城市(city): unknown
省份(region): unknown
国家(country): Qatar
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 20.21.48.21
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49158
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;20.21.48.21. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022000 1800 900 604800 86400
;; Query time: 43 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 20 23:09:17 CST 2025
;; MSG SIZE rcvd: 104Host 21.48.21.20.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 21.48.21.20.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 106.12.96.226 | attackbots | Jul 31 11:25:35 MainVPS sshd[9655]: Invalid user postgres from 106.12.96.226 port 40748 Jul 31 11:25:35 MainVPS sshd[9655]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.96.226 Jul 31 11:25:35 MainVPS sshd[9655]: Invalid user postgres from 106.12.96.226 port 40748 Jul 31 11:25:36 MainVPS sshd[9655]: Failed password for invalid user postgres from 106.12.96.226 port 40748 ssh2 Jul 31 11:29:31 MainVPS sshd[9967]: Invalid user user1 from 106.12.96.226 port 49276 ... |
2019-08-01 00:24:11 |
| 119.29.11.242 | attackspam | Invalid user maxim from 119.29.11.242 port 49896 |
2019-08-01 00:37:18 |
| 200.59.11.138 | attackspam | Unauthorised access (Jul 31) SRC=200.59.11.138 LEN=40 TTL=54 ID=29828 TCP DPT=8080 WINDOW=46048 SYN |
2019-07-31 23:43:51 |
| 139.199.248.156 | attack | Apr 16 17:43:01 ubuntu sshd[8538]: Failed password for invalid user adeniyi from 139.199.248.156 port 43161 ssh2 Apr 16 17:45:14 ubuntu sshd[8872]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.248.156 Apr 16 17:45:16 ubuntu sshd[8872]: Failed password for invalid user hosts from 139.199.248.156 port 54076 ssh2 Apr 16 17:47:29 ubuntu sshd[8910]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.248.156 |
2019-08-01 00:18:47 |
| 185.176.27.54 | attack | 31.07.2019 10:10:43 Connection to port 24087 blocked by firewall |
2019-07-31 23:46:32 |
| 104.248.115.152 | attackspambots | May 10 13:04:52 ubuntu sshd[21414]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.115.152 May 10 13:04:54 ubuntu sshd[21414]: Failed password for invalid user informix from 104.248.115.152 port 60584 ssh2 May 10 13:08:06 ubuntu sshd[21484]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.115.152 May 10 13:08:08 ubuntu sshd[21484]: Failed password for invalid user ce from 104.248.115.152 port 34490 ssh2 |
2019-07-31 23:19:59 |
| 31.202.247.5 | attackbots | Jul 31 12:07:40 debian sshd\[15890\]: Invalid user misp from 31.202.247.5 port 54150 Jul 31 12:07:40 debian sshd\[15890\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.202.247.5 Jul 31 12:07:42 debian sshd\[15890\]: Failed password for invalid user misp from 31.202.247.5 port 54150 ssh2 ... |
2019-08-01 00:20:24 |
| 183.87.77.197 | attack | Unauthorized connection attempt from IP address 183.87.77.197 on Port 445(SMB) |
2019-07-31 23:51:32 |
| 89.248.174.201 | attack | 31.07.2019 13:41:43 Connection to port 10210 blocked by firewall |
2019-08-01 00:27:36 |
| 94.176.76.188 | attack | (Jul 31) LEN=40 TTL=244 ID=14199 DF TCP DPT=23 WINDOW=14600 SYN (Jul 31) LEN=40 TTL=244 ID=31280 DF TCP DPT=23 WINDOW=14600 SYN (Jul 31) LEN=40 TTL=244 ID=16140 DF TCP DPT=23 WINDOW=14600 SYN (Jul 31) LEN=40 TTL=244 ID=62292 DF TCP DPT=23 WINDOW=14600 SYN (Jul 31) LEN=40 TTL=244 ID=28445 DF TCP DPT=23 WINDOW=14600 SYN (Jul 31) LEN=40 TTL=244 ID=9954 DF TCP DPT=23 WINDOW=14600 SYN (Jul 31) LEN=40 TTL=244 ID=4010 DF TCP DPT=23 WINDOW=14600 SYN (Jul 31) LEN=40 TTL=244 ID=31673 DF TCP DPT=23 WINDOW=14600 SYN (Jul 30) LEN=40 TTL=244 ID=50532 DF TCP DPT=23 WINDOW=14600 SYN (Jul 30) LEN=40 TTL=244 ID=54081 DF TCP DPT=23 WINDOW=14600 SYN (Jul 30) LEN=40 TTL=244 ID=41513 DF TCP DPT=23 WINDOW=14600 SYN (Jul 30) LEN=40 TTL=244 ID=58374 DF TCP DPT=23 WINDOW=14600 SYN (Jul 30) LEN=40 TTL=244 ID=56164 DF TCP DPT=23 WINDOW=14600 SYN (Jul 30) LEN=40 TTL=244 ID=2238 DF TCP DPT=23 WINDOW=14600 SYN (Jul 30) LEN=40 TTL=244 ID=55059 DF TCP DPT=23 WINDOW=14600 SYN... |
2019-08-01 00:17:28 |
| 23.94.161.171 | attackspambots | Unauthorized connection attempt from IP address 23.94.161.171 on Port 445(SMB) |
2019-08-01 00:20:59 |
| 104.237.255.204 | attack | Jul 31 13:13:13 Ubuntu-1404-trusty-64-minimal sshd\[25799\]: Invalid user bank from 104.237.255.204 Jul 31 13:13:13 Ubuntu-1404-trusty-64-minimal sshd\[25799\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.237.255.204 Jul 31 13:13:15 Ubuntu-1404-trusty-64-minimal sshd\[25799\]: Failed password for invalid user bank from 104.237.255.204 port 32794 ssh2 Jul 31 13:20:24 Ubuntu-1404-trusty-64-minimal sshd\[30487\]: Invalid user ellen from 104.237.255.204 Jul 31 13:20:24 Ubuntu-1404-trusty-64-minimal sshd\[30487\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.237.255.204 |
2019-08-01 00:16:46 |
| 27.72.123.235 | attack | Unauthorized connection attempt from IP address 27.72.123.235 on Port 445(SMB) |
2019-07-31 23:42:49 |
| 180.182.47.132 | attack | ssh failed login |
2019-07-31 23:56:09 |
| 190.167.218.29 | attack | Jul 29 11:41:49 web1 sshd[4014]: Address 190.167.218.29 maps to 29.218.167.190.d.dyn.codetel.net.do, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Jul 29 11:41:49 web1 sshd[4014]: Invalid user pi from 190.167.218.29 Jul 29 11:41:49 web1 sshd[4014]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.167.218.29 Jul 29 11:41:49 web1 sshd[4016]: Address 190.167.218.29 maps to 29.218.167.190.d.dyn.codetel.net.do, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Jul 29 11:41:49 web1 sshd[4016]: Invalid user pi from 190.167.218.29 Jul 29 11:41:49 web1 sshd[4016]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.167.218.29 Jul 29 11:41:50 web1 sshd[4014]: Failed password for invalid user pi from 190.167.218.29 port 12992 ssh2 Jul 29 11:41:51 web1 sshd[4014]: Connection closed by 190.167.218.29 [preauth] Jul 29 11:41:51 web1 sshd[4016]: Failed pass........ ------------------------------- |
2019-07-31 23:50:01 |