城市(city): unknown
省份(region): unknown
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 34.80.242.164
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 13361
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;34.80.242.164. IN A
;; AUTHORITY SECTION:
. 238 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022010301 1800 900 604800 86400
;; Query time: 19 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jan 04 06:36:32 CST 2022
;; MSG SIZE rcvd: 106164.242.80.34.in-addr.arpa domain name pointer 164.242.80.34.bc.googleusercontent.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
164.242.80.34.in-addr.arpa name = 164.242.80.34.bc.googleusercontent.com.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 5.232.172.147 | attack | firewall-block, port(s): 9530/tcp |
2020-03-17 01:00:46 |
| 185.156.73.38 | attackbots | 03/16/2020-10:44:37.769147 185.156.73.38 Protocol: 6 ET SCAN NMAP -sS window 1024 |
2020-03-17 00:31:52 |
| 1.173.39.80 | attackspambots | Mar 16 15:44:13 debian-2gb-nbg1-2 kernel: \[6628972.858146\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=1.173.39.80 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=52 ID=38977 PROTO=TCP SPT=11872 DPT=23 WINDOW=1613 RES=0x00 SYN URGP=0 |
2020-03-17 00:52:13 |
| 188.254.0.160 | attackbots | Mar 16 09:29:22 askasleikir sshd[42514]: Failed password for root from 188.254.0.160 port 47764 ssh2 |
2020-03-17 00:10:44 |
| 89.122.124.141 | attackbots | trying to access non-authorized port |
2020-03-17 00:55:07 |
| 206.189.140.72 | attackspambots | Mar 16 17:30:25 web1 sshd\[4662\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.140.72 user=root Mar 16 17:30:27 web1 sshd\[4662\]: Failed password for root from 206.189.140.72 port 37130 ssh2 Mar 16 17:38:50 web1 sshd\[5145\]: Invalid user cisco from 206.189.140.72 Mar 16 17:38:50 web1 sshd\[5145\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.140.72 Mar 16 17:38:52 web1 sshd\[5145\]: Failed password for invalid user cisco from 206.189.140.72 port 47730 ssh2 |
2020-03-17 01:08:48 |
| 222.186.42.75 | attackbots | Mar 16 13:20:04 firewall sshd[1155]: Failed password for root from 222.186.42.75 port 43826 ssh2 Mar 16 13:20:07 firewall sshd[1155]: Failed password for root from 222.186.42.75 port 43826 ssh2 Mar 16 13:20:09 firewall sshd[1155]: Failed password for root from 222.186.42.75 port 43826 ssh2 ... |
2020-03-17 00:25:54 |
| 222.186.30.248 | attackbotsspam | Mar 16 16:27:19 Ubuntu-1404-trusty-64-minimal sshd\[6891\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.248 user=root Mar 16 16:27:21 Ubuntu-1404-trusty-64-minimal sshd\[6891\]: Failed password for root from 222.186.30.248 port 30605 ssh2 Mar 16 16:38:16 Ubuntu-1404-trusty-64-minimal sshd\[18659\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.248 user=root Mar 16 16:38:18 Ubuntu-1404-trusty-64-minimal sshd\[18659\]: Failed password for root from 222.186.30.248 port 45932 ssh2 Mar 16 17:38:52 Ubuntu-1404-trusty-64-minimal sshd\[27236\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.248 user=root |
2020-03-17 00:47:18 |
| 112.85.42.188 | attack | 03/16/2020-12:11:31.559150 112.85.42.188 Protocol: 6 ET SCAN Potential SSH Scan |
2020-03-17 00:13:50 |
| 150.109.72.230 | attack | $f2bV_matches | Triggered by Fail2Ban at Vostok web server |
2020-03-17 00:26:27 |
| 112.85.42.174 | attackbots | Mar 16 18:11:48 ift sshd\[1641\]: Failed password for root from 112.85.42.174 port 59904 ssh2Mar 16 18:12:06 ift sshd\[1643\]: Failed password for root from 112.85.42.174 port 22516 ssh2Mar 16 18:12:25 ift sshd\[1679\]: Failed password for root from 112.85.42.174 port 51696 ssh2Mar 16 18:12:43 ift sshd\[1685\]: Failed password for root from 112.85.42.174 port 12836 ssh2Mar 16 18:13:01 ift sshd\[1690\]: Failed password for root from 112.85.42.174 port 38987 ssh2 ... |
2020-03-17 00:19:56 |
| 49.234.47.124 | attack | Total attacks: 4 |
2020-03-17 00:51:43 |
| 189.50.42.154 | attackbots | Mar 16 02:14:25 UTC__SANYALnet-Labs__cac14 sshd[31833]: Connection from 189.50.42.154 port 40424 on 45.62.235.190 port 22 Mar 16 02:14:27 UTC__SANYALnet-Labs__cac14 sshd[31833]: Invalid user steam from 189.50.42.154 Mar 16 02:14:29 UTC__SANYALnet-Labs__cac14 sshd[31833]: Failed password for invalid user steam from 189.50.42.154 port 40424 ssh2 Mar 16 02:14:30 UTC__SANYALnet-Labs__cac14 sshd[31833]: Received disconnect from 189.50.42.154: 11: Bye Bye [preauth] Mar 16 02:34:26 UTC__SANYALnet-Labs__cac14 sshd[32289]: Connection from 189.50.42.154 port 33357 on 45.62.235.190 port 22 Mar 16 02:34:30 UTC__SANYALnet-Labs__cac14 sshd[32289]: Failed password for invalid user r.r from 189.50.42.154 port 33357 ssh2 Mar 16 02:34:31 UTC__SANYALnet-Labs__cac14 sshd[32289]: Received disconnect from 189.50.42.154: 11: Bye Bye [preauth] Mar 16 02:42:59 UTC__SANYALnet-Labs__cac14 sshd[32448]: Connection from 189.50.42.154 port 33324 on 45.62.235.190 port 22 Mar 16 02:43:01 UTC__SANYALnet........ ------------------------------- |
2020-03-17 00:13:07 |
| 200.149.177.251 | attackspambots | 20/3/16@11:29:55: FAIL: Alarm-Network address from=200.149.177.251 ... |
2020-03-17 00:16:07 |
| 175.139.192.37 | attackbotsspam | Lines containing failures of 175.139.192.37 Mar 15 23:52:19 kmh-vmh-001-fsn05 sshd[25683]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.139.192.37 user=r.r Mar 15 23:52:21 kmh-vmh-001-fsn05 sshd[25683]: Failed password for r.r from 175.139.192.37 port 45116 ssh2 Mar 15 23:52:23 kmh-vmh-001-fsn05 sshd[25683]: Received disconnect from 175.139.192.37 port 45116:11: Bye Bye [preauth] Mar 15 23:52:23 kmh-vmh-001-fsn05 sshd[25683]: Disconnected from authenticating user r.r 175.139.192.37 port 45116 [preauth] Mar 16 00:09:12 kmh-vmh-001-fsn05 sshd[28696]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.139.192.37 user=r.r Mar 16 00:09:14 kmh-vmh-001-fsn05 sshd[28696]: Failed password for r.r from 175.139.192.37 port 39970 ssh2 Mar 16 00:09:15 kmh-vmh-001-fsn05 sshd[28696]: Received disconnect from 175.139.192.37 port 39970:11: Bye Bye [preauth] Mar 16 00:09:15 kmh-vmh-001-fsn05 sshd[286........ ------------------------------ |
2020-03-17 00:54:38 |