城市(city): Jenks
省份(region): Oklahoma
国家(country): United States
运营商(isp): CERFnet
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): Fixed Line ISP
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 12.130.161.80
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 7698
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;12.130.161.80. IN A
;; AUTHORITY SECTION:
. 260 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020011701 1800 900 604800 86400
;; Query time: 122 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jan 18 08:32:08 CST 2020
;; MSG SIZE rcvd: 11780.161.130.12.in-addr.arpa is an alias for 80.80/28.161.130.12.in-addr.arpa.
80.80/28.161.130.12.in-addr.arpa domain name pointer it.thecrosbygroup.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
80.161.130.12.in-addr.arpa canonical name = 80.80/28.161.130.12.in-addr.arpa.
80.80/28.161.130.12.in-addr.arpa name = it.thecrosbygroup.com.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 220.77.218.212 | attackbots | Unauthorised access (Dec 17) SRC=220.77.218.212 LEN=40 TTL=51 ID=27242 TCP DPT=23 WINDOW=46999 SYN |
2019-12-18 02:49:57 |
| 40.92.41.12 | attackbotsspam | Dec 17 17:23:04 debian-2gb-vpn-nbg1-1 kernel: [970951.226968] [UFW BLOCK] IN=eth0 OUT= MAC=96:00:00:38:96:44:d2:74:7f:6e:37:e3:08:00 SRC=40.92.41.12 DST=78.46.192.101 LEN=40 TOS=0x00 PREC=0x00 TTL=232 ID=28433 DF PROTO=TCP SPT=18912 DPT=25 WINDOW=0 RES=0x00 ACK RST URGP=0 |
2019-12-18 02:31:14 |
| 46.101.43.224 | attackspambots | $f2bV_matches |
2019-12-18 02:26:25 |
| 40.92.40.81 | attackspam | Dec 17 18:47:04 debian-2gb-vpn-nbg1-1 kernel: [975991.206156] [UFW BLOCK] IN=eth0 OUT= MAC=96:00:00:38:96:44:d2:74:7f:6e:37:e3:08:00 SRC=40.92.40.81 DST=78.46.192.101 LEN=52 TOS=0x02 PREC=0x00 TTL=106 ID=3191 DF PROTO=TCP SPT=6391 DPT=25 WINDOW=8192 RES=0x00 CWR ECE SYN URGP=0 |
2019-12-18 02:29:14 |
| 79.187.192.249 | attack | Dec 17 18:08:18 web8 sshd\[23770\]: Invalid user baugus from 79.187.192.249 Dec 17 18:08:18 web8 sshd\[23770\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.187.192.249 Dec 17 18:08:20 web8 sshd\[23770\]: Failed password for invalid user baugus from 79.187.192.249 port 35760 ssh2 Dec 17 18:13:50 web8 sshd\[26446\]: Invalid user hibner from 79.187.192.249 Dec 17 18:13:50 web8 sshd\[26446\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.187.192.249 |
2019-12-18 02:25:36 |
| 5.135.101.228 | attack | Dec 16 10:09:02 tuxlinux sshd[32930]: Invalid user dbus from 5.135.101.228 port 52856 Dec 16 10:09:02 tuxlinux sshd[32930]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.135.101.228 Dec 16 10:09:02 tuxlinux sshd[32930]: Invalid user dbus from 5.135.101.228 port 52856 Dec 16 10:09:02 tuxlinux sshd[32930]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.135.101.228 Dec 16 10:09:02 tuxlinux sshd[32930]: Invalid user dbus from 5.135.101.228 port 52856 Dec 16 10:09:02 tuxlinux sshd[32930]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.135.101.228 Dec 16 10:09:04 tuxlinux sshd[32930]: Failed password for invalid user dbus from 5.135.101.228 port 52856 ssh2 ... |
2019-12-18 02:35:10 |
| 211.141.179.140 | attack | Dec 17 22:07:51 gw1 sshd[30695]: Failed password for root from 211.141.179.140 port 2841 ssh2 ... |
2019-12-18 02:34:01 |
| 112.201.77.141 | attackspam | Unauthorized connection attempt detected from IP address 112.201.77.141 to port 445 |
2019-12-18 03:01:22 |
