城市(city): unknown
省份(region): unknown
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.21.89.253
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 44507
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.21.89.253. IN A
;; AUTHORITY SECTION:
. 599 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021701 1800 900 604800 86400
;; Query time: 21 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 03:12:00 CST 2022
;; MSG SIZE rcvd: 106Host 253.89.21.104.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 253.89.21.104.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 46.38.144.146 | attack | Nov 6 23:57:17 relay postfix/smtpd\[15778\]: warning: unknown\[46.38.144.146\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 6 23:57:36 relay postfix/smtpd\[19245\]: warning: unknown\[46.38.144.146\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 6 23:58:06 relay postfix/smtpd\[19226\]: warning: unknown\[46.38.144.146\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 6 23:58:25 relay postfix/smtpd\[23489\]: warning: unknown\[46.38.144.146\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 6 23:58:55 relay postfix/smtpd\[19226\]: warning: unknown\[46.38.144.146\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2019-11-07 07:09:19 |
| 36.89.17.211 | attackspam | Unauthorized connection attempt from IP address 36.89.17.211 on Port 445(SMB) |
2019-11-07 06:35:05 |
| 118.217.9.103 | attackspam | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/118.217.9.103/ KR - 1H : (137) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : KR NAME ASN : ASN9318 IP : 118.217.9.103 CIDR : 118.217.0.0/20 PREFIX COUNT : 2487 UNIQUE IP COUNT : 14360064 ATTACKS DETECTED ASN9318 : 1H - 3 3H - 7 6H - 17 12H - 33 24H - 51 DateTime : 2019-11-06 23:46:13 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery |
2019-11-07 06:56:04 |
| 51.79.141.17 | attack | 2019-11-06T22:59:09.907945shield sshd\[5009\]: Invalid user debrorah from 51.79.141.17 port 60238 2019-11-06T22:59:09.913390shield sshd\[5009\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.79.141.17 2019-11-06T22:59:12.168186shield sshd\[5009\]: Failed password for invalid user debrorah from 51.79.141.17 port 60238 ssh2 2019-11-06T23:03:37.925081shield sshd\[5322\]: Invalid user hmh from 51.79.141.17 port 40838 2019-11-06T23:03:37.930579shield sshd\[5322\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.79.141.17 |
2019-11-07 07:07:05 |
| 103.11.80.70 | attackspam | Aug 23 14:09:24 vbuntu sshd[16665]: refused connect from 103.11.80.70 (103.11.80.70) Aug 23 14:09:26 vbuntu sshd[16671]: refused connect from 103.11.80.70 (103.11.80.70) ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=103.11.80.70 |
2019-11-07 06:59:20 |
| 52.33.31.200 | attackspambots | Nov 6 23:46:28 vmanager6029 sshd\[16645\]: Invalid user admin from 52.33.31.200 port 48905 Nov 6 23:46:28 vmanager6029 sshd\[16645\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.33.31.200 Nov 6 23:46:31 vmanager6029 sshd\[16645\]: Failed password for invalid user admin from 52.33.31.200 port 48905 ssh2 |
2019-11-07 06:55:36 |
| 46.38.144.57 | attackbots | Nov 6 23:53:13 relay postfix/smtpd\[23489\]: warning: unknown\[46.38.144.57\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 6 23:53:56 relay postfix/smtpd\[15778\]: warning: unknown\[46.38.144.57\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 6 23:54:22 relay postfix/smtpd\[19298\]: warning: unknown\[46.38.144.57\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 6 23:55:04 relay postfix/smtpd\[15778\]: warning: unknown\[46.38.144.57\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 6 23:55:28 relay postfix/smtpd\[27667\]: warning: unknown\[46.38.144.57\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2019-11-07 07:00:42 |
| 185.176.27.18 | attackbots | ET DROP Dshield Block Listed Source group 1 - port: 33869 proto: TCP cat: Misc Attack |
2019-11-07 06:31:05 |
| 104.248.55.99 | attackbots | Nov 6 12:41:59 auw2 sshd\[17109\]: Invalid user changeme from 104.248.55.99 Nov 6 12:41:59 auw2 sshd\[17109\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.55.99 Nov 6 12:42:00 auw2 sshd\[17109\]: Failed password for invalid user changeme from 104.248.55.99 port 48902 ssh2 Nov 6 12:45:46 auw2 sshd\[17425\]: Invalid user gonzalo from 104.248.55.99 Nov 6 12:45:46 auw2 sshd\[17425\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.55.99 |
2019-11-07 07:08:25 |
| 182.61.41.203 | attackbots | Nov 6 12:43:12 wbs sshd\[10669\]: Invalid user 1 from 182.61.41.203 Nov 6 12:43:12 wbs sshd\[10669\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.41.203 Nov 6 12:43:14 wbs sshd\[10669\]: Failed password for invalid user 1 from 182.61.41.203 port 45064 ssh2 Nov 6 12:48:08 wbs sshd\[11049\]: Invalid user !!\*!!\* from 182.61.41.203 Nov 6 12:48:08 wbs sshd\[11049\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.41.203 |
2019-11-07 06:50:21 |
| 106.13.200.50 | attackspambots | Nov 6 19:42:31 firewall sshd[13840]: Invalid user CENT0S2019 from 106.13.200.50 Nov 6 19:42:33 firewall sshd[13840]: Failed password for invalid user CENT0S2019 from 106.13.200.50 port 42104 ssh2 Nov 6 19:46:33 firewall sshd[13931]: Invalid user hansolo from 106.13.200.50 ... |
2019-11-07 06:47:20 |
| 106.13.48.184 | attackspam | Nov 7 00:41:56 server sshd\[5612\]: Invalid user admin from 106.13.48.184 port 34452 Nov 7 00:41:56 server sshd\[5612\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.184 Nov 7 00:41:59 server sshd\[5612\]: Failed password for invalid user admin from 106.13.48.184 port 34452 ssh2 Nov 7 00:45:49 server sshd\[19639\]: User root from 106.13.48.184 not allowed because listed in DenyUsers Nov 7 00:45:49 server sshd\[19639\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.184 user=root |
2019-11-07 06:58:49 |
| 51.83.138.91 | attackspam | 51.83.138.91 was recorded 40 times by 21 hosts attempting to connect to the following ports: 33389,33891,43389,33893,53389,23389,33896,3388,33892,33894,63389,13389. Incident counter (4h, 24h, all-time): 40, 131, 409 |
2019-11-07 07:00:21 |
| 58.20.239.14 | attack | Nov 6 22:41:10 venus sshd\[11921\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.20.239.14 user=root Nov 6 22:41:12 venus sshd\[11921\]: Failed password for root from 58.20.239.14 port 49384 ssh2 Nov 6 22:45:17 venus sshd\[11981\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.20.239.14 user=root ... |
2019-11-07 07:08:57 |
| 118.117.29.63 | attack | Multiple failed FTP logins |
2019-11-07 07:08:09 |