城市(city): unknown
省份(region): unknown
国家(country): None
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 103.91.100.12
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 65088
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;103.91.100.12. IN A
;; AUTHORITY SECTION:
. 151 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022022500 1800 900 604800 86400
;; Query time: 56 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 25 19:07:29 CST 2022
;; MSG SIZE rcvd: 106Host 12.100.91.103.in-addr.arpa not found: 2(SERVFAIL);; Got SERVFAIL reply from 183.60.83.19, trying next server
Server: 183.60.82.98
Address: 183.60.82.98#53
** server can't find 12.100.91.103.in-addr.arpa: SERVFAIL| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 92.119.160.107 | attack | Oct 9 16:18:54 mc1 kernel: \[1917129.109797\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=92.119.160.107 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=29626 PROTO=TCP SPT=50077 DPT=5890 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 9 16:19:42 mc1 kernel: \[1917177.098622\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=92.119.160.107 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=58079 PROTO=TCP SPT=50077 DPT=5855 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 9 16:19:48 mc1 kernel: \[1917183.309728\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=92.119.160.107 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=54876 PROTO=TCP SPT=50077 DPT=6374 WINDOW=1024 RES=0x00 SYN URGP=0 ... |
2019-10-09 22:24:32 |
| 216.239.90.19 | attack | 2019-10-09T12:23:55.772300abusebot.cloudsearch.cf sshd\[19414\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=tor-gateway.vif.com user=root |
2019-10-09 22:23:30 |
| 106.52.202.59 | attack | Oct 9 01:52:15 php1 sshd\[20468\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.202.59 user=root Oct 9 01:52:17 php1 sshd\[20468\]: Failed password for root from 106.52.202.59 port 36344 ssh2 Oct 9 01:56:54 php1 sshd\[20925\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.202.59 user=root Oct 9 01:56:56 php1 sshd\[20925\]: Failed password for root from 106.52.202.59 port 44250 ssh2 Oct 9 02:01:41 php1 sshd\[21455\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.202.59 user=root |
2019-10-09 22:06:34 |
| 2.95.139.57 | attackspam | 0,39-02/32 [bc01/m88] concatform PostRequest-Spammer scoring: brussels |
2019-10-09 22:09:44 |
| 139.199.48.216 | attack | Oct 9 14:04:34 dedicated sshd[15429]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.48.216 user=root Oct 9 14:04:36 dedicated sshd[15429]: Failed password for root from 139.199.48.216 port 58484 ssh2 |
2019-10-09 22:11:36 |
| 58.27.194.103 | attack | RDP Bruteforce |
2019-10-09 22:12:48 |
| 49.234.5.134 | attack | Oct 9 15:17:37 mout sshd[16660]: Invalid user Killer123 from 49.234.5.134 port 44206 |
2019-10-09 22:02:27 |
| 54.200.167.186 | attackbotsspam | 10/09/2019-16:04:10.006118 54.200.167.186 Protocol: 6 SURICATA TLS invalid record/traffic |
2019-10-09 22:13:00 |
| 190.17.208.123 | attack | 2019-10-09T13:52:56.648216abusebot-7.cloudsearch.cf sshd\[24183\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123-208-17-190.fibertel.com.ar user=root |
2019-10-09 22:22:06 |
| 113.77.13.125 | attack | Unauthorised access (Oct 9) SRC=113.77.13.125 LEN=40 TOS=0x10 PREC=0x40 TTL=50 ID=21864 TCP DPT=8080 WINDOW=49638 SYN Unauthorised access (Oct 9) SRC=113.77.13.125 LEN=40 TOS=0x10 PREC=0x40 TTL=49 ID=34859 TCP DPT=8080 WINDOW=44094 SYN Unauthorised access (Oct 8) SRC=113.77.13.125 LEN=40 TOS=0x10 PREC=0x40 TTL=50 ID=45389 TCP DPT=8080 WINDOW=44094 SYN Unauthorised access (Oct 8) SRC=113.77.13.125 LEN=40 TOS=0x10 PREC=0x40 TTL=49 ID=20962 TCP DPT=8080 WINDOW=49638 SYN Unauthorised access (Oct 8) SRC=113.77.13.125 LEN=40 TOS=0x10 PREC=0x40 TTL=50 ID=5627 TCP DPT=8080 WINDOW=27874 SYN Unauthorised access (Oct 8) SRC=113.77.13.125 LEN=40 TOS=0x10 PREC=0x40 TTL=50 ID=39002 TCP DPT=8080 WINDOW=36927 SYN |
2019-10-09 21:45:57 |
| 114.32.230.189 | attackbotsspam | Oct 9 03:53:24 wbs sshd\[5186\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114-32-230-189.hinet-ip.hinet.net user=root Oct 9 03:53:26 wbs sshd\[5186\]: Failed password for root from 114.32.230.189 port 39643 ssh2 Oct 9 03:58:02 wbs sshd\[5568\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114-32-230-189.hinet-ip.hinet.net user=root Oct 9 03:58:04 wbs sshd\[5568\]: Failed password for root from 114.32.230.189 port 59998 ssh2 Oct 9 04:02:27 wbs sshd\[5941\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114-32-230-189.hinet-ip.hinet.net user=root |
2019-10-09 22:07:24 |
| 111.206.167.10 | attack | Oct 9 08:29:39 plusreed sshd[19393]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.206.167.10 user=root Oct 9 08:29:41 plusreed sshd[19393]: Failed password for root from 111.206.167.10 port 56031 ssh2 ... |
2019-10-09 21:54:50 |
| 23.129.64.200 | attackspam | Oct 9 15:47:37 rotator sshd\[16324\]: Failed password for root from 23.129.64.200 port 52410 ssh2Oct 9 15:47:40 rotator sshd\[16324\]: Failed password for root from 23.129.64.200 port 52410 ssh2Oct 9 15:47:42 rotator sshd\[16324\]: Failed password for root from 23.129.64.200 port 52410 ssh2Oct 9 15:47:44 rotator sshd\[16324\]: Failed password for root from 23.129.64.200 port 52410 ssh2Oct 9 15:47:47 rotator sshd\[16324\]: Failed password for root from 23.129.64.200 port 52410 ssh2Oct 9 15:47:49 rotator sshd\[16324\]: Failed password for root from 23.129.64.200 port 52410 ssh2 ... |
2019-10-09 21:55:36 |
| 182.254.172.63 | attackspam | Oct 9 14:40:45 root sshd[28772]: Failed password for root from 182.254.172.63 port 35174 ssh2 Oct 9 14:44:54 root sshd[28845]: Failed password for root from 182.254.172.63 port 36942 ssh2 ... |
2019-10-09 21:44:10 |
| 92.234.244.237 | attack | " " |
2019-10-09 22:01:21 |