城市(city): unknown
省份(region): unknown
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.21.94.135
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 10353
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.21.94.135. IN A
;; AUTHORITY SECTION:
. 599 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021701 1800 900 604800 86400
;; Query time: 66 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 03:18:14 CST 2022
;; MSG SIZE rcvd: 106
Host 135.94.21.104.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 135.94.21.104.in-addr.arpa: NXDOMAIN
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 221.227.91.3 | attackbotsspam | Automatic report - Port Scan Attack |
2019-09-13 15:02:14 |
| 141.98.9.195 | attackspam | Sep 13 09:11:06 webserver postfix/smtpd\[18978\]: warning: unknown\[141.98.9.195\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 13 09:11:46 webserver postfix/smtpd\[18978\]: warning: unknown\[141.98.9.195\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 13 09:12:40 webserver postfix/smtpd\[19100\]: warning: unknown\[141.98.9.195\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 13 09:13:34 webserver postfix/smtpd\[19100\]: warning: unknown\[141.98.9.195\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 13 09:14:28 webserver postfix/smtpd\[19100\]: warning: unknown\[141.98.9.195\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2019-09-13 15:21:37 |
| 188.131.146.147 | attack | Sep 13 05:46:21 lnxmysql61 sshd[24671]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.131.146.147 |
2019-09-13 15:03:35 |
| 137.74.44.162 | attackbotsspam | Sep 12 20:28:39 friendsofhawaii sshd\[30762\]: Invalid user mc from 137.74.44.162 Sep 12 20:28:39 friendsofhawaii sshd\[30762\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.ip-137-74-44.eu Sep 12 20:28:41 friendsofhawaii sshd\[30762\]: Failed password for invalid user mc from 137.74.44.162 port 49403 ssh2 Sep 12 20:33:00 friendsofhawaii sshd\[31086\]: Invalid user 1234 from 137.74.44.162 Sep 12 20:33:00 friendsofhawaii sshd\[31086\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.ip-137-74-44.eu |
2019-09-13 14:34:29 |
| 58.210.119.226 | attackspambots | Dovecot Brute-Force |
2019-09-13 15:19:43 |
| 54.36.148.151 | attackspam | Automatic report - Banned IP Access |
2019-09-13 14:45:08 |
| 101.89.197.199 | attackspam | CN - 1H : (366) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : CN NAME ASN : ASN4812 IP : 101.89.197.199 CIDR : 101.88.0.0/15 PREFIX COUNT : 543 UNIQUE IP COUNT : 8614144 WYKRYTE ATAKI Z ASN4812 : 1H - 1 3H - 2 6H - 4 12H - 4 24H - 9 INFO : SYN Flood DDoS Attack Denial-of-Service Attack (DoS) Detected and Blocked by ADMIN - data recovery https://help-dysk.pl |
2019-09-13 14:47:27 |
| 5.45.73.74 | attackbotsspam | Sep 13 09:49:42 tuotantolaitos sshd[18011]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.45.73.74 Sep 13 09:49:44 tuotantolaitos sshd[18011]: Failed password for invalid user gitlab from 5.45.73.74 port 48952 ssh2 ... |
2019-09-13 14:57:50 |
| 181.28.94.205 | attackspam | Automatic report - Banned IP Access |
2019-09-13 15:08:09 |
| 52.143.153.32 | attackspam | Sep 13 09:28:04 MK-Soft-Root1 sshd\[7708\]: Invalid user adminpass from 52.143.153.32 port 42352 Sep 13 09:28:04 MK-Soft-Root1 sshd\[7708\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.143.153.32 Sep 13 09:28:05 MK-Soft-Root1 sshd\[7708\]: Failed password for invalid user adminpass from 52.143.153.32 port 42352 ssh2 ... |
2019-09-13 15:28:38 |
| 219.156.153.145 | attackbots | Sep 13 03:04:01 new sshd[29435]: reveeclipse mapping checking getaddrinfo for hn.kd.ny.adsl [219.156.153.145] failed - POSSIBLE BREAK-IN ATTEMPT! Sep 13 03:04:03 new sshd[29435]: Failed password for invalid user support from 219.156.153.145 port 43984 ssh2 Sep 13 03:04:06 new sshd[29435]: Failed password for invalid user support from 219.156.153.145 port 43984 ssh2 Sep 13 03:04:08 new sshd[29435]: Failed password for invalid user support from 219.156.153.145 port 43984 ssh2 Sep 13 03:04:11 new sshd[29435]: Failed password for invalid user support from 219.156.153.145 port 43984 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=219.156.153.145 |
2019-09-13 14:37:25 |
| 51.15.11.70 | attack | Sep 13 09:32:56 taivassalofi sshd[231560]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.15.11.70 Sep 13 09:32:58 taivassalofi sshd[231560]: Failed password for invalid user mcguitaruser from 51.15.11.70 port 34018 ssh2 ... |
2019-09-13 14:36:25 |
| 213.74.203.106 | attackbotsspam | Sep 13 09:50:52 server sshd\[2610\]: Invalid user Passw0rd from 213.74.203.106 port 41176 Sep 13 09:50:52 server sshd\[2610\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.74.203.106 Sep 13 09:50:54 server sshd\[2610\]: Failed password for invalid user Passw0rd from 213.74.203.106 port 41176 ssh2 Sep 13 09:56:05 server sshd\[23725\]: Invalid user administrateur from 213.74.203.106 port 36369 Sep 13 09:56:05 server sshd\[23725\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.74.203.106 |
2019-09-13 15:07:28 |
| 112.85.42.227 | attack | Sep 13 03:08:40 TORMINT sshd\[18763\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.227 user=root Sep 13 03:08:42 TORMINT sshd\[18763\]: Failed password for root from 112.85.42.227 port 12742 ssh2 Sep 13 03:08:44 TORMINT sshd\[18763\]: Failed password for root from 112.85.42.227 port 12742 ssh2 ... |
2019-09-13 15:25:51 |
| 51.38.128.211 | attack | Automatic report - Banned IP Access |
2019-09-13 15:23:19 |