城市(city): unknown
省份(region): unknown
国家(country): China
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.232.254.12
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 29179
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;42.232.254.12. IN A
;; AUTHORITY SECTION:
. 277 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021202 1800 900 604800 86400
;; Query time: 20 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 13 11:20:23 CST 2022
;; MSG SIZE rcvd: 10612.254.232.42.in-addr.arpa domain name pointer hn.kd.ny.adsl.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
12.254.232.42.in-addr.arpa name = hn.kd.ny.adsl.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 194.15.124.244 | attack | 2019-09-23 16:57:04 H=(weryfikacja.sprawdz-baze.pl) [194.15.124.244]:49020 I=[10.100.18.25]:25 sender verify fail for |
2019-09-24 07:34:41 |
| 109.117.53.134 | attack | 23/tcp [2019-09-23]1pkt |
2019-09-24 07:44:35 |
| 27.192.156.144 | attackbots | Honeypot attack, port: 23, PTR: PTR record not found |
2019-09-24 07:38:05 |
| 68.183.91.25 | attackspam | Sep 23 19:42:18 TORMINT sshd\[3379\]: Invalid user marivic from 68.183.91.25 Sep 23 19:42:18 TORMINT sshd\[3379\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.91.25 Sep 23 19:42:20 TORMINT sshd\[3379\]: Failed password for invalid user marivic from 68.183.91.25 port 35251 ssh2 ... |
2019-09-24 07:49:17 |
| 176.100.102.208 | attackbots | Sep 23 13:12:57 lcprod sshd\[29663\]: Invalid user vrr1 from 176.100.102.208 Sep 23 13:12:57 lcprod sshd\[29663\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.100.102.208 Sep 23 13:12:59 lcprod sshd\[29663\]: Failed password for invalid user vrr1 from 176.100.102.208 port 37473 ssh2 Sep 23 13:17:11 lcprod sshd\[30050\]: Invalid user py from 176.100.102.208 Sep 23 13:17:11 lcprod sshd\[30050\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.100.102.208 |
2019-09-24 07:38:26 |
| 218.1.18.78 | attackspambots | Sep 23 13:36:16 auw2 sshd\[30239\]: Invalid user upload from 218.1.18.78 Sep 23 13:36:16 auw2 sshd\[30239\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.1.18.78 Sep 23 13:36:19 auw2 sshd\[30239\]: Failed password for invalid user upload from 218.1.18.78 port 22980 ssh2 Sep 23 13:40:33 auw2 sshd\[30717\]: Invalid user purala from 218.1.18.78 Sep 23 13:40:33 auw2 sshd\[30717\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.1.18.78 |
2019-09-24 07:52:53 |
| 1.173.37.118 | attackspam | 2323/tcp [2019-09-23]1pkt |
2019-09-24 07:19:58 |
| 220.95.125.187 | attackspam | Honeypot attack, port: 23, PTR: PTR record not found |
2019-09-24 07:45:36 |
| 42.159.5.98 | attackbots | Sep 23 15:37:28 linuxrulz sshd[22551]: Did not receive identification string from 42.159.5.98 port 42868 Sep 23 15:38:12 linuxrulz sshd[22564]: Did not receive identification string from 42.159.5.98 port 47694 Sep 23 15:38:12 linuxrulz sshd[22565]: Did not receive identification string from 42.159.5.98 port 50898 Sep 23 15:40:07 linuxrulz sshd[23044]: Invalid user miner from 42.159.5.98 port 51740 Sep 23 15:40:07 linuxrulz sshd[23044]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.159.5.98 Sep 23 15:40:10 linuxrulz sshd[23044]: Failed password for invalid user miner from 42.159.5.98 port 51740 ssh2 Sep 23 15:40:10 linuxrulz sshd[23044]: Received disconnect from 42.159.5.98 port 51740:11: Bye Bye [preauth] Sep 23 15:40:10 linuxrulz sshd[23044]: Disconnected from 42.159.5.98 port 51740 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=42.159.5.98 |
