 port 42302 2020-03-22T12:21:59.440089ns386461 sshd\[13618\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.67.194.84 ... |
2020-03-22 19:22:22 |
| 14.175.1.103 | attack | Attempts against SMTP/SSMTP |
2020-03-22 19:02:21 |
| 91.121.101.77 | attackspambots | 91.121.101.77 - - [22/Mar/2020:04:49:26 +0100] "GET /wp-login.php HTTP/1.1" 200 6363 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 91.121.101.77 - - [22/Mar/2020:04:49:27 +0100] "POST /wp-login.php HTTP/1.1" 200 7262 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 91.121.101.77 - - [22/Mar/2020:04:49:28 +0100] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-03-22 19:13:29 |
| 146.88.240.128 | attack | 146.88.240.128 was recorded 6 times by 5 hosts attempting to connect to the following ports: 26345,26074,26608,26294,26623,26239. Incident counter (4h, 24h, all-time): 6, 29, 381 |
2020-03-22 19:21:34 |
| 119.164.174.99 | attackbotsspam | port 23 |
2020-03-22 19:09:22 |