城市(city): unknown
省份(region): unknown
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.21.94.151
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 5919
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.21.94.151. IN A
;; AUTHORITY SECTION:
. 600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021701 1800 900 604800 86400
;; Query time: 66 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 03:18:20 CST 2022
;; MSG SIZE rcvd: 106Host 151.94.21.104.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 151.94.21.104.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 168.90.89.35 | attackspam | Sep 27 14:41:11 core sshd[22313]: Invalid user sandra from 168.90.89.35 port 53503 Sep 27 14:41:13 core sshd[22313]: Failed password for invalid user sandra from 168.90.89.35 port 53503 ssh2 ... |
2019-09-27 21:03:09 |
| 43.226.153.142 | attackbots | Sep 27 08:33:50 plusreed sshd[3898]: Invalid user nd from 43.226.153.142 ... |
2019-09-27 20:48:12 |
| 222.186.15.204 | attackbots | SSH Brute Force, server-1 sshd[4209]: Failed password for root from 222.186.15.204 port 31685 ssh2 |
2019-09-27 20:37:53 |
| 165.22.76.39 | attack | Sep 27 02:28:20 friendsofhawaii sshd\[24810\]: Invalid user bego from 165.22.76.39 Sep 27 02:28:20 friendsofhawaii sshd\[24810\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.76.39 Sep 27 02:28:22 friendsofhawaii sshd\[24810\]: Failed password for invalid user bego from 165.22.76.39 port 49698 ssh2 Sep 27 02:32:33 friendsofhawaii sshd\[25142\]: Invalid user senha123 from 165.22.76.39 Sep 27 02:32:33 friendsofhawaii sshd\[25142\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.76.39 |
2019-09-27 20:33:14 |
| 114.238.114.68 | attackbotsspam | Automated reporting of FTP Brute Force |
2019-09-27 20:59:31 |
| 43.249.246.11 | attackbotsspam | Sep 27 13:33:11 h2177944 kernel: \[2460252.710144\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=43.249.246.11 DST=85.214.117.9 LEN=40 TOS=0x08 PREC=0x20 TTL=64 ID=10771 DF PROTO=TCP SPT=57519 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 Sep 27 13:34:24 h2177944 kernel: \[2460325.780757\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=43.249.246.11 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=78 ID=51543 DF PROTO=TCP SPT=51394 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 Sep 27 13:50:59 h2177944 kernel: \[2461320.559758\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=43.249.246.11 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=57 ID=41846 DF PROTO=TCP SPT=52581 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 Sep 27 14:06:22 h2177944 kernel: \[2462243.506767\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=43.249.246.11 DST=85.214.117.9 LEN=40 TOS=0x08 PREC=0x20 TTL=52 ID=31435 DF PROTO=TCP SPT=62657 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 Sep 27 14:15:31 h2177944 kernel: \[2462792.732741\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=43.249.246.11 DST=85.214.1 |
2019-09-27 20:47:37 |
| 103.250.39.198 | attackspambots | Sep 27 10:58:30 shadeyouvpn sshd[6878]: Invalid user winata from 103.250.39.198 Sep 27 10:58:30 shadeyouvpn sshd[6878]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.250.39.198 Sep 27 10:58:32 shadeyouvpn sshd[6878]: Failed password for invalid user winata from 103.250.39.198 port 15649 ssh2 Sep 27 10:58:32 shadeyouvpn sshd[6878]: Received disconnect from 103.250.39.198: 11: Bye Bye [preauth] Sep 27 11:02:05 shadeyouvpn sshd[10372]: Invalid user fun from 103.250.39.198 Sep 27 11:02:05 shadeyouvpn sshd[10372]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.250.39.198 Sep 27 11:02:07 shadeyouvpn sshd[10372]: Failed password for invalid user fun from 103.250.39.198 port 55905 ssh2 Sep 27 11:02:08 shadeyouvpn sshd[10372]: Received disconnect from 103.250.39.198: 11: Bye Bye [preauth] Sep 27 11:05:37 shadeyouvpn sshd[12744]: pam_unix(sshd:auth): authentication failure; logname= uid=0........ ------------------------------- |
2019-09-27 20:52:02 |
| 222.186.52.86 | attackbots | Sep 27 08:51:33 ny01 sshd[32002]: Failed password for root from 222.186.52.86 port 23181 ssh2 Sep 27 08:51:36 ny01 sshd[32003]: Failed password for root from 222.186.52.86 port 52226 ssh2 Sep 27 08:51:36 ny01 sshd[32002]: Failed password for root from 222.186.52.86 port 23181 ssh2 |
2019-09-27 21:09:22 |
| 84.53.198.245 | attackspambots | Attempt to attack host OS, exploiting network vulnerabilities, on 27-09-2019 13:15:21. |
2019-09-27 20:56:22 |
| 112.64.32.118 | attackbotsspam | Sep 27 13:33:20 microserver sshd[64528]: Invalid user yp from 112.64.32.118 port 36266 Sep 27 13:33:20 microserver sshd[64528]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.64.32.118 Sep 27 13:33:22 microserver sshd[64528]: Failed password for invalid user yp from 112.64.32.118 port 36266 ssh2 Sep 27 13:43:03 microserver sshd[613]: Invalid user owen from 112.64.32.118 port 53852 Sep 27 13:43:03 microserver sshd[613]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.64.32.118 Sep 27 13:57:48 microserver sshd[2708]: Invalid user jenkins from 112.64.32.118 port 52004 Sep 27 13:57:48 microserver sshd[2708]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.64.32.118 Sep 27 13:57:50 microserver sshd[2708]: Failed password for invalid user jenkins from 112.64.32.118 port 52004 ssh2 Sep 27 14:02:33 microserver sshd[3390]: Invalid user wangyi from 112.64.32.118 port 60798 Sep 27 14:02:33 |
2019-09-27 20:41:18 |
| 157.36.145.24 | attackspam | Attempt to attack host OS, exploiting network vulnerabilities, on 27-09-2019 13:15:20. |
2019-09-27 20:58:13 |
| 51.254.129.128 | attackbots | Sep 27 02:27:44 tdfoods sshd\[31722\]: Invalid user dsc from 51.254.129.128 Sep 27 02:27:44 tdfoods sshd\[31722\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.ip-51-254-129.eu Sep 27 02:27:46 tdfoods sshd\[31722\]: Failed password for invalid user dsc from 51.254.129.128 port 39675 ssh2 Sep 27 02:31:49 tdfoods sshd\[32094\]: Invalid user bbui from 51.254.129.128 Sep 27 02:31:49 tdfoods sshd\[32094\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.ip-51-254-129.eu |
2019-09-27 20:42:09 |
| 78.234.235.122 | attack | Netgear DGN Device Remote Command Execution Vulnerability |
2019-09-27 21:08:23 |
| 201.140.111.58 | attackspambots | Sep 27 15:11:14 server sshd\[24382\]: Invalid user db2add from 201.140.111.58 port 57092 Sep 27 15:11:14 server sshd\[24382\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.140.111.58 Sep 27 15:11:16 server sshd\[24382\]: Failed password for invalid user db2add from 201.140.111.58 port 57092 ssh2 Sep 27 15:15:34 server sshd\[1713\]: Invalid user emanuel from 201.140.111.58 port 60737 Sep 27 15:15:34 server sshd\[1713\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.140.111.58 |
2019-09-27 20:31:46 |
| 123.21.206.185 | attack | Attempt to attack host OS, exploiting network vulnerabilities, on 27-09-2019 13:15:19. |
2019-09-27 20:59:16 |