城市(city): unknown
省份(region): unknown
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.19.210.18
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 34911
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.19.210.18. IN A
;; AUTHORITY SECTION:
. 551 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022030302 1800 900 604800 86400
;; Query time: 45 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Mar 04 11:48:41 CST 2022
;; MSG SIZE rcvd: 106Host 18.210.19.104.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 18.210.19.104.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 51.15.99.106 | attack | Nov 2 15:55:49 vserver sshd\[11904\]: Failed password for root from 51.15.99.106 port 37176 ssh2Nov 2 15:59:48 vserver sshd\[11960\]: Failed password for root from 51.15.99.106 port 47680 ssh2Nov 2 16:03:45 vserver sshd\[12045\]: Invalid user ag from 51.15.99.106Nov 2 16:03:47 vserver sshd\[12045\]: Failed password for invalid user ag from 51.15.99.106 port 58192 ssh2 ... |
2019-11-03 00:57:21 |
| 139.217.110.34 | attackspam | 3389BruteforceFW21 |
2019-11-03 01:19:57 |
| 183.131.22.206 | attackspambots | $f2bV_matches |
2019-11-03 00:55:18 |
| 45.141.84.50 | attackbots | Nov 2 15:14:14 h2177944 kernel: \[5579749.715947\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.141.84.50 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=41428 PROTO=TCP SPT=57773 DPT=21303 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 2 15:16:23 h2177944 kernel: \[5579878.315867\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.141.84.50 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=11946 PROTO=TCP SPT=57773 DPT=22689 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 2 15:18:54 h2177944 kernel: \[5580029.637046\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.141.84.50 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=34537 PROTO=TCP SPT=57773 DPT=22434 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 2 15:20:32 h2177944 kernel: \[5580128.179273\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.141.84.50 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=18502 PROTO=TCP SPT=57773 DPT=22871 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 2 15:29:37 h2177944 kernel: \[5580672.752785\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.141.84.50 DST=85.214.117.9 |
2019-11-03 01:01:14 |
| 152.44.38.37 | attackbots | Nov 2 11:15:29 indra sshd[393272]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152-44-38-37.us-chi1.upcloud.host user=r.r Nov 2 11:15:31 indra sshd[393272]: Failed password for r.r from 152.44.38.37 port 36802 ssh2 Nov 2 11:15:31 indra sshd[393272]: Received disconnect from 152.44.38.37: 11: Bye Bye [preauth] Nov 2 11:33:27 indra sshd[396814]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152-44-38-37.us-chi1.upcloud.host user=r.r Nov 2 11:33:29 indra sshd[396814]: Failed password for r.r from 152.44.38.37 port 40156 ssh2 Nov 2 11:33:29 indra sshd[396814]: Received disconnect from 152.44.38.37: 11: Bye Bye [preauth] Nov 2 11:37:18 indra sshd[397883]: Invalid user webadm from 152.44.38.37 Nov 2 11:37:18 indra sshd[397883]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152-44-38-37.us-chi1.upcloud.host Nov 2 11:37:20 indra sshd[397883........ ------------------------------- |
2019-11-03 01:03:39 |
| 74.82.47.25 | attack | 445/tcp 50070/tcp 23/tcp... [2019-09-02/11-02]27pkt,14pt.(tcp),1pt.(udp) |
2019-11-03 00:50:22 |
| 79.137.84.144 | attack | 2019-11-02T16:48:13.945031abusebot-5.cloudsearch.cf sshd\[25880\]: Invalid user tester1 from 79.137.84.144 port 42870 |
2019-11-03 00:52:21 |
| 156.96.155.246 | attackspam | Nov 2 17:09:34 tor-proxy-02 sshd\[28381\]: User root from 156.96.155.246 not allowed because not listed in AllowUsers Nov 2 17:09:35 tor-proxy-02 sshd\[28383\]: User root from 156.96.155.246 not allowed because not listed in AllowUsers Nov 2 17:09:39 tor-proxy-02 sshd\[28387\]: Invalid user admin from 156.96.155.246 port 2008 ... |
2019-11-03 00:41:31 |
| 185.175.93.101 | attackbots | 11/02/2019-13:04:52.823509 185.175.93.101 Protocol: 6 ET DROP Dshield Block Listed Source group 1 |
2019-11-03 01:18:53 |
| 51.89.148.180 | attackspambots | Nov 2 14:03:05 vps691689 sshd[12915]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.89.148.180 Nov 2 14:03:07 vps691689 sshd[12915]: Failed password for invalid user !@#zzidcQWER from 51.89.148.180 port 53304 ssh2 Nov 2 14:06:43 vps691689 sshd[12960]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.89.148.180 ... |
2019-11-03 01:08:11 |
| 88.3.125.195 | attackbotsspam | (sshd) Failed SSH login from 88.3.125.195 (ES/Spain/195.red-88-3-125.dynamicip.rima-tde.net): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Nov 2 11:52:28 andromeda sshd[15379]: Invalid user pi from 88.3.125.195 port 35164 Nov 2 11:52:28 andromeda sshd[15380]: Invalid user pi from 88.3.125.195 port 35174 Nov 2 11:52:30 andromeda sshd[15379]: Failed password for invalid user pi from 88.3.125.195 port 35164 ssh2 |
2019-11-03 01:12:32 |
| 80.82.64.214 | attackbots | Auto reported by IDS |
2019-11-03 00:40:23 |
| 158.69.63.43 | attackspam | Postfix RBL failed |
2019-11-03 01:01:38 |
| 203.160.174.214 | attackbots | Invalid user jukebox from 203.160.174.214 port 43026 |
2019-11-03 00:58:16 |
| 222.186.175.212 | attack | Nov 2 17:55:14 vserver sshd\[12943\]: Failed password for root from 222.186.175.212 port 50802 ssh2Nov 2 17:55:18 vserver sshd\[12943\]: Failed password for root from 222.186.175.212 port 50802 ssh2Nov 2 17:55:23 vserver sshd\[12943\]: Failed password for root from 222.186.175.212 port 50802 ssh2Nov 2 17:55:27 vserver sshd\[12943\]: Failed password for root from 222.186.175.212 port 50802 ssh2 ... |
2019-11-03 00:59:05 |