城市(city): unknown
省份(region): unknown
国家(country): United States of America (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.11.157.130
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49452
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.11.157.130. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021800 1800 900 604800 86400
;; Query time: 10 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 18 14:59:30 CST 2025
;; MSG SIZE rcvd: 107
130.157.11.104.in-addr.arpa domain name pointer 104-11-157-130.lightspeed.rcsntx.sbcglobal.net.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
130.157.11.104.in-addr.arpa name = 104-11-157-130.lightspeed.rcsntx.sbcglobal.net.
Authoritative answers can be found from:
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 128.199.145.5 | attackbotsspam | 2020-10-10T10:00:51.463672paragon sshd[818439]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.145.5 2020-10-10T10:00:51.459770paragon sshd[818439]: Invalid user admin from 128.199.145.5 port 48280 2020-10-10T10:00:53.980785paragon sshd[818439]: Failed password for invalid user admin from 128.199.145.5 port 48280 ssh2 2020-10-10T10:04:16.370980paragon sshd[818507]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.145.5 user=root 2020-10-10T10:04:18.366052paragon sshd[818507]: Failed password for root from 128.199.145.5 port 45985 ssh2 ... |
2020-10-10 15:33:24 |
| 106.12.78.40 | attack | 2020-10-10T07:23:30.389558server.espacesoutien.com sshd[12386]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.78.40 user=root 2020-10-10T07:23:32.358597server.espacesoutien.com sshd[12386]: Failed password for root from 106.12.78.40 port 44810 ssh2 2020-10-10T07:27:25.730201server.espacesoutien.com sshd[13026]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.78.40 user=root 2020-10-10T07:27:27.292879server.espacesoutien.com sshd[13026]: Failed password for root from 106.12.78.40 port 37046 ssh2 ... |
2020-10-10 16:02:13 |
| 88.138.18.47 | attack | Oct 9 22:40:43 nxxxxxxx sshd[18022]: refused connect from 88.138.18.47 (88.= 138.18.47) ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=88.138.18.47 |
2020-10-10 15:43:27 |
| 188.190.221.161 | attackspambots | Icarus honeypot on github |
2020-10-10 16:01:47 |
| 134.17.94.55 | attackbotsspam | Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-10-10T07:31:50Z and 2020-10-10T07:39:05Z |
2020-10-10 15:55:48 |
| 120.36.25.214 | attackspambots | Oct 10 00:33:07 mavik sshd[20477]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.36.25.214 user=root Oct 10 00:33:09 mavik sshd[20477]: Failed password for root from 120.36.25.214 port 21583 ssh2 Oct 10 00:35:59 mavik sshd[20585]: Invalid user radvd from 120.36.25.214 Oct 10 00:35:59 mavik sshd[20585]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.36.25.214 Oct 10 00:36:01 mavik sshd[20585]: Failed password for invalid user radvd from 120.36.25.214 port 24570 ssh2 ... |
2020-10-10 15:51:32 |
| 67.205.181.52 | attack | Oct 7 13:32:11 svapp01 sshd[30162]: Address 67.205.181.52 maps to do1.nationalguard.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Oct 7 13:32:11 svapp01 sshd[30162]: User r.r from 67.205.181.52 not allowed because not listed in AllowUsers Oct 7 13:32:11 svapp01 sshd[30162]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=67.205.181.52 user=r.r Oct 7 13:32:13 svapp01 sshd[30162]: Failed password for invalid user r.r from 67.205.181.52 port 14782 ssh2 Oct 7 13:32:13 svapp01 sshd[30162]: Received disconnect from 67.205.181.52: 11: Bye Bye [preauth] Oct 7 13:44:23 svapp01 sshd[34275]: Address 67.205.181.52 maps to do1.nationalguard.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Oct 7 13:44:23 svapp01 sshd[34275]: User r.r from 67.205.181.52 not allowed because not listed in AllowUsers Oct 7 13:44:23 svapp01 sshd[34275]: pam_unix(sshd:auth): authentication failure; log........ ------------------------------- |
2020-10-10 15:52:09 |
| 91.134.214.155 | attackbotsspam | web-1 [ssh] SSH Attack |
2020-10-10 15:41:43 |
| 45.141.156.196 | attack | Sep 16 07:13:55 *hidden* postfix/postscreen[18021]: DNSBL rank 3 for [45.141.156.196]:34552 |
2020-10-10 15:25:08 |
| 81.70.57.192 | attack | Oct 10 09:35:20 *hidden* sshd[14529]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.70.57.192 Oct 10 09:35:23 *hidden* sshd[14529]: Failed password for invalid user jacky from 81.70.57.192 port 56332 ssh2 Oct 10 09:47:20 *hidden* sshd[16643]: Invalid user test from 81.70.57.192 port 33264 |
2020-10-10 16:00:46 |
| 192.241.238.86 | attack | scan |
2020-10-10 16:01:21 |
| 192.35.168.218 | attack | Sep 14 15:16:21 *hidden* postfix/postscreen[30880]: DNSBL rank 3 for [192.35.168.218]:35522 |
2020-10-10 15:55:11 |
| 84.236.2.17 | attackbots | SSH login attempts. |
2020-10-10 15:56:17 |
| 222.220.87.7 | attack | 2020-10-10T09:58:55.555843mail.standpoint.com.ua sshd[10943]: Failed password for root from 222.220.87.7 port 49626 ssh2 2020-10-10T10:03:32.514329mail.standpoint.com.ua sshd[11715]: Invalid user hadoop from 222.220.87.7 port 41912 2020-10-10T10:03:32.516964mail.standpoint.com.ua sshd[11715]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.220.87.7 2020-10-10T10:03:32.514329mail.standpoint.com.ua sshd[11715]: Invalid user hadoop from 222.220.87.7 port 41912 2020-10-10T10:03:34.350788mail.standpoint.com.ua sshd[11715]: Failed password for invalid user hadoop from 222.220.87.7 port 41912 ssh2 ... |
2020-10-10 15:27:13 |
| 218.61.5.68 | attack | Oct 10 01:17:11 gitlab sshd[26547]: Failed password for invalid user test from 218.61.5.68 port 18436 ssh2 Oct 10 01:21:14 gitlab sshd[27136]: Invalid user testing from 218.61.5.68 port 32985 Oct 10 01:21:14 gitlab sshd[27136]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.61.5.68 Oct 10 01:21:14 gitlab sshd[27136]: Invalid user testing from 218.61.5.68 port 32985 Oct 10 01:21:17 gitlab sshd[27136]: Failed password for invalid user testing from 218.61.5.68 port 32985 ssh2 ... |
2020-10-10 15:28:34 |