城市(city): Kampala
省份(region): Central
国家(country): Uganda
运营商(isp): Airtel
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 102.81.124.94
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 61596
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;102.81.124.94. IN A
;; AUTHORITY SECTION:
. 400 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2023102100 1800 900 604800 86400
;; Query time: 62 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Oct 21 19:31:13 CST 2023
;; MSG SIZE rcvd: 106
94.124.81.102.in-addr.arpa domain name pointer 94-124-81-102.r.airtel.ug.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
94.124.81.102.in-addr.arpa name = 94-124-81-102.r.airtel.ug.
Authoritative answers can be found from:
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 83.13.208.170 | attackbots | DATE:2020-02-13 20:11:18, IP:83.13.208.170, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc) |
2020-02-14 06:46:43 |
| 200.194.18.105 | attackbotsspam | MultiHost/MultiPort Probe, Scan, Hack - |
2020-02-14 07:04:01 |
| 113.193.243.35 | attack | Feb 13 20:42:12 srv206 sshd[27570]: Invalid user frederic from 113.193.243.35 Feb 13 20:42:12 srv206 sshd[27570]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.193.243.35 Feb 13 20:42:12 srv206 sshd[27570]: Invalid user frederic from 113.193.243.35 Feb 13 20:42:13 srv206 sshd[27570]: Failed password for invalid user frederic from 113.193.243.35 port 46310 ssh2 ... |
2020-02-14 06:47:31 |
| 67.205.135.127 | attack | Feb 13 17:09:32 plusreed sshd[32384]: Invalid user ubuntu from 67.205.135.127 ... |
2020-02-14 06:57:42 |
| 185.156.177.132 | attackbotsspam | 2020-02-13T21:12:08Z - RDP login failed multiple times. (185.156.177.132) |
2020-02-14 07:13:06 |
| 200.171.167.192 | attack | MultiHost/MultiPort Probe, Scan, Hack - |
2020-02-14 07:17:17 |
| 123.207.142.208 | attack | $f2bV_matches |
2020-02-14 06:51:23 |
| 118.24.38.12 | attack | Feb 13 10:28:39 hpm sshd\[5827\]: Invalid user zhua from 118.24.38.12 Feb 13 10:28:39 hpm sshd\[5827\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.38.12 Feb 13 10:28:41 hpm sshd\[5827\]: Failed password for invalid user zhua from 118.24.38.12 port 48398 ssh2 Feb 13 10:31:07 hpm sshd\[6108\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.38.12 user=root Feb 13 10:31:09 hpm sshd\[6108\]: Failed password for root from 118.24.38.12 port 57723 ssh2 |
2020-02-14 06:47:17 |
| 45.148.10.91 | attack | Feb 13 23:43:36 debian-2gb-nbg1-2 kernel: \[3893043.330288\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=45.148.10.91 DST=195.201.40.59 LEN=48 TOS=0x00 PREC=0x00 TTL=120 ID=6457 PROTO=TCP SPT=51481 DPT=22 WINDOW=65535 RES=0x00 SYN URGP=0 |
2020-02-14 06:54:43 |
| 180.106.83.17 | attackbots | Feb 13 21:08:42 lukav-desktop sshd\[27058\]: Invalid user rojas from 180.106.83.17 Feb 13 21:08:42 lukav-desktop sshd\[27058\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.106.83.17 Feb 13 21:08:44 lukav-desktop sshd\[27058\]: Failed password for invalid user rojas from 180.106.83.17 port 48366 ssh2 Feb 13 21:10:47 lukav-desktop sshd\[15445\]: Invalid user central from 180.106.83.17 Feb 13 21:10:47 lukav-desktop sshd\[15445\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.106.83.17 |
2020-02-14 07:04:17 |
| 31.5.211.16 | attackbotsspam | Feb 13 17:15:42 ws19vmsma01 sshd[85846]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.5.211.16 Feb 13 17:15:44 ws19vmsma01 sshd[85846]: Failed password for invalid user admin from 31.5.211.16 port 52414 ssh2 ... |
2020-02-14 06:48:51 |
| 60.170.203.82 | attackbots | Fail2Ban Ban Triggered |
2020-02-14 06:59:06 |
| 70.26.45.168 | attack | Feb 14 03:35:44 gw1 sshd[23841]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=70.26.45.168 Feb 14 03:35:45 gw1 sshd[23841]: Failed password for invalid user ltelles from 70.26.45.168 port 54608 ssh2 ... |
2020-02-14 06:54:28 |
| 193.56.28.226 | attack | Feb 13 20:10:31 debian-2gb-nbg1-2 kernel: \[3880258.568646\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=193.56.28.226 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=20590 PROTO=TCP SPT=40826 DPT=25 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-02-14 07:18:10 |
| 222.186.173.226 | attackspambots | Feb 13 16:24:41 debian sshd[29906]: Unable to negotiate with 222.186.173.226 port 2129: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 [preauth] Feb 13 18:15:11 debian sshd[2644]: Unable to negotiate with 222.186.173.226 port 35150: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 [preauth] ... |
2020-02-14 07:15:46 |