城市(city): unknown
省份(region): unknown
国家(country): Italy
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 2.196.94.94
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 4000
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;2.196.94.94. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012100 1800 900 604800 86400
;; Query time: 12 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jan 21 18:49:57 CST 2025
;; MSG SIZE rcvd: 104Host 94.94.196.2.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 94.94.196.2.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 153.3.122.159 | attackbots | Jun 22 06:46:16 apollo sshd\[28035\]: Failed password for root from 153.3.122.159 port 48878 ssh2Jun 22 06:46:18 apollo sshd\[28035\]: Failed password for root from 153.3.122.159 port 48878 ssh2Jun 22 06:46:21 apollo sshd\[28035\]: Failed password for root from 153.3.122.159 port 48878 ssh2 ... |
2019-06-22 19:09:28 |
| 46.101.240.197 | attackbotsspam | SSH Server BruteForce Attack |
2019-06-22 18:41:15 |
| 213.118.198.82 | attack | leo_www |
2019-06-22 18:49:48 |
| 194.28.115.244 | attackbots | Scanning (more than 2 packets) random ports - tries to find possible vulnerable services |
2019-06-22 18:51:59 |
| 52.160.192.165 | attack | Jun 22 00:24:06 localhost kernel: [12421639.493846] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:aa:c1:08:00 SRC=52.160.192.165 DST=[mungedIP2] LEN=68 TOS=0x00 PREC=0x00 TTL=244 ID=13517 PROTO=UDP SPT=30219 DPT=111 LEN=48 Jun 22 00:24:06 localhost kernel: [12421639.493875] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:aa:c1:08:00 SRC=52.160.192.165 DST=[mungedIP2] LEN=68 TOS=0x00 PREC=0x00 TTL=244 ID=13517 PROTO=UDP SPT=30219 DPT=111 LEN=48 Jun 22 00:24:18 localhost kernel: [12421652.071158] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:aa:c1:08:00 SRC=52.160.192.165 DST=[mungedIP2] LEN=68 TOS=0x00 PREC=0x00 TTL=244 ID=23253 PROTO=UDP SPT=30219 DPT=111 LEN=48 Jun 22 00:24:18 localhost kernel: [12421652.071182] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:aa:c1:08:00 SRC=52.160.192.165 DST=[mungedIP2] LEN=68 TOS=0x00 PREC=0x00 TTL=244 ID=23253 PROTO=UDP SPT=30219 DPT=111 LEN=48 |
2019-06-22 18:55:20 |
| 14.215.46.94 | attackspambots | Jun 22 08:54:50 MK-Soft-Root1 sshd\[32667\]: Invalid user minecraft from 14.215.46.94 port 33004 Jun 22 08:54:51 MK-Soft-Root1 sshd\[32667\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.215.46.94 Jun 22 08:54:53 MK-Soft-Root1 sshd\[32667\]: Failed password for invalid user minecraft from 14.215.46.94 port 33004 ssh2 ... |
2019-06-22 19:10:53 |
| 94.176.64.125 | attackbots | (Jun 22) LEN=40 TTL=245 ID=65385 DF TCP DPT=23 WINDOW=14600 SYN (Jun 22) LEN=40 TTL=245 ID=64385 DF TCP DPT=23 WINDOW=14600 SYN (Jun 22) LEN=40 TTL=245 ID=10947 DF TCP DPT=23 WINDOW=14600 SYN (Jun 22) LEN=40 TTL=245 ID=55316 DF TCP DPT=23 WINDOW=14600 SYN (Jun 22) LEN=40 TTL=245 ID=11497 DF TCP DPT=23 WINDOW=14600 SYN (Jun 21) LEN=40 TTL=245 ID=60296 DF TCP DPT=23 WINDOW=14600 SYN (Jun 21) LEN=40 TTL=245 ID=34330 DF TCP DPT=23 WINDOW=14600 SYN (Jun 21) LEN=40 TTL=245 ID=61655 DF TCP DPT=23 WINDOW=14600 SYN (Jun 21) LEN=40 TTL=245 ID=61512 DF TCP DPT=23 WINDOW=14600 SYN (Jun 21) LEN=40 TTL=245 ID=36739 DF TCP DPT=23 WINDOW=14600 SYN (Jun 21) LEN=40 TTL=245 ID=31358 DF TCP DPT=23 WINDOW=14600 SYN (Jun 21) LEN=40 TTL=245 ID=53313 DF TCP DPT=23 WINDOW=14600 SYN (Jun 21) LEN=40 TTL=245 ID=64231 DF TCP DPT=23 WINDOW=14600 SYN (Jun 20) LEN=40 TTL=245 ID=32061 DF TCP DPT=23 WINDOW=14600 SYN (Jun 20) LEN=40 TTL=245 ID=1969 DF TCP DPT=23 WINDOW=14600 S... |
