城市(city): unknown
省份(region): unknown
国家(country): United States of America (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 68.108.69.206
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 37682
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;68.108.69.206. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025013100 1800 900 604800 86400
;; Query time: 18 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jan 31 14:42:14 CST 2025
;; MSG SIZE rcvd: 106206.69.108.68.in-addr.arpa domain name pointer ip68-108-69-206.lv.lv.cox.net.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
206.69.108.68.in-addr.arpa name = ip68-108-69-206.lv.lv.cox.net.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 222.128.2.60 | attackbotsspam | $f2bV_matches |
2019-10-04 16:27:45 |
| 200.30.165.202 | attack | Sep 30 23:49:04 our-server-hostname postfix/smtpd[15057]: connect from unknown[200.30.165.202] Sep x@x Sep x@x Sep 30 23:49:10 our-server-hostname postfix/smtpd[15057]: lost connection after RCPT from unknown[200.30.165.202] Sep 30 23:49:10 our-server-hostname postfix/smtpd[15057]: disconnect from unknown[200.30.165.202] Oct 1 00:32:36 our-server-hostname postfix/smtpd[4855]: connect from unknown[200.30.165.202] Oct x@x Oct x@x Oct x@x Oct 1 00:32:49 our-server-hostname postfix/smtpd[4855]: lost connection after RCPT from unknown[200.30.165.202] Oct 1 00:32:49 our-server-hostname postfix/smtpd[4855]: disconnect from unknown[200.30.165.202] Oct 1 00:40:19 our-server-hostname postfix/smtpd[3026]: connect from unknown[200.30.165.202] Oct x@x Oct x@x Oct x@x Oct x@x Oct x@x Oct x@x Oct x@x Oct x@x Oct x@x Oct 1 00:40:37 our-server-hostname postfix/smtpd[3026]: lost connection after RCPT from unknown[200.30.165.202] Oct 1 00:40:37 our-server-hostname postfix/smtpd[3026........ ------------------------------- |
2019-10-04 16:13:03 |
| 139.217.96.76 | attackbots | Oct 4 04:09:31 www_kotimaassa_fi sshd[18372]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.217.96.76 Oct 4 04:09:33 www_kotimaassa_fi sshd[18372]: Failed password for invalid user Nullen_1233 from 139.217.96.76 port 52992 ssh2 ... |
2019-10-04 16:28:03 |
| 70.65.21.251 | attackspambots | Oct 4 09:19:31 vps01 sshd[32633]: Failed password for root from 70.65.21.251 port 41144 ssh2 |
2019-10-04 16:07:27 |
| 163.53.83.220 | attackbotsspam | Sep 30 07:52:38 our-server-hostname postfix/smtpd[30270]: connect from unknown[163.53.83.220] Sep x@x Sep x@x Sep x@x Sep x@x Sep x@x Sep x@x Sep x@x Sep x@x Sep x@x Sep x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=163.53.83.220 |
2019-10-04 16:27:24 |
| 160.124.48.207 | attackbotsspam | 2019-10-04T08:24:59.506301abusebot-2.cloudsearch.cf sshd\[9000\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=160.124.48.207 user=root |
2019-10-04 16:44:08 |
| 34.222.102.202 | attack | 2019-10-04T03:06:19.446364mizuno.rwx.ovh sshd[139541]: Connection from 34.222.102.202 port 54590 on 78.46.61.178 port 22 2019-10-04T03:06:36.754337mizuno.rwx.ovh sshd[139570]: Connection from 34.222.102.202 port 47128 on 78.46.61.178 port 22 2019-10-04T03:06:44.150905mizuno.rwx.ovh sshd[139570]: Unable to negotiate with 34.222.102.202 port 47128: no matching host key type found. Their offer: ecdsa-sha2-nistp384 [preauth] ... |
2019-10-04 16:13:40 |
| 49.88.112.68 | attackbots | Oct 4 04:25:15 xentho sshd[4692]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.68 user=root Oct 4 04:25:17 xentho sshd[4692]: Failed password for root from 49.88.112.68 port 36177 ssh2 Oct 4 04:25:20 xentho sshd[4692]: Failed password for root from 49.88.112.68 port 36177 ssh2 Oct 4 04:25:15 xentho sshd[4692]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.68 user=root Oct 4 04:25:17 xentho sshd[4692]: Failed password for root from 49.88.112.68 port 36177 ssh2 Oct 4 04:25:20 xentho sshd[4692]: Failed password for root from 49.88.112.68 port 36177 ssh2 Oct 4 04:25:15 xentho sshd[4692]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.68 user=root Oct 4 04:25:17 xentho sshd[4692]: Failed password for root from 49.88.112.68 port 36177 ssh2 Oct 4 04:25:20 xentho sshd[4692]: Failed password for root from 49.88.112.68 port 36177 ... |
2019-10-04 16:37:48 |
| 136.144.142.177 | attack | Oct 3 19:14:42 tdfoods sshd\[12951\]: Invalid user Nova@2017 from 136.144.142.177 Oct 3 19:14:42 tdfoods sshd\[12951\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=136-144-142-177.colo.transip.net Oct 3 19:14:44 tdfoods sshd\[12951\]: Failed password for invalid user Nova@2017 from 136.144.142.177 port 34768 ssh2 Oct 3 19:19:04 tdfoods sshd\[13322\]: Invalid user Par0la1! from 136.144.142.177 Oct 3 19:19:04 tdfoods sshd\[13322\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=136-144-142-177.colo.transip.net |
2019-10-04 16:25:10 |
| 112.35.85.227 | attack | fail2ban |
2019-10-04 15:59:17 |
| 118.97.204.93 | attack | postfix (unknown user, SPF fail or relay access denied) |
2019-10-04 16:14:04 |
| 46.105.31.249 | attack | Oct 4 10:15:00 legacy sshd[8390]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.105.31.249 Oct 4 10:15:03 legacy sshd[8390]: Failed password for invalid user 123Rose from 46.105.31.249 port 53144 ssh2 Oct 4 10:18:37 legacy sshd[8457]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.105.31.249 ... |
2019-10-04 16:20:44 |
| 194.61.24.94 | attack | Oct 4 05:52:49 h2177944 kernel: \[3037325.730176\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=194.61.24.94 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=122 ID=18981 DF PROTO=TCP SPT=49477 DPT=80 WINDOW=254 RES=0x00 ACK FIN URGP=0 Oct 4 05:52:49 h2177944 kernel: \[3037325.730212\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=194.61.24.94 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=121 ID=18982 DF PROTO=TCP SPT=49514 DPT=80 WINDOW=254 RES=0x00 ACK FIN URGP=0 Oct 4 05:52:53 h2177944 kernel: \[3037330.529319\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=194.61.24.94 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=122 ID=18993 DF PROTO=TCP SPT=49477 DPT=80 WINDOW=254 RES=0x00 ACK FIN URGP=0 Oct 4 05:52:53 h2177944 kernel: \[3037330.529369\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=194.61.24.94 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=121 ID=18992 DF PROTO=TCP SPT=49514 DPT=80 WINDOW=254 RES=0x00 ACK FIN URGP=0 Oct 4 05:53:03 h2177944 kernel: \[3037340.128599\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=194.61.24.94 DST=8 |
2019-10-04 16:43:38 |
| 139.59.59.194 | attackbots | Oct 4 10:04:37 dedicated sshd[8477]: Invalid user Reality@123 from 139.59.59.194 port 53526 |
2019-10-04 16:12:42 |
| 103.119.230.249 | attackspambots | [portscan] Port scan |
2019-10-04 16:33:45 |