城市(city): unknown
省份(region): unknown
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.21.95.52
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 3585
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.21.95.52. IN A
;; AUTHORITY SECTION:
. 600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021701 1800 900 604800 86400
;; Query time: 70 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 03:20:19 CST 2022
;; MSG SIZE rcvd: 105Host 52.95.21.104.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 52.95.21.104.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 189.135.188.234 | attack | Lines containing failures of 189.135.188.234 Jun 4 05:39:07 nextcloud sshd[28053]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.135.188.234 user=r.r Jun 4 05:39:09 nextcloud sshd[28053]: Failed password for r.r from 189.135.188.234 port 47334 ssh2 Jun 4 05:39:09 nextcloud sshd[28053]: Received disconnect from 189.135.188.234 port 47334:11: Bye Bye [preauth] Jun 4 05:39:09 nextcloud sshd[28053]: Disconnected from authenticating user r.r 189.135.188.234 port 47334 [preauth] Jun 4 05:46:54 nextcloud sshd[28931]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.135.188.234 user=r.r Jun 4 05:46:55 nextcloud sshd[28931]: Failed password for r.r from 189.135.188.234 port 53880 ssh2 Jun 4 05:46:56 nextcloud sshd[28931]: Received disconnect from 189.135.188.234 port 53880:11: Bye Bye [preauth] Jun 4 05:46:56 nextcloud sshd[28931]: Disconnected from authenticating user r.r 189.135.1........ ------------------------------ |
2020-06-05 05:35:14 |
| 218.92.0.168 | attackspambots | Automatic report BANNED IP |
2020-06-05 05:38:57 |
| 165.22.248.55 | attackspam | Lines containing failures of 165.22.248.55 Jun 4 00:46:22 shared06 sshd[16287]: Connection closed by 165.22.248.55 port 45744 [preauth] Jun 4 00:46:22 shared06 sshd[16289]: Connection closed by 165.22.248.55 port 45758 [preauth] Jun 4 00:46:43 shared06 sshd[16335]: Connection closed by 165.22.248.55 port 50738 [preauth] Jun 4 02:20:05 shared06 sshd[13764]: Connection closed by 165.22.248.55 port 60452 [preauth] Jun 4 02:20:05 shared06 sshd[13766]: Connection closed by 165.22.248.55 port 60554 [preauth] Jun 4 02:26:13 shared06 sshd[15911]: Connection closed by 165.22.248.55 port 54836 [preauth] Jun 4 02:31:41 shared06 sshd[17965]: Connection closed by 165.22.248.55 port 38802 [preauth] Jun 4 03:14:36 shared06 sshd[31102]: Connection closed by 165.22.248.55 port 44126 [preauth] Jun 4 03:14:36 shared06 sshd[31104]: Connection closed by 165.22.248.55 port 44270 [preauth] Jun 4 04:25:49 shared06 sshd[30341]: Connection closed by 165.22.248.55 port 58006 [preauth] Ju........ ------------------------------ |
2020-06-05 05:48:24 |
| 222.186.42.136 | attackspambots | Jun 4 23:08:45 vps sshd[517204]: Failed password for root from 222.186.42.136 port 45612 ssh2 Jun 4 23:08:47 vps sshd[517204]: Failed password for root from 222.186.42.136 port 45612 ssh2 Jun 4 23:08:57 vps sshd[518131]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.136 user=root Jun 4 23:08:59 vps sshd[518131]: Failed password for root from 222.186.42.136 port 26569 ssh2 Jun 4 23:09:01 vps sshd[518131]: Failed password for root from 222.186.42.136 port 26569 ssh2 ... |
2020-06-05 05:17:28 |
| 49.213.182.7 | attack | port scan and connect, tcp 8080 (http-proxy) |
2020-06-05 05:24:01 |
| 167.99.194.54 | attack | Jun 4 23:00:32 haigwepa sshd[24883]: Failed password for root from 167.99.194.54 port 55996 ssh2 ... |
2020-06-05 05:15:44 |
| 141.98.81.108 | attackbotsspam | Jun 4 23:07:21 vmd26974 sshd[16809]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.98.81.108 Jun 4 23:07:23 vmd26974 sshd[16809]: Failed password for invalid user admin from 141.98.81.108 port 40033 ssh2 ... |
2020-06-05 05:23:22 |
| 222.186.180.130 | attackbots | Jun 4 17:38:57 plusreed sshd[22239]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.130 user=root Jun 4 17:38:59 plusreed sshd[22239]: Failed password for root from 222.186.180.130 port 27586 ssh2 ... |
2020-06-05 05:40:09 |
| 180.168.212.6 | attack | (sshd) Failed SSH login from 180.168.212.6 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jun 5 00:00:34 s1 sshd[15043]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.168.212.6 user=root Jun 5 00:00:36 s1 sshd[15043]: Failed password for root from 180.168.212.6 port 53150 ssh2 Jun 5 00:03:50 s1 sshd[15186]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.168.212.6 user=root Jun 5 00:03:52 s1 sshd[15186]: Failed password for root from 180.168.212.6 port 51506 ssh2 Jun 5 00:07:30 s1 sshd[15550]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.168.212.6 user=root |
2020-06-05 05:32:52 |
| 45.143.223.42 | attack | Jun 4 21:35:26 postfix/smtpd: warning: unknown[45.143.223.42]: SASL LOGIN authentication failed Jun 4 21:35:35 postfix/smtpd: warning: unknown[45.143.223.42]: SASL LOGIN authentication failed |
2020-06-05 05:53:03 |
| 14.241.39.26 | attackbots | Icarus honeypot on github |
2020-06-05 05:20:45 |
| 94.232.136.126 | attackbotsspam | ... |
2020-06-05 05:15:03 |
| 121.58.211.162 | attackspam | Jun 4 08:08:44 host sshd[23591]: User r.r from 121.58.211.162 not allowed because none of user's groups are listed in AllowGroups Jun 4 08:08:44 host sshd[23591]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.58.211.162 user=r.r Jun 4 08:08:46 host sshd[23591]: Failed password for invalid user r.r from 121.58.211.162 port 56134 ssh2 Jun 4 08:08:47 host sshd[23591]: Received disconnect from 121.58.211.162 port 56134:11: Bye Bye [preauth] Jun 4 08:08:47 host sshd[23591]: Disconnected from invalid user r.r 121.58.211.162 port 56134 [preauth] Jun 4 08:17:58 host sshd[23797]: User r.r from 121.58.211.162 not allowed because none of user's groups are listed in AllowGroups Jun 4 08:17:58 host sshd[23797]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.58.211.162 user=r.r Jun 4 08:18:00 host sshd[23797]: Failed password for invalid user r.r from 121.58.211.162 port 61182 ssh2 Ju........ ------------------------------- |
2020-06-05 05:45:06 |
| 141.98.81.99 | attackbotsspam | Jun 4 23:07:11 vmd26974 sshd[16772]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.98.81.99 Jun 4 23:07:13 vmd26974 sshd[16772]: Failed password for invalid user Administrator from 141.98.81.99 port 35805 ssh2 ... |
2020-06-05 05:26:47 |
| 2.80.168.28 | attackbots | Jun 4 22:19:39 serwer sshd\[12538\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.80.168.28 user=root Jun 4 22:19:41 serwer sshd\[12538\]: Failed password for root from 2.80.168.28 port 43266 ssh2 Jun 4 22:23:31 serwer sshd\[13058\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.80.168.28 user=root ... |
2020-06-05 05:18:17 |