城市(city): unknown
省份(region): unknown
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 21.14.106.87
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 52685
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;21.14.106.87. IN A
;; AUTHORITY SECTION:
. 403 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022011002 1800 900 604800 86400
;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jan 11 13:10:18 CST 2022
;; MSG SIZE rcvd: 105Host 87.106.14.21.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 87.106.14.21.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 74.82.47.39 | attack | 2323/tcp 21/tcp 9200/tcp... [2019-09-02/11-02]54pkt,15pt.(tcp),2pt.(udp) |
2019-11-02 19:13:44 |
| 106.13.56.72 | attack | Invalid user dm from 106.13.56.72 port 58592 |
2019-11-02 18:42:56 |
| 159.203.201.196 | attack | 8083/tcp 88/tcp 1723/tcp... [2019-09-12/11-02]53pkt,45pt.(tcp),2pt.(udp) |
2019-11-02 19:20:37 |
| 92.118.38.38 | attackspambots | Nov 2 11:39:11 webserver postfix/smtpd\[25723\]: warning: unknown\[92.118.38.38\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 2 11:39:46 webserver postfix/smtpd\[25446\]: warning: unknown\[92.118.38.38\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 2 11:40:22 webserver postfix/smtpd\[25555\]: warning: unknown\[92.118.38.38\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 2 11:40:57 webserver postfix/smtpd\[25555\]: warning: unknown\[92.118.38.38\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 2 11:41:33 webserver postfix/smtpd\[25723\]: warning: unknown\[92.118.38.38\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2019-11-02 18:42:23 |
| 106.3.135.27 | attackbotsspam | Nov 2 06:20:29 MK-Soft-VM3 sshd[14048]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.3.135.27 Nov 2 06:20:31 MK-Soft-VM3 sshd[14048]: Failed password for invalid user er from 106.3.135.27 port 42017 ssh2 ... |
2019-11-02 19:04:22 |
| 74.82.47.42 | attack | 389/tcp 7547/tcp 50075/tcp... [2019-09-03/11-02]25pkt,12pt.(tcp),1pt.(udp) |
2019-11-02 19:12:33 |
| 123.18.206.15 | attack | Nov 2 04:55:55 sd-53420 sshd\[18166\]: User root from 123.18.206.15 not allowed because none of user's groups are listed in AllowGroups Nov 2 04:55:55 sd-53420 sshd\[18166\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.18.206.15 user=root Nov 2 04:55:56 sd-53420 sshd\[18166\]: Failed password for invalid user root from 123.18.206.15 port 53095 ssh2 Nov 2 05:00:13 sd-53420 sshd\[18469\]: Invalid user daniel from 123.18.206.15 Nov 2 05:00:13 sd-53420 sshd\[18469\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.18.206.15 ... |
2019-11-02 19:02:49 |
| 185.26.99.104 | attack | slow and persistent scanner |
2019-11-02 19:13:22 |
| 80.211.116.102 | attackbotsspam | Automatic report - Banned IP Access |
2019-11-02 18:55:12 |
| 190.145.55.89 | attackspambots | Nov 2 09:54:45 server sshd\[4529\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.145.55.89 user=root Nov 2 09:54:47 server sshd\[4529\]: Failed password for root from 190.145.55.89 port 51049 ssh2 Nov 2 10:08:43 server sshd\[7834\]: Invalid user deploy from 190.145.55.89 Nov 2 10:08:43 server sshd\[7834\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.145.55.89 Nov 2 10:08:45 server sshd\[7834\]: Failed password for invalid user deploy from 190.145.55.89 port 49737 ssh2 ... |
2019-11-02 19:01:55 |
| 36.26.103.184 | attackbotsspam | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/36.26.103.184/ CN - 1H : (666) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : CN NAME ASN : ASN4134 IP : 36.26.103.184 CIDR : 36.26.96.0/19 PREFIX COUNT : 5430 UNIQUE IP COUNT : 106919680 ATTACKS DETECTED ASN4134 : 1H - 13 3H - 31 6H - 60 12H - 130 24H - 270 DateTime : 2019-11-02 04:42:50 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery |
2019-11-02 19:12:53 |
| 41.220.13.103 | attackbotsspam | Nov 1 18:40:48 tdfoods sshd\[10832\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=goga.data.co.ug user=root Nov 1 18:40:50 tdfoods sshd\[10832\]: Failed password for root from 41.220.13.103 port 42300 ssh2 Nov 1 18:45:39 tdfoods sshd\[11216\]: Invalid user operator from 41.220.13.103 Nov 1 18:45:39 tdfoods sshd\[11216\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=goga.data.co.ug Nov 1 18:45:40 tdfoods sshd\[11216\]: Failed password for invalid user operator from 41.220.13.103 port 53120 ssh2 |
2019-11-02 19:07:52 |
| 159.203.201.150 | attackspam | Port scan: Attack repeated for 24 hours |
2019-11-02 19:17:01 |
| 196.52.43.93 | attackbotsspam | 1521/tcp 5632/udp 5985/tcp... [2019-09-02/11-02]45pkt,32pt.(tcp),5pt.(udp) |
2019-11-02 19:07:32 |
| 14.254.71.17 | attackspam | 11/01/2019-23:43:31.277410 14.254.71.17 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433 |
2019-11-02 18:53:11 |