城市(city): unknown
省份(region): unknown
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.21.96.74
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 61962
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.21.96.74. IN A
;; AUTHORITY SECTION:
. 424 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021701 1800 900 604800 86400
;; Query time: 56 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 03:21:06 CST 2022
;; MSG SIZE rcvd: 105Host 74.96.21.104.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 74.96.21.104.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 89.24.199.80 | attackspam | Lines containing failures of 89.24.199.80 Nov 2 12:33:40 omfg postfix/smtpd[7228]: connect from 89-24-199-80.customers.tmcz.cz[89.24.199.80] Nov x@x Nov 2 12:33:51 omfg postfix/smtpd[7228]: lost connection after RCPT from 89-24-199-80.customers.tmcz.cz[89.24.199.80] Nov 2 12:33:51 omfg postfix/smtpd[7228]: disconnect from 89-24-199-80.customers.tmcz.cz[89.24.199.80] ehlo=1 mail=1 rcpt=0/1 commands=2/3 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=89.24.199.80 |
2019-11-03 01:20:24 |
| 185.162.235.113 | attack | 2019-11-02T18:05:02.286141mail01 postfix/smtpd[31878]: warning: unknown[185.162.235.113]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2019-11-02T18:10:20.373191mail01 postfix/smtpd[23751]: warning: unknown[185.162.235.113]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2019-11-02T18:10:20.373608mail01 postfix/smtpd[23752]: warning: unknown[185.162.235.113]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 |
2019-11-03 01:12:14 |
| 51.89.148.180 | attackspambots | Nov 2 14:03:05 vps691689 sshd[12915]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.89.148.180 Nov 2 14:03:07 vps691689 sshd[12915]: Failed password for invalid user !@#zzidcQWER from 51.89.148.180 port 53304 ssh2 Nov 2 14:06:43 vps691689 sshd[12960]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.89.148.180 ... |
2019-11-03 01:08:11 |
| 171.238.60.157 | attackspambots | Nov 2 12:38:41 mail1 sshd[4214]: Invalid user admin from 171.238.60.157 port 60144 Nov 2 12:38:41 mail1 sshd[4214]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.238.60.157 Nov 2 12:38:43 mail1 sshd[4214]: Failed password for invalid user admin from 171.238.60.157 port 60144 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=171.238.60.157 |
2019-11-03 01:26:13 |
| 68.183.65.165 | attack | Nov 2 19:08:01 server sshd\[24719\]: Invalid user pms from 68.183.65.165 port 54394 Nov 2 19:08:01 server sshd\[24719\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.65.165 Nov 2 19:08:03 server sshd\[24719\]: Failed password for invalid user pms from 68.183.65.165 port 54394 ssh2 Nov 2 19:11:49 server sshd\[5551\]: Invalid user student from 68.183.65.165 port 37012 Nov 2 19:11:49 server sshd\[5551\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.65.165 |
2019-11-03 01:17:51 |
| 35.240.222.249 | attackbotsspam | WordPress login Brute force / Web App Attack on client site. |
2019-11-03 01:54:48 |
| 142.93.248.5 | attackspam | Nov 2 07:51:58 Tower sshd[9888]: Connection from 142.93.248.5 port 51252 on 192.168.10.220 port 22 Nov 2 07:51:59 Tower sshd[9888]: Failed password for root from 142.93.248.5 port 51252 ssh2 Nov 2 07:51:59 Tower sshd[9888]: Received disconnect from 142.93.248.5 port 51252:11: Bye Bye [preauth] Nov 2 07:51:59 Tower sshd[9888]: Disconnected from authenticating user root 142.93.248.5 port 51252 [preauth] |
2019-11-03 01:34:23 |
| 112.85.42.189 | attackspambots | 11/02/2019-12:17:42.702011 112.85.42.189 Protocol: 6 ET SCAN Potential SSH Scan |
2019-11-03 01:26:55 |
| 139.217.110.34 | attackspam | 3389BruteforceFW21 |
2019-11-03 01:19:57 |
| 185.36.218.72 | attackspambots | slow and persistent scanner |
2019-11-03 01:47:50 |
| 194.247.26.87 | attackbots | slow and persistent scanner |
2019-11-03 01:43:25 |
| 218.153.159.198 | attack | 2019-11-02T17:07:56.600779abusebot-5.cloudsearch.cf sshd\[25990\]: Invalid user robert from 218.153.159.198 port 58766 |
2019-11-03 01:54:35 |
| 134.209.16.36 | attackspam | Nov 2 02:52:08 hanapaa sshd\[9404\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.16.36 user=root Nov 2 02:52:10 hanapaa sshd\[9404\]: Failed password for root from 134.209.16.36 port 43298 ssh2 Nov 2 02:56:02 hanapaa sshd\[9710\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.16.36 user=root Nov 2 02:56:04 hanapaa sshd\[9710\]: Failed password for root from 134.209.16.36 port 52966 ssh2 Nov 2 02:59:49 hanapaa sshd\[10004\]: Invalid user suporte from 134.209.16.36 |
2019-11-03 01:51:21 |
| 221.133.1.11 | attack | Nov 2 02:07:36 sachi sshd\[12098\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.133.1.11 user=root Nov 2 02:07:38 sachi sshd\[12098\]: Failed password for root from 221.133.1.11 port 45188 ssh2 Nov 2 02:15:39 sachi sshd\[12849\]: Invalid user ow from 221.133.1.11 Nov 2 02:15:39 sachi sshd\[12849\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.133.1.11 Nov 2 02:15:42 sachi sshd\[12849\]: Failed password for invalid user ow from 221.133.1.11 port 55902 ssh2 |
2019-11-03 01:41:45 |
| 125.209.85.2 | attackspam | Honeypot attack, port: 445, PTR: 125-209-85-2.multi.net.pk. |
2019-11-03 01:46:53 |