城市(city): unknown
省份(region): unknown
国家(country): Republic of China (ROC)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 1.172.125.21
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 30320
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;1.172.125.21. IN A
;; AUTHORITY SECTION:
. 296 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022011000 1800 900 604800 86400
;; Query time: 89 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jan 10 19:30:05 CST 2022
;; MSG SIZE rcvd: 10521.125.172.1.in-addr.arpa domain name pointer 1-172-125-21.dynamic-ip.hinet.net.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
21.125.172.1.in-addr.arpa name = 1-172-125-21.dynamic-ip.hinet.net.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 185.39.11.55 | attackspambots | Jul 5 15:43:56 debian-2gb-nbg1-2 kernel: \[16215249.736070\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=185.39.11.55 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=34 PROTO=TCP SPT=52837 DPT=3537 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-07-05 21:49:01 |
| 162.243.131.164 | attack | GPL DNS named version attempt - port: 53 proto: UDP cat: Attempted Information Leak |
2020-07-05 21:31:38 |
| 117.40.83.114 | attackspam | ET SCAN Suspicious inbound to MSSQL port 1433 - port: 1433 proto: TCP cat: Potentially Bad Traffic |
2020-07-05 21:53:22 |
| 220.163.15.100 | attackbotsspam | ET SCAN Suspicious inbound to MSSQL port 1433 - port: 1433 proto: TCP cat: Potentially Bad Traffic |
2020-07-05 21:41:58 |
| 34.92.120.142 | attack | ET CINS Active Threat Intelligence Poor Reputation IP group 13 - port: 13471 proto: TCP cat: Misc Attack |
2020-07-05 21:41:11 |
| 93.174.93.197 | attackspambots | Jul 5 15:42:32 debian-2gb-nbg1-2 kernel: \[16215165.388719\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=93.174.93.197 DST=195.201.40.59 LEN=49 TOS=0x00 PREC=0x00 TTL=247 ID=54321 PROTO=UDP SPT=44384 DPT=11211 LEN=29 |
2020-07-05 21:55:12 |
| 93.174.95.106 | attackbots | scans 2 times in preceeding hours on the ports (in chronological order) 25565 4321 resulting in total of 3 scans from 93.174.88.0/21 block. |
2020-07-05 21:34:40 |
| 185.156.73.38 | attackbotsspam | probes 92 times on the port 10000 10001 10033 11011 11111 13389 13390 2000 20000 20002 20089 22022 23389 23390 23456 30089 3089 33001 3333 33391 33392 33399 3344 3380 3381 3385 3387 33889 3389 33893 33895 33897 33898 33899 3390 3391 3393 3394 3395 3396 3397 3398 3399 4000 40000 40004 4004 4040 4089 4321 43389 44044 44444 4489 50000 50001 5005 50089 5050 5089 53390 54321 5555 55555 6000 60000 60001 6006 63389 6666 6689 7000 7007 7070 7089 7789 8080 8089 8888 8899 8933 8989 9000 9009 9089 9090 9833 9999 resulting in total of 105 scans from 185.156.72.0/22 block. |
2020-07-05 21:29:10 |
| 104.248.121.165 | attack | Jul 5 14:15:13 rocket sshd[6981]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.121.165 Jul 5 14:15:15 rocket sshd[6981]: Failed password for invalid user teamspeak from 104.248.121.165 port 48234 ssh2 Jul 5 14:18:25 rocket sshd[7060]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.121.165 ... |
2020-07-05 21:18:49 |
| 167.114.3.158 | attackbots | Jul 5 19:22:40 itv-usvr-02 sshd[17120]: Invalid user solange from 167.114.3.158 port 48530 Jul 5 19:22:40 itv-usvr-02 sshd[17120]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.114.3.158 Jul 5 19:22:40 itv-usvr-02 sshd[17120]: Invalid user solange from 167.114.3.158 port 48530 Jul 5 19:22:43 itv-usvr-02 sshd[17120]: Failed password for invalid user solange from 167.114.3.158 port 48530 ssh2 Jul 5 19:26:42 itv-usvr-02 sshd[17332]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.114.3.158 user=root Jul 5 19:26:43 itv-usvr-02 sshd[17332]: Failed password for root from 167.114.3.158 port 56180 ssh2 |
2020-07-05 21:50:32 |
| 45.145.66.105 | attack |
|
2020-07-05 21:40:38 |
| 34.73.15.205 | attackspambots | SSH Brute Force |
2020-07-05 21:22:57 |
| 185.39.11.57 | attack | Port scan on 8 port(s): 30703 30704 30709 30711 30714 30768 30791 30797 |
2020-07-05 21:30:02 |
| 14.23.81.42 | attack | SSH Brute Force |
2020-07-05 21:23:47 |
| 178.21.164.90 | attack | Unauthorized connection attempt detected from IP address 178.21.164.90 to port 2000 [T] |
2020-07-05 21:50:01 |