城市(city): unknown
省份(region): unknown
国家(country): Norway
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 163.34.165.242
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 16977
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;163.34.165.242. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020400 1800 900 604800 86400
;; Query time: 84 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 04 21:25:20 CST 2025
;; MSG SIZE rcvd: 107242.165.34.163.in-addr.arpa domain name pointer 242.165-34-163.hydro.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
242.165.34.163.in-addr.arpa name = 242.165-34-163.hydro.com.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 101.109.83.140 | attackbotsspam | Jul 13 22:20:46 mail1 sshd\[8853\]: Invalid user guest from 101.109.83.140 port 50862 Jul 13 22:20:46 mail1 sshd\[8853\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.109.83.140 Jul 13 22:20:48 mail1 sshd\[8853\]: Failed password for invalid user guest from 101.109.83.140 port 50862 ssh2 Jul 13 22:28:41 mail1 sshd\[12726\]: Invalid user nagios from 101.109.83.140 port 42674 Jul 13 22:28:41 mail1 sshd\[12726\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.109.83.140 ... |
2019-11-02 22:20:34 |
| 46.100.230.41 | attack | MultiHost/MultiPort Probe, Scan, Hack - |
2019-11-02 22:43:35 |
| 202.74.238.87 | attackspam | /var/log/messages:Oct 31 01:13:17 sanyalnet-cloud-vps audispd: node=sanyalnet-cloud-vps.freeddns.org type=CRYPTO_SESSION msg=audhostname(1572484397.296:114621): pid=12731 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-server cipher=aes256-ctr ksize=256 mac=hmac-sha1 pfs=ecdh-sha2-nistp256 spid=12732 suid=74 rport=55458 laddr=104.167.106.93 lport=22 exe="/usr/sbin/sshd" hostname=? addr=202.74.238.87 terminal=? res=success' /var/log/messages:Oct 31 01:13:17 sanyalnet-cloud-vps audispd: node=sanyalnet-cloud-vps.freeddns.org type=CRYPTO_SESSION msg=audhostname(1572484397.300:114622): pid=12731 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-client cipher=aes256-ctr ksize=256 mac=hmac-sha1 pfs=ecdh-sha2-nistp256 spid=12732 suid=74 rport=55458 laddr=104.167.106.93 lport=22 exe="/usr/sbin/sshd" hostname=? addr=202.74.238.87 terminal=? res=success' /var/log/messages:Oct 31 01:13:18 sanyalnet-cloud-vps fail2ban.filter[1538]: INFO [sshd] Fou........ ------------------------------- |
2019-11-02 22:40:28 |
| 109.184.180.242 | attack | Automatic report - Banned IP Access |
2019-11-02 22:28:04 |
| 106.12.114.26 | attack | Nov 2 14:13:36 markkoudstaal sshd[21139]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.114.26 Nov 2 14:13:38 markkoudstaal sshd[21139]: Failed password for invalid user dl from 106.12.114.26 port 58534 ssh2 Nov 2 14:19:10 markkoudstaal sshd[21687]: Failed password for root from 106.12.114.26 port 40216 ssh2 |
2019-11-02 22:21:20 |
| 125.18.118.208 | attack | (Nov 2) LEN=52 TTL=114 ID=26094 DF TCP DPT=445 WINDOW=8192 SYN (Nov 2) LEN=52 TTL=116 ID=10501 DF TCP DPT=445 WINDOW=8192 SYN (Nov 2) LEN=52 TTL=116 ID=8406 DF TCP DPT=445 WINDOW=8192 SYN (Nov 1) LEN=52 TTL=117 ID=13282 DF TCP DPT=445 WINDOW=8192 SYN (Nov 1) LEN=52 TTL=117 ID=27502 DF TCP DPT=445 WINDOW=8192 SYN (Nov 1) LEN=52 TTL=117 ID=17564 DF TCP DPT=445 WINDOW=8192 SYN (Nov 1) LEN=52 TTL=115 ID=13118 DF TCP DPT=445 WINDOW=8192 SYN (Oct 31) LEN=52 TTL=117 ID=14540 DF TCP DPT=445 WINDOW=8192 SYN (Oct 30) LEN=52 TTL=114 ID=25592 DF TCP DPT=445 WINDOW=8192 SYN (Oct 30) LEN=52 TTL=117 ID=31931 DF TCP DPT=445 WINDOW=8192 SYN (Oct 30) LEN=52 TTL=117 ID=14626 DF TCP DPT=445 WINDOW=8192 SYN (Oct 27) LEN=52 TTL=116 ID=10962 DF TCP DPT=445 WINDOW=8192 SYN |
2019-11-02 22:34:23 |
| 185.66.213.64 | attackspam | Nov 2 15:15:28 server sshd\[17884\]: Invalid user riakcs from 185.66.213.64 Nov 2 15:15:28 server sshd\[17884\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.66.213.64 Nov 2 15:15:30 server sshd\[17884\]: Failed password for invalid user riakcs from 185.66.213.64 port 60082 ssh2 Nov 2 15:25:16 server sshd\[20573\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.66.213.64 user=root Nov 2 15:25:18 server sshd\[20573\]: Failed password for root from 185.66.213.64 port 45756 ssh2 ... |
2019-11-02 22:42:46 |
| 149.56.131.73 | attack | Invalid user cema from 149.56.131.73 port 41890 |
2019-11-02 22:45:40 |
| 221.226.63.54 | attackspam | Nov 2 15:00:12 legacy sshd[26031]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.226.63.54 Nov 2 15:00:15 legacy sshd[26031]: Failed password for invalid user hfsql from 221.226.63.54 port 17247 ssh2 Nov 2 15:05:44 legacy sshd[26140]: Failed password for root from 221.226.63.54 port 34212 ssh2 ... |
2019-11-02 22:16:46 |
| 106.75.103.35 | attackbotsspam | 2019-11-02T13:01:46.275730abusebot-5.cloudsearch.cf sshd\[24420\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.103.35 user=bin |
2019-11-02 22:44:20 |
| 43.251.37.21 | attackbots | Nov 2 14:00:07 vmanager6029 sshd\[27471\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.251.37.21 user=root Nov 2 14:00:10 vmanager6029 sshd\[27471\]: Failed password for root from 43.251.37.21 port 55968 ssh2 Nov 2 14:05:18 vmanager6029 sshd\[27665\]: Invalid user ubuntu from 43.251.37.21 port 44575 |
2019-11-02 22:46:18 |
| 113.246.28.19 | attack | Automatic report - Port Scan Attack |
2019-11-02 22:23:25 |
| 103.76.190.210 | attackspambots | postfix (unknown user, SPF fail or relay access denied) |
2019-11-02 22:22:04 |
| 77.55.235.226 | attack | PostgreSQL port 5432 |
2019-11-02 22:09:01 |
| 185.26.99.6 | attackspambots | slow and persistent scanner |
2019-11-02 22:37:17 |