城市(city): Durban
省份(region): KwaZulu-Natal
国家(country): South Africa
运营商(isp): Telkom
主机名(hostname): unknown
机构(organization): Telkom-Internet
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 41.246.196.134
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 13539
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;41.246.196.134. IN A
;; AUTHORITY SECTION:
. 1674 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019061101 1800 900 604800 86400
;; Query time: 1 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Wed Jun 12 12:50:21 CST 2019
;; MSG SIZE rcvd: 118
134.196.246.41.in-addr.arpa domain name pointer 8ta-246-196-134.telkomadsl.co.za.
Server: 67.207.67.2
Address: 67.207.67.2#53
Non-authoritative answer:
134.196.246.41.in-addr.arpa name = 8ta-246-196-134.telkomadsl.co.za.
Authoritative answers can be found from:
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 9.9.9.10 | attackspambots | Aug 6 23:44:12 *hidden* kernel: [UFW BLOCK] IN=ens192 OUT= MAC=00:50:56:bc:13:b8:30:e4:db:97:3e:3f:08:00 SRC=9.9.9.10 DST=217.198.117.163 LEN=40 TOS=0x00 PREC=0x00 TTL=58 ID=17425 DF PROTO=TCP SPT=853 DPT=32792 WINDOW=0 RES=0x00 RST URGP=0 Aug 6 23:44:12 *hidden* kernel: [UFW BLOCK] IN=ens192 OUT= MAC=00:50:56:bc:13:b8:30:e4:db:97:3e:3f:08:00 SRC=9.9.9.10 DST=217.198.117.163 LEN=40 TOS=0x00 PREC=0x00 TTL=58 ID=17426 DF PROTO=TCP SPT=853 DPT=32792 WINDOW=0 RES=0x00 RST URGP=0 Aug 6 23:44:53 *hidden* kernel: [UFW BLOCK] IN=ens192 OUT= MAC=00:50:56:bc:13:b8:30:e4:db:97:3e:3f:08:00 SRC=9.9.9.10 DST=217.198.117.163 LEN=40 TOS=0x00 PREC=0x00 TTL=58 ID=42839 DF PROTO=TCP SPT=853 DPT=32804 WINDOW=0 RES=0x00 RST URGP=0 Aug 6 23:46:37 *hidden* kernel: [UFW BLOCK] IN=ens192 OUT= MAC=00:50:56:bc:13:b8:30:e4:db:97:3e:3f:08:00 SRC=9.9.9.10 DST=217.198.117.163 LEN=40 TOS=0x00 PREC=0x00 TTL=58 ID=11251 DF PROTO=TCP SPT=853 DPT=32830 WINDOW=0 RES=0x00 RST URGP=0 Aug 6 23:52:04 *hidden* kernel: [UFW BLO ... |
2020-08-07 08:28:59 |
| 54.37.65.3 | attackbotsspam | Ssh brute force |
2020-08-07 08:22:28 |
| 193.27.228.221 | attack | Attempted to establish connection to non opened port 3492 |
2020-08-07 07:59:00 |
| 120.92.139.2 | attackspam | k+ssh-bruteforce |
2020-08-07 07:52:58 |
| 203.86.7.110 | attack | k+ssh-bruteforce |
2020-08-07 08:08:29 |
| 80.82.65.90 | attackspam | ET CINS Active Threat Intelligence Poor Reputation IP group 77 - port: 389 proto: udp cat: Misc Attackbytes: 94 |
2020-08-07 08:00:16 |
| 52.172.4.141 | attackbots | Aug 7 00:17:52 marvibiene sshd[7856]: Failed password for root from 52.172.4.141 port 54384 ssh2 Aug 7 00:22:14 marvibiene sshd[8166]: Failed password for root from 52.172.4.141 port 42704 ssh2 |
2020-08-07 07:52:18 |
| 169.159.130.225 | attackspambots | Ssh brute force |
2020-08-07 08:11:18 |
| 151.84.84.100 | attack | Hit honeypot r. |
2020-08-07 08:28:29 |
| 193.27.229.219 | attackspambots | slow and persistent scanner |
2020-08-07 08:02:24 |
| 2.51.245.159 | attackspam | SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found |
2020-08-07 08:29:48 |
| 139.162.75.112 | attack | SSH Bruteforce Attempt on Honeypot |
2020-08-07 07:59:46 |
| 152.136.105.190 | attack | 2020-08-06T23:44:17.720825amanda2.illicoweb.com sshd\[16382\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.105.190 user=root 2020-08-06T23:44:19.598951amanda2.illicoweb.com sshd\[16382\]: Failed password for root from 152.136.105.190 port 47166 ssh2 2020-08-06T23:50:06.593735amanda2.illicoweb.com sshd\[17134\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.105.190 user=root 2020-08-06T23:50:08.717625amanda2.illicoweb.com sshd\[17134\]: Failed password for root from 152.136.105.190 port 46816 ssh2 2020-08-06T23:52:58.847995amanda2.illicoweb.com sshd\[17645\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.105.190 user=root ... |
2020-08-07 07:58:10 |
| 198.136.63.29 | attack | Attempted to establish connection to non opened port 21125 |
2020-08-07 08:14:39 |
| 189.192.100.139 | attackbotsspam | SSH Brute Force |
2020-08-07 08:21:09 |