城市(city): unknown
省份(region): unknown
国家(country): Virgin Islands (BRITISH)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.219.72.29
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 6808
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.219.72.29. IN A
;; AUTHORITY SECTION:
. 187 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022032502 1800 900 604800 86400
;; Query time: 184 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Mar 26 07:21:05 CST 2022
;; MSG SIZE rcvd: 10629.72.219.104.in-addr.arpa domain name pointer shared-us.layershift.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
29.72.219.104.in-addr.arpa name = shared-us.layershift.com.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 182.73.105.146 | attackbotsspam | 445/tcp 445/tcp 445/tcp... [2019-05-17/06-24]5pkt,1pt.(tcp) |
2019-06-24 20:48:50 |
| 168.228.148.118 | attack | mail.log:Jun 17 23:46:51 mail postfix/smtpd[22881]: warning: unknown[168.228.148.118]: SASL PLAIN authentication failed: authentication failure |
2019-06-24 20:28:15 |
| 130.207.1.81 | attackbotsspam | Port scan on 1 port(s): 53 |
2019-06-24 20:16:45 |
| 134.209.11.82 | attack | xmlrpc attack |
2019-06-24 21:09:13 |
| 195.158.9.235 | attackspam | 445/tcp 445/tcp 445/tcp... [2019-05-31/06-24]6pkt,1pt.(tcp) |
2019-06-24 21:08:45 |
| 61.28.231.233 | attackbotsspam | Jun 24 14:07:44 mail sshd\[26091\]: Invalid user newadmin from 61.28.231.233 port 58734 Jun 24 14:07:45 mail sshd\[26091\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.28.231.233 Jun 24 14:07:46 mail sshd\[26091\]: Failed password for invalid user newadmin from 61.28.231.233 port 58734 ssh2 Jun 24 14:11:52 mail sshd\[29011\]: Invalid user typo3 from 61.28.231.233 port 46284 Jun 24 14:11:52 mail sshd\[29011\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.28.231.233 ... |
2019-06-24 20:35:59 |
| 198.245.61.119 | attackspambots | MYH,DEF GET /wp-login.php |
2019-06-24 20:22:49 |
| 193.32.161.48 | attackbots | MultiHost/MultiPort Probe, Scan, Hack - |
2019-06-24 21:05:59 |
| 88.212.26.74 | attackbots | Jun 24 05:11:40 cac1d2 sshd\[7680\]: Invalid user se from 88.212.26.74 port 49949 Jun 24 05:11:40 cac1d2 sshd\[7680\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=88.212.26.74 Jun 24 05:11:42 cac1d2 sshd\[7680\]: Failed password for invalid user se from 88.212.26.74 port 49949 ssh2 ... |
2019-06-24 20:40:06 |
| 159.203.103.120 | attackbotsspam | Jun 24 12:12:19 *** sshd[18529]: User root from 159.203.103.120 not allowed because not listed in AllowUsers |
2019-06-24 20:18:49 |
| 212.18.53.32 | attackbots | NAME : A1SI-NET-2 CIDR : DDoS attack Slovenia "" - block certain countries :) IP: 212.18.53.32 Denial-of-Service Attack (DoS) Detected and Blocked by ADMIN - data recovery https://help-dysk.pl |
2019-06-24 20:09:18 |
| 208.111.0.58 | attackbots | xmlrpc attack |
2019-06-24 20:21:14 |
| 118.193.182.208 | attack | villaromeo.de 118.193.182.208 \[24/Jun/2019:11:29:25 +0200\] "POST /wp-login.php HTTP/1.1" 200 2061 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" villaromeo.de 118.193.182.208 \[24/Jun/2019:11:29:27 +0200\] "POST /wp-login.php HTTP/1.1" 200 2026 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" |
2019-06-24 20:04:24 |
| 149.202.149.53 | attack | Jun 24 01:09:26 nbi10516-7 sshd[21293]: Invalid user job from 149.202.149.53 port 60850 Jun 24 01:09:28 nbi10516-7 sshd[21293]: Failed password for invalid user job from 149.202.149.53 port 60850 ssh2 Jun 24 01:09:28 nbi10516-7 sshd[21293]: Received disconnect from 149.202.149.53 port 60850:11: Bye Bye [preauth] Jun 24 01:09:28 nbi10516-7 sshd[21293]: Disconnected from 149.202.149.53 port 60850 [preauth] Jun 24 01:12:36 nbi10516-7 sshd[27460]: Invalid user joe from 149.202.149.53 port 40888 Jun 24 01:12:38 nbi10516-7 sshd[27460]: Failed password for invalid user joe from 149.202.149.53 port 40888 ssh2 Jun 24 01:12:38 nbi10516-7 sshd[27460]: Received disconnect from 149.202.149.53 port 40888:11: Bye Bye [preauth] Jun 24 01:12:38 nbi10516-7 sshd[27460]: Disconnected from 149.202.149.53 port 40888 [preauth] Jun 24 01:13:56 nbi10516-7 sshd[29875]: Invalid user marta from 149.202.149.53 port 56426 Jun 24 01:13:57 nbi10516-7 sshd[29875]: Failed password for invalid user marta........ ------------------------------- |
2019-06-24 21:04:28 |
| 162.255.116.226 | attackbots | 162.255.116.226 - - \[24/Jun/2019:06:41:27 +0200\] "GET /wp-login.php HTTP/1.1" 200 1301 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 162.255.116.226 - - \[24/Jun/2019:06:41:28 +0200\] "POST /wp-login.php HTTP/1.1" 200 1704 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 162.255.116.226 - - \[24/Jun/2019:06:41:28 +0200\] "GET /wp-login.php HTTP/1.1" 200 1301 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 162.255.116.226 - - \[24/Jun/2019:06:41:29 +0200\] "POST /wp-login.php HTTP/1.1" 200 1710 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 162.255.116.226 - - \[24/Jun/2019:06:41:29 +0200\] "GET /wp-login.php HTTP/1.1" 200 1301 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 162.255.116.226 - - \[24/Jun/2019:06:41:30 +0200\] "POST /wp-login.php HTTP/1.1" 200 1710 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\ |
2019-06-24 20:03:48 |