城市(city): unknown
省份(region): unknown
国家(country): United States of America (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 21.7.240.103
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 64209
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;21.7.240.103. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025013100 1800 900 604800 86400
;; Query time: 13 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jan 31 23:46:22 CST 2025
;; MSG SIZE rcvd: 105Host 103.240.7.21.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 103.240.7.21.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 116.98.140.102 | attack | 81/tcp [2020-09-06]1pkt |
2020-09-07 02:32:08 |
| 150.136.40.83 | attackspam | 2020-09-06T15:19:04.421977ns386461 sshd\[12188\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.136.40.83 user=root 2020-09-06T15:19:06.190662ns386461 sshd\[12188\]: Failed password for root from 150.136.40.83 port 35802 ssh2 2020-09-06T15:28:03.763150ns386461 sshd\[20603\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.136.40.83 user=root 2020-09-06T15:28:05.526532ns386461 sshd\[20603\]: Failed password for root from 150.136.40.83 port 45962 ssh2 2020-09-06T15:31:44.828736ns386461 sshd\[24100\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.136.40.83 user=root ... |
2020-09-07 02:41:50 |
| 37.187.20.60 | attackbots | Lines containing failures of 37.187.20.60 Sep 3 18:14:49 kmh-wmh-002-nbg03 sshd[18544]: Invalid user amin from 37.187.20.60 port 50110 Sep 3 18:14:49 kmh-wmh-002-nbg03 sshd[18544]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.20.60 Sep 3 18:14:51 kmh-wmh-002-nbg03 sshd[18544]: Failed password for invalid user amin from 37.187.20.60 port 50110 ssh2 Sep 3 18:14:52 kmh-wmh-002-nbg03 sshd[18544]: Received disconnect from 37.187.20.60 port 50110:11: Bye Bye [preauth] Sep 3 18:14:52 kmh-wmh-002-nbg03 sshd[18544]: Disconnected from invalid user amin 37.187.20.60 port 50110 [preauth] Sep 3 18:20:41 kmh-wmh-002-nbg03 sshd[19172]: Invalid user boris from 37.187.20.60 port 49864 Sep 3 18:20:41 kmh-wmh-002-nbg03 sshd[19172]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.20.60 Sep 3 18:20:44 kmh-wmh-002-nbg03 sshd[19172]: Failed password for invalid user boris from 37.187.20.6........ ------------------------------ |
2020-09-07 02:15:16 |
| 36.85.25.232 | attackbotsspam | Automatic report - Port Scan Attack |
2020-09-07 02:38:57 |
| 190.38.78.142 | attackspambots | Unauthorized connection attempt from IP address 190.38.78.142 on Port 445(SMB) |
2020-09-07 02:17:29 |
| 190.207.85.114 | attack | Lines containing failures of 190.207.85.114 Sep 4 00:08:53 kopano sshd[25501]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.207.85.114 user=r.r Sep 4 00:08:55 kopano sshd[25501]: Failed password for r.r from 190.207.85.114 port 39034 ssh2 Sep 4 00:09:10 kopano sshd[25501]: Received disconnect from 190.207.85.114 port 39034:11: Bye Bye [preauth] Sep 4 00:09:10 kopano sshd[25501]: Disconnected from authenticating user r.r 190.207.85.114 port 39034 [preauth] Sep 4 00:33:55 kopano sshd[13899]: Connection reset by 190.207.85.114 port 42496 [preauth] Sep 4 00:43:45 kopano sshd[22014]: Connection closed by 190.207.85.114 port 42628 [preauth] Sep 4 00:53:47 kopano sshd[30029]: Invalid user tom from 190.207.85.114 port 42742 Sep 4 00:53:47 kopano sshd[30029]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.207.85.114 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=190. |
2020-09-07 02:34:56 |
| 185.247.224.45 | attackbots | Sep 6 18:37:26 master sshd[14752]: Failed password for invalid user admin from 185.247.224.45 port 42878 ssh2 Sep 6 18:37:29 master sshd[14754]: Failed password for invalid user admin from 185.247.224.45 port 43058 ssh2 |
