城市(city): unknown
省份(region): unknown
国家(country): United States of America (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 99.73.130.74
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 34503
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;99.73.130.74. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021400 1800 900 604800 86400
;; Query time: 53 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 14 22:59:01 CST 2025
;; MSG SIZE rcvd: 105
74.130.73.99.in-addr.arpa domain name pointer 99-73-130-74.lightspeed.miamfl.sbcglobal.net.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
74.130.73.99.in-addr.arpa name = 99-73-130-74.lightspeed.miamfl.sbcglobal.net.
Authoritative answers can be found from:
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 94.191.120.108 | attackspambots | Brute force SMTP login attempted. ... |
2020-04-01 13:59:17 |
| 88.88.66.136 | attackbotsspam | Apr 1 05:58:00 DAAP sshd[11875]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=88.88.66.136 user=root Apr 1 05:58:02 DAAP sshd[11875]: Failed password for root from 88.88.66.136 port 41101 ssh2 Apr 1 06:02:57 DAAP sshd[11948]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=88.88.66.136 user=root Apr 1 06:02:59 DAAP sshd[11948]: Failed password for root from 88.88.66.136 port 47929 ssh2 Apr 1 06:07:51 DAAP sshd[11980]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=88.88.66.136 user=root Apr 1 06:07:52 DAAP sshd[11980]: Failed password for root from 88.88.66.136 port 54766 ssh2 ... |
2020-04-01 13:36:41 |
| 167.71.229.19 | attack | Mar 31 23:25:07 server1 sshd\[21977\]: Invalid user ve from 167.71.229.19 Mar 31 23:25:07 server1 sshd\[21977\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.229.19 Mar 31 23:25:10 server1 sshd\[21977\]: Failed password for invalid user ve from 167.71.229.19 port 35564 ssh2 Mar 31 23:29:32 server1 sshd\[23287\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.229.19 user=root Mar 31 23:29:34 server1 sshd\[23287\]: Failed password for root from 167.71.229.19 port 47686 ssh2 ... |
2020-04-01 13:49:45 |
| 142.93.47.171 | attack | 142.93.47.171 - - [01/Apr/2020:07:03:22 +0200] "GET /wp-login.php HTTP/1.1" 200 5702 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.47.171 - - [01/Apr/2020:07:03:24 +0200] "POST /wp-login.php HTTP/1.1" 200 6601 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.47.171 - - [01/Apr/2020:07:03:26 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-04-01 14:10:12 |
| 80.211.71.17 | attackspam | (sshd) Failed SSH login from 80.211.71.17 (IT/Italy/host17-71-211-80.serverdedicati.aruba.it): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Apr 1 06:32:39 ubnt-55d23 sshd[15085]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.71.17 user=root Apr 1 06:32:41 ubnt-55d23 sshd[15085]: Failed password for root from 80.211.71.17 port 46108 ssh2 |
2020-04-01 14:00:45 |
| 31.184.254.228 | attackbotsspam | serveres are UTC -0400 Lines containing failures of 31.184.254.228 Mar 31 19:13:56 tux2 sshd[15979]: Failed password for r.r from 31.184.254.228 port 49328 ssh2 Mar 31 19:13:56 tux2 sshd[15979]: Received disconnect from 31.184.254.228 port 49328:11: Bye Bye [preauth] Mar 31 19:13:56 tux2 sshd[15979]: Disconnected from authenticating user r.r 31.184.254.228 port 49328 [preauth] Mar 31 19:17:59 tux2 sshd[16213]: Failed password for r.r from 31.184.254.228 port 33600 ssh2 Mar 31 19:17:59 tux2 sshd[16213]: Received disconnect from 31.184.254.228 port 33600:11: Bye Bye [preauth] Mar 31 19:17:59 tux2 sshd[16213]: Disconnected from authenticating user r.r 31.184.254.228 port 33600 [preauth] Mar 31 19:20:16 tux2 sshd[16353]: Failed password for r.r from 31.184.254.228 port 49020 ssh2 Mar 31 19:20:16 tux2 sshd[16353]: Received disconnect from 31.184.254.228 port 49020:11: Bye Bye [preauth] Mar 31 19:20:16 tux2 sshd[16353]: Disconnected from authenticating user r.r 31.184.254.228 ........ ------------------------------ |
2020-04-01 14:03:48 |
| 121.229.13.229 | attackspambots | Apr 1 06:07:17 srv01 sshd[12428]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.229.13.229 user=root Apr 1 06:07:19 srv01 sshd[12428]: Failed password for root from 121.229.13.229 port 40640 ssh2 Apr 1 06:11:47 srv01 sshd[12812]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.229.13.229 user=root Apr 1 06:11:48 srv01 sshd[12812]: Failed password for root from 121.229.13.229 port 38118 ssh2 Apr 1 06:16:04 srv01 sshd[13027]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.229.13.229 user=root Apr 1 06:16:06 srv01 sshd[13027]: Failed password for root from 121.229.13.229 port 35596 ssh2 ... |
2020-04-01 14:11:14 |
| 220.171.105.34 | attack | SSH Brute-Forcing (server1) |
2020-04-01 13:40:28 |
| 148.251.195.14 | attack | 20 attempts against mh-misbehave-ban on comet |
2020-04-01 13:39:48 |
| 92.118.160.21 | attack | Metasploit VxWorks WDB Agent Scanner Detection, PTR: 92.118.160.21.netsystemsresearch.com. |
2020-04-01 13:30:08 |
| 106.51.3.214 | attackspam | SSH authentication failure x 6 reported by Fail2Ban ... |
2020-04-01 13:58:50 |
| 180.76.141.184 | attackspam | Mar 31 19:34:23 hanapaa sshd\[8039\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.141.184 user=root Mar 31 19:34:25 hanapaa sshd\[8039\]: Failed password for root from 180.76.141.184 port 38386 ssh2 Mar 31 19:39:35 hanapaa sshd\[8358\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.141.184 user=root Mar 31 19:39:36 hanapaa sshd\[8358\]: Failed password for root from 180.76.141.184 port 39198 ssh2 Mar 31 19:44:22 hanapaa sshd\[8667\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.141.184 user=root |
2020-04-01 13:46:39 |
| 148.72.31.117 | attackbotsspam | B: /wp-login.php attack |
2020-04-01 13:29:38 |
| 175.145.18.15 | attackbotsspam | Apr 1 05:15:02 raspberrypi sshd\[29812\]: Invalid user hongbinglie from 175.145.18.15Apr 1 05:15:03 raspberrypi sshd\[29812\]: Failed password for invalid user hongbinglie from 175.145.18.15 port 58615 ssh2Apr 1 05:24:25 raspberrypi sshd\[4879\]: Invalid user sshproxy from 175.145.18.15 ... |
2020-04-01 13:47:19 |
| 107.175.150.83 | attackbots | Apr 1 06:49:45 nextcloud sshd\[1241\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.175.150.83 user=root Apr 1 06:49:47 nextcloud sshd\[1241\]: Failed password for root from 107.175.150.83 port 38588 ssh2 Apr 1 06:52:36 nextcloud sshd\[4384\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.175.150.83 user=root |
2020-04-01 13:32:26 |