城市(city): Centennial
省份(region): Colorado
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 24.166.139.106
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 43436
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;24.166.139.106. IN A
;; AUTHORITY SECTION:
. 577 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020020101 1800 900 604800 86400
;; Query time: 129 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 01 16:36:59 CST 2020
;; MSG SIZE rcvd: 118Host 106.139.166.24.in-addr.arpa not found: 2(SERVFAIL)
;; Got SERVFAIL reply from 100.100.2.136, trying next server
;; Got SERVFAIL reply from 100.100.2.138, trying next server
Server: 100.100.2.138
Address: 100.100.2.138#53
** server can't find 106.139.166.24.in-addr.arpa: SERVFAIL
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 1.0.184.56 | attackspam | Icarus honeypot on github |
2020-08-17 14:47:05 |
| 223.111.157.138 | attack | spam |
2020-08-17 14:37:26 |
| 45.129.33.2 | attackspam | Aug 17 07:00:11 *hidden* kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:05:0d:89:f8:66:f2:68:66:ff:08:00 SRC=45.129.33.2 DST=77.73.69.240 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=42658 PROTO=TCP SPT=46087 DPT=36299 WINDOW=1024 RES=0x00 SYN URGP=0 Aug 17 07:00:27 *hidden* kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:05:0d:89:f8:66:f2:68:66:ff:08:00 SRC=45.129.33.2 DST=77.73.69.240 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=30051 PROTO=TCP SPT=46087 DPT=36309 WINDOW=1024 RES=0x00 SYN URGP=0 Aug 17 07:00:35 *hidden* kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:05:0d:89:f8:66:f2:68:66:ff:08:00 SRC=45.129.33.2 DST=77.73.69.240 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=21875 PROTO=TCP SPT=46087 DPT=36324 WINDOW=1024 RES=0x00 SYN URGP=0 Aug 17 07:01:36 *hidden* kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:05:0d:89:f8:66:f2:68:66:ff:08:00 SRC=45.129.33.2 DST=77.73.69.240 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=39627 PROTO=TCP SPT=46087 DPT=36393 WINDOW=1024 RES=0x00 SYN URGP=0 Aug 17 07:02:08 *hidden* kernel: ... |
2020-08-17 14:36:08 |
| 37.32.125.58 | attack | spam |
2020-08-17 14:42:02 |
| 50.234.173.102 | attackbotsspam | 2020-08-17T00:58:00.803226linuxbox-skyline sshd[142941]: Invalid user charlotte from 50.234.173.102 port 47152 ... |
2020-08-17 14:59:56 |
| 90.249.110.127 | attack | 2020-08-17T03:58:34.624Z CLOSE host=90.249.110.127 port=49428 fd=4 time=20.018 bytes=23 ... |
2020-08-17 14:30:48 |
| 171.235.151.0 | attack | spam |
2020-08-17 14:43:00 |
| 112.35.169.163 | attackbotsspam | Bruteforce detected by fail2ban |
2020-08-17 14:39:11 |
| 220.172.50.102 | attackbotsspam | Aug 17 05:55:56 ns sshd[16474]: Connection from 220.172.50.102 port 1797 on 134.119.36.27 port 22 Aug 17 05:55:58 ns sshd[16474]: Invalid user casper from 220.172.50.102 port 1797 Aug 17 05:55:58 ns sshd[16474]: Failed password for invalid user casper from 220.172.50.102 port 1797 ssh2 Aug 17 05:55:58 ns sshd[16474]: Received disconnect from 220.172.50.102 port 1797:11: Bye Bye [preauth] Aug 17 05:55:58 ns sshd[16474]: Disconnected from 220.172.50.102 port 1797 [preauth] Aug 17 06:00:24 ns sshd[3914]: Connection from 220.172.50.102 port 4068 on 134.119.36.27 port 22 Aug 17 06:00:26 ns sshd[3914]: Invalid user 123QWEasdzxc from 220.172.50.102 port 4068 Aug 17 06:00:26 ns sshd[3914]: Failed password for invalid user 123QWEasdzxc from 220.172.50.102 port 4068 ssh2 Aug 17 06:00:27 ns sshd[3914]: Received disconnect from 220.172.50.102 port 4068:11: Bye Bye [preauth] Aug 17 06:00:27 ns sshd[3914]: Disconnected from 220.172.50.102 port 4068 [preauth] Aug 17 06:05:18 ns sshd[2........ ------------------------------- |
2020-08-17 14:51:41 |
| 195.54.160.228 | attackbots |
|
2020-08-17 14:28:00 |
| 161.0.72.11 | attackbots | spam |
2020-08-17 14:29:09 |
| 118.89.228.58 | attackspambots | Bruteforce detected by fail2ban |
2020-08-17 14:40:58 |
| 103.130.214.44 | attackspambots | Failed password for invalid user rh from 103.130.214.44 port 58474 ssh2 |
2020-08-17 14:39:37 |
| 111.229.167.10 | attack | $f2bV_matches |
2020-08-17 14:59:10 |
| 117.144.189.69 | attack | Aug 17 10:33:47 gw1 sshd[6647]: Failed password for root from 117.144.189.69 port 42879 ssh2 Aug 17 10:39:08 gw1 sshd[6897]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.144.189.69 ... |
2020-08-17 14:33:00 |