城市(city): unknown
省份(region): unknown
国家(country): United States of America (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 99.115.104.14
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 58183
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;99.115.104.14. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020300 1800 900 604800 86400
;; Query time: 35 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 03 18:18:44 CST 2025
;; MSG SIZE rcvd: 10614.104.115.99.in-addr.arpa domain name pointer adsl-99-115-104-14.dsl.yntwoh.sbcglobal.net.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
14.104.115.99.in-addr.arpa name = adsl-99-115-104-14.dsl.yntwoh.sbcglobal.net.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 163.172.42.173 | attackbotsspam | 163.172.42.173 - - [31/Aug/2020:13:35:58 +0100] "POST /wp-login.php HTTP/1.1" 200 2046 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 163.172.42.173 - - [31/Aug/2020:13:36:00 +0100] "POST /wp-login.php HTTP/1.1" 200 2020 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 163.172.42.173 - - [31/Aug/2020:13:36:06 +0100] "POST /wp-login.php HTTP/1.1" 200 2019 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-08-31 21:55:06 |
| 192.241.234.244 | attack | Aug 31 05:35:56 propaganda sshd[30297]: Connection from 192.241.234.244 port 50026 on 10.0.0.161 port 22 rdomain "" Aug 31 05:36:06 propaganda sshd[30297]: error: kex_exchange_identification: Connection closed by remote host |
2020-08-31 21:52:59 |
| 171.246.202.137 | attack | 445/tcp [2020-08-31]1pkt |
2020-08-31 22:19:04 |
| 133.205.27.214 | attack | 2323/tcp [2020-08-31]1pkt |
2020-08-31 22:29:38 |
| 200.237.142.194 | attackbots | Failed password for invalid user xxq from 200.237.142.194 port 2854 ssh2 |
2020-08-31 22:11:55 |
| 114.235.209.157 | attack | 37215/tcp [2020-08-31]1pkt |
2020-08-31 22:32:27 |
| 95.133.32.134 | attackbots | 8080/tcp [2020-08-31]1pkt |
2020-08-31 22:10:18 |
| 87.3.143.206 | attack | 23/tcp [2020-08-31]1pkt |
2020-08-31 22:01:10 |
| 145.239.85.228 | attackbots | Aug 31 15:18:37 abendstille sshd\[20475\]: Invalid user splunk from 145.239.85.228 Aug 31 15:18:37 abendstille sshd\[20475\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=145.239.85.228 Aug 31 15:18:39 abendstille sshd\[20475\]: Failed password for invalid user splunk from 145.239.85.228 port 33214 ssh2 Aug 31 15:22:41 abendstille sshd\[24224\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=145.239.85.228 user=root Aug 31 15:22:44 abendstille sshd\[24224\]: Failed password for root from 145.239.85.228 port 41278 ssh2 ... |
2020-08-31 22:19:48 |
| 199.19.226.35 | attackspambots | 2020-08-31T14:13:14.207417abusebot-8.cloudsearch.cf sshd[20291]: Invalid user admin from 199.19.226.35 port 56392 2020-08-31T14:13:14.210512abusebot-8.cloudsearch.cf sshd[20289]: Invalid user vagrant from 199.19.226.35 port 56396 2020-08-31T14:13:14.211853abusebot-8.cloudsearch.cf sshd[20290]: Invalid user oracle from 199.19.226.35 port 56400 2020-08-31T14:13:14.212721abusebot-8.cloudsearch.cf sshd[20287]: Invalid user ubuntu from 199.19.226.35 port 56394 ... |
2020-08-31 22:17:04 |
| 145.239.51.233 | attackbots | [2020-08-31 09:50:23] NOTICE[1185][C-00008e28] chan_sip.c: Call from '' (145.239.51.233:54095) to extension '9128210046520458220' rejected because extension not found in context 'public'. [2020-08-31 09:50:23] SECURITY[1203] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-08-31T09:50:23.447-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="9128210046520458220",SessionID="0x7f10c43e3a48",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/145.239.51.233/54095",ACLName="no_extension_match" [2020-08-31 09:50:40] NOTICE[1185][C-00008e29] chan_sip.c: Call from '' (145.239.51.233:49312) to extension '9673970046520458220' rejected because extension not found in context 'public'. [2020-08-31 09:50:40] SECURITY[1203] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-08-31T09:50:40.269-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="9673970046520458220",SessionID="0x7f10c459e698",LocalAddress="IPV4/UDP/192.168.244.6/5060",Remot ... |
2020-08-31 21:59:08 |
| 164.132.11.143 | attack | [-]:80 164.132.11.143 - - [31/Aug/2020:14:35:58 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 0 "-" "-" |
2020-08-31 22:02:36 |
| 201.174.152.178 | attackbotsspam | Unauthorized connection attempt from IP address 201.174.152.178 on Port 445(SMB) |
2020-08-31 22:25:55 |
| 159.203.179.230 | attackbots | Aug 31 19:34:46 dhoomketu sshd[2783934]: Failed password for root from 159.203.179.230 port 40892 ssh2 Aug 31 19:38:34 dhoomketu sshd[2783973]: Invalid user zy from 159.203.179.230 port 48196 Aug 31 19:38:34 dhoomketu sshd[2783973]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.179.230 Aug 31 19:38:34 dhoomketu sshd[2783973]: Invalid user zy from 159.203.179.230 port 48196 Aug 31 19:38:35 dhoomketu sshd[2783973]: Failed password for invalid user zy from 159.203.179.230 port 48196 ssh2 ... |
2020-08-31 22:22:34 |
| 46.148.43.21 | attack | 8080/tcp [2020-08-31]1pkt |
2020-08-31 22:33:14 |