城市(city): unknown
省份(region): unknown
国家(country): Sweden
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 164.4.16.29
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 35977
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;164.4.16.29. IN A
;; AUTHORITY SECTION:
. 596 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021800 1800 900 604800 86400
;; Query time: 59 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 14:45:25 CST 2022
;; MSG SIZE rcvd: 104Host 29.16.4.164.in-addr.arpa not found: 2(SERVFAIL)
b';; Truncated, retrying in TCP mode.
29.16.4.164.in-addr.arpa name = coromant.nl.
29.16.4.164.in-addr.arpa name = coroguide.com.
29.16.4.164.in-addr.arpa name = coromant.com.
29.16.4.164.in-addr.arpa name = prometec.de.
29.16.4.164.in-addr.arpa name = mysandvikcoromant.com.
29.16.4.164.in-addr.arpa name = www.compositemachining.org.
29.16.4.164.in-addr.arpa name = coromantgw.prod.tibp.sandvik.com.
29.16.4.164.in-addr.arpa name = www.coroguide.com.
29.16.4.164.in-addr.arpa name = sandvikcoromant.com.
29.16.4.164.in-addr.arpa name = coromant.net.
29.16.4.164.in-addr.arpa name = coromant.pl.
29.16.4.164.in-addr.arpa name = drillingknowledge.com.
29.16.4.164.in-addr.arpa name = www.prometec.de.
29.16.4.164.in-addr.arpa name = aeroknowledge.com.
29.16.4.164.in-addr.arpa name = milling.sandvikcoromant.
29.16.4.164.in-addr.arpa name = drillingknowledge.co.uk.
29.16.4.164.in-addr.arpa name = www.reconditioning.walter.
29.16.4.164.in-addr.arpa name = nic.sandvikcoromant.
29.16.4.164.in-addr.arpa name = metalcuttingknowledge.com.
29.16.4.164.in-addr.arpa name = compositemachining.org.
29.16.4.164.in-addr.arpa name = aero-knowledge.com.
29.16.4.164.in-addr.arpa name = home.sandvikcoromant.
29.16.4.164.in-addr.arpa name = www.sandvikcoromant.
29.16.4.164.in-addr.arpa name = sandvik.coromant.com.
29.16.4.164.in-addr.arpa name = coromant.org.
29.16.4.164.in-addr.arpa name = www.home.sandvikcoromant.
29.16.4.164.in-addr.arpa name = sandvikcoromant.org.
29.16.4.164.in-addr.arpa name = www.milling.sandvikcoromant.
Authoritative answers can be found from:
'| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 125.99.46.49 | attack | Jun 2 12:48:38 localhost sshd[45081]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.99.46.49 user=root Jun 2 12:48:40 localhost sshd[45081]: Failed password for root from 125.99.46.49 port 56684 ssh2 Jun 2 12:52:38 localhost sshd[45558]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.99.46.49 user=root Jun 2 12:52:40 localhost sshd[45558]: Failed password for root from 125.99.46.49 port 60938 ssh2 Jun 2 12:56:39 localhost sshd[46019]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.99.46.49 user=root Jun 2 12:56:41 localhost sshd[46019]: Failed password for root from 125.99.46.49 port 36952 ssh2 ... |
2020-06-02 20:58:09 |
| 138.197.5.191 | attackspambots | 20 attempts against mh-ssh on cloud |
2020-06-02 21:00:35 |
| 36.230.174.194 | attackspambots | Jun 2 14:08:48 fhem-rasp sshd[8139]: Failed password for root from 36.230.174.194 port 41178 ssh2 Jun 2 14:08:50 fhem-rasp sshd[8139]: Connection closed by authenticating user root 36.230.174.194 port 41178 [preauth] ... |
2020-06-02 20:26:25 |
| 117.199.224.120 | attackspam | 1591099706 - 06/02/2020 14:08:26 Host: 117.199.224.120/117.199.224.120 Port: 445 TCP Blocked |
2020-06-02 21:03:29 |
| 128.199.121.32 | attackspam | Jun 2 14:16:57 vps647732 sshd[28064]: Failed password for root from 128.199.121.32 port 57776 ssh2 ... |
2020-06-02 20:24:54 |
| 223.18.227.3 | attackspambots | Jun 2 14:08:34 fhem-rasp sshd[7981]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.18.227.3 user=root Jun 2 14:08:36 fhem-rasp sshd[7981]: Failed password for root from 223.18.227.3 port 57591 ssh2 ... |
2020-06-02 20:47:49 |
