城市(city): unknown
省份(region): unknown
国家(country): United States of America (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.162.207.144
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.162.207.144. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021100 1800 900 604800 86400
;; Query time: 11 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 12 01:37:52 CST 2025
;; MSG SIZE rcvd: 108144.207.162.104.in-addr.arpa domain name pointer syn-104-162-207-144.res.spectrum.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
144.207.162.104.in-addr.arpa name = syn-104-162-207-144.res.spectrum.com.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 115.99.176.197 | attack | 115.99.176.197 - - [02/Aug/2020:21:07:12 +0100] "POST /xmlrpc.php HTTP/1.1" 503 18027 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" 115.99.176.197 - - [02/Aug/2020:21:07:13 +0100] "POST /wp-login.php HTTP/1.1" 503 18027 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" 115.99.176.197 - - [02/Aug/2020:21:20:58 +0100] "POST /xmlrpc.php HTTP/1.1" 503 18209 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" ... |
2020-08-03 08:34:29 |
| 122.114.72.74 | attack | Aug 3 05:53:47 marvibiene sshd[28921]: Failed password for root from 122.114.72.74 port 46544 ssh2 |
2020-08-03 12:04:40 |
| 180.76.53.42 | attackbots | Aug 3 03:51:02 scw-tender-jepsen sshd[24435]: Failed password for root from 180.76.53.42 port 58912 ssh2 |
2020-08-03 12:04:14 |
| 96.83.189.229 | attackspambots | ssh intrusion attempt |
2020-08-03 12:03:41 |
| 113.125.13.14 | attackspam | Aug 3 04:53:25 rocket sshd[761]: Failed password for root from 113.125.13.14 port 40094 ssh2 Aug 3 04:57:57 rocket sshd[1459]: Failed password for root from 113.125.13.14 port 54922 ssh2 ... |
2020-08-03 12:05:11 |
| 203.255.93.146 | attack | WordPress brute force |
2020-08-03 08:11:17 |
| 5.16.120.111 | attack | 20/8/2@16:21:29: FAIL: Alarm-Network address from=5.16.120.111 ... |
2020-08-03 08:12:16 |
| 37.49.230.113 | attackspam | Icarus honeypot on github |
2020-08-03 08:17:25 |
| 150.109.104.175 | attackspambots | Ssh brute force |
2020-08-03 08:17:07 |
| 106.13.78.198 | attackbots | 2020-08-02T22:12:59.071977shield sshd\[1723\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.78.198 user=root 2020-08-02T22:13:00.490726shield sshd\[1723\]: Failed password for root from 106.13.78.198 port 40342 ssh2 2020-08-02T22:17:01.766000shield sshd\[2367\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.78.198 user=root 2020-08-02T22:17:03.741725shield sshd\[2367\]: Failed password for root from 106.13.78.198 port 48466 ssh2 2020-08-02T22:21:08.216266shield sshd\[2757\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.78.198 user=root |
2020-08-03 08:30:17 |
| 3.85.23.148 | attackspambots | Port Scan detected! ... |
2020-08-03 08:03:09 |
| 134.175.170.87 | attackbotsspam | Aug 2 15:42:48 cumulus sshd[1542]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.170.87 user=r.r Aug 2 15:42:50 cumulus sshd[1542]: Failed password for r.r from 134.175.170.87 port 45114 ssh2 Aug 2 15:42:51 cumulus sshd[1542]: Received disconnect from 134.175.170.87 port 45114:11: Bye Bye [preauth] Aug 2 15:42:51 cumulus sshd[1542]: Disconnected from 134.175.170.87 port 45114 [preauth] Aug 2 15:49:35 cumulus sshd[2314]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.170.87 user=r.r Aug 2 15:49:37 cumulus sshd[2314]: Failed password for r.r from 134.175.170.87 port 37822 ssh2 Aug 2 15:49:38 cumulus sshd[2314]: Received disconnect from 134.175.170.87 port 37822:11: Bye Bye [preauth] Aug 2 15:49:38 cumulus sshd[2314]: Disconnected from 134.175.170.87 port 37822 [preauth] Aug 2 15:53:51 cumulus sshd[2712]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ........ ------------------------------- |
2020-08-03 08:10:05 |
| 171.6.162.61 | attack | Aug 2 18:45:23 UTC__SANYALnet-Labs__cac14 sshd[17466]: Connection from 171.6.162.61 port 30302 on 64.137.176.112 port 22 Aug 2 18:45:25 UTC__SANYALnet-Labs__cac14 sshd[17466]: User r.r from mx-ll-171.6.162-61.dynamic.3bb.co.th not allowed because not listed in AllowUsers Aug 2 18:45:25 UTC__SANYALnet-Labs__cac14 sshd[17466]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=mx-ll-171.6.162-61.dynamic.3bb.co.th user=r.r Aug 2 18:45:29 UTC__SANYALnet-Labs__cac14 sshd[17466]: Failed password for invalid user r.r from 171.6.162.61 port 30302 ssh2 Aug 2 18:45:30 UTC__SANYALnet-Labs__cac14 sshd[17466]: Received disconnect from 171.6.162.61: 11: Bye Bye [preauth] Aug 2 20:11:19 UTC__SANYALnet-Labs__cac14 sshd[19150]: Connection from 171.6.162.61 port 30188 on 64.137.176.112 port 22 Aug 2 20:11:21 UTC__SANYALnet-Labs__cac14 sshd[19150]: Address 171.6.162.61 maps to mx-ll-171.6.162-61.dynamic.3bb.in.th, but this does not map back to ........ ------------------------------- |
2020-08-03 08:15:46 |
| 129.204.121.245 | attackbots | bruteforce detected |
2020-08-03 08:04:20 |
| 180.76.148.87 | attackspam | Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-08-02T23:22:44Z and 2020-08-02T23:28:33Z |
2020-08-03 08:29:28 |