城市(city): unknown
省份(region): unknown
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.21.14.27
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 22708
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.21.14.27. IN A
;; AUTHORITY SECTION:
. 600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021602 1800 900 604800 86400
;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 17 08:01:03 CST 2022
;; MSG SIZE rcvd: 105Host 27.14.21.104.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 27.14.21.104.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 193.66.202.67 | attackbotsspam | Invalid user squid from 193.66.202.67 port 45118 |
2019-12-22 03:28:11 |
| 192.160.102.166 | attackbots | goldgier.de:80 192.160.102.166 - - [21/Dec/2019:15:51:19 +0100] "POST /xmlrpc.php HTTP/1.0" 301 497 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.92 Safari/537.36" www.goldgier.de 192.160.102.166 [21/Dec/2019:15:51:21 +0100] "POST /xmlrpc.php HTTP/1.0" 200 3899 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.92 Safari/537.36" |
2019-12-22 03:28:30 |
| 58.144.150.135 | attackbotsspam | 58.144.150.135 - - \[21/Dec/2019:15:52:02 +0100\] "GET /goip/cron.htm HTTP/1.1" 403 459 "-" "Mozilla/4.0 \(compatible\; MSIE 7.0\; Windows NT 6.1\; WOW64\; Trident/5.0\; SLCC2\; .NET CLR 2.0.50727\; .NET CLR 3.5.30729\; .NET CLR 3.0.30729\; Media Center PC 6.0\; .NET4.0C\; .NET4.0E\; InfoPath.3\; KB974488\)" 58.144.150.135 - - \[21/Dec/2019:15:52:02 +0100\] "GET / HTTP/1.1" 403 446 "-" "Mozilla/4.0 \(compatible\; MSIE 7.0\; Windows NT 6.1\; WOW64\; Trident/5.0\; SLCC2\; .NET CLR 2.0.50727\; .NET CLR 3.5.30729\; .NET CLR 3.0.30729\; Media Center PC 6.0\; .NET4.0C\; .NET4.0E\; InfoPath.3\; KB974488\)" 58.144.150.135 - - \[21/Dec/2019:15:52:03 +0100\] "GET /index.html\?findcli=-1 HTTP/1.1" 403 456 "-" "Mozilla/4.0 \(compatible\; MSIE 7.0\; Windows NT 6.1\; WOW64\; Trident/5.0\; SLCC2\; .NET CLR 2.0.50727\; .NET CLR 3.5.30729\; .NET CLR 3.0.30729\; Media Center PC 6.0\; .NET4.0C\; .NET4.0E\; InfoPath.3\; KB974488\)" ... |
2019-12-22 03:00:40 |
| 106.13.34.212 | attackspam | Dec 21 19:52:08 mail sshd\[31539\]: Invalid user breadfruit from 106.13.34.212 Dec 21 19:52:08 mail sshd\[31539\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.34.212 Dec 21 19:52:09 mail sshd\[31539\]: Failed password for invalid user breadfruit from 106.13.34.212 port 52404 ssh2 ... |
2019-12-22 03:04:57 |
| 213.202.253.44 | attackbots | Automated report (2019-12-21T17:26:14+00:00). Misbehaving bot detected at this address. |
2019-12-22 03:16:15 |
| 117.50.13.29 | attackbotsspam | Dec 21 20:07:03 server sshd\[6087\]: Invalid user user from 117.50.13.29 Dec 21 20:07:03 server sshd\[6087\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.13.29 Dec 21 20:07:05 server sshd\[6087\]: Failed password for invalid user user from 117.50.13.29 port 59346 ssh2 Dec 21 20:33:29 server sshd\[13063\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.13.29 user=root Dec 21 20:33:31 server sshd\[13063\]: Failed password for root from 117.50.13.29 port 55616 ssh2 ... |
2019-12-22 03:19:23 |
| 178.128.48.87 | attackspambots | MLV GET /server/wp-login.php |
2019-12-22 03:15:36 |
| 58.210.119.186 | attack | 2019-12-21T09:45:18.182035ns547587 sshd\[12647\]: Invalid user chartier from 58.210.119.186 port 35556 2019-12-21T09:45:18.184082ns547587 sshd\[12647\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.210.119.186 2019-12-21T09:45:19.966312ns547587 sshd\[12647\]: Failed password for invalid user chartier from 58.210.119.186 port 35556 ssh2 2019-12-21T09:51:49.448111ns547587 sshd\[22996\]: Invalid user user2 from 58.210.119.186 port 56612 2019-12-21T09:51:49.449843ns547587 sshd\[22996\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.210.119.186 ... |
2019-12-22 03:10:08 |
| 157.230.153.75 | attack | Dec 21 21:13:26 server sshd\[23318\]: Invalid user minick from 157.230.153.75 Dec 21 21:13:26 server sshd\[23318\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.153.75 Dec 21 21:13:28 server sshd\[23318\]: Failed password for invalid user minick from 157.230.153.75 port 45000 ssh2 Dec 21 21:25:33 server sshd\[26631\]: Invalid user phillip from 157.230.153.75 Dec 21 21:25:33 server sshd\[26631\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.153.75 ... |
2019-12-22 03:03:15 |
| 159.138.156.169 | attack | REQUESTED PAGE: /wp-admin/js/password-strength-meter.min.js?ver=5.3.2 |
2019-12-22 03:15:51 |
| 68.183.85.75 | attackbots | SSH Bruteforce attempt |
2019-12-22 02:57:02 |
| 185.176.27.18 | attackspambots | 12/21/2019-19:45:59.111665 185.176.27.18 Protocol: 6 ET DROP Dshield Block Listed Source group 1 |
2019-12-22 03:24:14 |
| 34.93.238.77 | attackbots | Dec 21 17:06:54 *** sshd[1556]: User backup from 34.93.238.77 not allowed because not listed in AllowUsers |
2019-12-22 03:25:50 |
| 164.132.107.245 | attackspambots | Dec 21 17:56:22 localhost sshd[45130]: Failed password for invalid user ftpuser from 164.132.107.245 port 58114 ssh2 Dec 21 18:05:05 localhost sshd[45546]: Failed password for root from 164.132.107.245 port 46620 ssh2 Dec 21 18:10:01 localhost sshd[45866]: Failed password for invalid user runstedler from 164.132.107.245 port 52834 ssh2 |
2019-12-22 03:30:57 |
| 195.20.119.2 | attackspambots | Dec 21 18:25:41 server sshd\[10359\]: Invalid user shop from 195.20.119.2 Dec 21 18:25:41 server sshd\[10359\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.20.119.2 Dec 21 18:25:42 server sshd\[10359\]: Failed password for invalid user shop from 195.20.119.2 port 58450 ssh2 Dec 21 18:31:15 server sshd\[11772\]: Invalid user hilmocika from 195.20.119.2 Dec 21 18:31:15 server sshd\[11772\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.20.119.2 ... |
2019-12-22 03:23:29 |