城市(city): Chicago
省份(region): Illinois
国家(country): United States
运营商(isp): AT&T
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.57.91.27
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 40536
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.57.91.27. IN A
;; AUTHORITY SECTION:
. 343 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022102200 1800 900 604800 86400
;; Query time: 56 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Oct 22 23:08:55 CST 2022
;; MSG SIZE rcvd: 105
27.91.57.104.in-addr.arpa domain name pointer 104-57-91-27.lightspeed.cicril.sbcglobal.net.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
27.91.57.104.in-addr.arpa name = 104-57-91-27.lightspeed.cicril.sbcglobal.net.
Authoritative answers can be found from:
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 103.135.95.198 | attack | Unauthorized connection attempt from IP address 103.135.95.198 on Port 445(SMB) |
2020-08-19 01:57:40 |
| 195.154.114.140 | attackspambots | Automatic report - XMLRPC Attack |
2020-08-19 02:11:08 |
| 124.74.248.218 | attackspambots | 2020-08-18T12:25:03.203510shield sshd\[4159\]: Invalid user pers from 124.74.248.218 port 23531 2020-08-18T12:25:03.212750shield sshd\[4159\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.74.248.218 2020-08-18T12:25:05.293926shield sshd\[4159\]: Failed password for invalid user pers from 124.74.248.218 port 23531 ssh2 2020-08-18T12:30:56.227398shield sshd\[4494\]: Invalid user aa from 124.74.248.218 port 50927 2020-08-18T12:30:56.236555shield sshd\[4494\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.74.248.218 |
2020-08-19 02:14:50 |
| 178.128.248.121 | attackbots | Auto Fail2Ban report, multiple SSH login attempts. |
2020-08-19 02:04:39 |
| 81.70.22.3 | attack | 2020-08-18T15:32:00.362911dmca.cloudsearch.cf sshd[368]: Invalid user gianni from 81.70.22.3 port 7051 2020-08-18T15:32:00.369612dmca.cloudsearch.cf sshd[368]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.70.22.3 2020-08-18T15:32:00.362911dmca.cloudsearch.cf sshd[368]: Invalid user gianni from 81.70.22.3 port 7051 2020-08-18T15:32:02.349340dmca.cloudsearch.cf sshd[368]: Failed password for invalid user gianni from 81.70.22.3 port 7051 ssh2 2020-08-18T15:36:51.703978dmca.cloudsearch.cf sshd[617]: Invalid user dva from 81.70.22.3 port 59453 2020-08-18T15:36:51.708782dmca.cloudsearch.cf sshd[617]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.70.22.3 2020-08-18T15:36:51.703978dmca.cloudsearch.cf sshd[617]: Invalid user dva from 81.70.22.3 port 59453 2020-08-18T15:36:53.638176dmca.cloudsearch.cf sshd[617]: Failed password for invalid user dva from 81.70.22.3 port 59453 ssh2 ... |
2020-08-19 01:56:27 |
| 50.63.197.130 | attackbotsspam | ENG,DEF GET /v1/wp-includes/wlwmanifest.xml |
2020-08-19 02:10:42 |
| 111.230.10.176 | attack | Aug 18 09:40:24 NPSTNNYC01T sshd[24572]: Failed password for root from 111.230.10.176 port 51476 ssh2 Aug 18 09:44:16 NPSTNNYC01T sshd[24911]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.230.10.176 Aug 18 09:44:17 NPSTNNYC01T sshd[24911]: Failed password for invalid user eloa from 111.230.10.176 port 32912 ssh2 ... |
2020-08-19 01:41:12 |
| 62.102.148.68 | attackbotsspam | Aug 18 19:53:03 serwer sshd\[24747\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.102.148.68 user=root Aug 18 19:53:05 serwer sshd\[24747\]: Failed password for root from 62.102.148.68 port 50402 ssh2 Aug 18 19:53:08 serwer sshd\[24747\]: Failed password for root from 62.102.148.68 port 50402 ssh2 ... |
2020-08-19 02:12:08 |
| 129.144.183.81 | attackbots | Banned for a week because repeated abuses, for example SSH, but not only |
2020-08-19 01:55:59 |
| 193.112.4.12 | attackbots | Aug 18 19:44:46 cosmoit sshd[25473]: Failed password for root from 193.112.4.12 port 49944 ssh2 |
2020-08-19 01:46:03 |
| 84.236.121.11 | attackbots | SSH login attempts. |
2020-08-19 01:50:59 |
| 222.186.15.115 | attackbots | prod8 ... |
2020-08-19 01:45:42 |
| 47.75.76.54 | attackspam | AbusiveCrawling |
2020-08-19 02:14:30 |
| 14.231.122.67 | attackspam | Aug 18 14:31:15 www postfix/smtpd\[11341\]: lost connection after CONNECT from unknown\[14.231.122.67\] |
2020-08-19 01:49:01 |
| 125.17.42.102 | attackspambots | Unauthorized connection attempt from IP address 125.17.42.102 on Port 445(SMB) |
2020-08-19 02:18:25 |