城市(city): unknown
省份(region): unknown
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 96.249.64.253
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 53346
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;96.249.64.253. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021902 1800 900 604800 86400
;; Query time: 12 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 20 10:04:05 CST 2025
;; MSG SIZE rcvd: 106
253.64.249.96.in-addr.arpa domain name pointer pool-96-249-64-253.chrlwv.east.verizon.net.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
253.64.249.96.in-addr.arpa name = pool-96-249-64-253.chrlwv.east.verizon.net.
Authoritative answers can be found from:
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 179.191.14.58 | attackbots | Jun 9 05:47:34 debian-2gb-nbg1-2 kernel: \[13933191.182846\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=179.191.14.58 DST=195.201.40.59 LEN=44 TOS=0x08 PREC=0x00 TTL=39 ID=49696 PROTO=TCP SPT=18952 DPT=23 WINDOW=65417 RES=0x00 SYN URGP=0 |
2020-06-09 19:43:54 |
| 194.26.29.52 | attackbotsspam | [MK-VM4] Blocked by UFW |
2020-06-09 20:08:14 |
| 202.55.191.194 | attackspambots | Unauthorized connection attempt from IP address 202.55.191.194 on Port 445(SMB) |
2020-06-09 20:04:07 |
| 94.191.14.213 | attack | Jun 9 13:49:48 mail sshd\[19841\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.14.213 user=root Jun 9 13:49:51 mail sshd\[19841\]: Failed password for root from 94.191.14.213 port 38610 ssh2 Jun 9 13:54:18 mail sshd\[20010\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.14.213 user=root ... |
2020-06-09 19:56:21 |
| 157.245.83.8 | attack | Jun 9 13:30:00 meumeu sshd[64711]: Invalid user hdfs from 157.245.83.8 port 43908 Jun 9 13:30:00 meumeu sshd[64711]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.83.8 Jun 9 13:30:00 meumeu sshd[64711]: Invalid user hdfs from 157.245.83.8 port 43908 Jun 9 13:30:01 meumeu sshd[64711]: Failed password for invalid user hdfs from 157.245.83.8 port 43908 ssh2 Jun 9 13:31:52 meumeu sshd[64753]: Invalid user zhangjunquan from 157.245.83.8 port 46180 Jun 9 13:31:52 meumeu sshd[64753]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.83.8 Jun 9 13:31:52 meumeu sshd[64753]: Invalid user zhangjunquan from 157.245.83.8 port 46180 Jun 9 13:31:55 meumeu sshd[64753]: Failed password for invalid user zhangjunquan from 157.245.83.8 port 46180 ssh2 Jun 9 13:33:38 meumeu sshd[64804]: Invalid user flame from 157.245.83.8 port 48446 ... |
2020-06-09 19:47:24 |
| 109.236.60.42 | attack | ET SCAN Sipvicious Scan - port: 5060 proto: UDP cat: Attempted Information Leak |
2020-06-09 19:44:39 |
| 89.218.95.10 | attack | PowerShell/Ploprolo.A |
2020-06-09 20:00:41 |
| 106.12.31.186 | attackspam | Jun 9 07:10:58 124388 sshd[9240]: Invalid user mosquitto from 106.12.31.186 port 58712 Jun 9 07:10:58 124388 sshd[9240]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.31.186 Jun 9 07:10:58 124388 sshd[9240]: Invalid user mosquitto from 106.12.31.186 port 58712 Jun 9 07:11:00 124388 sshd[9240]: Failed password for invalid user mosquitto from 106.12.31.186 port 58712 ssh2 Jun 9 07:13:21 124388 sshd[9275]: Invalid user wkaburu from 106.12.31.186 port 33750 |
2020-06-09 20:07:42 |
| 103.56.113.224 | attack | $f2bV_matches |
2020-06-09 19:59:13 |
| 120.236.189.171 | attackspam | 2020-06-09T06:29:09+0200 Failed SSH Authentication/Brute Force Attack. (Server 4) |
2020-06-09 19:46:12 |
| 37.1.204.92 | attackbotsspam | Attacks websites by trying to access known vulnerables of plugins, brute-force of backends or probing of administrative tools |
2020-06-09 19:32:42 |
| 157.230.153.75 | attack | Failed password for invalid user semi from 157.230.153.75 port 50918 ssh2 |
2020-06-09 19:51:35 |
| 115.79.141.251 | attackspambots | Unauthorized connection attempt from IP address 115.79.141.251 on Port 445(SMB) |
2020-06-09 19:59:51 |
| 211.219.18.186 | attackspambots | Lines containing failures of 211.219.18.186 Jun 9 05:21:34 shared01 sshd[16103]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.219.18.186 user=r.r Jun 9 05:21:35 shared01 sshd[16103]: Failed password for r.r from 211.219.18.186 port 54763 ssh2 Jun 9 05:21:35 shared01 sshd[16103]: Received disconnect from 211.219.18.186 port 54763:11: Bye Bye [preauth] Jun 9 05:21:35 shared01 sshd[16103]: Disconnected from authenticating user r.r 211.219.18.186 port 54763 [preauth] Jun 9 05:33:12 shared01 sshd[21362]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.219.18.186 user=r.r Jun 9 05:33:14 shared01 sshd[21362]: Failed password for r.r from 211.219.18.186 port 38308 ssh2 Jun 9 05:33:14 shared01 sshd[21362]: Received disconnect from 211.219.18.186 port 38308:11: Bye Bye [preauth] Jun 9 05:33:14 shared01 sshd[21362]: Disconnected from authenticating user r.r 211.219.18.186 port 38308........ ------------------------------ |
2020-06-09 19:34:55 |
| 106.54.52.35 | attackbots | 2020-06-09T12:09:00.890921snf-827550 sshd[14916]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.52.35 2020-06-09T12:09:00.873322snf-827550 sshd[14916]: Invalid user pagar from 106.54.52.35 port 57728 2020-06-09T12:09:02.720577snf-827550 sshd[14916]: Failed password for invalid user pagar from 106.54.52.35 port 57728 ssh2 ... |
2020-06-09 19:40:53 |