| 23.100.3.88 | attackspambots | Dec 17 10:37:27 mxgate1 postfix/postscreen[19768]: CONNECT from [23.100.3.88]:3968 to [176.31.12.44]:25 Dec 17 10:37:33 mxgate1 postfix/postscreen[19768]: PASS NEW [23.100.3.88]:3968 Dec 17 10:37:34 mxgate1 postfix/smtpd[19778]: connect from unknown[23.100.3.88] Dec x@x Dec 17 10:37:35 mxgate1 postfix/smtpd[19778]: disconnect from unknown[23.100.3.88] ehlo=2 starttls=1 mail=1 rcpt=0/1 quhostname=1 commands=5/6 Dec 17 10:38:39 mxgate1 postfix/postscreen[19768]: CONNECT from [23.100.3.88]:3968 to [176.31.12.44]:25 Dec 17 10:38:40 mxgate1 postfix/postscreen[19768]: PASS OLD [23.100.3.88]:3968 Dec 17 10:38:40 mxgate1 postfix/smtpd[19778]: connect from unknown[23.100.3.88] Dec x@x Dec 17 10:38:40 mxgate1 postfix/smtpd[19778]: disconnect from unknown[23.100.3.88] ehlo=2 starttls=1 mail=1 rcpt=0/1 quhostname=1 commands=5/6 Dec 17 10:40:49 mxgate1 postfix/postscreen[19768]: CONNECT from [23.100.3.88]:3904 to [176.31.12.44]:25 Dec 17 10:40:49 mxgate1 postfix/postscreen[19768]: P........ ------------------------------- |
2019-12-18 02:57:32 |
| 36.153.23.187 | attackbotsspam | Dec 17 15:22:33 sso sshd[9144]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.153.23.187 Dec 17 15:22:35 sso sshd[9144]: Failed password for invalid user vikhals from 36.153.23.187 port 36810 ssh2 ... |
2019-12-18 02:59:18 |
| 128.199.104.242 | attackspambots | 2019-12-17T18:33:37.373275shield sshd\[12221\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.104.242 user=root 2019-12-17T18:33:39.266097shield sshd\[12221\]: Failed password for root from 128.199.104.242 port 41460 ssh2 2019-12-17T18:39:13.025552shield sshd\[13480\]: Invalid user kmuir from 128.199.104.242 port 47502 2019-12-17T18:39:13.030083shield sshd\[13480\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.104.242 2019-12-17T18:39:15.048395shield sshd\[13480\]: Failed password for invalid user kmuir from 128.199.104.242 port 47502 ssh2 |
2019-12-18 02:51:19 |
| 212.120.211.125 | attack | 1576592574 - 12/17/2019 15:22:54 Host: 212.120.211.125/212.120.211.125 Port: 445 TCP Blocked |
2019-12-18 02:39:12 |
| 79.67.58.157 | attack | Lines containing failures of 79.67.58.157 Dec 17 15:05:02 shared01 sshd[12494]: Invalid user pi from 79.67.58.157 port 50972 Dec 17 15:05:02 shared01 sshd[12494]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.67.58.157 Dec 17 15:05:02 shared01 sshd[12496]: Invalid user pi from 79.67.58.157 port 50976 Dec 17 15:05:02 shared01 sshd[12496]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.67.58.157 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=79.67.58.157 |
2019-12-18 02:34:47 |
| 202.29.236.42 | attackspambots | Dec 17 18:51:21 h2177944 sshd\[22907\]: Invalid user poop from 202.29.236.42 port 42947 Dec 17 18:51:21 h2177944 sshd\[22907\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.236.42 Dec 17 18:51:22 h2177944 sshd\[22907\]: Failed password for invalid user poop from 202.29.236.42 port 42947 ssh2 Dec 17 18:58:34 h2177944 sshd\[23045\]: Invalid user plutonium from 202.29.236.42 port 49842 Dec 17 18:58:34 h2177944 sshd\[23045\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.236.42 ... |
2019-12-18 02:40:56 |
| 40.92.66.99 | attack | Dec 17 18:39:05 debian-2gb-vpn-nbg1-1 kernel: [975511.957458] [UFW BLOCK] IN=eth0 OUT= MAC=96:00:00:38:96:44:d2:74:7f:6e:37:e3:08:00 SRC=40.92.66.99 DST=78.46.192.101 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=48882 DF PROTO=TCP SPT=15205 DPT=25 WINDOW=0 RES=0x00 ACK RST URGP=0 |
2019-12-18 02:49:12 |