城市(city): unknown
省份(region): unknown
国家(country): United Kingdom of Great Britain and Northern Ireland (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 134.213.104.21
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 8773
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;134.213.104.21. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020500 1800 900 604800 86400
;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 05 19:49:51 CST 2025
;; MSG SIZE rcvd: 107Host 21.104.213.134.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 21.104.213.134.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 222.186.15.101 | attack | SSH Brute Force, server-1 sshd[1111]: Failed password for root from 222.186.15.101 port 55463 ssh2 |
2019-09-29 23:54:40 |
| 94.23.0.64 | attackbots | Sep 29 02:48:27 hanapaa sshd\[15146\]: Invalid user testies from 94.23.0.64 Sep 29 02:48:27 hanapaa sshd\[15146\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns341101.ip-94-23-0.eu Sep 29 02:48:28 hanapaa sshd\[15146\]: Failed password for invalid user testies from 94.23.0.64 port 46169 ssh2 Sep 29 02:52:19 hanapaa sshd\[15497\]: Invalid user david from 94.23.0.64 Sep 29 02:52:19 hanapaa sshd\[15497\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns341101.ip-94-23-0.eu |
2019-09-29 23:47:53 |
| 177.15.136.194 | attackspam | Sep 27 22:24:55 cumulus sshd[24196]: Invalid user test2 from 177.15.136.194 port 58130 Sep 27 22:24:55 cumulus sshd[24196]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.15.136.194 Sep 27 22:24:57 cumulus sshd[24196]: Failed password for invalid user test2 from 177.15.136.194 port 58130 ssh2 Sep 27 22:24:57 cumulus sshd[24196]: Received disconnect from 177.15.136.194 port 58130:11: Bye Bye [preauth] Sep 27 22:24:57 cumulus sshd[24196]: Disconnected from 177.15.136.194 port 58130 [preauth] Sep 27 22:42:58 cumulus sshd[24983]: Invalid user cl from 177.15.136.194 port 56778 Sep 27 22:42:58 cumulus sshd[24983]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.15.136.194 Sep 27 22:43:00 cumulus sshd[24983]: Failed password for invalid user cl from 177.15.136.194 port 56778 ssh2 Sep 27 22:43:00 cumulus sshd[24983]: Received disconnect from 177.15.136.194 port 56778:11: Bye Bye [preauth] S........ ------------------------------- |
2019-09-29 23:26:04 |
| 49.212.155.198 | attackbots | [munged]::443 49.212.155.198 - - [29/Sep/2019:17:26:54 +0200] "POST /[munged]: HTTP/1.1" 200 8926 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 49.212.155.198 - - [29/Sep/2019:17:26:56 +0200] "POST /[munged]: HTTP/1.1" 200 8926 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 49.212.155.198 - - [29/Sep/2019:17:26:56 +0200] "POST /[munged]: HTTP/1.1" 200 8926 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 49.212.155.198 - - [29/Sep/2019:17:26:59 +0200] "POST /[munged]: HTTP/1.1" 200 8926 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 49.212.155.198 - - [29/Sep/2019:17:26:59 +0200] "POST /[munged]: HTTP/1.1" 200 8926 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 49.212.155.198 - - [29/Sep/2019:17:31:06 +0200] "POST /[munged]: HTTP/1.1" 200 7917 "-" "Mozilla/5.0 (X11 |
2019-09-29 23:36:07 |
| 187.109.170.156 | attack | Chat Spam |
2019-09-29 23:20:37 |
