城市(city): unknown
省份(region): unknown
国家(country): United States
运营商(isp): AT&T
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 12.100.104.8
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 16779
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;12.100.104.8. IN A
;; AUTHORITY SECTION:
. 314 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022051000 1800 900 604800 86400
;; Query time: 93 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue May 10 18:49:52 CST 2022
;; MSG SIZE rcvd: 1058.104.100.12.in-addr.arpa domain name pointer 8.muaa.albn.chcgil24.dsl.att.net.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
8.104.100.12.in-addr.arpa name = 8.muaa.albn.chcgil24.dsl.att.net.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 173.179.186.169 | attack | 9000/tcp [2019-10-31]1pkt |
2019-10-31 17:31:52 |
| 89.248.168.202 | attackspam | Scanning (more than 2 packets) random ports - tries to find possible vulnerable services |
2019-10-31 17:45:22 |
| 123.20.0.190 | attack | ssh failed login |
2019-10-31 17:40:13 |
| 218.92.0.207 | attackspam | Oct 31 09:58:24 vpn01 sshd[30357]: Failed password for root from 218.92.0.207 port 36714 ssh2 ... |
2019-10-31 17:47:16 |
| 103.218.242.10 | attackbotsspam | Lines containing failures of 103.218.242.10 Oct 30 22:59:23 mailserver sshd[31485]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.218.242.10 user=r.r Oct 30 22:59:26 mailserver sshd[31485]: Failed password for r.r from 103.218.242.10 port 54594 ssh2 Oct 30 22:59:26 mailserver sshd[31485]: Received disconnect from 103.218.242.10 port 54594:11: Bye Bye [preauth] Oct 30 22:59:26 mailserver sshd[31485]: Disconnected from authenticating user r.r 103.218.242.10 port 54594 [preauth] Oct 30 23:15:22 mailserver sshd[1597]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.218.242.10 user=r.r Oct 30 23:15:24 mailserver sshd[1597]: Failed password for r.r from 103.218.242.10 port 60242 ssh2 Oct 30 23:15:24 mailserver sshd[1597]: Received disconnect from 103.218.242.10 port 60242:11: Bye Bye [preauth] Oct 30 23:15:24 mailserver sshd[1597]: Disconnected from authenticating user r.r 103.218.242.1........ ------------------------------ |
2019-10-31 17:42:24 |
| 72.253.156.40 | attackbotsspam | Automatic report - Banned IP Access |
2019-10-31 17:33:27 |
| 144.91.82.125 | attackbots | frenzy |
2019-10-31 17:48:46 |
| 80.82.64.213 | attackbotsspam | ft-1848-fussball.de 80.82.64.213 \[31/Oct/2019:09:13:54 +0100\] "POST /xmlrpc.php HTTP/1.1" 200 666 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/74.0.3729.169 Safari/537.36" ft-1848-fussball.de 80.82.64.213 \[31/Oct/2019:09:13:57 +0100\] "POST /wp-login.php HTTP/1.1" 200 5241 "http://ft-1848-fussball.de/wp-login.php" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/74.0.3729.169 Safari/537.36" |
2019-10-31 17:32:53 |
| 176.59.0.37 | attackspam | Chat Spam |
2019-10-31 17:19:16 |
| 14.248.96.129 | attackspam | 445/tcp [2019-10-31]1pkt |
2019-10-31 17:53:31 |
| 58.37.37.7 | attackspambots | 1433/tcp [2019-10-31]1pkt |
2019-10-31 17:30:03 |
| 188.131.142.109 | attackspambots | Oct 31 05:41:56 sd-53420 sshd\[30257\]: Invalid user 1QaZ2WsX@123 from 188.131.142.109 Oct 31 05:41:56 sd-53420 sshd\[30257\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.131.142.109 Oct 31 05:41:58 sd-53420 sshd\[30257\]: Failed password for invalid user 1QaZ2WsX@123 from 188.131.142.109 port 36382 ssh2 Oct 31 05:46:59 sd-53420 sshd\[30567\]: Invalid user zeyu from 188.131.142.109 Oct 31 05:46:59 sd-53420 sshd\[30567\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.131.142.109 ... |
2019-10-31 17:26:05 |
| 62.210.26.68 | attack | Fail2Ban Ban Triggered |
2019-10-31 17:20:49 |
| 117.63.80.60 | attackspambots | Oct 30 23:49:46 esmtp postfix/smtpd[8380]: lost connection after AUTH from unknown[117.63.80.60] Oct 30 23:49:47 esmtp postfix/smtpd[8415]: lost connection after AUTH from unknown[117.63.80.60] Oct 30 23:49:49 esmtp postfix/smtpd[8415]: lost connection after AUTH from unknown[117.63.80.60] Oct 30 23:49:49 esmtp postfix/smtpd[8380]: lost connection after AUTH from unknown[117.63.80.60] Oct 30 23:49:50 esmtp postfix/smtpd[8415]: lost connection after AUTH from unknown[117.63.80.60] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=117.63.80.60 |
2019-10-31 17:16:06 |
| 203.91.114.6 | attackspambots | Oct 31 09:19:57 xxx sshd[19323]: Invalid user joe from 203.91.114.6 Oct 31 09:20:00 xxx sshd[19323]: Failed password for invalid user joe from 203.91.114.6 port 54892 ssh2 Oct 31 09:36:50 xxx sshd[20333]: Failed password for r.r from 203.91.114.6 port 46282 ssh2 Oct 31 09:41:54 xxx sshd[20829]: Failed password for r.r from 203.91.114.6 port 58712 ssh2 Oct 31 09:47:15 xxx sshd[21154]: Failed password for r.r from 203.91.114.6 port 42992 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=203.91.114.6 |
2019-10-31 17:28:14 |