城市(city): unknown
省份(region): unknown
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.107.7.66
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 14889
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.107.7.66. IN A
;; AUTHORITY SECTION:
. 96 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022030300 1800 900 604800 86400
;; Query time: 95 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Mar 04 00:57:25 CST 2022
;; MSG SIZE rcvd: 10566.7.107.104.in-addr.arpa domain name pointer a104-107-7-66.deploy.static.akamaitechnologies.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
66.7.107.104.in-addr.arpa name = a104-107-7-66.deploy.static.akamaitechnologies.com.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 197.63.57.139 | attack | DLink DSL Remote OS Command Injection Vulnerability, PTR: host-197.63.57.139.tedata.net. |
2019-12-23 03:42:24 |
| 82.80.139.92 | attackspam | Automatic report - Port Scan Attack |
2019-12-23 04:00:49 |
| 192.241.135.34 | attackbotsspam | Dec 22 09:47:20 auw2 sshd\[27019\]: Invalid user admin from 192.241.135.34 Dec 22 09:47:20 auw2 sshd\[27019\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ekf.com.br Dec 22 09:47:23 auw2 sshd\[27019\]: Failed password for invalid user admin from 192.241.135.34 port 43605 ssh2 Dec 22 09:54:45 auw2 sshd\[27737\]: Invalid user yoyo from 192.241.135.34 Dec 22 09:54:45 auw2 sshd\[27737\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ekf.com.br |
2019-12-23 03:58:42 |
| 111.230.157.219 | attack | Dec 22 19:46:09 zeus sshd[25745]: Failed password for root from 111.230.157.219 port 36664 ssh2 Dec 22 19:49:47 zeus sshd[25825]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.230.157.219 Dec 22 19:49:49 zeus sshd[25825]: Failed password for invalid user soelvber from 111.230.157.219 port 47186 ssh2 |
2019-12-23 04:01:59 |
| 64.39.102.146 | attackspam | 20 attempts against mh-misbehave-ban on sea.magehost.pro |
2019-12-23 03:40:51 |
| 79.137.75.5 | attack | Dec 22 17:13:48 serwer sshd\[15219\]: Invalid user guest from 79.137.75.5 port 43648 Dec 22 17:13:48 serwer sshd\[15219\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.137.75.5 Dec 22 17:13:50 serwer sshd\[15219\]: Failed password for invalid user guest from 79.137.75.5 port 43648 ssh2 ... |
2019-12-23 04:07:41 |
| 149.202.210.31 | attack | Dec 22 18:01:13 hell sshd[8389]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.202.210.31 Dec 22 18:01:15 hell sshd[8389]: Failed password for invalid user gjestekonto from 149.202.210.31 port 59532 ssh2 ... |
2019-12-23 03:48:18 |
| 187.189.109.138 | attackspam | 2019-12-22T19:10:45.559048abusebot-4.cloudsearch.cf sshd[1684]: Invalid user dinfoo from 187.189.109.138 port 48732 2019-12-22T19:10:45.564542abusebot-4.cloudsearch.cf sshd[1684]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=fixed-187-189-109-138.totalplay.net 2019-12-22T19:10:45.559048abusebot-4.cloudsearch.cf sshd[1684]: Invalid user dinfoo from 187.189.109.138 port 48732 2019-12-22T19:10:48.400892abusebot-4.cloudsearch.cf sshd[1684]: Failed password for invalid user dinfoo from 187.189.109.138 port 48732 ssh2 2019-12-22T19:18:18.993970abusebot-4.cloudsearch.cf sshd[1813]: Invalid user ian from 187.189.109.138 port 52452 2019-12-22T19:18:19.003306abusebot-4.cloudsearch.cf sshd[1813]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=fixed-187-189-109-138.totalplay.net 2019-12-22T19:18:18.993970abusebot-4.cloudsearch.cf sshd[1813]: Invalid user ian from 187.189.109.138 port 52452 2019-12-22T19:18:20.83087 ... |
2019-12-23 03:45:51 |
| 179.62.49.66 | attack | Dec 22 09:08:36 php1 sshd\[21215\]: Invalid user mollier from 179.62.49.66 Dec 22 09:08:36 php1 sshd\[21215\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.62.49.66 Dec 22 09:08:38 php1 sshd\[21215\]: Failed password for invalid user mollier from 179.62.49.66 port 48628 ssh2 Dec 22 09:16:04 php1 sshd\[22082\]: Invalid user qwerty from 179.62.49.66 Dec 22 09:16:04 php1 sshd\[22082\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.62.49.66 |
2019-12-23 03:33:59 |
| 62.109.26.166 | attackbots | Dec 22 18:49:37 sd-53420 sshd\[2947\]: User ftp from 62.109.26.166 not allowed because none of user's groups are listed in AllowGroups Dec 22 18:49:37 sd-53420 sshd\[2947\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.109.26.166 user=ftp Dec 22 18:49:39 sd-53420 sshd\[2947\]: Failed password for invalid user ftp from 62.109.26.166 port 42830 ssh2 Dec 22 18:55:01 sd-53420 sshd\[5087\]: Invalid user shriner from 62.109.26.166 Dec 22 18:55:01 sd-53420 sshd\[5087\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.109.26.166 ... |
2019-12-23 03:34:52 |
| 217.112.142.182 | attackbotsspam | Lines containing failures of 217.112.142.182 Dec 16 13:17:30 shared04 postfix/smtpd[17757]: connect from dad.yobaat.com[217.112.142.182] Dec 16 13:17:31 shared04 policyd-spf[19409]: prepend Received-SPF: Pass (mailfrom) identhostnamey=mailfrom; client-ip=217.112.142.182; helo=dad.noinsectssk1.com; envelope-from=x@x Dec x@x Dec 16 13:17:31 shared04 postfix/smtpd[17757]: disconnect from dad.yobaat.com[217.112.142.182] ehlo=1 mail=1 rcpt=0/1 data=0/1 quhostname=1 commands=3/5 Dec 16 13:18:41 shared04 postfix/smtpd[18223]: connect from dad.yobaat.com[217.112.142.182] Dec 16 13:18:41 shared04 policyd-spf[19652]: prepend Received-SPF: Pass (mailfrom) identhostnamey=mailfrom; client-ip=217.112.142.182; helo=dad.noinsectssk1.com; envelope-from=x@x Dec x@x Dec 16 13:18:41 shared04 postfix/smtpd[18223]: disconnect from dad.yobaat.com[217.112.142.182] ehlo=1 mail=1 rcpt=0/1 data=0/1 quhostname=1 commands=3/5 Dec 16 13:23:13 shared04 postfix/smtpd[18223]: connect from dad.yobaat.com........ ------------------------------ |
2019-12-23 03:37:30 |
| 14.192.207.175 | attack | Automatic report - Port Scan Attack |
2019-12-23 03:48:51 |
| 178.128.169.88 | attack | php WP PHPmyadamin ABUSE blocked for 12h |
2019-12-23 03:36:27 |
| 104.248.163.158 | attackbotsspam | port scan and connect, tcp 80 (http) |
2019-12-23 04:02:32 |
| 159.203.201.5 | attackbots | 12/22/2019-17:52:00.413311 159.203.201.5 Protocol: 6 ET DROP Dshield Block Listed Source group 1 |
2019-12-23 03:56:42 |