城市(city): unknown
省份(region): unknown
国家(country): Germany
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 85.16.213.129
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 10986
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;85.16.213.129. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020901 1800 900 604800 86400
;; Query time: 16 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 10 04:02:30 CST 2025
;; MSG SIZE rcvd: 106129.213.16.85.in-addr.arpa domain name pointer dyndsl-085-016-213-129.ewe-ip-backbone.de.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
129.213.16.85.in-addr.arpa name = dyndsl-085-016-213-129.ewe-ip-backbone.de.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 185.143.223.145 | attack | Dec 6 11:22:45 h2177944 kernel: \[8502935.900293\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.143.223.145 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=47842 PROTO=TCP SPT=48838 DPT=36367 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 6 11:30:31 h2177944 kernel: \[8503401.862700\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.143.223.145 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=40564 PROTO=TCP SPT=48838 DPT=477 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 6 11:56:52 h2177944 kernel: \[8504982.452099\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.143.223.145 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=36841 PROTO=TCP SPT=48838 DPT=515 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 6 11:59:16 h2177944 kernel: \[8505127.378967\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.143.223.145 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=17676 PROTO=TCP SPT=48838 DPT=59039 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 6 12:00:01 h2177944 kernel: \[8505171.523526\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.143.223.145 DST=85 |
2019-12-06 19:35:18 |
| 123.58.6.219 | attackspam | 2019-12-06T07:25:47.644163centos sshd\[10485\]: Invalid user pentakill from 123.58.6.219 port 50674 2019-12-06T07:25:47.653559centos sshd\[10485\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.58.6.219 2019-12-06T07:25:49.384451centos sshd\[10485\]: Failed password for invalid user pentakill from 123.58.6.219 port 50674 ssh2 |
2019-12-06 18:59:24 |
| 190.191.194.9 | attack | $f2bV_matches |
2019-12-06 19:09:20 |
| 51.158.110.70 | attackspam | 2019-12-06T11:23:41.851519abusebot-5.cloudsearch.cf sshd\[25172\]: Invalid user 123456 from 51.158.110.70 port 37146 |
2019-12-06 19:36:43 |
| 112.216.51.122 | attack | Dec 5 21:52:15 tdfoods sshd\[25938\]: Invalid user postgres from 112.216.51.122 Dec 5 21:52:15 tdfoods sshd\[25938\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.216.51.122 Dec 5 21:52:17 tdfoods sshd\[25938\]: Failed password for invalid user postgres from 112.216.51.122 port 56080 ssh2 Dec 5 21:56:04 tdfoods sshd\[26313\]: Invalid user joby from 112.216.51.122 Dec 5 21:56:04 tdfoods sshd\[26313\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.216.51.122 |
2019-12-06 19:26:06 |
| 119.29.121.229 | attackbots | Dec 6 11:43:21 cp sshd[18195]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.29.121.229 Dec 6 11:43:21 cp sshd[18195]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.29.121.229 |
2019-12-06 19:08:05 |
| 106.13.109.19 | attack | Dec 6 08:05:43 game-panel sshd[5646]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.109.19 Dec 6 08:05:45 game-panel sshd[5646]: Failed password for invalid user joslyn from 106.13.109.19 port 47970 ssh2 Dec 6 08:11:51 game-panel sshd[5935]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.109.19 |
2019-12-06 19:33:58 |
| 140.249.55.35 | attackspambots | Host Scan |
2019-12-06 19:33:44 |
| 134.209.106.112 | attackspam | fail2ban |
2019-12-06 19:11:20 |
| 125.124.152.59 | attackbots | Dec 6 12:11:25 legacy sshd[8749]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.124.152.59 Dec 6 12:11:28 legacy sshd[8749]: Failed password for invalid user hoggan from 125.124.152.59 port 47644 ssh2 Dec 6 12:21:00 legacy sshd[9137]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.124.152.59 ... |
2019-12-06 19:32:47 |
| 193.32.161.31 | attackspambots | Portscan or hack attempt detected by psad/fwsnort |
2019-12-06 19:03:45 |
| 183.136.121.50 | attackspambots | Dec 6 01:24:27 esmtp postfix/smtpd[28295]: lost connection after AUTH from unknown[183.136.121.50] Dec 6 01:24:46 esmtp postfix/smtpd[28295]: lost connection after AUTH from unknown[183.136.121.50] Dec 6 01:24:58 esmtp postfix/smtpd[28297]: lost connection after AUTH from unknown[183.136.121.50] Dec 6 01:25:09 esmtp postfix/smtpd[28297]: lost connection after AUTH from unknown[183.136.121.50] Dec 6 01:25:19 esmtp postfix/smtpd[28295]: lost connection after AUTH from unknown[183.136.121.50] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=183.136.121.50 |
2019-12-06 19:31:29 |
| 218.92.0.198 | attack | Dec 6 12:01:34 amit sshd\[21887\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.198 user=root Dec 6 12:01:36 amit sshd\[21887\]: Failed password for root from 218.92.0.198 port 21456 ssh2 Dec 6 12:02:35 amit sshd\[7809\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.198 user=root ... |
2019-12-06 19:38:04 |
| 140.143.246.53 | attackspam | SSH bruteforce |
2019-12-06 19:28:24 |
| 106.51.73.204 | attack | Dec 6 00:37:35 tdfoods sshd\[9824\]: Invalid user retter from 106.51.73.204 Dec 6 00:37:35 tdfoods sshd\[9824\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.51.73.204 Dec 6 00:37:36 tdfoods sshd\[9824\]: Failed password for invalid user retter from 106.51.73.204 port 50331 ssh2 Dec 6 00:44:36 tdfoods sshd\[10606\]: Invalid user davox from 106.51.73.204 Dec 6 00:44:36 tdfoods sshd\[10606\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.51.73.204 |
2019-12-06 19:00:38 |