城市(city): unknown
省份(region): unknown
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.21.83.192
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 30766
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.21.83.192. IN A
;; AUTHORITY SECTION:
. 26 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021701 1800 900 604800 86400
;; Query time: 58 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 03:04:51 CST 2022
;; MSG SIZE rcvd: 106Host 192.83.21.104.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 192.83.21.104.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 112.85.42.94 | attack | Oct 31 22:04:00 pkdns2 sshd\[53530\]: Failed password for root from 112.85.42.94 port 60962 ssh2Oct 31 22:04:02 pkdns2 sshd\[53530\]: Failed password for root from 112.85.42.94 port 60962 ssh2Oct 31 22:04:04 pkdns2 sshd\[53530\]: Failed password for root from 112.85.42.94 port 60962 ssh2Oct 31 22:07:03 pkdns2 sshd\[53659\]: Failed password for root from 112.85.42.94 port 11533 ssh2Oct 31 22:13:00 pkdns2 sshd\[53882\]: Failed password for root from 112.85.42.94 port 46921 ssh2Oct 31 22:13:01 pkdns2 sshd\[53882\]: Failed password for root from 112.85.42.94 port 46921 ssh2 ... |
2019-11-01 06:15:28 |
| 94.75.75.222 | attackbots | Nov 1 00:37:17 tuotantolaitos sshd[30348]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.75.75.222 Nov 1 00:37:18 tuotantolaitos sshd[30348]: Failed password for invalid user za from 94.75.75.222 port 43688 ssh2 ... |
2019-11-01 06:43:54 |
| 62.234.83.50 | attack | Oct 31 18:35:11 plusreed sshd[14443]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.83.50 user=root Oct 31 18:35:13 plusreed sshd[14443]: Failed password for root from 62.234.83.50 port 48474 ssh2 ... |
2019-11-01 06:40:15 |
| 51.75.128.184 | attackspambots | Nov 1 03:18:34 gw1 sshd[4392]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.128.184 Nov 1 03:18:36 gw1 sshd[4392]: Failed password for invalid user users123 from 51.75.128.184 port 53450 ssh2 ... |
2019-11-01 06:38:49 |
| 106.12.27.130 | attackspam | Oct 31 22:24:19 hcbbdb sshd\[14914\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.27.130 user=root Oct 31 22:24:21 hcbbdb sshd\[14914\]: Failed password for root from 106.12.27.130 port 43042 ssh2 Oct 31 22:29:18 hcbbdb sshd\[15435\]: Invalid user cliqruser from 106.12.27.130 Oct 31 22:29:18 hcbbdb sshd\[15435\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.27.130 Oct 31 22:29:20 hcbbdb sshd\[15435\]: Failed password for invalid user cliqruser from 106.12.27.130 port 54030 ssh2 |
2019-11-01 06:40:31 |
| 185.176.27.242 | attack | Oct 31 23:35:49 h2177944 kernel: \[5437071.057778\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.176.27.242 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=32146 PROTO=TCP SPT=47834 DPT=63235 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 31 23:36:18 h2177944 kernel: \[5437099.620981\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.176.27.242 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=60883 PROTO=TCP SPT=47834 DPT=17525 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 31 23:36:56 h2177944 kernel: \[5437137.663799\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.176.27.242 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=25198 PROTO=TCP SPT=47834 DPT=55176 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 31 23:37:47 h2177944 kernel: \[5437189.270669\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.176.27.242 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=12328 PROTO=TCP SPT=47834 DPT=54457 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 31 23:37:52 h2177944 kernel: \[5437194.126878\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.176.27.242 DST=85. |
