城市(city): unknown
省份(region): unknown
国家(country): United States of America (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 21.92.59.207
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 28633
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;21.92.59.207. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012201 1800 900 604800 86400
;; Query time: 10 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jan 23 11:44:33 CST 2025
;; MSG SIZE rcvd: 105Host 207.59.92.21.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 207.59.92.21.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 222.141.41.182 | attackspambots | Sep 7 14:29:24 uapps sshd[320]: Address 222.141.41.182 maps to hn.kd.ny.adsl, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Sep 7 14:29:24 uapps sshd[320]: User r.r from 222.141.41.182 not allowed because not listed in AllowUsers Sep 7 14:29:24 uapps sshd[320]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.141.41.182 user=r.r Sep 7 14:29:27 uapps sshd[320]: Failed password for invalid user r.r from 222.141.41.182 port 37851 ssh2 Sep 7 14:29:29 uapps sshd[320]: Failed password for invalid user r.r from 222.141.41.182 port 37851 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=222.141.41.182 |
2019-09-07 21:33:12 |
| 151.230.51.228 | attack | Portscan detected |
2019-09-07 21:18:11 |
| 54.37.68.191 | attackspam | 2019-09-07T13:01:02.340335abusebot-2.cloudsearch.cf sshd\[30467\]: Invalid user minecraft from 54.37.68.191 port 39082 |
2019-09-07 21:20:08 |
| 197.188.113.204 | attackbotsspam | Sep 7 05:25:18 eola sshd[12354]: Did not receive identification string from 197.188.113.204 port 48886 Sep 7 05:25:20 eola sshd[12355]: Invalid user nexthink from 197.188.113.204 port 49204 Sep 7 05:25:21 eola sshd[12355]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.188.113.204 Sep 7 05:25:23 eola sshd[12355]: Failed password for invalid user nexthink from 197.188.113.204 port 49204 ssh2 Sep 7 05:25:23 eola sshd[12355]: Connection closed by 197.188.113.204 port 49204 [preauth] Sep 7 05:25:25 eola sshd[12357]: Invalid user plexuser from 197.188.113.204 port 50444 Sep 7 05:25:25 eola sshd[12357]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.188.113.204 Sep 7 05:25:27 eola sshd[12357]: Failed password for invalid user plexuser from 197.188.113.204 port 50444 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=197.188.113.204 |
2019-09-07 21:35:53 |
| 144.217.40.3 | attackbots | Sep 7 13:24:07 ns3110291 sshd\[21431\]: Invalid user svnuser from 144.217.40.3 Sep 7 13:24:09 ns3110291 sshd\[21431\]: Failed password for invalid user svnuser from 144.217.40.3 port 47408 ssh2 Sep 7 13:28:43 ns3110291 sshd\[21909\]: Failed password for mysql from 144.217.40.3 port 35022 ssh2 Sep 7 13:33:12 ns3110291 sshd\[3884\]: Invalid user teste from 144.217.40.3 Sep 7 13:33:14 ns3110291 sshd\[3884\]: Failed password for invalid user teste from 144.217.40.3 port 50892 ssh2 ... |
2019-09-07 21:10:55 |
| 222.186.15.110 | attackbotsspam | Sep 7 03:02:18 sachi sshd\[10710\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.110 user=root Sep 7 03:02:21 sachi sshd\[10710\]: Failed password for root from 222.186.15.110 port 36333 ssh2 Sep 7 03:02:23 sachi sshd\[10710\]: Failed password for root from 222.186.15.110 port 36333 ssh2 Sep 7 03:02:25 sachi sshd\[10710\]: Failed password for root from 222.186.15.110 port 36333 ssh2 Sep 7 03:02:33 sachi sshd\[10753\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.110 user=root |
2019-09-07 21:32:43 |
| 36.224.102.67 | attack | Unauthorized connection attempt from IP address 36.224.102.67 on Port 445(SMB) |
2019-09-07 20:46:11 |
| 93.51.214.202 | attackspam | Unauthorized connection attempt from IP address 93.51.214.202 on Port 445(SMB) |
2019-09-07 21:17:38 |
| 112.35.26.43 | attackspambots | Sep 7 15:14:06 vps691689 sshd[8720]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.35.26.43 Sep 7 15:14:08 vps691689 sshd[8720]: Failed password for invalid user postgres from 112.35.26.43 port 53658 ssh2 Sep 7 15:19:57 vps691689 sshd[8828]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.35.26.43 ... |
2019-09-07 21:26:40 |
| 49.231.7.50 | attack | Unauthorized connection attempt from IP address 49.231.7.50 on Port 445(SMB) |
2019-09-07 20:58:06 |
| 178.128.14.26 | attackspam | Sep 7 14:37:23 SilenceServices sshd[27776]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.14.26 Sep 7 14:37:24 SilenceServices sshd[27776]: Failed password for invalid user test from 178.128.14.26 port 58156 ssh2 Sep 7 14:41:48 SilenceServices sshd[29475]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.14.26 |
2019-09-07 20:43:00 |
| 88.85.213.129 | attack | [Sat Sep 07 07:50:26.514733 2019] [:error] [pid 218970] [client 88.85.213.129:45925] [client 88.85.213.129] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 21)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "127.0.0.1"] [uri "/cgi-bin/ViewLog.asp"] [unique_id "XXOLcp4jHltEES0J5rqqlAAAAAc"] ... |
2019-09-07 20:40:13 |
| 157.245.100.237 | attackbots | Sep 7 01:41:35 lcprod sshd\[18373\]: Invalid user minecraft from 157.245.100.237 Sep 7 01:41:35 lcprod sshd\[18373\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.100.237 Sep 7 01:41:37 lcprod sshd\[18373\]: Failed password for invalid user minecraft from 157.245.100.237 port 35062 ssh2 Sep 7 01:46:19 lcprod sshd\[18812\]: Invalid user minecraft from 157.245.100.237 Sep 7 01:46:19 lcprod sshd\[18812\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.100.237 |
2019-09-07 20:52:45 |
| 124.156.140.219 | attack | Sep 7 16:20:47 taivassalofi sshd[28000]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.156.140.219 Sep 7 16:20:49 taivassalofi sshd[28000]: Failed password for invalid user ubuntu from 124.156.140.219 port 33814 ssh2 ... |
2019-09-07 21:24:53 |
| 103.45.149.216 | attackspam | Sep 7 13:52:33 bouncer sshd\[21330\]: Invalid user 1q2w3e4r from 103.45.149.216 port 55364 Sep 7 13:52:33 bouncer sshd\[21330\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.45.149.216 Sep 7 13:52:35 bouncer sshd\[21330\]: Failed password for invalid user 1q2w3e4r from 103.45.149.216 port 55364 ssh2 ... |
2019-09-07 20:46:48 |