城市(city): Livonia
省份(region): Michigan
国家(country): United States
运营商(isp): AT&T
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 107.194.173.124
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 41772
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;107.194.173.124. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025062800 1800 900 604800 86400
;; Query time: 37 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jun 28 20:13:55 CST 2025
;; MSG SIZE rcvd: 108124.173.194.107.in-addr.arpa domain name pointer 107-194-173-124.lightspeed.livnmi.sbcglobal.net.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
124.173.194.107.in-addr.arpa name = 107-194-173-124.lightspeed.livnmi.sbcglobal.net.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 218.98.40.143 | attack | Sep 8 06:39:56 cp sshd[11988]: Failed password for root from 218.98.40.143 port 50130 ssh2 Sep 8 06:39:56 cp sshd[11988]: Failed password for root from 218.98.40.143 port 50130 ssh2 Sep 8 06:39:58 cp sshd[11988]: Failed password for root from 218.98.40.143 port 50130 ssh2 |
2019-09-08 12:57:34 |
| 185.53.88.79 | attack | 07.09.2019 23:15:08 Connection to port 5060 blocked by firewall |
2019-09-08 12:13:59 |
| 157.230.175.122 | attack | Sep 7 18:23:24 web9 sshd\[9020\]: Invalid user tester from 157.230.175.122 Sep 7 18:23:24 web9 sshd\[9020\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.175.122 Sep 7 18:23:26 web9 sshd\[9020\]: Failed password for invalid user tester from 157.230.175.122 port 40842 ssh2 Sep 7 18:27:52 web9 sshd\[9889\]: Invalid user serverpilot from 157.230.175.122 Sep 7 18:27:52 web9 sshd\[9889\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.175.122 |
2019-09-08 12:33:34 |
| 79.1.212.37 | attack | Sep 7 20:07:44 ws12vmsma01 sshd[64241]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=host37-212-static.1-79-b.business.telecomitalia.it Sep 7 20:07:44 ws12vmsma01 sshd[64241]: Invalid user odoo from 79.1.212.37 Sep 7 20:07:46 ws12vmsma01 sshd[64241]: Failed password for invalid user odoo from 79.1.212.37 port 62390 ssh2 ... |
2019-09-08 12:17:01 |
| 149.129.242.80 | attackspambots | Sep 8 01:56:31 SilenceServices sshd[7721]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.129.242.80 Sep 8 01:56:33 SilenceServices sshd[7721]: Failed password for invalid user www-upload from 149.129.242.80 port 38856 ssh2 Sep 8 02:01:21 SilenceServices sshd[10368]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.129.242.80 |
2019-09-08 12:58:49 |
| 195.209.45.122 | attackbotsspam | [portscan] Port scan |
2019-09-08 13:08:59 |
| 139.59.170.23 | attackspam | Sep 7 23:51:03 MK-Soft-VM5 sshd\[24591\]: Invalid user www-upload from 139.59.170.23 port 58676 Sep 7 23:51:03 MK-Soft-VM5 sshd\[24591\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.170.23 Sep 7 23:51:06 MK-Soft-VM5 sshd\[24591\]: Failed password for invalid user www-upload from 139.59.170.23 port 58676 ssh2 ... |
2019-09-08 12:52:57 |
| 185.101.105.229 | attack | Sep 7 10:33:22 foo sshd[18166]: Invalid user ubnt from 185.101.105.229 Sep 7 10:33:22 foo sshd[18166]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.101.105.229 Sep 7 10:33:24 foo sshd[18166]: Failed password for invalid user ubnt from 185.101.105.229 port 57512 ssh2 Sep 7 10:33:24 foo sshd[18166]: Received disconnect from 185.101.105.229: 11: Bye Bye [preauth] Sep 7 10:33:25 foo sshd[18168]: Invalid user admin from 185.101.105.229 Sep 7 10:33:25 foo sshd[18168]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.101.105.229 Sep 7 10:33:27 foo sshd[18168]: Failed password for invalid user admin from 185.101.105.229 port 59798 ssh2 Sep 7 10:33:27 foo sshd[18168]: Received disconnect from 185.101.105.229: 11: Bye Bye [preauth] Sep 7 10:33:28 foo sshd[18170]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.101.105.229 user=r.r Sep ........ ------------------------------- |
