城市(city): unknown
省份(region): unknown
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.21.50.41
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 27686
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.21.50.41. IN A
;; AUTHORITY SECTION:
. 600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021701 1800 900 604800 86400
;; Query time: 42 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 02:34:54 CST 2022
;; MSG SIZE rcvd: 105Host 41.50.21.104.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 41.50.21.104.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 222.186.15.62 | attackspam | 06/08/2020-16:52:04.736082 222.186.15.62 Protocol: 6 ET SCAN Potential SSH Scan |
2020-06-09 04:54:32 |
| 113.125.82.222 | attackbotsspam | SSH bruteforce |
2020-06-09 04:56:15 |
| 117.50.20.11 | attack | Jun 8 22:57:17 OPSO sshd\[8551\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.20.11 user=mysql Jun 8 22:57:19 OPSO sshd\[8551\]: Failed password for mysql from 117.50.20.11 port 34442 ssh2 Jun 8 23:00:29 OPSO sshd\[8896\]: Invalid user lakim from 117.50.20.11 port 58402 Jun 8 23:00:29 OPSO sshd\[8896\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.20.11 Jun 8 23:00:31 OPSO sshd\[8896\]: Failed password for invalid user lakim from 117.50.20.11 port 58402 ssh2 |
2020-06-09 05:15:33 |
| 218.92.0.203 | attackbots | 2020-06-08T16:59:18.865672xentho-1 sshd[104697]: Failed password for root from 218.92.0.203 port 32482 ssh2 2020-06-08T16:59:17.676270xentho-1 sshd[104697]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.203 user=root 2020-06-08T16:59:18.865672xentho-1 sshd[104697]: Failed password for root from 218.92.0.203 port 32482 ssh2 2020-06-08T16:59:21.962841xentho-1 sshd[104697]: Failed password for root from 218.92.0.203 port 32482 ssh2 2020-06-08T16:59:17.676270xentho-1 sshd[104697]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.203 user=root 2020-06-08T16:59:18.865672xentho-1 sshd[104697]: Failed password for root from 218.92.0.203 port 32482 ssh2 2020-06-08T16:59:21.962841xentho-1 sshd[104697]: Failed password for root from 218.92.0.203 port 32482 ssh2 2020-06-08T16:59:25.119053xentho-1 sshd[104697]: Failed password for root from 218.92.0.203 port 32482 ssh2 2020-06-08T17:00:56.493436xent ... |
2020-06-09 05:18:08 |
| 106.13.186.119 | attack | 2020-06-09T00:09:42.907333lavrinenko.info sshd[31784]: Invalid user mvasgw from 106.13.186.119 port 53882 2020-06-09T00:09:44.904326lavrinenko.info sshd[31784]: Failed password for invalid user mvasgw from 106.13.186.119 port 53882 ssh2 2020-06-09T00:12:47.505053lavrinenko.info sshd[31896]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.186.119 user=root 2020-06-09T00:12:49.556604lavrinenko.info sshd[31896]: Failed password for root from 106.13.186.119 port 44728 ssh2 2020-06-09T00:15:58.032338lavrinenko.info sshd[32059]: Invalid user www-data from 106.13.186.119 port 35558 ... |
2020-06-09 05:19:37 |
| 103.23.100.87 | attackbotsspam | 2020-06-08T20:51:30.701565shield sshd\[26565\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.23.100.87 user=root 2020-06-08T20:51:33.109531shield sshd\[26565\]: Failed password for root from 103.23.100.87 port 38716 ssh2 2020-06-08T20:55:15.117747shield sshd\[27935\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.23.100.87 user=root 2020-06-08T20:55:16.752871shield sshd\[27935\]: Failed password for root from 103.23.100.87 port 34292 ssh2 2020-06-08T20:58:56.664882shield sshd\[29592\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.23.100.87 user=root |
2020-06-09 05:03:31 |
| 106.53.66.103 | attack | Jun 8 21:01:20 game-panel sshd[4095]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.53.66.103 Jun 8 21:01:22 game-panel sshd[4095]: Failed password for invalid user sgirs from 106.53.66.103 port 49604 ssh2 Jun 8 21:05:43 game-panel sshd[4322]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.53.66.103 |
2020-06-09 05:07:05 |
| 181.49.254.230 | attackspam | Jun 8 22:51:31 piServer sshd[23476]: Failed password for root from 181.49.254.230 port 49180 ssh2 Jun 8 22:55:15 piServer sshd[23836]: Failed password for root from 181.49.254.230 port 51934 ssh2 ... |
2020-06-09 05:08:06 |
| 116.228.160.22 | attack | prod8 ... |
2020-06-09 04:51:57 |
| 118.192.66.70 | attack | IP 118.192.66.70 attacked honeypot on port: 139 at 6/8/2020 9:26:04 PM |
2020-06-09 04:45:46 |
| 206.253.166.69 | attack | Jun 8 22:17:18 rotator sshd\[12227\]: Address 206.253.166.69 maps to mail2.quitesimple.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!Jun 8 22:17:18 rotator sshd\[12227\]: Invalid user admin from 206.253.166.69Jun 8 22:17:20 rotator sshd\[12227\]: Failed password for invalid user admin from 206.253.166.69 port 46142 ssh2Jun 8 22:26:17 rotator sshd\[13907\]: Address 206.253.166.69 maps to mail2.quitesimple.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!Jun 8 22:26:17 rotator sshd\[13907\]: Invalid user xyz from 206.253.166.69Jun 8 22:26:18 rotator sshd\[13907\]: Failed password for invalid user xyz from 206.253.166.69 port 50816 ssh2 ... |
2020-06-09 04:44:29 |
| 218.75.38.116 | attackspam | IP 218.75.38.116 attacked honeypot on port: 139 at 6/8/2020 9:25:40 PM |
2020-06-09 05:12:55 |
| 193.112.178.80 | attack | Jun 8 23:24:55 journals sshd\[50669\]: Invalid user shijia from 193.112.178.80 Jun 8 23:24:55 journals sshd\[50669\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.112.178.80 Jun 8 23:24:57 journals sshd\[50669\]: Failed password for invalid user shijia from 193.112.178.80 port 52878 ssh2 Jun 8 23:34:46 journals sshd\[51687\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.112.178.80 user=root Jun 8 23:34:49 journals sshd\[51687\]: Failed password for root from 193.112.178.80 port 44344 ssh2 ... |
2020-06-09 04:42:09 |
| 139.59.43.159 | attack | Jun 8 22:46:16 vps687878 sshd\[30080\]: Failed password for root from 139.59.43.159 port 36500 ssh2 Jun 8 22:49:39 vps687878 sshd\[30349\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.43.159 user=root Jun 8 22:49:41 vps687878 sshd\[30349\]: Failed password for root from 139.59.43.159 port 38152 ssh2 Jun 8 22:53:17 vps687878 sshd\[30847\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.43.159 user=root Jun 8 22:53:20 vps687878 sshd\[30847\]: Failed password for root from 139.59.43.159 port 39806 ssh2 ... |
2020-06-09 05:04:10 |
| 165.227.56.198 | attackbotsspam | 1970-01-01T00:00:00.000Z Portscan drop, |
2020-06-09 05:06:30 |