城市(city): unknown
省份(region): unknown
国家(country): Mexico
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 189.143.164.194
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 48948
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;189.143.164.194. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021700 1800 900 604800 86400
;; Query time: 15 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 17 16:59:09 CST 2025
;; MSG SIZE rcvd: 108194.164.143.189.in-addr.arpa domain name pointer dsl-189-143-164-194-dyn.prod-infinitum.com.mx.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
194.164.143.189.in-addr.arpa name = dsl-189-143-164-194-dyn.prod-infinitum.com.mx.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 212.64.79.37 | attack | Jun 21 01:25:52 vpn01 sshd[29693]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.79.37 Jun 21 01:25:54 vpn01 sshd[29693]: Failed password for invalid user temp from 212.64.79.37 port 57926 ssh2 ... |
2020-06-21 08:15:52 |
| 64.225.102.53 | attack | ET CINS Active Threat Intelligence Poor Reputation IP group 60 - port: 25522 proto: TCP cat: Misc Attack |
2020-06-21 08:05:34 |
| 185.39.11.56 | attackbots | Jun 21 01:40:02 debian-2gb-nbg1-2 kernel: \[14955084.539145\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=185.39.11.56 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=39360 PROTO=TCP SPT=57597 DPT=6649 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-06-21 07:54:07 |
| 188.167.106.191 | attack | xmlrpc attack |
2020-06-21 08:17:36 |
| 45.227.254.30 | attackbots |
|
2020-06-21 08:06:45 |
| 94.102.50.137 | attackspambots | Jun 21 01:20:50 debian-2gb-nbg1-2 kernel: \[14953932.714725\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=94.102.50.137 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=24608 PROTO=TCP SPT=51945 DPT=4822 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-06-21 07:58:39 |
| 114.35.166.20 | attack | Honeypot attack, port: 81, PTR: 114-35-166-20.HINET-IP.hinet.net. |
2020-06-21 08:18:54 |
| 49.72.212.22 | attack | ET CINS Active Threat Intelligence Poor Reputation IP group 36 - port: 1304 proto: TCP cat: Misc Attack |
2020-06-21 08:06:29 |
| 137.74.132.175 | attack | Jun 21 02:11:08 meumeu sshd[1058755]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.132.175 user=root Jun 21 02:11:10 meumeu sshd[1058755]: Failed password for root from 137.74.132.175 port 41580 ssh2 Jun 21 02:14:10 meumeu sshd[1058908]: Invalid user zwj from 137.74.132.175 port 41152 Jun 21 02:14:10 meumeu sshd[1058908]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.132.175 Jun 21 02:14:10 meumeu sshd[1058908]: Invalid user zwj from 137.74.132.175 port 41152 Jun 21 02:14:13 meumeu sshd[1058908]: Failed password for invalid user zwj from 137.74.132.175 port 41152 ssh2 Jun 21 02:17:10 meumeu sshd[1059002]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.132.175 user=root Jun 21 02:17:12 meumeu sshd[1059002]: Failed password for root from 137.74.132.175 port 40738 ssh2 Jun 21 02:20:20 meumeu sshd[1059215]: Invalid user nvidia from 137.74.132.175 port 40322 ... |
2020-06-21 08:23:11 |
| 94.156.80.214 | attackspam | Honeypot attack, port: 81, PTR: PTR record not found |
2020-06-21 08:11:36 |
| 102.129.224.10 | attack |
|
2020-06-21 07:57:15 |
| 92.222.92.114 | attack | Jun 21 00:03:14 rush sshd[22751]: Failed password for root from 92.222.92.114 port 59456 ssh2 Jun 21 00:06:28 rush sshd[22912]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.222.92.114 Jun 21 00:06:31 rush sshd[22912]: Failed password for invalid user PPSNEPL from 92.222.92.114 port 58946 ssh2 ... |
2020-06-21 08:15:28 |
| 185.39.11.29 | attackbotsspam | =Multiport scan 762 ports : 2659 2660 2661 2662 2663 2664 2665 2666 2667 2668 2669 2670 2671 2672 2673 2674 2675 2676 2677 2678 2679 2680 2681 2682 2683 2684 2685 2686 2687 2688 2689 2690 2691 2692 2693 2694 2695 2696 2697 2698 2699 2700 2701 2702 2703 2704 2705 2706 2707 2708 2709 2710 2711 2712 2713 2714 2715 2716 2717 2718 2719 2720 2721 2722 2723 2724 2725 2726 2727 2728 2729 2730 2731 2732 2733 2734 2735 2736 2737 2738 2739 2740 2741 2742 2743 2744 2745 2746 2747 2748 2749 2750 2751 2752 2753 2754 5042 5043 5044 5045 5046 5047 5048 5049 5050 5051 5052 5053 5054 5055 5056 5057 5058 5059 5060 5061 5062 5063 5064 5065 5066 5067 5068 5069 5070 5071 5072 5073 5074 5075 5076 5077 5078 5079 5080 5081 5082 5083 5084 5085 5086 5087 5088 5089 5090 5091 5092 5093 5094 5095 5096 5097 5098 5099 5100 5101 5102 5103 5104 5105 5106 5107 5108 5109 5110 5111 5112 5113 5114 5115 5116 5117 5118 5119 5120 5121 5122 5123 5124 5125 5126 5127 5128 5129 5130 5131 5132 5133 5134 5135 5136 5137 7284 7285 728.... |
2020-06-21 07:54:54 |
| 185.153.196.126 | attack | RU_RM Engineering LLC_<177>1592696247 [1:2402000:5581] ET DROP Dshield Block Listed Source group 1 [Classification: Misc Attack] [Priority: 2]: |
2020-06-21 07:53:53 |
| 141.98.81.42 | attack | Jun 21 00:58:47 haigwepa sshd[31657]: Failed password for root from 141.98.81.42 port 33171 ssh2 Jun 21 00:59:12 haigwepa sshd[31755]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.98.81.42 ... |
2020-06-21 07:56:22 |