2019-09-08 12:59:15 |
| 200.16.132.202 | attack | Sep 8 05:21:01 mail sshd[19417]: Invalid user plex from 200.16.132.202 Sep 8 05:21:01 mail sshd[19417]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.16.132.202 Sep 8 05:21:01 mail sshd[19417]: Invalid user plex from 200.16.132.202 Sep 8 05:21:03 mail sshd[19417]: Failed password for invalid user plex from 200.16.132.202 port 51115 ssh2 Sep 8 05:28:02 mail sshd[20232]: Invalid user temporal from 200.16.132.202 ... |
2019-09-08 12:47:20 |
| 195.84.49.20 | attackspambots | Sep 8 01:49:38 rpi sshd[7667]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.84.49.20 Sep 8 01:49:40 rpi sshd[7667]: Failed password for invalid user admin from 195.84.49.20 port 58432 ssh2 |
2019-09-08 12:21:25 |
| 172.245.186.114 | attackbotsspam | Sep 7 23:43:27 h2177944 kernel: \[769176.425562\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=172.245.186.114 DST=85.214.117.9 LEN=52 TOS=0x02 PREC=0x00 TTL=115 ID=12001 DF PROTO=TCP SPT=56212 DPT=441 WINDOW=8192 RES=0x00 CWR ECE SYN URGP=0 Sep 7 23:43:30 h2177944 kernel: \[769179.441734\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=172.245.186.114 DST=85.214.117.9 LEN=52 TOS=0x02 PREC=0x00 TTL=115 ID=12002 DF PROTO=TCP SPT=56212 DPT=441 WINDOW=8192 RES=0x00 CWR ECE SYN URGP=0 Sep 7 23:43:32 h2177944 kernel: \[769180.861541\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=172.245.186.114 DST=85.214.117.9 LEN=52 TOS=0x02 PREC=0x00 TTL=115 ID=12003 DF PROTO=TCP SPT=56314 DPT=440 WINDOW=8192 RES=0x00 CWR ECE SYN URGP=0 Sep 7 23:43:35 h2177944 kernel: \[769183.861627\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=172.245.186.114 DST=85.214.117.9 LEN=52 TOS=0x02 PREC=0x00 TTL=115 ID=12004 DF PROTO=TCP SPT=56314 DPT=440 WINDOW=8192 RES=0x00 CWR ECE SYN URGP=0 Sep 7 23:44:17 h2177944 kernel: \[769226.168717\] \[UFW BLOCK\] IN=venet0 O |
2019-09-08 13:06:24 |
| 4.15.184.110 | attack | F2B jail: sshd. Time: 2019-09-08 06:51:28, Reported by: VKReport |
2019-09-08 13:00:03 |
| 37.235.225.149 | attack | namecheap spam |
2019-09-08 12:19:38 |
| 172.81.204.249 | attack | Sep 7 23:54:11 hb sshd\[4803\]: Invalid user mc from 172.81.204.249 Sep 7 23:54:11 hb sshd\[4803\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.81.204.249 Sep 7 23:54:13 hb sshd\[4803\]: Failed password for invalid user mc from 172.81.204.249 port 52680 ssh2 Sep 7 23:58:25 hb sshd\[5180\]: Invalid user musikbot from 172.81.204.249 Sep 7 23:58:25 hb sshd\[5180\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.81.204.249 |
2019-09-08 13:07:09 |
| 120.132.61.80 | attackspam | Sep 7 12:58:09 php1 sshd\[10044\]: Invalid user uftp from 120.132.61.80 Sep 7 12:58:09 php1 sshd\[10044\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.132.61.80 Sep 7 12:58:11 php1 sshd\[10044\]: Failed password for invalid user uftp from 120.132.61.80 port 4396 ssh2 Sep 7 12:59:29 php1 sshd\[10208\]: Invalid user admin1 from 120.132.61.80 Sep 7 12:59:29 php1 sshd\[10208\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.132.61.80 |
2019-09-08 12:36:51 |