城市(city): unknown
省份(region): unknown
国家(country): United States of America (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 6.16.240.21
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 29250
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;6.16.240.21. IN A
;; AUTHORITY SECTION:
. 247 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2023052400 1800 900 604800 86400
;; Query time: 21 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed May 24 14:51:26 CST 2023
;; MSG SIZE rcvd: 104b'Host 21.240.16.6.in-addr.arpa not found: 2(SERVFAIL)
'server can't find 6.16.240.21.in-addr.arpa: SERVFAIL| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 195.54.160.12 | attackspambots | Jun 6 19:39:57 debian-2gb-nbg1-2 kernel: \[13723944.722320\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=195.54.160.12 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=55395 PROTO=TCP SPT=41044 DPT=56347 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-06-07 01:58:45 |
| 195.54.160.135 | attackbots | 06/06/2020-13:49:57.812295 195.54.160.135 Protocol: 6 ET SCAN NMAP -sS window 1024 |
2020-06-07 01:58:28 |
| 106.12.129.167 | attackspam | Lines containing failures of 106.12.129.167 Jun 5 23:14:30 newdogma sshd[32633]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.129.167 user=r.r Jun 5 23:14:32 newdogma sshd[32633]: Failed password for r.r from 106.12.129.167 port 37472 ssh2 Jun 5 23:14:33 newdogma sshd[32633]: Received disconnect from 106.12.129.167 port 37472:11: Bye Bye [preauth] Jun 5 23:14:33 newdogma sshd[32633]: Disconnected from authenticating user r.r 106.12.129.167 port 37472 [preauth] Jun 5 23:25:57 newdogma sshd[516]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.129.167 user=r.r Jun 5 23:25:59 newdogma sshd[516]: Failed password for r.r from 106.12.129.167 port 42458 ssh2 Jun 5 23:26:00 newdogma sshd[516]: Received disconnect from 106.12.129.167 port 42458:11: Bye Bye [preauth] Jun 5 23:26:00 newdogma sshd[516]: Disconnected from authenticating user r.r 106.12.129.167 port 42458 [preaut........ ------------------------------ |
2020-06-07 01:51:34 |
| 217.12.49.164 | attackbots | Ref: mx Logwatch report |
2020-06-07 01:43:38 |
| 194.26.29.134 | attack | scans 33 times in preceeding hours on the ports (in chronological order) 4788 4238 4236 4294 4935 4317 4953 4769 4344 4837 4311 4057 4305 4101 4817 4003 4011 4715 4435 4468 4741 4340 4979 4502 4314 4379 4543 4942 4365 4941 4317 4781 4262 resulting in total of 612 scans from 194.26.29.0/24 block. |
2020-06-07 02:20:17 |
| 195.54.161.41 | attackbotsspam | Jun 6 19:51:28 debian-2gb-nbg1-2 kernel: \[13724636.623916\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=195.54.161.41 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=424 PROTO=TCP SPT=59422 DPT=4564 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-06-07 01:55:52 |
| 167.114.103.140 | attackspambots | Jun 6 15:29:18 vpn01 sshd[19315]: Failed password for root from 167.114.103.140 port 45145 ssh2 ... |
2020-06-07 02:02:29 |
| 51.103.128.94 | attack | 51.103.128.94 - - [06/Jun/2020:11:45:29 -0600] "GET /.git/HEAD HTTP/1.1" 301 4228 "-" "-" ... |
2020-06-07 01:52:02 |
| 193.37.255.114 | attackbots |
|
2020-06-07 02:08:51 |
| 61.133.232.252 | attackspam | Jun 6 19:22:37 buvik sshd[32248]: Failed password for root from 61.133.232.252 port 46544 ssh2 Jun 6 19:28:31 buvik sshd[549]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.133.232.252 user=root Jun 6 19:28:32 buvik sshd[549]: Failed password for root from 61.133.232.252 port 45527 ssh2 ... |
2020-06-07 01:48:28 |
| 193.169.252.21 | attackspambots | Jun 6 20:46:16 debian kernel: [368136.089546] [UFW BLOCK] IN=eth0 OUT= MAC=52:54:00:be:e4:65:08:e8:4f:6e:48:0c:08:00 SRC=193.169.252.21 DST=89.252.131.35 LEN=90 TOS=0x00 PREC=0x00 TTL=241 ID=54321 PROTO=UDP SPT=49999 DPT=37810 LEN=70 |
2020-06-07 02:00:10 |
| 45.14.150.130 | attack | Bruteforce detected by fail2ban |
2020-06-07 02:11:20 |
| 128.14.180.110 | attack |
|
2020-06-07 02:07:24 |
| 194.26.29.220 | attackspambots | scans 47 times in preceeding hours on the ports (in chronological order) 7728 7379 7578 7360 7984 7856 7204 7198 7618 7227 7849 7660 7442 7654 7688 7902 7619 7669 7102 7968 7521 7632 7189 7949 7575 7931 7955 7532 7002 7910 7863 7630 7677 7442 7780 7514 7178 7011 7673 7435 7578 7627 7028 7707 7485 7771 7131 resulting in total of 612 scans from 194.26.29.0/24 block. |
2020-06-07 02:17:22 |
| 222.186.173.154 | attackspam | Jun 6 20:07:42 santamaria sshd\[24058\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.154 user=root Jun 6 20:07:44 santamaria sshd\[24058\]: Failed password for root from 222.186.173.154 port 3414 ssh2 Jun 6 20:07:54 santamaria sshd\[24058\]: Failed password for root from 222.186.173.154 port 3414 ssh2 ... |
2020-06-07 02:08:22 |