城市(city): unknown
省份(region): unknown
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.21.93.228
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 38668
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.21.93.228. IN A
;; AUTHORITY SECTION:
. 143 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021701 1800 900 604800 86400
;; Query time: 138 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 03:17:27 CST 2022
;; MSG SIZE rcvd: 106Host 228.93.21.104.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 228.93.21.104.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 36.46.142.80 | attackbots | Jan 16 06:19:53 vtv3 sshd[31226]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.46.142.80 Jan 16 06:19:55 vtv3 sshd[31226]: Failed password for invalid user vilma from 36.46.142.80 port 37157 ssh2 Jan 16 06:23:52 vtv3 sshd[916]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.46.142.80 Jan 16 06:36:04 vtv3 sshd[7096]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.46.142.80 Jan 16 06:36:06 vtv3 sshd[7096]: Failed password for invalid user nodejs from 36.46.142.80 port 59006 ssh2 Jan 16 06:39:12 vtv3 sshd[8227]: Failed password for root from 36.46.142.80 port 40553 ssh2 Jan 16 06:51:41 vtv3 sshd[14114]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.46.142.80 Jan 16 06:51:43 vtv3 sshd[14114]: Failed password for invalid user ankit from 36.46.142.80 port 51437 ssh2 Jan 16 06:54:51 vtv3 sshd[15298]: Failed password for root from 36.46. |
2020-01-16 13:31:18 |
| 14.176.20.147 | attack | 20/1/15@23:54:47: FAIL: Alarm-Network address from=14.176.20.147 20/1/15@23:54:47: FAIL: Alarm-Network address from=14.176.20.147 ... |
2020-01-16 13:52:39 |
| 222.186.30.187 | attackspam | Unauthorized connection attempt detected from IP address 222.186.30.187 to port 22 [J] |
2020-01-16 13:56:58 |
| 149.56.46.220 | attackbotsspam | Unauthorized connection attempt detected from IP address 149.56.46.220 to port 2220 [J] |
2020-01-16 13:49:47 |
| 49.88.112.55 | attackbotsspam | Jan 16 06:23:54 sd-53420 sshd\[20124\]: User root from 49.88.112.55 not allowed because none of user's groups are listed in AllowGroups Jan 16 06:23:54 sd-53420 sshd\[20124\]: Failed none for invalid user root from 49.88.112.55 port 1415 ssh2 Jan 16 06:23:54 sd-53420 sshd\[20124\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.55 user=root Jan 16 06:23:56 sd-53420 sshd\[20124\]: Failed password for invalid user root from 49.88.112.55 port 1415 ssh2 Jan 16 06:24:25 sd-53420 sshd\[20220\]: User root from 49.88.112.55 not allowed because none of user's groups are listed in AllowGroups ... |
2020-01-16 13:25:24 |
| 103.113.3.74 | attackspam | Attempt to attack host OS, exploiting network vulnerabilities, on 16-01-2020 04:55:10. |
2020-01-16 13:34:26 |
| 139.199.248.156 | attackbots | Unauthorized connection attempt detected from IP address 139.199.248.156 to port 2220 [J] |
2020-01-16 13:30:47 |
| 217.21.193.74 | attackspambots | *Port Scan* detected from 217.21.193.74 (NL/Netherlands/ip-space-by.osso.nl). 4 hits in the last 285 seconds |
2020-01-16 13:36:36 |
| 2001:bc8:c04f::1:18 | attackspambots | C1,WP GET /suche/wp-login.php |
2020-01-16 13:26:36 |
| 173.201.196.176 | attackbotsspam | Automatic report - XMLRPC Attack |
2020-01-16 13:22:29 |
| 124.204.51.162 | attack | Jan 16 00:18:10 ny01 sshd[9218]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.204.51.162 Jan 16 00:18:13 ny01 sshd[9218]: Failed password for invalid user antonio from 124.204.51.162 port 43132 ssh2 Jan 16 00:20:56 ny01 sshd[9519]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.204.51.162 |
2020-01-16 13:42:06 |
| 134.209.165.41 | attackbotsspam | Jan 16 06:14:44 srv-ubuntu-dev3 postfix/smtpd[117878]: warning: unknown[134.209.165.41]: SASL LOGIN authentication failed: authentication failure Jan 16 06:14:45 srv-ubuntu-dev3 postfix/smtpd[117878]: warning: unknown[134.209.165.41]: SASL LOGIN authentication failed: authentication failure Jan 16 06:14:45 srv-ubuntu-dev3 postfix/smtpd[117878]: warning: unknown[134.209.165.41]: SASL LOGIN authentication failed: authentication failure Jan 16 06:14:46 srv-ubuntu-dev3 postfix/smtpd[117878]: warning: unknown[134.209.165.41]: SASL LOGIN authentication failed: authentication failure Jan 16 06:14:47 srv-ubuntu-dev3 postfix/smtpd[117878]: warning: unknown[134.209.165.41]: SASL LOGIN authentication failed: authentication failure ... |
2020-01-16 13:56:33 |
| 59.152.196.154 | attackspam | Jan 16 05:55:28 lnxmysql61 sshd[12921]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.152.196.154 |
2020-01-16 13:26:06 |
| 106.75.244.62 | attack | Jan 16 06:24:51 vps691689 sshd[25255]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.244.62 Jan 16 06:24:53 vps691689 sshd[25255]: Failed password for invalid user linuxacademy from 106.75.244.62 port 34808 ssh2 ... |
2020-01-16 13:58:55 |
| 2001:41d0:d:c3e:: | attackspambots | [ThuJan1605:38:10.9664172020][:error][pid29751:tid139885998446336][client2001:41d0:d:c3e:::42324][client2001:41d0:d:c3e::]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"\\\\\\\\.php"atARGS:img.[file"/usr/local/apache.ea3/conf/modsec_rules/99_asl_jitp.conf"][line"782"][id"337479"][rev"2"][msg"Atomicorp.comWAFRules-VirtualJustInTimePatch:WordpressRevslidernon-imagefiledownloadAttack"][severity"CRITICAL"][hostname"adparchitetti.ch"][uri"/wp-admin/admin-ajax.php"][unique_id"Xh-osgywvlK0WHL-z6HMEwAAAFA"][ThuJan1605:55:38.4264372020][:error][pid29987:tid139885966976768][client2001:41d0:d:c3e:::36661][client2001:41d0:d:c3e::]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"\\\\\\\\.php"atARGS:img.[file"/usr/local/apache.ea3/conf/modsec_rules/99_asl_jitp.conf"][line"782"][id"337479"][rev"2"][msg"Atomicorp.comWAFRules-VirtualJustInTimePatch:WordpressRevslidernon-imagefiledownloadAttack"][severity"CRITICAL"][hostname"aress2030.ch"][uri"/wp-admin/admin-ajax.php\ |
2020-01-16 13:18:17 |