城市(city): unknown
省份(region): unknown
国家(country): United States
运营商(isp): AT&T
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 12.50.252.106
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 13001
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;12.50.252.106. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025011901 1800 900 604800 86400
;; Query time: 37 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jan 20 12:00:28 CST 2025
;; MSG SIZE rcvd: 106106.252.50.12.in-addr.arpa domain name pointer 12-50-252-106.att-inc.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
106.252.50.12.in-addr.arpa name = 12-50-252-106.att-inc.com.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 138.197.171.79 | attackspambots | SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found |
2020-09-10 17:05:45 |
| 92.223.89.149 | spam | Lot's of webspam like this: Your e-mail evgenijkrsi@gmail.com Your name Вам перевод 121342 р. https://tinyurl.com/y3rmcxyf Your message Вам перевод 127672 руб. https://tinyurl.com/y297nux9 |
2020-09-10 16:35:41 |
| 118.161.140.235 | attack | Icarus honeypot on github |
2020-09-10 16:44:37 |
| 222.35.81.249 | attackbots | ... |
2020-09-10 16:47:13 |
| 79.184.214.78 | attack | Wordpress attack |
2020-09-10 16:52:32 |
| 128.199.99.204 | attackspam | 2020-09-09 17:47:24.838121-0500 localhost sshd[28856]: Failed password for root from 128.199.99.204 port 60458 ssh2 |
2020-09-10 16:31:03 |
| 189.134.23.135 | attackbotsspam | 2020-09-09 18:50:11 wonderland sshd[3997]: Invalid user DUP from 189.134.23.135 port 53748 |
2020-09-10 17:07:12 |
| 119.45.34.52 | attackbotsspam | $f2bV_matches |
2020-09-10 16:33:57 |
| 36.155.115.72 | attackspambots | $f2bV_matches |
2020-09-10 16:38:46 |
| 122.51.234.65 | attackbots | (sshd) Failed SSH login from 122.51.234.65 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 10 05:35:56 vps sshd[14567]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.234.65 user=root Sep 10 05:35:57 vps sshd[14567]: Failed password for root from 122.51.234.65 port 59360 ssh2 Sep 10 05:53:13 vps sshd[22679]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.234.65 user=root Sep 10 05:53:14 vps sshd[22679]: Failed password for root from 122.51.234.65 port 46396 ssh2 Sep 10 05:58:34 vps sshd[25060]: Invalid user victor from 122.51.234.65 port 43230 |
2020-09-10 16:41:50 |
| 165.73.80.235 | attack | Lines containing failures of 165.73.80.235 (max 1000) Sep 7 10:04:49 ks3370873 sshd[158090]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.73.80.235 user=r.r Sep 7 10:04:51 ks3370873 sshd[158090]: Failed password for r.r from 165.73.80.235 port 38350 ssh2 Sep 7 10:04:52 ks3370873 sshd[158090]: Received disconnect from 165.73.80.235 port 38350:11: Bye Bye [preauth] Sep 7 10:04:52 ks3370873 sshd[158090]: Disconnected from authenticating user r.r 165.73.80.235 port 38350 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=165.73.80.235 |
2020-09-10 16:49:20 |
| 148.255.89.135 | attack | firewall-block, port(s): 445/tcp |
2020-09-10 17:03:28 |
| 121.58.212.108 | attackspam | Sep 10 08:46:24 localhost sshd[110983]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.58.212.108 user=root Sep 10 08:46:27 localhost sshd[110983]: Failed password for root from 121.58.212.108 port 42202 ssh2 Sep 10 08:50:50 localhost sshd[111523]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.58.212.108 user=root Sep 10 08:50:53 localhost sshd[111523]: Failed password for root from 121.58.212.108 port 44088 ssh2 Sep 10 08:55:15 localhost sshd[112052]: Invalid user proxy from 121.58.212.108 port 45974 ... |
2020-09-10 17:08:16 |
| 162.144.38.240 | attackbots |
|
2020-09-10 16:51:56 |
| 14.254.179.37 | attack | Icarus honeypot on github |
2020-09-10 16:58:18 |