2020-09-07 02:20:09 |
| 139.155.81.79 | attack | 139.155.81.79 (CN/China/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep 6 13:33:22 server5 sshd[19580]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.146.9 user=root Sep 6 13:33:24 server5 sshd[19580]: Failed password for root from 106.12.146.9 port 56662 ssh2 Sep 6 13:39:02 server5 sshd[21978]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.81.79 user=root Sep 6 13:39:04 server5 sshd[21993]: Failed password for root from 130.43.60.251 port 46498 ssh2 Sep 6 13:38:57 server5 sshd[21973]: Failed password for root from 62.94.193.216 port 33794 ssh2 IP Addresses Blocked: 106.12.146.9 (CN/China/-) |
2020-09-07 02:18:19 |
| 185.153.196.126 | attackspambots | [MK-Root1] Blocked by UFW |
2020-09-07 02:29:34 |
| 36.226.76.176 | attack | Sep 4 03:24:06 kunden sshd[28861]: Invalid user admin from 36.226.76.176 Sep 4 03:24:06 kunden sshd[28861]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36-226-76-176.dynamic-ip.hinet.net Sep 4 03:24:08 kunden sshd[28861]: Failed password for invalid user admin from 36.226.76.176 port 60891 ssh2 Sep 4 03:24:08 kunden sshd[28861]: Received disconnect from 36.226.76.176: 11: Bye Bye [preauth] Sep 4 03:24:10 kunden sshd[28863]: Invalid user admin from 36.226.76.176 Sep 4 03:24:10 kunden sshd[28863]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36-226-76-176.dynamic-ip.hinet.net Sep 4 03:24:13 kunden sshd[28863]: Failed password for invalid user admin from 36.226.76.176 port 60998 ssh2 Sep 4 03:24:13 kunden sshd[28863]: Received disconnect from 36.226.76.176: 11: Bye Bye [preauth] Sep 4 03:24:15 kunden sshd[28865]: Invalid user admin from 36.226.76.176 Sep 4 03:24:15 kunden ssh........ ------------------------------- |
2020-09-07 02:41:00 |
| 185.220.103.7 | attack | Time: Sun Sep 6 18:38:57 2020 +0200 IP: 185.220.103.7 (DE/Germany/anatkamm.tor-exit.calyxinstitute.org) Failures: 5 (sshd) Interval: 3600 seconds Blocked: Permanent Block [LF_SSHD] Log entries: Sep 6 18:38:45 mail-01 sshd[29458]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.220.103.7 user=root Sep 6 18:38:47 mail-01 sshd[29458]: Failed password for root from 185.220.103.7 port 56770 ssh2 Sep 6 18:38:49 mail-01 sshd[29458]: Failed password for root from 185.220.103.7 port 56770 ssh2 Sep 6 18:38:51 mail-01 sshd[29458]: Failed password for root from 185.220.103.7 port 56770 ssh2 Sep 6 18:38:54 mail-01 sshd[29458]: Failed password for root from 185.220.103.7 port 56770 ssh2 |
2020-09-07 02:18:52 |
| 107.189.10.174 | attackbots | 2020-09-06T20:20:28+0200 Failed SSH Authentication/Brute Force Attack. (Server 9) |
2020-09-07 02:20:31 |
| 222.186.175.154 | attackspam | Sep 6 20:17:08 dev0-dcde-rnet sshd[11840]: Failed password for root from 222.186.175.154 port 38816 ssh2 Sep 6 20:17:22 dev0-dcde-rnet sshd[11840]: error: maximum authentication attempts exceeded for root from 222.186.175.154 port 38816 ssh2 [preauth] Sep 6 20:17:28 dev0-dcde-rnet sshd[11842]: Failed password for root from 222.186.175.154 port 39840 ssh2 |
2020-09-07 02:21:30 |
| 167.71.240.218 | attack | Sep 6 14:29:37 santamaria sshd\[24635\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.240.218 user=root Sep 6 14:29:39 santamaria sshd\[24635\]: Failed password for root from 167.71.240.218 port 36184 ssh2 Sep 6 14:33:13 santamaria sshd\[24697\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.240.218 user=root ... |
2020-09-07 02:43:09 |
| 81.10.112.234 | attackspam | 1599336560 - 09/05/2020 22:09:20 Host: 81.10.112.234/81.10.112.234 Port: 445 TCP Blocked |
2020-09-07 02:12:47 |