城市(city): unknown
省份(region): unknown
国家(country): unknown
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
bb'
; <<>> DiG 9.11.3-1ubuntu1.15-Ubuntu <<>> 2406:3100:1010:100::5
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 15722
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 65494
;; QUESTION SECTION:
;2406:3100:1010:100::5. IN A
;; Query time: 0 msec
;; SERVER: 127.0.0.53#53(127.0.0.53)
;; WHEN: Sat Feb 19 02:59:07 CST 2022
;; MSG SIZE rcvd: 50
'Host 5.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.1.0.0.1.0.1.0.0.1.3.6.0.4.2.ip6.arpa not found: 2(SERVFAIL)
b'5.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.1.0.0.1.0.1.0.0.1.3.6.0.4.2.ip6.arpa name = www.kasetsart.org.
5.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.1.0.0.1.0.1.0.0.1.3.6.0.4.2.ip6.arpa name = www.kasetsart.education.
5.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.1.0.0.1.0.1.0.0.1.3.6.0.4.2.ip6.arpa name = ku.ac.th.
5.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.1.0.0.1.0.1.0.0.1.3.6.0.4.2.ip6.arpa name = ku.th.
5.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.1.0.0.1.0.1.0.0.1.3.6.0.4.2.ip6.arpa name = www.ku.ac.th.
5.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.1.0.0.1.0.1.0.0.1.3.6.0.4.2.ip6.arpa name = www.ku.th.
5.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.1.0.0.1.0.1.0.0.1.3.6.0.4.2.ip6.arpa name = www.kasetsart-university.org.
5.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.1.0.0.1.0.1.0.0.1.3.6.0.4.2.ip6.arpa name = kasetsart-university.org.
5.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.1.0.0.1.0.1.0.0.1.3.6.0.4.2.ip6.arpa name = kasetsart.org.
5.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.1.0.0.1.0.1.0.0.1.3.6.0.4.2.ip6.arpa name = kasetsart.education.
5.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.1.0.0.1.0.1.0.0.1.3.6.0.4.2.ip6.arpa name = www.kasetsart.university.
5.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.1.0.0.1.0.1.0.0.1.3.6.0.4.2.ip6.arpa name = kasetsart.university.
Authoritative answers can be found from:
'| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 177.102.18.62 | attackbots | Unauthorized connection attempt from IP address 177.102.18.62 on Port 445(SMB) |
2020-06-24 08:12:51 |
| 117.50.34.192 | attack | 21 attempts against mh-misbehave-ban on hail |
2020-06-24 12:01:11 |
| 218.25.130.220 | attackspam | DATE:2020-06-24 05:58:12, IP:218.25.130.220, PORT:ssh SSH brute force auth (docker-dc) |
2020-06-24 12:06:43 |
| 49.233.12.222 | attackbotsspam | Jun 23 18:32:49 firewall sshd[24992]: Invalid user consultant from 49.233.12.222 Jun 23 18:32:51 firewall sshd[24992]: Failed password for invalid user consultant from 49.233.12.222 port 49492 ssh2 Jun 23 18:34:14 firewall sshd[25040]: Invalid user nikhil from 49.233.12.222 ... |
2020-06-24 08:13:29 |
| 65.78.99.127 | attack | 2020-06-24T07:24:37.629304billing sshd[22294]: Invalid user test3 from 65.78.99.127 port 53038 2020-06-24T07:24:39.382193billing sshd[22294]: Failed password for invalid user test3 from 65.78.99.127 port 53038 ssh2 2020-06-24T07:30:09.863595billing sshd[2136]: Invalid user ruby from 65.78.99.127 port 53224 ... |
2020-06-24 08:32:00 |
| 177.170.70.60 | attackbotsspam | Unauthorized connection attempt from IP address 177.170.70.60 on Port 445(SMB) |
2020-06-24 08:14:01 |
| 103.68.11.18 | attack | Jun 24 06:30:45 web1 sshd[17853]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.68.11.18 user=root Jun 24 06:30:47 web1 sshd[17853]: Failed password for root from 103.68.11.18 port 5367 ssh2 Jun 24 06:30:48 web1 sshd[17866]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.68.11.18 user=root Jun 24 06:30:50 web1 sshd[17866]: Failed password for root from 103.68.11.18 port 13257 ssh2 Jun 24 06:30:51 web1 sshd[17880]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.68.11.18 user=root Jun 24 06:30:53 web1 sshd[17880]: Failed password for root from 103.68.11.18 port 28949 ssh2 Jun 24 06:30:54 web1 sshd[17892]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.68.11.18 user=root Jun 24 06:30:56 web1 sshd[17892]: Failed password for root from 103.68.11.18 port 6870 ssh2 Jun 24 06:30:57 web1 sshd[17907]: pam_unix(ssh ... |
2020-06-24 08:37:05 |
| 1.164.180.187 | attack | Unauthorized connection attempt from IP address 1.164.180.187 on Port 445(SMB) |
2020-06-24 08:24:25 |
| 178.95.140.131 | attackbots | Unauthorized connection attempt from IP address 178.95.140.131 on Port 445(SMB) |
2020-06-24 08:27:40 |
| 92.63.196.3 | attack | Port scan: Attack repeated for 24 hours |
2020-06-24 12:03:11 |
| 45.134.179.57 | attackbots | Jun 24 02:15:39 debian-2gb-nbg1-2 kernel: \[15216408.136434\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=45.134.179.57 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=53171 PROTO=TCP SPT=43927 DPT=33595 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-06-24 08:21:55 |
| 222.186.175.150 | attackbotsspam | Fail2Ban |
2020-06-24 08:25:28 |
| 176.113.115.210 | attackspam | Jun 24 00:00:46 debian-2gb-nbg1-2 kernel: \[15208315.362240\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=176.113.115.210 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=42534 PROTO=TCP SPT=42211 DPT=3360 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-06-24 08:16:56 |
| 117.119.83.20 | attack | Brute-force attempt banned |
2020-06-24 08:12:02 |
| 92.246.84.185 | attackspambots | [2020-06-23 20:25:00] NOTICE[1273][C-000041e0] chan_sip.c: Call from '' (92.246.84.185:56936) to extension '77746313113308' rejected because extension not found in context 'public'. [2020-06-23 20:25:00] SECURITY[1288] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-06-23T20:25:00.079-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="77746313113308",SessionID="0x7f31c018ea98",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/92.246.84.185/56936",ACLName="no_extension_match" [2020-06-23 20:26:34] NOTICE[1273][C-000041e1] chan_sip.c: Call from '' (92.246.84.185:61224) to extension '4400346462607509' rejected because extension not found in context 'public'. [2020-06-23 20:26:34] SECURITY[1288] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-06-23T20:26:34.941-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="4400346462607509",SessionID="0x7f31c02adcc8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/ ... |
2020-06-24 08:28:41 |