城市(city): Mountain Home
省份(region): Arkansas
国家(country): United States
运营商(isp): RTC Communications LLC
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 97.114.149.139
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 5971
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;97.114.149.139. IN A
;; AUTHORITY SECTION:
. 247 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2023011802 1800 900 604800 86400
;; Query time: 61 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jan 19 12:20:45 CST 2023
;; MSG SIZE rcvd: 107139.149.114.97.in-addr.arpa domain name pointer 97-114-149-139.nlrk.centurylink.net.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
139.149.114.97.in-addr.arpa name = 97-114-149-139.nlrk.centurylink.net.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 180.178.134.150 | attackbots | Unauthorized connection attempt from IP address 180.178.134.150 on Port 139(NETBIOS) |
2019-11-26 08:41:11 |
| 46.238.237.136 | attackspambots | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/46.238.237.136/ PL - 1H : (133) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : PL NAME ASN : ASN12618 IP : 46.238.237.136 CIDR : 46.238.192.0/18 PREFIX COUNT : 8 UNIQUE IP COUNT : 47104 ATTACKS DETECTED ASN12618 : 1H - 1 3H - 1 6H - 1 12H - 1 24H - 2 DateTime : 2019-11-25 23:44:12 INFO : Server 403 - Looking for resource vulnerabilities Detected and Blocked by ADMIN - data recovery |
2019-11-26 09:17:19 |
| 116.239.106.46 | attack | Nov 24 21:05:43 eola postfix/smtpd[32636]: connect from unknown[116.239.106.46] Nov 24 21:05:43 eola postfix/smtpd[32636]: lost connection after AUTH from unknown[116.239.106.46] Nov 24 21:05:43 eola postfix/smtpd[32636]: disconnect from unknown[116.239.106.46] ehlo=1 auth=0/1 commands=1/2 Nov 24 21:05:43 eola postfix/smtpd[32636]: connect from unknown[116.239.106.46] Nov 24 21:05:45 eola postfix/smtpd[32636]: lost connection after AUTH from unknown[116.239.106.46] Nov 24 21:05:45 eola postfix/smtpd[32636]: disconnect from unknown[116.239.106.46] ehlo=1 auth=0/1 commands=1/2 Nov 24 21:05:45 eola postfix/smtpd[32636]: connect from unknown[116.239.106.46] Nov 24 21:05:46 eola postfix/smtpd[32636]: lost connection after AUTH from unknown[116.239.106.46] Nov 24 21:05:46 eola postfix/smtpd[32636]: disconnect from unknown[116.239.106.46] ehlo=1 auth=0/1 commands=1/2 Nov 24 21:05:47 eola postfix/smtpd[32636]: connect from unknown[116.239.106.46] Nov 24 21:05:47 eola postfix/sm........ ------------------------------- |
2019-11-26 09:16:45 |
| 40.85.84.2 | attack | Brute forcing RDP port 3389 |
2019-11-26 08:49:32 |
| 63.88.23.208 | attackbots | 63.88.23.208 was recorded 12 times by 8 hosts attempting to connect to the following ports: 80. Incident counter (4h, 24h, all-time): 12, 80, 653 |
2019-11-26 09:11:39 |
| 177.155.36.214 | attack | Automatic report - Port Scan Attack |
2019-11-26 08:57:56 |
| 42.118.219.229 | attackspam | Unauthorized connection attempt from IP address 42.118.219.229 on Port 445(SMB) |
2019-11-26 08:44:02 |
| 79.157.217.179 | attack | SSH brute-force: detected 6 distinct usernames within a 24-hour window. |
2019-11-26 08:43:25 |
| 129.204.87.153 | attackspam | Nov 25 23:44:21 serwer sshd\[27648\]: Invalid user heather from 129.204.87.153 port 39194 Nov 25 23:44:21 serwer sshd\[27648\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.87.153 Nov 25 23:44:23 serwer sshd\[27648\]: Failed password for invalid user heather from 129.204.87.153 port 39194 ssh2 ... |
2019-11-26 09:10:54 |
