城市(city): unknown
省份(region): unknown
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.21.19.66
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 57138
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.21.19.66. IN A
;; AUTHORITY SECTION:
. 229 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021700 1800 900 604800 86400
;; Query time: 24 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 17 18:35:23 CST 2022
;; MSG SIZE rcvd: 105Host 66.19.21.104.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 66.19.21.104.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 183.82.100.141 | attackbots | $f2bV_matches |
2019-11-11 20:21:04 |
| 45.227.253.141 | attackspam | 2019-11-11T13:16:17.459905mail01 postfix/smtpd[16723]: warning: unknown[45.227.253.141]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2019-11-11T13:16:22.147450mail01 postfix/smtpd[26344]: warning: unknown[45.227.253.141]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2019-11-11T13:16:24.147881mail01 postfix/smtpd[18069]: warning: unknown[45.227.253.141]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2019-11-11T13:16:24.148404mail01 postfix/smtpd[3534]: warning: unknown[45.227.253.141]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2019-11-11T13:16:24.148819mail01 postfix/smtpd[16796]: warning: unknown[45.227.253.141]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2019-11-11T13:16:24.149242mail01 postfix/smtpd[16723]: warning: unknown[45.227.253.141]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2019-11-11T13:16:24.149658mail01 postfix/smtpd[26328]: warning: unknown[45.227.253.141]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 |
2019-11-11 20:18:21 |
| 1.20.98.66 | attackbotsspam | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/1.20.98.66/ TH - 1H : (18) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : TH NAME ASN : ASN23969 IP : 1.20.98.66 CIDR : 1.20.98.0/24 PREFIX COUNT : 1783 UNIQUE IP COUNT : 1183744 ATTACKS DETECTED ASN23969 : 1H - 1 3H - 2 6H - 4 12H - 4 24H - 6 DateTime : 2019-11-11 07:21:49 INFO : HACK ! - Looking for resource vulnerabilities Scan Detected and Blocked by ADMIN - data recovery |
2019-11-11 20:21:26 |
| 140.143.249.234 | attackspambots | Nov 11 14:01:31 vibhu-HP-Z238-Microtower-Workstation sshd\[781\]: Invalid user dovecot from 140.143.249.234 Nov 11 14:01:31 vibhu-HP-Z238-Microtower-Workstation sshd\[781\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.249.234 Nov 11 14:01:33 vibhu-HP-Z238-Microtower-Workstation sshd\[781\]: Failed password for invalid user dovecot from 140.143.249.234 port 47048 ssh2 Nov 11 14:05:31 vibhu-HP-Z238-Microtower-Workstation sshd\[1164\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.249.234 user=root Nov 11 14:05:33 vibhu-HP-Z238-Microtower-Workstation sshd\[1164\]: Failed password for root from 140.143.249.234 port 50816 ssh2 ... |
2019-11-11 20:21:44 |
| 14.111.93.128 | attackspam | Nov 11 12:57:55 vps666546 sshd\[13422\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.111.93.128 user=root Nov 11 12:57:56 vps666546 sshd\[13422\]: Failed password for root from 14.111.93.128 port 41136 ssh2 Nov 11 13:02:38 vps666546 sshd\[13579\]: Invalid user hypnosis from 14.111.93.128 port 48486 Nov 11 13:02:38 vps666546 sshd\[13579\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.111.93.128 Nov 11 13:02:40 vps666546 sshd\[13579\]: Failed password for invalid user hypnosis from 14.111.93.128 port 48486 ssh2 ... |
2019-11-11 20:10:48 |
| 117.50.2.47 | attack | Unauthorized SSH login attempts |
2019-11-11 20:44:46 |
| 106.198.20.57 | attackspam | Port 1433 Scan |
2019-11-11 20:30:55 |
| 41.78.201.48 | attack | Nov 11 08:17:34 server sshd\[26055\]: Invalid user Serial123 from 41.78.201.48 port 44546 Nov 11 08:17:34 server sshd\[26055\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.78.201.48 Nov 11 08:17:37 server sshd\[26055\]: Failed password for invalid user Serial123 from 41.78.201.48 port 44546 ssh2 Nov 11 08:22:02 server sshd\[7182\]: Invalid user 88888 from 41.78.201.48 port 34610 Nov 11 08:22:02 server sshd\[7182\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.78.201.48 |
2019-11-11 20:10:33 |
| 89.248.168.51 | attackbots | firewall-block, port(s): 4567/tcp |
2019-11-11 20:32:10 |
| 159.192.133.106 | attackspam | 2019-11-11T06:12:19.1129661495-001 sshd\[14017\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.192.133.106 user=root 2019-11-11T06:12:21.2901391495-001 sshd\[14017\]: Failed password for root from 159.192.133.106 port 48573 ssh2 2019-11-11T06:16:26.5716601495-001 sshd\[14156\]: Invalid user backup from 159.192.133.106 port 38925 2019-11-11T06:16:26.5798051495-001 sshd\[14156\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.192.133.106 2019-11-11T06:16:29.3334221495-001 sshd\[14156\]: Failed password for invalid user backup from 159.192.133.106 port 38925 ssh2 2019-11-11T06:20:49.3085151495-001 sshd\[14303\]: Invalid user sibiga from 159.192.133.106 port 57501 ... |
2019-11-11 20:08:35 |
| 151.243.29.200 | attackbotsspam | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/151.243.29.200/ AU - 1H : (21) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : AU NAME ASN : ASN31549 IP : 151.243.29.200 CIDR : 151.243.0.0/18 PREFIX COUNT : 228 UNIQUE IP COUNT : 1213952 ATTACKS DETECTED ASN31549 : 1H - 1 3H - 1 6H - 2 12H - 2 24H - 3 DateTime : 2019-11-11 07:22:09 INFO : Server 403 - Looking for resource vulnerabilities Detected and Blocked by ADMIN - data recovery |
2019-11-11 20:04:05 |
| 14.225.17.9 | attack | Nov 11 04:23:25 Tower sshd[44109]: Connection from 14.225.17.9 port 42538 on 192.168.10.220 port 22 Nov 11 04:23:27 Tower sshd[44109]: Invalid user rowie from 14.225.17.9 port 42538 Nov 11 04:23:27 Tower sshd[44109]: error: Could not get shadow information for NOUSER Nov 11 04:23:27 Tower sshd[44109]: Failed password for invalid user rowie from 14.225.17.9 port 42538 ssh2 Nov 11 04:23:27 Tower sshd[44109]: Received disconnect from 14.225.17.9 port 42538:11: Bye Bye [preauth] Nov 11 04:23:27 Tower sshd[44109]: Disconnected from invalid user rowie 14.225.17.9 port 42538 [preauth] |
2019-11-11 20:36:38 |
| 142.44.178.4 | attackspambots | SSH Scan |
2019-11-11 20:14:18 |
| 117.156.119.39 | attack | Nov 11 12:44:12 [snip] sshd[29384]: Invalid user ftpuser from 117.156.119.39 port 42096 Nov 11 12:44:12 [snip] sshd[29384]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.156.119.39 Nov 11 12:44:14 [snip] sshd[29384]: Failed password for invalid user ftpuser from 117.156.119.39 port 42096 ssh2[...] |
2019-11-11 20:44:16 |
| 61.191.220.250 | attack | Dovecot Brute-Force |
2019-11-11 20:42:52 |