| 23.129.64.205 | attackbotsspam | Jun 2 13:08:53 cdc sshd[20819]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.129.64.205 user=sshd Jun 2 13:08:55 cdc sshd[20819]: Failed password for invalid user sshd from 23.129.64.205 port 34333 ssh2 |
2020-06-02 20:23:33 |
| 112.85.42.188 | attackbotsspam | 06/02/2020-08:23:16.368894 112.85.42.188 Protocol: 6 ET SCAN Potential SSH Scan |
2020-06-02 20:25:33 |
| 201.219.50.217 | attackbots | Lines containing failures of 201.219.50.217 Jun 1 20:00:35 g sshd[7731]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.219.50.217 user=r.r Jun 1 20:00:37 g sshd[7731]: Failed password for r.r from 201.219.50.217 port 57752 ssh2 Jun 1 20:00:37 g sshd[7731]: Received disconnect from 201.219.50.217 port 57752:11: Bye Bye [preauth] Jun 1 20:00:37 g sshd[7731]: Disconnected from authenticating user r.r 201.219.50.217 port 57752 [preauth] Jun 1 20:05:16 g sshd[7785]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.219.50.217 user=r.r Jun 1 20:05:18 g sshd[7785]: Failed password for r.r from 201.219.50.217 port 44962 ssh2 Jun 1 20:05:18 g sshd[7785]: Received disconnect from 201.219.50.217 port 44962:11: Bye Bye [preauth] Jun 1 20:05:18 g sshd[7785]: Disconnected from authenticating user r.r 201.219.50.217 port 44962 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view. |
2020-06-02 20:55:35 |
| 58.233.109.177 | attackbots | Jun 2 14:08:48 fhem-rasp sshd[8137]: Failed password for root from 58.233.109.177 port 12480 ssh2 Jun 2 14:08:50 fhem-rasp sshd[8137]: Connection closed by authenticating user root 58.233.109.177 port 12480 [preauth] ... |
2020-06-02 20:25:50 |
| 223.17.100.194 | attack | Jun 2 14:08:37 fhem-rasp sshd[8022]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.17.100.194 user=root Jun 2 14:08:40 fhem-rasp sshd[8022]: Failed password for root from 223.17.100.194 port 54161 ssh2 ... |
2020-06-02 20:45:38 |
| 221.124.117.55 | attackspambots | Jun 2 14:08:39 fhem-rasp sshd[8040]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.124.117.55 Jun 2 14:08:40 fhem-rasp sshd[8040]: Failed password for invalid user admin from 221.124.117.55 port 36446 ssh2 ... |
2020-06-02 20:44:48 |
| 212.48.66.26 | attack | Jun 1 00:45:03 emma postfix/smtpd[29112]: connect from vps23280903.123-vps.co.uk[212.48.66.26] Jun 1 00:45:03 emma postfix/smtpd[29112]: Anonymous TLS connection established from vps23280903.123-vps.co.uk[212.48.66.26]: TLSv1.2 whostnameh cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bhostnames) Jun 1 00:45:05 emma postfix/policy-spf[29115]: Policy action=PREPEND Received-SPF: none (elephant-dighostnameal.co.uk: No applicable sender policy available) receiver=x@x Jun x@x Jun 1 00:45:11 emma postfix/smtpd[29112]: disconnect from vps23280903.123-vps.co.uk[212.48.66.26] Jun 1 01:55:03 emma postfix/smtpd[32248]: connect from vps23280903.123-vps.co.uk[212.48.66.26] Jun 1 01:55:03 emma postfix/smtpd[32248]: Anonymous TLS connection established from vps23280903.123-vps.co.uk[212.48.66.26]: TLSv1.2 whostnameh cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bhostnames) Jun 1 01:55:04 emma postfix/policy-spf[32251]: Policy action=PREPEND Received-SPF: none (elephant-dighostnamea........ ------------------------------- |
2020-06-02 20:45:56 |
| 159.203.177.191 | attackspambots | Jun 2 13:59:46 cloud sshd[7337]: Failed password for root from 159.203.177.191 port 37518 ssh2 |
2020-06-02 20:55:16 |
| 212.129.57.201 | attackbotsspam | Jun 2 02:03:07 php1 sshd\[18152\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.129.57.201 user=root Jun 2 02:03:09 php1 sshd\[18152\]: Failed password for root from 212.129.57.201 port 52160 ssh2 Jun 2 02:06:02 php1 sshd\[18356\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.129.57.201 user=root Jun 2 02:06:04 php1 sshd\[18356\]: Failed password for root from 212.129.57.201 port 57264 ssh2 Jun 2 02:08:55 php1 sshd\[18543\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.129.57.201 user=root |
2020-06-02 20:22:13 |