城市(city): unknown
省份(region): unknown
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 107.172.34.91
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 20239
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;107.172.34.91. IN A
;; AUTHORITY SECTION:
. 600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022022800 1800 900 604800 86400
;; Query time: 66 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 28 14:56:44 CST 2022
;; MSG SIZE rcvd: 106
91.34.172.107.in-addr.arpa domain name pointer 107-172-34-91-host.colocrossing.com.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
91.34.172.107.in-addr.arpa name = 107-172-34-91-host.colocrossing.com.
Authoritative answers can be found from:
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 107.170.203.106 | attack | 194/tcp 15690/tcp 8090/tcp... [2019-06-11/08-09]49pkt,39pt.(tcp),2pt.(udp) |
2019-08-11 06:12:00 |
| 34.80.215.54 | attack | Aug 11 01:25:06 docs sshd\[28930\]: Invalid user developer from 34.80.215.54Aug 11 01:25:09 docs sshd\[28930\]: Failed password for invalid user developer from 34.80.215.54 port 57048 ssh2Aug 11 01:29:59 docs sshd\[29020\]: Invalid user dumpy from 34.80.215.54Aug 11 01:30:01 docs sshd\[29020\]: Failed password for invalid user dumpy from 34.80.215.54 port 52172 ssh2Aug 11 01:34:51 docs sshd\[29111\]: Invalid user th from 34.80.215.54Aug 11 01:34:53 docs sshd\[29111\]: Failed password for invalid user th from 34.80.215.54 port 47392 ssh2 ... |
2019-08-11 06:42:52 |
| 213.160.171.223 | attackbots | Automatic report - Port Scan Attack |
2019-08-11 06:52:51 |
| 152.238.132.193 | attackspam | Brute forcing RDP port 3389 |
2019-08-11 06:11:08 |
| 94.177.229.191 | attackspambots | Aug 10 17:57:34 MK-Soft-VM7 sshd\[30157\]: Invalid user louis from 94.177.229.191 port 36590 Aug 10 17:57:34 MK-Soft-VM7 sshd\[30157\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.177.229.191 Aug 10 17:57:37 MK-Soft-VM7 sshd\[30157\]: Failed password for invalid user louis from 94.177.229.191 port 36590 ssh2 ... |
2019-08-11 06:34:54 |
| 82.64.122.120 | attackspambots | Automatic report - Banned IP Access |
2019-08-11 06:54:01 |
| 203.128.242.166 | attack | Aug 10 23:09:53 mail sshd\[15530\]: Failed password for invalid user invitado from 203.128.242.166 port 54680 ssh2 Aug 10 23:29:44 mail sshd\[15737\]: Invalid user testuser1 from 203.128.242.166 port 40337 Aug 10 23:29:44 mail sshd\[15737\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.128.242.166 ... |
2019-08-11 06:35:18 |
| 103.200.85.201 | attackbots | WordPress wp-login brute force :: 103.200.85.201 0.444 BYPASS [10/Aug/2019:22:07:56 1000] [censored_1] "POST /wp-login.php HTTP/1.1" 200 3972 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2019-08-11 06:26:01 |
| 118.31.206.93 | attackbots | TCP SYN-ACK with data, PTR: PTR record not found |
2019-08-11 06:28:14 |
| 160.153.155.27 | attackspam | fail2ban honeypot |
2019-08-11 06:44:16 |
| 68.52.92.160 | attackbots | DATE:2019-08-11 00:34:31, IP:68.52.92.160, PORT:telnet - Telnet brute force auth on a honeypot server (epe-dc) |
2019-08-11 06:48:26 |
| 210.227.113.18 | attackspam | Aug 10 22:52:31 MK-Soft-VM7 sshd\[2761\]: Invalid user nm from 210.227.113.18 port 56072 Aug 10 22:52:31 MK-Soft-VM7 sshd\[2761\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.227.113.18 Aug 10 22:52:33 MK-Soft-VM7 sshd\[2761\]: Failed password for invalid user nm from 210.227.113.18 port 56072 ssh2 ... |
2019-08-11 06:54:27 |
| 119.2.102.219 | attackspambots | Aug 10 22:29:32 localhost sshd\[42007\]: Invalid user user100 from 119.2.102.219 port 58835 Aug 10 22:29:32 localhost sshd\[42007\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.2.102.219 Aug 10 22:29:34 localhost sshd\[42007\]: Failed password for invalid user user100 from 119.2.102.219 port 58835 ssh2 Aug 10 22:34:49 localhost sshd\[42106\]: Invalid user ekain from 119.2.102.219 port 56295 Aug 10 22:34:49 localhost sshd\[42106\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.2.102.219 ... |
2019-08-11 06:43:55 |
| 218.92.0.147 | attack | SSH-BruteForce |
2019-08-11 06:42:21 |
| 68.183.83.7 | attack | [munged]::443 68.183.83.7 - - [10/Aug/2019:14:50:30 +0200] "POST /[munged]: HTTP/1.1" 200 9076 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 68.183.83.7 - - [10/Aug/2019:14:50:34 +0200] "POST /[munged]: HTTP/1.1" 200 9076 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 68.183.83.7 - - [10/Aug/2019:14:50:40 +0200] "POST /[munged]: HTTP/1.1" 200 9076 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 68.183.83.7 - - [10/Aug/2019:14:50:44 +0200] "POST /[munged]: HTTP/1.1" 200 9076 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 68.183.83.7 - - [10/Aug/2019:14:50:49 +0200] "POST /[munged]: HTTP/1.1" 200 9076 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 68.183.83.7 - - [10/Aug/2019:14:50:55 +0200] "POST /[munged]: HTTP/1.1" 200 9076 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x8 |
2019-08-11 06:14:32 |