城市(city): unknown
省份(region): unknown
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.21.92.83
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 20086
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.21.92.83. IN A
;; AUTHORITY SECTION:
. 559 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021701 1800 900 604800 86400
;; Query time: 19 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 03:16:43 CST 2022
;; MSG SIZE rcvd: 105
Host 83.92.21.104.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 83.92.21.104.in-addr.arpa: NXDOMAIN
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 34.89.45.74 | attackspam | Apr 3 21:47:02 h2034429 sshd[23381]: Invalid user student from 34.89.45.74 Apr 3 21:47:02 h2034429 sshd[23381]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.89.45.74 Apr 3 21:47:04 h2034429 sshd[23381]: Failed password for invalid user student from 34.89.45.74 port 45280 ssh2 Apr 3 21:47:04 h2034429 sshd[23381]: Received disconnect from 34.89.45.74 port 45280:11: Bye Bye [preauth] Apr 3 21:47:04 h2034429 sshd[23381]: Disconnected from 34.89.45.74 port 45280 [preauth] Apr 3 21:52:28 h2034429 sshd[23475]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.89.45.74 user=r.r Apr 3 21:52:31 h2034429 sshd[23475]: Failed password for r.r from 34.89.45.74 port 52084 ssh2 Apr 3 21:52:31 h2034429 sshd[23475]: Received disconnect from 34.89.45.74 port 52084:11: Bye Bye [preauth] Apr 3 21:52:31 h2034429 sshd[23475]: Disconnected from 34.89.45.74 port 52084 [preauth] ........ ----------------------------------------------- ht |
2020-04-05 00:47:19 |
| 114.67.123.3 | attackspambots | $f2bV_matches |
2020-04-05 00:49:27 |
| 113.220.119.106 | attackbotsspam | "SERVER-WEBAPP Netgear DGN1000 series routers authentication bypass attempt" |
2020-04-05 00:07:41 |
| 187.188.236.198 | attack | k+ssh-bruteforce |
2020-04-04 23:51:21 |
| 106.13.96.222 | attackspambots | Apr 4 16:07:01 srv01 sshd[12034]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.96.222 user=root Apr 4 16:07:03 srv01 sshd[12034]: Failed password for root from 106.13.96.222 port 37760 ssh2 Apr 4 16:11:01 srv01 sshd[12357]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.96.222 user=root Apr 4 16:11:02 srv01 sshd[12357]: Failed password for root from 106.13.96.222 port 47016 ssh2 Apr 4 16:15:09 srv01 sshd[12547]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.96.222 user=root Apr 4 16:15:12 srv01 sshd[12547]: Failed password for root from 106.13.96.222 port 56282 ssh2 ... |
2020-04-05 00:40:30 |
| 180.127.82.133 | attackbots | trying to access non-authorized port |
2020-04-05 00:28:35 |
| 36.110.217.140 | attackbots | Apr 4 16:54:05 mout sshd[30429]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.110.217.140 user=root Apr 4 16:54:07 mout sshd[30429]: Failed password for root from 36.110.217.140 port 42160 ssh2 |
2020-04-05 00:31:05 |
| 185.26.33.83 | attackbotsspam | firewall-block, port(s): 23/tcp |
2020-04-05 00:06:46 |
| 42.179.86.213 | attackspambots | firewall-block, port(s): 26/tcp |
2020-04-05 00:15:51 |
| 14.98.213.14 | attackspambots | 2020-04-04T15:20:12.787118shield sshd\[8822\]: Invalid user wz from 14.98.213.14 port 56224 2020-04-04T15:20:12.791572shield sshd\[8822\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.98.213.14 2020-04-04T15:20:14.640830shield sshd\[8822\]: Failed password for invalid user wz from 14.98.213.14 port 56224 ssh2 2020-04-04T15:24:45.523800shield sshd\[9332\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.98.213.14 user=root 2020-04-04T15:24:46.850882shield sshd\[9332\]: Failed password for root from 14.98.213.14 port 38110 ssh2 |
2020-04-04 23:52:53 |
| 134.175.219.41 | attack | SSH bruteforce (Triggered fail2ban) |
2020-04-05 00:50:23 |
| 167.114.36.165 | attackspambots | Apr 4 21:32:15 f sshd\[2118\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.114.36.165 user=root Apr 4 21:32:18 f sshd\[2118\]: Failed password for root from 167.114.36.165 port 35288 ssh2 Apr 4 21:39:48 f sshd\[2318\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.114.36.165 user=root ... |
2020-04-05 00:28:58 |
| 84.200.78.140 | attackspambots | Apr 4 17:39:12 [HOSTNAME] sshd[31401]: User **removed** from 84.200.78.140 not allowed because not listed in AllowUsers Apr 4 17:39:12 [HOSTNAME] sshd[31401]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=84.200.78.140 user=**removed** Apr 4 17:39:14 [HOSTNAME] sshd[31401]: Failed password for invalid user **removed** from 84.200.78.140 port 56428 ssh2 ... |
2020-04-04 23:50:36 |
| 67.205.144.244 | attackbotsspam | (sshd) Failed SSH login from 67.205.144.244 (US/United States/-): 5 in the last 3600 secs |
2020-04-05 00:28:02 |
| 64.225.105.247 | attack | Fail2Ban - SSH Bruteforce Attempt |
2020-04-05 00:29:50 |