城市(city): unknown
省份(region): unknown
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.21.67.250
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 59583
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.21.67.250. IN A
;; AUTHORITY SECTION:
. 28 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021701 1800 900 604800 86400
;; Query time: 60 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 02:45:41 CST 2022
;; MSG SIZE rcvd: 106Host 250.67.21.104.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 250.67.21.104.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 219.134.11.235 | attackspam | Apr 22 14:02:53 prod4 vsftpd\[26516\]: \[anonymous\] FAIL LOGIN: Client "219.134.11.235" Apr 22 14:02:56 prod4 vsftpd\[26520\]: \[www\] FAIL LOGIN: Client "219.134.11.235" Apr 22 14:03:01 prod4 vsftpd\[26522\]: \[www\] FAIL LOGIN: Client "219.134.11.235" Apr 22 14:03:08 prod4 vsftpd\[26643\]: \[www\] FAIL LOGIN: Client "219.134.11.235" Apr 22 14:03:28 prod4 vsftpd\[26662\]: \[www\] FAIL LOGIN: Client "219.134.11.235" ... |
2020-04-22 22:01:44 |
| 111.161.74.117 | attackspam | Apr 22 16:36:01 ift sshd\[41337\]: Invalid user pt from 111.161.74.117Apr 22 16:36:04 ift sshd\[41337\]: Failed password for invalid user pt from 111.161.74.117 port 57430 ssh2Apr 22 16:40:01 ift sshd\[41676\]: Failed password for root from 111.161.74.117 port 40657 ssh2Apr 22 16:43:59 ift sshd\[42324\]: Invalid user zn from 111.161.74.117Apr 22 16:44:01 ift sshd\[42324\]: Failed password for invalid user zn from 111.161.74.117 port 51560 ssh2 ... |
2020-04-22 21:52:34 |
| 220.76.205.178 | attackspambots | fail2ban -- 220.76.205.178 ... |
2020-04-22 21:46:45 |
| 50.104.13.15 | spambotsattackproxy | This is 1 of several ip addresses stalking and hard my kids and me on internet for 2 in a half years. They have my credit card info all my passwords stole 7 email ACCTS that r still active and used with different names. They edit right on the screen everything even legal documents. My ip is 192.168.254.254 please look into this issue and block these psycho paths. Also they have my apps cloned so they can run them...they are blocking this from coming to u......also they edit the logs so PULL ever single one ther |
2020-04-22 21:31:30 |
| 51.210.7.30 | attackbots | Apr 22 14:00:55 ucs sshd\[17782\]: Invalid user admin from 51.210.7.30 port 55818 Apr 22 14:02:32 ucs sshd\[18349\]: Invalid user oracle from 51.210.7.30 port 50956 Apr 22 14:04:17 ucs sshd\[18973\]: Invalid user ubuntu from 51.210.7.30 port 45964 ... |
2020-04-22 21:54:04 |
| 114.220.238.72 | attackspam | SSH authentication failure x 6 reported by Fail2Ban ... |
2020-04-22 21:55:19 |
| 101.53.233.109 | attackbots | Apr 22 15:42:47 nginx sshd[55460]: Invalid user ubnt from 101.53.233.109 Apr 22 15:42:47 nginx sshd[55460]: Connection closed by 101.53.233.109 port 11285 [preauth] |
2020-04-22 21:49:18 |
| 106.12.45.236 | attack | ssh intrusion attempt |
2020-04-22 21:44:55 |
| 111.206.198.101 | attackspam | Bad bot/spoofed identity |
2020-04-22 21:37:06 |
| 111.206.221.51 | attackbots | Bad bot/spoofed identity |
2020-04-22 21:48:50 |
| 122.154.251.22 | attackspambots | detected by Fail2Ban |
2020-04-22 21:33:42 |
| 123.17.56.137 | attackbotsspam | " " |
2020-04-22 21:42:35 |
| 36.90.108.68 | attackbots | Lines containing failures of 36.90.108.68 (max 1000) Apr 22 13:44:41 server sshd[16447]: Connection from 36.90.108.68 port 58657 on 62.116.165.82 port 22 Apr 22 13:45:33 server sshd[16447]: Did not receive identification string from 36.90.108.68 port 58657 Apr 22 13:46:00 server sshd[16537]: Connection from 36.90.108.68 port 65141 on 62.116.165.82 port 22 Apr 22 13:46:59 server sshd[16537]: Invalid user supervisor from 36.90.108.68 port 65141 Apr 22 13:47:00 server sshd[16537]: Connection closed by 36.90.108.68 port 65141 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=36.90.108.68 |
2020-04-22 22:06:12 |
| 111.206.221.50 | attackspambots | Bad bot/spoofed identity |
2020-04-22 22:08:26 |
| 175.231.71.76 | attack | Honeypot attack, port: 5555, PTR: PTR record not found |
2020-04-22 22:07:16 |