| 14.161.19.98 | attackspam | Sep 29 10:51:10 ny01 sshd[11267]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.161.19.98 Sep 29 10:51:12 ny01 sshd[11267]: Failed password for invalid user admin from 14.161.19.98 port 37382 ssh2 Sep 29 10:56:20 ny01 sshd[12486]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.161.19.98 |
2019-09-29 23:09:31 |
| 123.108.50.205 | attack | fail2ban honeypot |
2019-09-29 23:46:54 |
| 185.101.68.22 | attack | B: Magento admin pass test (wrong country) |
2019-09-29 23:33:30 |
| 139.162.98.244 | attackspambots | " " |
2019-09-29 23:52:45 |
| 128.199.95.60 | attackspam | 2019-09-29T10:40:01.1408361495-001 sshd\[16259\]: Failed password for invalid user Public@123 from 128.199.95.60 port 55034 ssh2 2019-09-29T10:50:14.4236911495-001 sshd\[17030\]: Invalid user OCS from 128.199.95.60 port 49982 2019-09-29T10:50:14.4310751495-001 sshd\[17030\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.95.60 2019-09-29T10:50:16.3244471495-001 sshd\[17030\]: Failed password for invalid user OCS from 128.199.95.60 port 49982 ssh2 2019-09-29T10:55:36.2784761495-001 sshd\[17484\]: Invalid user password from 128.199.95.60 port 33340 2019-09-29T10:55:36.2814691495-001 sshd\[17484\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.95.60 ... |
2019-09-29 23:15:40 |
| 211.148.135.196 | attackspambots | Sep 29 08:06:15 mail sshd\[20441\]: Invalid user kjh from 211.148.135.196 Sep 29 08:06:15 mail sshd\[20441\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.148.135.196 ... |
2019-09-29 23:39:56 |
| 61.142.21.44 | attack | Sep2915:40:12server4pure-ftpd:\(\?@61.142.21.44\)[WARNING]Authenticationfailedforuser[forum-wbp]Sep2914:52:37server4pure-ftpd:\(\?@123.117.11.151\)[WARNING]Authenticationfailedforuser[forum-wbp]Sep2915:20:19server4pure-ftpd:\(\?@117.157.106.29\)[WARNING]Authenticationfailedforuser[forum-wbp]Sep2914:52:31server4pure-ftpd:\(\?@123.117.11.151\)[WARNING]Authenticationfailedforuser[forum-wbp]Sep2915:40:02server4pure-ftpd:\(\?@61.142.21.44\)[WARNING]Authenticationfailedforuser[forum-wbp]Sep2915:40:04server4pure-ftpd:\(\?@61.142.21.44\)[WARNING]Authenticationfailedforuser[forum-wbp]Sep2915:40:32server4pure-ftpd:\(\?@61.142.21.44\)[WARNING]Authenticationfailedforuser[forum-wbp]Sep2915:10:36server4pure-ftpd:\(\?@117.157.106.29\)[WARNING]Authenticationfailedforuser[forum-wbp]Sep2915:40:27server4pure-ftpd:\(\?@61.142.21.44\)[WARNING]Authenticationfailedforuser[forum-wbp]Sep2915:10:43server4pure-ftpd:\(\?@117.157.106.29\)[WARNING]Authenticationfailedforuser[forum-wbp]IPAddressesBlocked: |
2019-09-29 23:48:40 |
| 92.222.216.71 | attackspam | $f2bV_matches |
2019-09-29 23:55:17 |
| 210.71.232.236 | attackbots | Sep 29 13:57:41 mail1 sshd\[30824\]: Invalid user wu from 210.71.232.236 port 55686 Sep 29 13:57:41 mail1 sshd\[30824\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.71.232.236 Sep 29 13:57:43 mail1 sshd\[30824\]: Failed password for invalid user wu from 210.71.232.236 port 55686 ssh2 Sep 29 14:11:40 mail1 sshd\[5100\]: Invalid user xiu from 210.71.232.236 port 42240 Sep 29 14:11:40 mail1 sshd\[5100\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.71.232.236 ... |
2019-09-29 23:19:33 |
| 222.186.31.144 | attack | Automated report - ssh fail2ban: Sep 29 16:12:43 wrong password, user=root, port=48989, ssh2 Sep 29 16:12:46 wrong password, user=root, port=48989, ssh2 Sep 29 16:12:48 wrong password, user=root, port=48989, ssh2 |
2019-09-29 23:06:18 |