城市(city): unknown
省份(region): unknown
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.140.108.218
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 58096
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.140.108.218. IN A
;; AUTHORITY SECTION:
. 600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022042401 1800 900 604800 86400
;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Apr 25 01:54:57 CST 2022
;; MSG SIZE rcvd: 108
218.108.140.104.in-addr.arpa domain name pointer 104-140-108-218.static.rdns.serverhub.com.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
218.108.140.104.in-addr.arpa name = 104-140-108-218.static.rdns.serverhub.com.
Authoritative answers can be found from:
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 175.9.218.45 | attack | Unauthorized connection attempt detected from IP address 175.9.218.45 to port 2220 [J] |
2020-01-31 18:41:46 |
| 153.37.214.220 | attackbots | Unauthorized connection attempt detected from IP address 153.37.214.220 to port 2220 [J] |
2020-01-31 19:17:33 |
| 184.105.247.220 | attack | 1580460469 - 01/31/2020 09:47:49 Host: scan-15f.shadowserver.org/184.105.247.220 Port: 389 UDP Blocked |
2020-01-31 19:10:03 |
| 58.8.193.63 | attackspam | Telnet/23 MH Probe, BF, Hack - |
2020-01-31 18:51:04 |
| 96.47.239.199 | attackspambots | Jan 31 09:51:04 vps339862 kernel: \[5133438.324617\] \[iptables\] PORT DENIED: IN=eth0 OUT= MAC=fa:16:3e:65:a1:f6:22:9b:64:31:28:de:08:00 SRC=96.47.239.199 DST=51.254.206.43 LEN=441 TOS=0x00 PREC=0x00 TTL=115 ID=24430 PROTO=UDP SPT=5062 DPT=5065 LEN=421 Jan 31 09:51:04 vps339862 kernel: \[5133438.463900\] \[iptables\] PORT DENIED: IN=eth0 OUT= MAC=fa:16:3e:65:a1:f6:22:9b:64:31:28:de:08:00 SRC=96.47.239.199 DST=51.254.206.43 LEN=440 TOS=0x00 PREC=0x00 TTL=115 ID=25834 PROTO=UDP SPT=5061 DPT=5070 LEN=420 Jan 31 09:51:04 vps339862 kernel: \[5133439.065552\] \[iptables\] PORT DENIED: IN=eth0 OUT= MAC=fa:16:3e:65:a1:f6:22:9b:64:31:28:de:08:00 SRC=96.47.239.199 DST=51.254.206.43 LEN=438 TOS=0x00 PREC=0x00 TTL=115 ID=712 PROTO=UDP SPT=5060 DPT=5080 LEN=418 Jan 31 09:51:42 vps339862 kernel: \[5133476.194368\] \[iptables\] PORT DENIED: IN=eth0 OUT= MAC=fa:16:3e:65:a1:f6:22:9b:64:31:28:de:08:00 SRC=96.47.239.199 DST=51.254.206.43 LEN=441 TOS=0x00 PREC=0x00 TTL=115 ID=20983 PROTO=UDP SPT=5063 ... |
2020-01-31 19:07:36 |
| 61.246.33.106 | attack | SSH Brute Force, server-1 sshd[20180]: Failed password for invalid user dhamani from 61.246.33.106 port 42982 ssh2 |
2020-01-31 19:19:43 |
| 159.65.155.227 | attack | Unauthorized connection attempt detected from IP address 159.65.155.227 to port 2220 [J] |
2020-01-31 18:50:45 |
| 222.186.175.151 | attackspam | 2020-01-31T10:47:01.960646abusebot.cloudsearch.cf sshd[22392]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.151 user=root 2020-01-31T10:47:03.841876abusebot.cloudsearch.cf sshd[22392]: Failed password for root from 222.186.175.151 port 54116 ssh2 2020-01-31T10:47:06.791144abusebot.cloudsearch.cf sshd[22392]: Failed password for root from 222.186.175.151 port 54116 ssh2 2020-01-31T10:47:01.960646abusebot.cloudsearch.cf sshd[22392]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.151 user=root 2020-01-31T10:47:03.841876abusebot.cloudsearch.cf sshd[22392]: Failed password for root from 222.186.175.151 port 54116 ssh2 2020-01-31T10:47:06.791144abusebot.cloudsearch.cf sshd[22392]: Failed password for root from 222.186.175.151 port 54116 ssh2 2020-01-31T10:47:01.960646abusebot.cloudsearch.cf sshd[22392]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= ... |
2020-01-31 18:52:17 |
| 79.20.99.94 | attackspam | TCP Port Scanning |
2020-01-31 18:39:14 |
| 172.217.4.36 | attackspam | Avast Antivirus group that is scraping up data from my devices and accounts, as well as others around while I'm on social media. Also reading my emails out loud on Twitter. |
2020-01-31 19:13:18 |
| 76.87.91.212 | attackbots | Unauthorized connection attempt detected from IP address 76.87.91.212 to port 80 [J] |
2020-01-31 19:14:52 |
| 119.28.67.181 | attack | Jan 29 19:32:21 ns4 sshd[25655]: Invalid user prayag from 119.28.67.181 Jan 29 19:32:21 ns4 sshd[25655]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.28.67.181 Jan 29 19:32:24 ns4 sshd[25655]: Failed password for invalid user prayag from 119.28.67.181 port 35618 ssh2 Jan 29 19:46:23 ns4 sshd[28051]: Invalid user bhaskar from 119.28.67.181 Jan 29 19:46:23 ns4 sshd[28051]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.28.67.181 Jan 29 19:46:25 ns4 sshd[28051]: Failed password for invalid user bhaskar from 119.28.67.181 port 33154 ssh2 Jan 29 19:49:32 ns4 sshd[28521]: Invalid user yuvati from 119.28.67.181 Jan 29 19:49:32 ns4 sshd[28521]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.28.67.181 Jan 29 19:49:33 ns4 sshd[28521]: Failed password for invalid user yuvati from 119.28.67.181 port 35066 ssh2 ........ ----------------------------------------------- https://www.blo |
2020-01-31 18:34:41 |
| 93.174.93.33 | attack | Jan 31 11:45:00 h2177944 kernel: \[3665673.367151\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=93.174.93.33 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=22904 PROTO=TCP SPT=59487 DPT=33886 WINDOW=1024 RES=0x00 SYN URGP=0 Jan 31 11:45:00 h2177944 kernel: \[3665673.367164\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=93.174.93.33 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=22904 PROTO=TCP SPT=59487 DPT=33886 WINDOW=1024 RES=0x00 SYN URGP=0 Jan 31 11:47:06 h2177944 kernel: \[3665799.488579\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=93.174.93.33 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=43152 PROTO=TCP SPT=59487 DPT=33895 WINDOW=1024 RES=0x00 SYN URGP=0 Jan 31 11:47:06 h2177944 kernel: \[3665799.488592\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=93.174.93.33 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=43152 PROTO=TCP SPT=59487 DPT=33895 WINDOW=1024 RES=0x00 SYN URGP=0 Jan 31 11:52:12 h2177944 kernel: \[3666105.883459\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=93.174.93.33 DST=85.214.117.9 |
2020-01-31 18:54:35 |
| 198.108.67.89 | attackbots | " " |
2020-01-31 18:53:08 |
| 198.108.67.43 | attack | " " |
2020-01-31 19:14:14 |