| 82.217.67.240 | attackspam | Lines containing failures of 82.217.67.240 Nov 25 22:07:25 shared07 sshd[16961]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.217.67.240 user=dovecot Nov 25 22:07:27 shared07 sshd[16961]: Failed password for dovecot from 82.217.67.240 port 60220 ssh2 Nov 25 22:07:27 shared07 sshd[16961]: Received disconnect from 82.217.67.240 port 60220:11: Bye Bye [preauth] Nov 25 22:07:27 shared07 sshd[16961]: Disconnected from authenticating user dovecot 82.217.67.240 port 60220 [preauth] Nov 25 22:39:37 shared07 sshd[28281]: Invalid user zavadiuk from 82.217.67.240 port 48708 Nov 25 22:39:37 shared07 sshd[28281]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.217.67.240 Nov 25 22:39:39 shared07 sshd[28281]: Failed password for invalid user zavadiuk from 82.217.67.240 port 48708 ssh2 Nov 25 22:39:39 shared07 sshd[28281]: Received disconnect from 82.217.67.240 port 48708:11: Bye Bye [preauth] Nov........ ------------------------------ |
2019-11-26 09:08:24 |
| 222.186.175.148 | attack | Nov 26 01:43:39 eventyay sshd[4676]: Failed password for root from 222.186.175.148 port 13830 ssh2 Nov 26 01:43:52 eventyay sshd[4676]: error: maximum authentication attempts exceeded for root from 222.186.175.148 port 13830 ssh2 [preauth] Nov 26 01:43:57 eventyay sshd[4678]: Failed password for root from 222.186.175.148 port 30678 ssh2 ... |
2019-11-26 08:46:59 |
| 170.231.59.123 | attackspam | Automatic report - SSH Brute-Force Attack |
2019-11-26 09:03:16 |
| 93.210.161.97 | attack | Nov 25 03:36:17 prometheus imapd-ssl: LOGIN FAILED, method=PLAIN, ip=[::ffff:93.210.161.97] Nov 25 03:36:22 prometheus imapd-ssl: LOGOUT, ip=[::ffff:93.210.161.97], rcvd=84, sent=342 Nov 25 03:36:22 prometheus imapd-ssl: LOGIN FAILED, method=PLAIN, ip=[::ffff:93.210.161.97] Nov 25 03:36:27 prometheus imapd-ssl: LOGOUT, ip=[::ffff:93.210.161.97], rcvd=72, sent=342 Nov 25 03:36:27 prometheus imapd-ssl: LOGIN FAILED, user=sebastian, ip=[::ffff:93.210.161.97] Nov 25 03:36:32 prometheus imapd-ssl: LOGOUT, ip=[::ffff:93.210.161.97], rcvd=48, sent=338 Nov 25 03:36:32 prometheus imapd-ssl: LOGIN FAILED, method=PLAIN, ip=[::ffff:93.210.161.97] Nov 25 03:36:37 prometheus imapd-ssl: LOGOUT, ip=[::ffff:93.210.161.97], rcvd=84, sent=342 Nov 25 03:36:37 prometheus imapd-ssl: LOGIN FAILED, method=PLAIN, ip=[::ffff:93.210.161.97] Nov 25 03:36:42 prometheus imapd-ssl: LOGOUT, ip=[::ffff:93.210.161.97], rcvd=72, sent=342 Nov 25 03:36:42 prometheus imapd-ssl: LOGIN FAILED, user=sebastian,........ ------------------------------- |
2019-11-26 09:01:40 |
| 106.12.200.13 | attackspambots | Nov 26 01:40:45 OPSO sshd\[5014\]: Invalid user valentinelli from 106.12.200.13 port 45306 Nov 26 01:40:45 OPSO sshd\[5014\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.200.13 Nov 26 01:40:46 OPSO sshd\[5014\]: Failed password for invalid user valentinelli from 106.12.200.13 port 45306 ssh2 Nov 26 01:47:21 OPSO sshd\[6041\]: Invalid user shaner from 106.12.200.13 port 49678 Nov 26 01:47:21 OPSO sshd\[6041\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.200.13 |
2019-11-26 08:55:38 |
| 59.63.208.54 | attack | Nov 26 01:29:20 server sshd\[1219\]: Invalid user longshaw from 59.63.208.54 Nov 26 01:29:20 server sshd\[1219\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.63.208.54 Nov 26 01:29:22 server sshd\[1219\]: Failed password for invalid user longshaw from 59.63.208.54 port 59022 ssh2 Nov 26 01:44:13 server sshd\[4990\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.63.208.54 user=root Nov 26 01:44:15 server sshd\[4990\]: Failed password for root from 59.63.208.54 port 45144 ssh2 ... |
2019-11-26 09:14:51 |