城市(city): unknown
省份(region): unknown
国家(country): None
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.21.34.49
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 13040
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.21.34.49. IN A
;; AUTHORITY SECTION:
. 433 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022022000 1800 900 604800 86400
;; Query time: 59 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 20 20:25:40 CST 2022
;; MSG SIZE rcvd: 105Host 49.34.21.104.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 49.34.21.104.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 213.33.244.218 | attack | RDP |
2020-05-01 20:26:07 |
| 148.70.96.124 | attackspam | May 1 17:14:47 gw1 sshd[5256]: Failed password for root from 148.70.96.124 port 36686 ssh2 ... |
2020-05-01 20:50:18 |
| 83.143.148.197 | attack | Telnet/23 MH Probe, Scan, BF, Hack - |
2020-05-01 20:30:37 |
| 37.187.116.56 | attackbots | May 1 13:49:13 lock-38 sshd[1782152]: Unable to negotiate with 37.187.116.56 port 51854: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 1 13:50:17 lock-38 sshd[1782186]: Unable to negotiate with 37.187.116.56 port 52772: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 1 13:51:25 lock-38 sshd[1782206]: Unable to negotiate with 37.187.116.56 port 53768: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 1 13:52:46 lock-38 sshd[1782231]: Unable to negotiate with 37.187.116.56 port 54984: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 1 13:54:08 lock-38 sshd[178 ... |
2020-05-01 20:29:53 |
| 142.93.250.190 | attack | xmlrpc attack |
2020-05-01 20:51:56 |
| 45.142.195.5 | attackbotsspam | May 1 13:16:46 blackbee postfix/smtpd\[2830\]: warning: unknown\[45.142.195.5\]: SASL LOGIN authentication failed: authentication failure May 1 13:17:20 blackbee postfix/smtpd\[2830\]: warning: unknown\[45.142.195.5\]: SASL LOGIN authentication failed: authentication failure May 1 13:17:53 blackbee postfix/smtpd\[2830\]: warning: unknown\[45.142.195.5\]: SASL LOGIN authentication failed: authentication failure May 1 13:18:25 blackbee postfix/smtpd\[2830\]: warning: unknown\[45.142.195.5\]: SASL LOGIN authentication failed: authentication failure May 1 13:18:58 blackbee postfix/smtpd\[2830\]: warning: unknown\[45.142.195.5\]: SASL LOGIN authentication failed: authentication failure ... |
2020-05-01 20:19:52 |
| 217.111.239.37 | attackspam | Apr 30 12:11:36 mail sshd[14679]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.111.239.37 Apr 30 12:11:38 mail sshd[14679]: Failed password for invalid user cs from 217.111.239.37 port 53168 ssh2 ... |
2020-05-01 20:32:34 |
| 103.101.82.155 | attackspam | May 1 10:48:26 our-server-hostname sshd[29433]: reveeclipse mapping checking getaddrinfo for host82.155.turbotech.com [103.101.82.155] failed - POSSIBLE BREAK-IN ATTEMPT! May 1 10:48:26 our-server-hostname sshd[29433]: Invalid user postgres from 103.101.82.155 May 1 10:48:26 our-server-hostname sshd[29433]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.101.82.155 May 1 10:48:28 our-server-hostname sshd[29433]: Failed password for invalid user postgres from 103.101.82.155 port 51264 ssh2 May 1 10:50:26 our-server-hostname sshd[29970]: reveeclipse mapping checking getaddrinfo for host82.155.turbotech.com [103.101.82.155] failed - POSSIBLE BREAK-IN ATTEMPT! May 1 10:50:26 our-server-hostname sshd[29970]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.101.82.155 user=r.r May 1 10:50:28 our-server-hostname sshd[29970]: Failed password for r.r from 103.101.82.155 port 53622 ssh........ ------------------------------- |
2020-05-01 20:21:38 |
| 104.248.1.92 | attack | May 1 08:37:06 ny01 sshd[20713]: Failed password for root from 104.248.1.92 port 34292 ssh2 May 1 08:41:09 ny01 sshd[21185]: Failed password for root from 104.248.1.92 port 45664 ssh2 |
2020-05-01 20:58:33 |
| 168.232.198.218 | attackspam | May 1 17:17:56 gw1 sshd[5410]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.232.198.218 May 1 17:17:58 gw1 sshd[5410]: Failed password for invalid user etrust from 168.232.198.218 port 37678 ssh2 ... |
2020-05-01 20:28:28 |
| 89.189.186.45 | attackbotsspam | Invalid user willys from 89.189.186.45 port 59926 |
2020-05-01 20:32:04 |
| 185.176.27.26 | attack | scans 20 times in preceeding hours on the ports (in chronological order) 34194 34193 34192 34285 34283 34284 34299 34298 34300 34392 34394 34393 34487 34488 34486 34581 34582 34580 34596 34597 resulting in total of 107 scans from 185.176.27.0/24 block. |
2020-05-01 20:49:49 |
| 171.244.139.236 | attackspambots | Invalid user user12 from 171.244.139.236 port 26708 |
2020-05-01 20:37:24 |
| 67.240.22.2 | attackbotsspam | Unauthorized connection attempt detected from IP address 67.240.22.2 to port 23 |
2020-05-01 20:54:35 |
| 112.85.42.229 | attackbotsspam | May 1 13:50:43 server sshd[13812]: Failed password for root from 112.85.42.229 port 11054 ssh2 May 1 13:50:45 server sshd[13812]: Failed password for root from 112.85.42.229 port 11054 ssh2 May 1 13:50:48 server sshd[13812]: Failed password for root from 112.85.42.229 port 11054 ssh2 |
2020-05-01 20:30:12 |