城市(city): unknown
省份(region): unknown
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.21.234.157
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 13350
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.21.234.157. IN A
;; AUTHORITY SECTION:
. 503 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021700 1800 900 604800 86400
;; Query time: 27 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 02:17:50 CST 2022
;; MSG SIZE rcvd: 107
Host 157.234.21.104.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 157.234.21.104.in-addr.arpa: NXDOMAIN
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 20.43.56.138 | attackbotsspam | (sshd) Failed SSH login from 20.43.56.138 (FR/France/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 25 13:11:07 server sshd[4911]: Invalid user bridge from 20.43.56.138 port 29386 Sep 25 13:11:07 server sshd[4910]: Invalid user bridge from 20.43.56.138 port 29385 Sep 25 13:11:07 server sshd[4913]: Invalid user bridge from 20.43.56.138 port 29393 Sep 25 13:11:07 server sshd[4916]: Invalid user bridge from 20.43.56.138 port 29398 Sep 25 13:11:07 server sshd[4917]: Invalid user bridge from 20.43.56.138 port 29410 |
2020-09-26 01:16:34 |
| 13.93.36.67 | attack | Sep 25 16:34:14 ssh2 sshd[92996]: Invalid user admin from 13.93.36.67 port 32909 Sep 25 16:34:14 ssh2 sshd[92996]: Failed password for invalid user admin from 13.93.36.67 port 32909 ssh2 Sep 25 16:34:14 ssh2 sshd[92996]: Disconnected from invalid user admin 13.93.36.67 port 32909 [preauth] ... |
2020-09-26 01:04:09 |
| 91.106.45.211 | attackspam | Honeypot attack, port: 445, PTR: PTR record not found |
2020-09-26 00:59:41 |
| 128.199.123.87 | attackspam | 128.199.123.87 - - [25/Sep/2020:12:56:53 +0200] "GET /wp-login.php HTTP/1.1" 200 9184 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 128.199.123.87 - - [25/Sep/2020:12:56:55 +0200] "POST /wp-login.php HTTP/1.1" 200 9435 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 128.199.123.87 - - [25/Sep/2020:12:57:01 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-09-26 01:27:04 |
| 163.172.147.193 | attackspambots | 2020-09-25T08:44:26.592801mail.thespaminator.com sshd[16126]: Invalid user guest from 163.172.147.193 port 55654 2020-09-25T08:44:28.204466mail.thespaminator.com sshd[16126]: Failed password for invalid user guest from 163.172.147.193 port 55654 ssh2 ... |
2020-09-26 01:19:23 |
| 106.55.242.70 | attackspambots | Banned for a week because repeated abuses, for example SSH, but not only |
2020-09-26 01:07:59 |
| 40.89.155.138 | attackspambots | Sep 25 18:04:12 cdc sshd[26003]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.89.155.138 Sep 25 18:04:14 cdc sshd[26003]: Failed password for invalid user stema from 40.89.155.138 port 64906 ssh2 |
2020-09-26 01:23:20 |
| 204.57.126.70 | attack | lfd: (smtpauth) Failed SMTP AUTH login from 204.57.126.70 (-): 5 in the last 3600 secs - Wed Aug 29 14:54:53 2018 |
2020-09-26 01:06:15 |
| 52.224.67.47 | attackbots | [f2b] sshd bruteforce, retries: 1 |
2020-09-26 01:05:50 |
| 139.60.162.131 | attackspam | Brute force blocker - service: exim2 - aantal: 25 - Tue Aug 28 23:45:17 2018 |
2020-09-26 01:25:40 |
| 182.75.141.110 | attack | Icarus honeypot on github |
2020-09-26 01:21:52 |
| 125.129.212.198 | attack | lfd: (smtpauth) Failed SMTP AUTH login from 125.129.212.198 (KR/Republic of Korea/-): 5 in the last 3600 secs - Tue Aug 28 15:27:04 2018 |
2020-09-26 01:20:13 |
| 95.255.52.233 | attackbots | SSH Brute Force |
2020-09-26 01:13:01 |
| 42.119.99.81 | attack | Sep 24 22:37:50 andromeda sshd\[34838\]: Invalid user user1 from 42.119.99.81 port 33779 Sep 24 22:37:50 andromeda sshd\[34838\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.119.99.81 Sep 24 22:37:51 andromeda sshd\[34843\]: Invalid user user1 from 42.119.99.81 port 21584 |
2020-09-26 01:02:42 |
| 189.178.178.232 | attack | SSH/22 MH Probe, BF, Hack - |
2020-09-26 01:30:38 |