2019-06-22 18:56:44 |
| 162.255.87.22 | attack | Lines containing failures of 162.255.87.22 Jun 17 13:38:13 metroid sshd[20012]: User r.r from 162.255.87.22 not allowed because listed in DenyUsers Jun 17 13:38:13 metroid sshd[20012]: Received disconnect from 162.255.87.22 port 33012:11: Bye Bye [preauth] Jun 17 13:38:13 metroid sshd[20012]: Disconnected from invalid user r.r 162.255.87.22 port 33012 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=162.255.87.22 |
2019-06-22 18:56:07 |
| 113.227.160.237 | attack | Unauthorised access (Jun 22) SRC=113.227.160.237 LEN=40 TTL=49 ID=59998 TCP DPT=23 WINDOW=14980 SYN |
2019-06-22 18:57:12 |
| 185.36.81.175 | attackbotsspam | Jun 22 10:37:03 postfix/smtpd: warning: unknown[185.36.81.175]: SASL LOGIN authentication failed |
2019-06-22 19:06:29 |
| 165.22.110.127 | attackbotsspam | Jun 22 05:19:54 localhost sshd\[126671\]: Invalid user rong from 165.22.110.127 port 34164 Jun 22 05:19:54 localhost sshd\[126671\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.110.127 Jun 22 05:19:57 localhost sshd\[126671\]: Failed password for invalid user rong from 165.22.110.127 port 34164 ssh2 Jun 22 05:21:26 localhost sshd\[126738\]: Invalid user bserver from 165.22.110.127 port 50008 Jun 22 05:21:26 localhost sshd\[126738\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.110.127 ... |
2019-06-22 18:36:29 |
| 148.233.0.22 | attackspam | Jun 22 06:23:54 s64-1 sshd[8645]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.233.0.22 Jun 22 06:23:57 s64-1 sshd[8645]: Failed password for invalid user eng from 148.233.0.22 port 57523 ssh2 Jun 22 06:25:19 s64-1 sshd[8740]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.233.0.22 ... |
2019-06-22 18:37:02 |
| 79.85.235.126 | attack | Jun 22 06:24:37 srv02 sshd\[9127\]: Invalid user test from 79.85.235.126 port 45170 Jun 22 06:24:37 srv02 sshd\[9127\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.85.235.126 Jun 22 06:24:39 srv02 sshd\[9127\]: Failed password for invalid user test from 79.85.235.126 port 45170 ssh2 |
2019-06-22 18:51:41 |
| 50.113.15.242 | attackspambots | NAME : RRWE CIDR : 50.113.0.0/16 | STATUS : 200 ROBOT {Looking for resource vulnerabilities} DDoS Attack USA - Colorado - block certain countries :) IP: 50.113.15.242 Denial-of-Service Attack (DoS) Detected and Blocked by ADMIN - data recovery https://help-dysk.pl |
2019-06-22 19:05:33 |
| 198.108.67.83 | attackspambots | NAME : MICH-42 CIDR : 198.108.0.0/14 SYN Flood DDoS Attack USA - Michigan - block certain countries :) IP: 198.108.67.83 Denial-of-Service Attack (DoS) Detected and Blocked by ADMIN - data recovery https://help-dysk.pl |
2019-06-22 18:43:56 |