2019-09-24 07:49:41 |
| 190.115.1.49 | attackspambots | Sep 23 01:03:52 xb3 sshd[24995]: reveeclipse mapping checking getaddrinfo for host-115-1-49.ufinet.com.gt [190.115.1.49] failed - POSSIBLE BREAK-IN ATTEMPT! Sep 23 01:03:54 xb3 sshd[24995]: Failed password for invalid user howe from 190.115.1.49 port 56892 ssh2 Sep 23 01:03:54 xb3 sshd[24995]: Received disconnect from 190.115.1.49: 11: Bye Bye [preauth] Sep 23 01:24:38 xb3 sshd[3010]: reveeclipse mapping checking getaddrinfo for host-115-1-49.ufinet.com.gt [190.115.1.49] failed - POSSIBLE BREAK-IN ATTEMPT! Sep 23 01:24:38 xb3 sshd[3010]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.115.1.49 user=mysql Sep 23 01:24:41 xb3 sshd[3010]: Failed password for mysql from 190.115.1.49 port 42754 ssh2 Sep 23 01:24:41 xb3 sshd[3010]: Received disconnect from 190.115.1.49: 11: Bye Bye [preauth] Sep 23 01:29:36 xb3 sshd[3330]: reveeclipse mapping checking getaddrinfo for host-115-1-49.ufinet.com.gt [190.115.1.49] failed - POSSIBLE BREA........ ------------------------------- |
2019-09-24 07:53:44 |
| 185.66.213.64 | attackspam | Sep 23 13:20:56 web1 sshd\[17641\]: Invalid user helpdesk from 185.66.213.64 Sep 23 13:20:56 web1 sshd\[17641\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.66.213.64 Sep 23 13:20:58 web1 sshd\[17641\]: Failed password for invalid user helpdesk from 185.66.213.64 port 35742 ssh2 Sep 23 13:25:16 web1 sshd\[18092\]: Invalid user module from 185.66.213.64 Sep 23 13:25:16 web1 sshd\[18092\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.66.213.64 |
2019-09-24 07:36:35 |
| 111.194.38.149 | attackspambots | Honeypot attack, port: 23, PTR: PTR record not found |
2019-09-24 07:56:23 |
| 92.63.194.26 | attackbots | Sep 24 00:55:18 andromeda sshd\[13728\]: Invalid user admin from 92.63.194.26 port 50110 Sep 24 00:55:18 andromeda sshd\[13729\]: Invalid user admin from 92.63.194.26 port 52004 Sep 24 00:55:18 andromeda sshd\[13728\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.63.194.26 Sep 24 00:55:18 andromeda sshd\[13729\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.63.194.26 |
2019-09-24 07:37:39 |
| 54.240.8.156 | attack | NOTE - Blacklisted phishing redirect spam link s.free.fr = 212.27.60.108; consistent malicious redirect; aggregate spam volume up to 15/day. Phishing redirect links in common with Google Group plmhuryuergsdjkhfreyfghjsdk.icu using s.free.fr and with bulk Timeweb link *.ddnsking.com = 176.57.208.216. Unsolicited bulk spam - a8-156.smtp-out.amazonses.com, Amazon - 54.240.8.156 Spam link s.free.fr = 212.27.60.108, Free SAS (ProXad) - malware - blacklisted – REPETITIVE REDIRECTS: - jujuloo.com = 212.28.86.254 BROADBAND-ARAXCOM (domain previously hosted on 5.32.174.22, Arax-Impex s.r.l. and 216.52.165.164, NAME.COM – UBE originating from ematketpremium.com) - pbmjx.superextremetrack.company = repeat IP 118.184.32.7 Shanghai Anchnet Network Technology - free.fr = 212.27.48.10 Free SAS (ProXad) Spam link esputnik.com = 18.200.94.89, 34.246.110.72 Amazon Sender domain blancetnoire.site = 185.98.131.45 Ligne Web Services EURL |
2019-09-24 07:18:07 |
| 129.28.148.242 | attackspambots | 2019-09-23T23:14:11.651545abusebot-3.cloudsearch.cf sshd\[15433\]: Invalid user alok from 129.28.148.242 port 44842 |
2019-09-24 07:20:55 |