城市(city): Pretoria
省份(region): Gauteng
国家(country): South Africa
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 196.212.91.54
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 7372
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;196.212.91.54. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021902 1800 900 604800 86400
;; Query time: 38 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 20 13:31:40 CST 2025
;; MSG SIZE rcvd: 106Host 54.91.212.196.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 54.91.212.196.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 218.206.233.198 | attackbotsspam | failed_logins |
2019-11-10 16:49:17 |
| 45.136.110.27 | attackbots | Nov 10 09:23:13 h2177944 kernel: \[6249767.166354\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.110.27 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=42040 PROTO=TCP SPT=48113 DPT=3862 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 10 09:30:37 h2177944 kernel: \[6250211.777263\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.110.27 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=24840 PROTO=TCP SPT=48113 DPT=3894 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 10 09:33:32 h2177944 kernel: \[6250386.310758\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.110.27 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=35800 PROTO=TCP SPT=48113 DPT=3776 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 10 09:37:28 h2177944 kernel: \[6250621.996422\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.110.27 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=53703 PROTO=TCP SPT=48113 DPT=3912 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 10 09:41:42 h2177944 kernel: \[6250876.700416\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.110.27 DST=85.214.117.9 |
2019-11-10 17:01:20 |
| 106.13.54.207 | attackbotsspam | 2019-11-10T09:37:57.022048 sshd[15374]: Invalid user oravis from 106.13.54.207 port 36820 2019-11-10T09:37:57.037184 sshd[15374]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.54.207 2019-11-10T09:37:57.022048 sshd[15374]: Invalid user oravis from 106.13.54.207 port 36820 2019-11-10T09:37:58.819728 sshd[15374]: Failed password for invalid user oravis from 106.13.54.207 port 36820 ssh2 2019-11-10T09:42:38.192666 sshd[15438]: Invalid user co1234kr from 106.13.54.207 port 42240 ... |
2019-11-10 16:53:59 |
| 202.191.132.153 | attack | Nov 10 07:29:34 mc1 kernel: \[4653660.405318\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=202.191.132.153 DST=159.69.205.51 LEN=60 TOS=0x00 PREC=0x00 TTL=49 ID=19696 DF PROTO=TCP SPT=38540 DPT=7001 WINDOW=14600 RES=0x00 SYN URGP=0 Nov 10 07:29:35 mc1 kernel: \[4653661.407713\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=202.191.132.153 DST=159.69.205.51 LEN=60 TOS=0x00 PREC=0x00 TTL=49 ID=19697 DF PROTO=TCP SPT=38540 DPT=7001 WINDOW=14600 RES=0x00 SYN URGP=0 Nov 10 07:29:35 mc1 kernel: \[4653661.418019\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=202.191.132.153 DST=159.69.205.51 LEN=60 TOS=0x00 PREC=0x00 TTL=49 ID=59830 DF PROTO=TCP SPT=58804 DPT=8080 WINDOW=14600 RES=0x00 SYN URGP=0 ... |
2019-11-10 17:03:59 |
| 185.17.41.198 | attack | Nov 10 05:36:14 firewall sshd[4687]: Failed password for invalid user tim from 185.17.41.198 port 44484 ssh2 Nov 10 05:39:38 firewall sshd[4729]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.17.41.198 user=root Nov 10 05:39:40 firewall sshd[4729]: Failed password for root from 185.17.41.198 port 58682 ssh2 ... |
2019-11-10 16:56:32 |
| 103.9.79.179 | attackspam | fail2ban honeypot |
2019-11-10 17:05:52 |
| 79.166.169.247 | attackbots | SpamReport |
2019-11-10 16:36:49 |
| 140.143.73.184 | attack | Nov 10 09:13:31 server sshd\[20917\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.73.184 user=root Nov 10 09:13:33 server sshd\[20917\]: Failed password for root from 140.143.73.184 port 54852 ssh2 Nov 10 09:24:46 server sshd\[23711\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.73.184 user=root Nov 10 09:24:48 server sshd\[23711\]: Failed password for root from 140.143.73.184 port 34612 ssh2 Nov 10 09:30:00 server sshd\[25132\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.73.184 user=ftp ... |
2019-11-10 16:49:40 |
| 1.179.146.156 | attack | 2019-11-10T08:34:33.337084abusebot-8.cloudsearch.cf sshd\[17499\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.179.146.156 user=root |
2019-11-10 16:51:07 |
| 34.93.7.119 | attackbots | fail2ban honeypot |
2019-11-10 16:40:26 |
| 201.122.224.77 | attackspambots | Caught in portsentry honeypot |
2019-11-10 17:06:28 |
| 124.239.191.101 | attackbotsspam | 2019-11-10T09:58:00.630356scmdmz1 sshd\[11621\]: Invalid user qs from 124.239.191.101 port 54738 2019-11-10T09:58:00.633204scmdmz1 sshd\[11621\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.239.191.101 2019-11-10T09:58:02.901810scmdmz1 sshd\[11621\]: Failed password for invalid user qs from 124.239.191.101 port 54738 ssh2 ... |
2019-11-10 17:13:19 |
| 193.33.111.217 | attackbotsspam | Nov 10 08:29:38 vpn01 sshd[25315]: Failed password for root from 193.33.111.217 port 57290 ssh2 ... |
2019-11-10 17:15:40 |
| 165.227.9.184 | attackspam | 2019-11-10T09:10:03.536813lon01.zurich-datacenter.net sshd\[3772\]: Invalid user Kingston from 165.227.9.184 port 16790 2019-11-10T09:10:03.543615lon01.zurich-datacenter.net sshd\[3772\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.9.184 2019-11-10T09:10:05.847598lon01.zurich-datacenter.net sshd\[3772\]: Failed password for invalid user Kingston from 165.227.9.184 port 16790 ssh2 2019-11-10T09:14:51.870240lon01.zurich-datacenter.net sshd\[3902\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.9.184 user=root 2019-11-10T09:14:53.380714lon01.zurich-datacenter.net sshd\[3902\]: Failed password for root from 165.227.9.184 port 54746 ssh2 ... |
2019-11-10 16:44:05 |
| 82.64.94.216 | attackbotsspam | Attempted to connect 2 times to port 22 TCP |
2019-11-10 16:36:32 |