城市(city): unknown
省份(region): unknown
国家(country): United States of America (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.95.140.159
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 45274
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.95.140.159. IN A
;; AUTHORITY SECTION:
. 353 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2023112203 1800 900 604800 86400
;; Query time: 18 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Nov 23 10:36:44 CST 2023
;; MSG SIZE rcvd: 107159.140.95.104.in-addr.arpa domain name pointer a104-95-140-159.deploy.static.akamaitechnologies.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
159.140.95.104.in-addr.arpa name = a104-95-140-159.deploy.static.akamaitechnologies.com.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 37.187.6.235 | attack | Jul 1 10:04:45 localhost sshd\[13195\]: Invalid user admin from 37.187.6.235 port 40148 Jul 1 10:04:46 localhost sshd\[13195\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.6.235 Jul 1 10:04:48 localhost sshd\[13195\]: Failed password for invalid user admin from 37.187.6.235 port 40148 ssh2 |
2019-07-01 19:14:22 |
| 123.54.237.246 | attack | SMTP/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM - |
2019-07-01 19:37:49 |
| 192.144.130.62 | attack | SSH invalid-user multiple login try |
2019-07-01 19:16:35 |
| 87.241.167.190 | attack | Netgear DGN Device Remote Command Execution Vulnerability |
2019-07-01 19:06:38 |
| 212.64.59.94 | attack | Jul 1 08:07:19 ip-172-31-62-245 sshd\[861\]: Invalid user teamspeak from 212.64.59.94\ Jul 1 08:07:21 ip-172-31-62-245 sshd\[861\]: Failed password for invalid user teamspeak from 212.64.59.94 port 29042 ssh2\ Jul 1 08:09:37 ip-172-31-62-245 sshd\[953\]: Invalid user infortec from 212.64.59.94\ Jul 1 08:09:40 ip-172-31-62-245 sshd\[953\]: Failed password for invalid user infortec from 212.64.59.94 port 45478 ssh2\ Jul 1 08:11:47 ip-172-31-62-245 sshd\[959\]: Invalid user tonglink from 212.64.59.94\ |
2019-07-01 19:37:31 |
| 220.164.2.138 | attackspam | IMAP brute force ... |
2019-07-01 19:43:51 |
| 185.222.209.40 | attackbotsspam | Jul 1 11:54:54 mail postfix/smtpd\[7354\]: warning: unknown\[185.222.209.40\]: SASL PLAIN authentication failed: \ Jul 1 11:57:22 mail postfix/smtpd\[6496\]: warning: unknown\[185.222.209.40\]: SASL PLAIN authentication failed: \ Jul 1 12:28:23 mail postfix/smtpd\[8270\]: warning: unknown\[185.222.209.40\]: SASL PLAIN authentication failed: \ Jul 1 12:28:33 mail postfix/smtpd\[7983\]: warning: unknown\[185.222.209.40\]: SASL PLAIN authentication failed: \ |
2019-07-01 19:46:06 |
| 181.52.172.134 | attack | Jul 1 08:19:22 [host] sshd[29260]: Invalid user gituser from 181.52.172.134 Jul 1 08:19:22 [host] sshd[29260]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.52.172.134 Jul 1 08:19:24 [host] sshd[29260]: Failed password for invalid user gituser from 181.52.172.134 port 41088 ssh2 |
2019-07-01 19:39:08 |
| 175.6.66.48 | attack | Jul 1 12:12:08 itv-usvr-02 sshd[30875]: Invalid user squid from 175.6.66.48 port 29374 Jul 1 12:12:08 itv-usvr-02 sshd[30875]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.6.66.48 Jul 1 12:12:08 itv-usvr-02 sshd[30875]: Invalid user squid from 175.6.66.48 port 29374 Jul 1 12:12:09 itv-usvr-02 sshd[30875]: Failed password for invalid user squid from 175.6.66.48 port 29374 ssh2 Jul 1 12:16:26 itv-usvr-02 sshd[30891]: Invalid user seller from 175.6.66.48 port 11080 |
