城市(city): unknown
省份(region): unknown
国家(country): China
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 1.194.72.205
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 9423
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;1.194.72.205. IN A
;; AUTHORITY SECTION:
. 406 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022022401 1800 900 604800 86400
;; Query time: 68 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 25 11:33:13 CST 2022
;; MSG SIZE rcvd: 105Host 205.72.194.1.in-addr.arpa not found: 2(SERVFAIL)
server can't find 1.194.72.205.in-addr.arpa: SERVFAIL| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 89.35.29.36 | attackspambots | ET CINS Active Threat Intelligence Poor Reputation IP group 82 - port: 1433 proto: TCP cat: Misc Attack |
2020-05-12 08:37:06 |
| 138.121.170.194 | attackbotsspam | 2020-05-12T04:06:31.097175shield sshd\[15701\]: Invalid user karla from 138.121.170.194 port 49698 2020-05-12T04:06:31.101569shield sshd\[15701\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.121.170.194.dnsgigas.es 2020-05-12T04:06:33.043231shield sshd\[15701\]: Failed password for invalid user karla from 138.121.170.194 port 49698 ssh2 2020-05-12T04:10:10.955584shield sshd\[16696\]: Invalid user majordomo1 from 138.121.170.194 port 48886 2020-05-12T04:10:10.959034shield sshd\[16696\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.121.170.194.dnsgigas.es |
2020-05-12 12:10:49 |
| 190.145.12.58 | attackbotsspam | May 12 05:55:35 debian-2gb-nbg1-2 kernel: \[11514599.863924\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=190.145.12.58 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=44 ID=53188 PROTO=TCP SPT=31999 DPT=8089 WINDOW=25362 RES=0x00 SYN URGP=0 |
2020-05-12 12:02:00 |
| 68.183.86.198 | attack | ET CINS Active Threat Intelligence Poor Reputation IP group 58 - port: 5900 proto: TCP cat: Misc Attack |
2020-05-12 08:44:27 |
| 106.13.47.10 | attackspam | May 12 05:55:34 vps639187 sshd\[26296\]: Invalid user deploy from 106.13.47.10 port 55594 May 12 05:55:34 vps639187 sshd\[26296\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.47.10 May 12 05:55:36 vps639187 sshd\[26296\]: Failed password for invalid user deploy from 106.13.47.10 port 55594 ssh2 ... |
2020-05-12 12:02:15 |
| 64.225.114.140 | attackbots | ET CINS Active Threat Intelligence Poor Reputation IP group 54 - port: 3260 proto: TCP cat: Misc Attack |
2020-05-12 08:47:23 |
| 94.102.51.29 | attackbots | firewall-block, port(s): 3392/tcp, 5000/tcp |
2020-05-12 08:30:28 |
| 51.91.212.80 | attackspam | Brute force attack stopped by firewall |
2020-05-12 08:50:31 |
| 104.206.128.34 | attackspambots | GPL SNMP public access udp - port: 161 proto: UDP cat: Attempted Information Leak |
2020-05-12 08:27:31 |
| 94.102.56.215 | attackspam | Multiport scan 62 ports : 1(x5) 520(x5) 922(x5) 1034(x4) 1037(x5) 1043(x5) 1048(x4) 1049(x5) 1056(x5) 1058(x4) 1065(x5) 1083(x5) 1285(x5) 1287(x5) 1543(x4) 1796(x4) 1797(x4) 1813(x4) 2049(x4) 2152(x4) 2223(x4) 2309(x4) 2311(x4) 2565(x4) 3703(x4) 4070(x4) 4099(x4) 4353(x4) 5889(x4) 6881(x4) 6889(x4) 6981(x4) 7623(x4) 7659(x4) 7748(x4) 7760(x4) 7791(x4) 7794(x4) 7803(x4) 7805(x3) 7822(x4) 7842(x4) 7876(x4) 7941(x4) 7958(x4) 7961(x4) 8998(x4) 9728(x3) 10009(x4) 10285(x4) 10633(x4) 11265(x4) 16464(x4) 18011(x4) 21234(x4) 24265(x4) 24292(x3) 27016(x4) 28007(x4) 28008(x4) 28025(x4) 28070(x4) |
2020-05-12 08:30:11 |
| 180.66.207.67 | attackspam | May 12 03:55:34 *** sshd[18798]: Invalid user user from 180.66.207.67 |
2020-05-12 12:02:48 |
| 87.251.74.166 | attackspambots | May 12 05:55:24 debian-2gb-nbg1-2 kernel: \[11514588.851495\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=87.251.74.166 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=56381 PROTO=TCP SPT=59273 DPT=3481 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-05-12 12:13:22 |
| 80.82.65.190 | attackbotsspam | slow and persistent scanner |
2020-05-12 08:42:10 |
| 64.225.116.247 | attackbots | Port scan: Attack repeated for 24 hours |
2020-05-12 08:46:55 |
| 222.186.180.130 | attack | May 12 00:05:24 plusreed sshd[24009]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.130 user=root May 12 00:05:27 plusreed sshd[24009]: Failed password for root from 222.186.180.130 port 29589 ssh2 ... |
2020-05-12 12:08:37 |