城市(city): unknown
省份(region): unknown
国家(country): Indonesia
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 103.150.195.42
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 19498
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;103.150.195.42. IN A
;; AUTHORITY SECTION:
. 540 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022052502 1800 900 604800 86400
;; Query time: 24 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu May 26 05:48:07 CST 2022
;; MSG SIZE rcvd: 107
42.195.150.103.in-addr.arpa domain name pointer ip-42-195.150.103.wjv-1.biznetg.io.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
42.195.150.103.in-addr.arpa name = ip-42-195.150.103.wjv-1.biznetg.io.
Authoritative answers can be found from:
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 185.176.27.6 | attack | Nov 23 06:42:20 h2177944 kernel: \[7363114.700912\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.176.27.6 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=46129 PROTO=TCP SPT=52970 DPT=5401 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 23 06:46:39 h2177944 kernel: \[7363373.763479\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.176.27.6 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=42014 PROTO=TCP SPT=52970 DPT=8620 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 23 06:47:55 h2177944 kernel: \[7363449.209234\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.176.27.6 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=28279 PROTO=TCP SPT=52970 DPT=29801 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 23 06:50:27 h2177944 kernel: \[7363601.995171\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.176.27.6 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=57726 PROTO=TCP SPT=52970 DPT=26702 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 23 07:00:36 h2177944 kernel: \[7364210.619643\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.176.27.6 DST=85.214.117.9 LE |
2019-11-23 14:06:12 |
| 221.193.177.100 | attackbotsspam | Nov 23 01:54:59 ws19vmsma01 sshd[234653]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.193.177.100 Nov 23 01:55:00 ws19vmsma01 sshd[234653]: Failed password for invalid user ftpuser from 221.193.177.100 port 15839 ssh2 ... |
2019-11-23 13:37:31 |
| 181.143.157.242 | attack | SPAM Delivery Attempt |
2019-11-23 13:34:50 |
| 106.12.58.4 | attackspambots | Nov 23 06:28:13 markkoudstaal sshd[9899]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.58.4 Nov 23 06:28:15 markkoudstaal sshd[9899]: Failed password for invalid user betta from 106.12.58.4 port 36396 ssh2 Nov 23 06:33:19 markkoudstaal sshd[10430]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.58.4 |
2019-11-23 13:53:03 |
| 106.52.6.248 | attackspam | Nov 22 21:42:34 home sshd[7297]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.6.248 user=root Nov 22 21:42:35 home sshd[7297]: Failed password for root from 106.52.6.248 port 37256 ssh2 Nov 22 21:51:40 home sshd[7395]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.6.248 user=root Nov 22 21:51:43 home sshd[7395]: Failed password for root from 106.52.6.248 port 34294 ssh2 Nov 22 21:56:31 home sshd[7402]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.6.248 user=root Nov 22 21:56:32 home sshd[7402]: Failed password for root from 106.52.6.248 port 39802 ssh2 Nov 22 22:01:33 home sshd[7463]: Invalid user barcelona from 106.52.6.248 port 45332 Nov 22 22:01:33 home sshd[7463]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.6.248 Nov 22 22:01:33 home sshd[7463]: Invalid user barcelona from 106.52.6.248 port 45332 Nov 22 22 |
2019-11-23 13:55:33 |
| 210.18.154.123 | attackbots | Automatic report - Port Scan |
2019-11-23 14:08:48 |
| 101.20.101.96 | attackspam | Port scan detected on ports: 1433[TCP], 1433[TCP], 1433[TCP] |
2019-11-23 13:48:17 |
| 52.52.190.187 | attackspam | Blocked user enumeration attempt |
2019-11-23 14:03:03 |
| 121.160.198.198 | attack | Nov 23 05:34:31 thevastnessof sshd[29249]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.160.198.198 ... |
2019-11-23 13:50:16 |
| 152.136.101.83 | attack | Nov 23 05:54:49 MK-Soft-VM3 sshd[14498]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.101.83 Nov 23 05:54:51 MK-Soft-VM3 sshd[14498]: Failed password for invalid user calvin from 152.136.101.83 port 41722 ssh2 ... |
2019-11-23 13:46:44 |
| 173.249.2.122 | attackbots | Masscan Port Scanning Tool Detection (56115) PA |
2019-11-23 13:41:46 |
| 201.99.85.135 | attack | *Port Scan* detected from 201.99.85.135 (MX/Mexico/dsl-201-99-85-135-sta.prod-empresarial.com.mx). 4 hits in the last 70 seconds |
2019-11-23 13:37:07 |
| 220.88.1.208 | attack | Nov 23 06:19:56 MK-Soft-Root1 sshd[11005]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.88.1.208 Nov 23 06:19:58 MK-Soft-Root1 sshd[11005]: Failed password for invalid user nfs from 220.88.1.208 port 60452 ssh2 ... |
2019-11-23 13:57:52 |
| 90.150.201.250 | attack | Fail2Ban Ban Triggered |
2019-11-23 13:54:50 |
| 46.38.144.179 | attackbots | Nov 23 07:04:44 vmanager6029 postfix/smtpd\[7007\]: warning: unknown\[46.38.144.179\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 23 07:05:55 vmanager6029 postfix/smtpd\[7007\]: warning: unknown\[46.38.144.179\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 |
2019-11-23 14:07:20 |