2019-11-01 06:48:31 |
| 94.177.199.246 | attackbots | Automatic report generated by Wazuh |
2019-11-01 06:31:37 |
| 89.248.174.215 | attackbots | ET CINS Active Threat Intelligence Poor Reputation IP group 85 - port: 8089 proto: TCP cat: Misc Attack |
2019-11-01 06:16:54 |
| 129.211.117.47 | attackspambots | Oct 31 11:10:31 hanapaa sshd\[28447\]: Invalid user blasis from 129.211.117.47 Oct 31 11:10:31 hanapaa sshd\[28447\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.117.47 Oct 31 11:10:32 hanapaa sshd\[28447\]: Failed password for invalid user blasis from 129.211.117.47 port 52469 ssh2 Oct 31 11:14:24 hanapaa sshd\[28780\]: Invalid user pass from 129.211.117.47 Oct 31 11:14:24 hanapaa sshd\[28780\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.117.47 |
2019-11-01 06:33:07 |
| 106.12.87.178 | attackspambots | Oct 31 10:08:08 hanapaa sshd\[22662\]: Invalid user haokuidc@host3!! from 106.12.87.178 Oct 31 10:08:08 hanapaa sshd\[22662\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.87.178 Oct 31 10:08:10 hanapaa sshd\[22662\]: Failed password for invalid user haokuidc@host3!! from 106.12.87.178 port 49302 ssh2 Oct 31 10:12:49 hanapaa sshd\[23189\]: Invalid user root1234%\^\& from 106.12.87.178 Oct 31 10:12:49 hanapaa sshd\[23189\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.87.178 |
2019-11-01 06:23:31 |
| 154.197.27.196 | attackspambots | Oct 31 17:26:45 Tower sshd[44503]: Connection from 154.197.27.196 port 38738 on 192.168.10.220 port 22 Oct 31 17:26:46 Tower sshd[44503]: Invalid user c114 from 154.197.27.196 port 38738 Oct 31 17:26:46 Tower sshd[44503]: error: Could not get shadow information for NOUSER Oct 31 17:26:46 Tower sshd[44503]: Failed password for invalid user c114 from 154.197.27.196 port 38738 ssh2 Oct 31 17:26:47 Tower sshd[44503]: Received disconnect from 154.197.27.196 port 38738:11: Bye Bye [preauth] Oct 31 17:26:47 Tower sshd[44503]: Disconnected from invalid user c114 154.197.27.196 port 38738 [preauth] |
2019-11-01 06:29:20 |
| 114.69.244.66 | attackbots | proto=tcp . spt=40363 . dpt=25 . (Found on Dark List de Oct 31) (757) |
2019-11-01 06:38:15 |
| 177.73.8.42 | attack | proto=tcp . spt=40456 . dpt=25 . (Found on Dark List de Oct 31) (756) |
2019-11-01 06:39:34 |
| 129.204.194.146 | attack | Oct 30 07:19:13 vzhost sshd[6307]: Invalid user odoo from 129.204.194.146 Oct 30 07:19:13 vzhost sshd[6307]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.194.146 Oct 30 07:19:15 vzhost sshd[6307]: Failed password for invalid user odoo from 129.204.194.146 port 48198 ssh2 Oct 30 07:53:52 vzhost sshd[15301]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.194.146 user=r.r Oct 30 07:53:53 vzhost sshd[15301]: Failed password for r.r from 129.204.194.146 port 56160 ssh2 Oct 30 07:58:47 vzhost sshd[18032]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.194.146 user=r.r Oct 30 07:58:49 vzhost sshd[18032]: Failed password for r.r from 129.204.194.146 port 38354 ssh2 Oct 30 08:04:47 vzhost sshd[21199]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.194.146 user=r.r Oct 30 08:04:50 ........ ------------------------------- |
2019-11-01 06:52:13 |
| 92.118.38.38 | attack | 2019-10-31T23:46:25.265564mail01 postfix/smtpd[24535]: warning: unknown[92.118.38.38]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2019-10-31T23:46:44.368412mail01 postfix/smtpd[18848]: warning: unknown[92.118.38.38]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2019-10-31T23:46:44.368912mail01 postfix/smtpd[24535]: warning: unknown[92.118.38.38]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 |
2019-11-01 06:46:51 |