城市(city): unknown
省份(region): unknown
国家(country): Ukraine
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 94.27.106.195
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 59704
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;94.27.106.195. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012102 1800 900 604800 86400
;; Query time: 39 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jan 22 10:14:10 CST 2025
;; MSG SIZE rcvd: 106
195.106.27.94.in-addr.arpa domain name pointer SOL-FTTB.195.106.27.94.sovam.net.ua.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
195.106.27.94.in-addr.arpa name = SOL-FTTB.195.106.27.94.sovam.net.ua.
Authoritative answers can be found from:
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 52.172.183.135 | attack | Aug 26 18:35:46 XXX sshd[49817]: Invalid user backup from 52.172.183.135 port 12227 |
2019-08-27 06:47:16 |
| 103.40.235.233 | attack | F2B jail: sshd. Time: 2019-08-26 17:55:47, Reported by: VKReport |
2019-08-27 06:54:39 |
| 80.82.77.18 | attack | Aug 27 00:50:19 relay postfix/smtpd\[17931\]: warning: unknown\[80.82.77.18\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 27 00:50:38 relay postfix/smtpd\[32032\]: warning: unknown\[80.82.77.18\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 27 00:50:55 relay postfix/smtpd\[26237\]: warning: unknown\[80.82.77.18\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 27 00:51:13 relay postfix/smtpd\[26087\]: warning: unknown\[80.82.77.18\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 27 00:51:30 relay postfix/smtpd\[25455\]: warning: unknown\[80.82.77.18\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2019-08-27 06:59:29 |
| 162.220.166.114 | attackspam | Splunk® : port scan detected: Aug 26 18:53:33 testbed kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=82:c6:52:d1:6e:53:c0:42:d0:39:2c:30:08:00 SRC=162.220.166.114 DST=104.248.11.191 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=54321 PROTO=TCP SPT=40748 DPT=8088 WINDOW=65535 RES=0x00 SYN URGP=0 |
2019-08-27 07:02:53 |
| 118.25.124.210 | attack | Aug 26 13:12:46 web9 sshd\[10836\]: Invalid user hadoop from 118.25.124.210 Aug 26 13:12:46 web9 sshd\[10836\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.124.210 Aug 26 13:12:48 web9 sshd\[10836\]: Failed password for invalid user hadoop from 118.25.124.210 port 51180 ssh2 Aug 26 13:17:14 web9 sshd\[11631\]: Invalid user fg from 118.25.124.210 Aug 26 13:17:14 web9 sshd\[11631\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.124.210 |
2019-08-27 07:22:29 |
| 103.229.85.27 | attackbots | Aug 26 22:29:38 our-server-hostname postfix/smtpd[8706]: connect from unknown[103.229.85.27] Aug x@x Aug x@x Aug x@x Aug x@x Aug x@x Aug x@x Aug x@x Aug x@x Aug x@x Aug x@x Aug x@x Aug x@x Aug x@x Aug x@x Aug x@x Aug x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=103.229.85.27 |
2019-08-27 07:15:22 |
| 23.129.64.212 | attackbotsspam | Aug 27 01:23:12 vps647732 sshd[31569]: Failed password for sshd from 23.129.64.212 port 53331 ssh2 Aug 27 01:23:25 vps647732 sshd[31569]: error: maximum authentication attempts exceeded for sshd from 23.129.64.212 port 53331 ssh2 [preauth] ... |
2019-08-27 07:25:47 |
| 86.194.165.188 | attackbotsspam | Aug 26 15:21:55 admin sshd[21730]: Invalid user pi from 86.194.165.188 port 34332 Aug 26 15:21:55 admin sshd[21730]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=86.194.165.188 Aug 26 15:21:55 admin sshd[21731]: Invalid user pi from 86.194.165.188 port 34338 Aug 26 15:21:55 admin sshd[21731]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=86.194.165.188 Aug 26 15:21:57 admin sshd[21730]: Failed password for invalid user pi from 86.194.165.188 port 34332 ssh2 Aug 26 15:21:57 admin sshd[21730]: Connection closed by 86.194.165.188 port 34332 [preauth] Aug 26 15:21:57 admin sshd[21731]: Failed password for invalid user pi from 86.194.165.188 port 34338 ssh2 Aug 26 15:21:57 admin sshd[21731]: Connection closed by 86.194.165.188 port 34338 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=86.194.165.188 |
2019-08-27 07:21:15 |
| 104.236.224.69 | attack | Aug 26 19:59:06 cvbmail sshd\[7412\]: Invalid user somsak from 104.236.224.69 Aug 26 19:59:06 cvbmail sshd\[7412\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.224.69 Aug 26 19:59:08 cvbmail sshd\[7412\]: Failed password for invalid user somsak from 104.236.224.69 port 58993 ssh2 |
2019-08-27 07:04:57 |
| 159.89.155.148 | attackbotsspam | Aug 26 21:43:08 mail sshd[7754]: Invalid user grigor from 159.89.155.148 Aug 26 21:43:08 mail sshd[7754]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.155.148 Aug 26 21:43:08 mail sshd[7754]: Invalid user grigor from 159.89.155.148 Aug 26 21:43:10 mail sshd[7754]: Failed password for invalid user grigor from 159.89.155.148 port 53042 ssh2 Aug 26 21:50:42 mail sshd[19045]: Invalid user aj from 159.89.155.148 ... |
2019-08-27 07:08:22 |
| 92.63.194.26 | attackbotsspam | Aug 27 01:17:51 v22018076622670303 sshd\[20427\]: Invalid user admin from 92.63.194.26 port 55490 Aug 27 01:17:51 v22018076622670303 sshd\[20427\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.63.194.26 Aug 27 01:17:53 v22018076622670303 sshd\[20427\]: Failed password for invalid user admin from 92.63.194.26 port 55490 ssh2 ... |
2019-08-27 07:23:00 |
| 192.42.116.16 | attack | Aug 26 12:51:45 lcprod sshd\[13446\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.42.116.16 user=sshd Aug 26 12:51:46 lcprod sshd\[13446\]: Failed password for sshd from 192.42.116.16 port 60184 ssh2 Aug 26 12:51:47 lcprod sshd\[13446\]: Failed password for sshd from 192.42.116.16 port 60184 ssh2 Aug 26 12:51:49 lcprod sshd\[13446\]: Failed password for sshd from 192.42.116.16 port 60184 ssh2 Aug 26 12:51:51 lcprod sshd\[13446\]: Failed password for sshd from 192.42.116.16 port 60184 ssh2 |
2019-08-27 07:11:09 |
| 54.39.151.167 | attack | Aug 27 01:17:17 rpi sshd[7642]: Failed password for sshd from 54.39.151.167 port 35878 ssh2 Aug 27 01:17:21 rpi sshd[7642]: Failed password for sshd from 54.39.151.167 port 35878 ssh2 |
2019-08-27 07:24:01 |
| 27.72.105.157 | attackbotsspam | Aug 26 23:41:08 localhost sshd\[30834\]: Invalid user salman from 27.72.105.157 port 51082 Aug 26 23:41:08 localhost sshd\[30834\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.72.105.157 Aug 26 23:41:10 localhost sshd\[30834\]: Failed password for invalid user salman from 27.72.105.157 port 51082 ssh2 |
2019-08-27 06:48:40 |
| 176.109.241.68 | attack | " " |
2019-08-27 07:27:59 |