城市(city): unknown
省份(region): unknown
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.21.92.84
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 39365
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.21.92.84. IN A
;; AUTHORITY SECTION:
. 559 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021701 1800 900 604800 86400
;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 03:16:43 CST 2022
;; MSG SIZE rcvd: 105Host 84.92.21.104.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 84.92.21.104.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 1.193.96.139 | attackbots | Jun 21 00:28:05 eola postfix/smtpd[10193]: connect from unknown[1.193.96.139] Jun 21 00:28:05 eola postfix/smtpd[10527]: connect from unknown[1.193.96.139] Jun 21 00:28:07 eola postfix/smtpd[10527]: lost connection after AUTH from unknown[1.193.96.139] Jun 21 00:28:07 eola postfix/smtpd[10527]: disconnect from unknown[1.193.96.139] ehlo=1 auth=0/1 commands=1/2 Jun 21 00:28:07 eola postfix/smtpd[10530]: connect from unknown[1.193.96.139] Jun 21 00:28:08 eola postfix/smtpd[10530]: lost connection after AUTH from unknown[1.193.96.139] Jun 21 00:28:08 eola postfix/smtpd[10530]: disconnect from unknown[1.193.96.139] ehlo=1 auth=0/1 commands=1/2 Jun 21 00:28:08 eola postfix/smtpd[10527]: connect from unknown[1.193.96.139] Jun 21 00:28:09 eola postfix/smtpd[10527]: lost connection after AUTH from unknown[1.193.96.139] Jun 21 00:28:09 eola postfix/smtpd[10527]: disconnect from unknown[1.193.96.139] ehlo=1 auth=0/1 commands=1/2 Jun 21 00:28:09 eola postfix/smtpd[10530]: connect ........ ------------------------------- |
2019-06-21 15:05:09 |
| 42.231.182.118 | attack | 23/tcp [2019-06-21]1pkt |
2019-06-21 14:20:16 |
| 116.107.157.134 | attackspambots | Jun 21 04:29:16 euve59663 sshd[6197]: Address 116.107.157.134 maps to d= ynamic-ip-adsl.viettel.vn, but this does not map back to the address - = POSSIBLE BREAK-IN ATTEMPT! Jun 21 04:29:16 euve59663 sshd[6197]: Invalid user admin from 116.107.1= 57.134 Jun 21 04:29:16 euve59663 sshd[6197]: pam_unix(sshd:auth): authenticati= on failure; logname=3D uid=3D0 euid=3D0 tty=3Dssh ruser=3D rhost=3D116.= 107.157.134=20 Jun 21 04:29:19 euve59663 sshd[6197]: Failed password for invalid user = admin from 116.107.157.134 port 50882 ssh2 Jun 21 04:29:19 euve59663 sshd[6197]: Connection closed by 116.107.157.= 134 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=116.107.157.134 |
2019-06-21 14:52:25 |
| 112.133.229.241 | attackspambots | Port scan: Attack repeated for 24 hours |
2019-06-21 14:27:33 |
| 183.100.197.204 | attackspam | 8081/tcp [2019-06-21]1pkt |
2019-06-21 14:46:55 |
| 210.77.89.215 | attack | 20 attempts against mh-ssh on comet.magehost.pro |
2019-06-21 14:54:09 |
| 75.109.177.239 | attackbots | " " |
2019-06-21 14:57:13 |
| 117.187.111.223 | attackbots | 3389BruteforceFW21 |
2019-06-21 14:37:01 |
| 119.178.171.21 | attackspambots | 22/tcp [2019-06-21]1pkt |
2019-06-21 14:36:38 |
| 113.236.164.18 | attackbotsspam | 23/tcp [2019-06-21]1pkt |
2019-06-21 14:55:05 |
| 187.198.220.200 | attack | 445/tcp [2019-06-21]1pkt |
2019-06-21 14:37:20 |
| 189.90.112.182 | attack | 8080/tcp [2019-06-21]1pkt |
2019-06-21 15:08:15 |
| 141.105.111.244 | attack | Jun 21 04:33:47 server sshd[20255]: Bad protocol version identification '' from 141.105.111.244 port 47122 Jun 21 04:33:47 server sshd[20256]: reveeclipse mapping checking getaddrinfo for ns02.ningen.es [141.105.111.244] failed - POSSIBLE BREAK-IN ATTEMPT! Jun 21 04:33:50 server sshd[20256]: Failed password for invalid user support from 141.105.111.244 port 47160 ssh2 Jun 21 04:33:50 server sshd[20256]: Connection closed by 141.105.111.244 [preauth] Jun 21 04:33:50 server sshd[20258]: reveeclipse mapping checking getaddrinfo for ns02.ningen.es [141.105.111.244] failed - POSSIBLE BREAK-IN ATTEMPT! Jun 21 04:33:52 server sshd[20258]: Failed password for invalid user ubnt from 141.105.111.244 port 47976 ssh2 Jun 21 04:33:52 server sshd[20258]: Connection closed by 141.105.111.244 [preauth] Jun 21 04:33:52 server sshd[20260]: reveeclipse mapping checking getaddrinfo for ns02.ningen.es [141.105.111.244] failed - POSSIBLE BREAK-IN ATTEMPT! Jun 21 04:33:54 server sshd[20260]: ........ ------------------------------- |
2019-06-21 15:03:20 |
| 101.95.150.214 | attackbots | 445/tcp [2019-06-21]1pkt |
2019-06-21 14:41:07 |
| 51.15.203.195 | attackbots | Unauthorised access (Jun 21) SRC=51.15.203.195 LEN=40 TTL=243 ID=35452 TCP DPT=445 WINDOW=1024 SYN Unauthorised access (Jun 21) SRC=51.15.203.195 LEN=40 TTL=243 ID=39852 TCP DPT=445 WINDOW=1024 SYN Unauthorised access (Jun 20) SRC=51.15.203.195 LEN=40 TTL=243 ID=64485 TCP DPT=445 WINDOW=1024 SYN Unauthorised access (Jun 20) SRC=51.15.203.195 LEN=40 TTL=244 ID=643 TCP DPT=445 WINDOW=1024 SYN |
2019-06-21 14:55:32 |