2019-07-01 19:01:00 |
| 45.13.39.120 | attack | 2019-07-01T06:05:15.939140ns1.unifynetsol.net postfix/smtpd\[30294\]: warning: unknown\[45.13.39.120\]: SASL LOGIN authentication failed: authentication failure 2019-07-01T15:00:57.557891ns1.unifynetsol.net postfix/smtpd\[19298\]: warning: unknown\[45.13.39.120\]: SASL LOGIN authentication failed: authentication failure 2019-07-01T15:01:15.250361ns1.unifynetsol.net postfix/smtpd\[19298\]: warning: unknown\[45.13.39.120\]: SASL LOGIN authentication failed: authentication failure 2019-07-01T15:01:35.115854ns1.unifynetsol.net postfix/smtpd\[19298\]: warning: unknown\[45.13.39.120\]: SASL LOGIN authentication failed: authentication failure 2019-07-01T15:01:53.913770ns1.unifynetsol.net postfix/smtpd\[19298\]: warning: unknown\[45.13.39.120\]: SASL LOGIN authentication failed: authentication failure |
2019-07-01 19:18:26 |
| 186.233.219.230 | attackspam | Jul 1 05:27:31 mxgate1 postfix/postscreen[18855]: CONNECT from [186.233.219.230]:57934 to [176.31.12.44]:25 Jul 1 05:27:31 mxgate1 postfix/dnsblog[18856]: addr 186.233.219.230 listed by domain bl.spamcop.net as 127.0.0.2 Jul 1 05:27:31 mxgate1 postfix/dnsblog[18857]: addr 186.233.219.230 listed by domain ix.dnsbl.xxxxxx.net as 127.0.0.2 Jul 1 05:27:32 mxgate1 postfix/dnsblog[18858]: addr 186.233.219.230 listed by domain cbl.abuseat.org as 127.0.0.2 Jul 1 05:27:32 mxgate1 postfix/dnsblog[18859]: addr 186.233.219.230 listed by domain zen.spamhaus.org as 127.0.0.4 Jul 1 05:27:32 mxgate1 postfix/dnsblog[18859]: addr 186.233.219.230 listed by domain zen.spamhaus.org as 127.0.0.3 Jul 1 05:27:32 mxgate1 postfix/dnsblog[18860]: addr 186.233.219.230 listed by domain b.barracudacentral.org as 127.0.0.2 Jul 1 05:27:32 mxgate1 postfix/postscreen[18855]: PREGREET 24 after 0.65 from [186.233.219.230]:57934: EHLO 1m5pingcart.com Jul 1 05:27:32 mxgate1 postfix/postscreen[1885........ ------------------------------- |
2019-07-01 19:07:00 |
| 89.36.208.136 | attack | Jul 1 01:01:16 localhost sshd[1544]: Did not receive identification string from 89.36.208.136 port 53530 Jul 1 01:03:36 localhost sshd[1547]: Invalid user ghostname from 89.36.208.136 port 48500 Jul 1 01:03:36 localhost sshd[1547]: Received disconnect from 89.36.208.136 port 48500:11: Normal Shutdown, Thank you for playing [preauth] Jul 1 01:03:36 localhost sshd[1547]: Disconnected from 89.36.208.136 port 48500 [preauth] Jul 1 01:04:07 localhost sshd[1552]: Invalid user test from 89.36.208.136 port 36170 Jul 1 01:04:07 localhost sshd[1552]: Received disconnect from 89.36.208.136 port 36170:11: Normal Shutdown, Thank you for playing [preauth] Jul 1 01:04:07 localhost sshd[1552]: Disconnected from 89.36.208.136 port 36170 [preauth] Jul 1 01:04:36 localhost sshd[1556]: Invalid user user from 89.36.208.136 port 52060 Jul 1 01:04:36 localhost sshd[1556]: Received disconnect from 89.36.208.136 port 52060:11: Normal Shutdown, Thank you for playing [preauth] Jul 1 01:........ ------------------------------- |
2019-07-01 19:42:39 |
| 104.238.116.19 | attackbots | Jul 1 11:56:41 XXX sshd[13070]: Invalid user usuario from 104.238.116.19 port 45908 |
2019-07-01 18:59:56 |
| 115.28.71.161 | attackspambots | Automatic report - Web App Attack |
2019-07-01 19:18:04 |
| 146.148.20.58 | attackbotsspam | Automatic report - Web App Attack |
2019-07-01 19:20:14 |