城市(city): unknown
省份(region): unknown
国家(country): United States of America (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 107.21.158.145
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 65427
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;107.21.158.145. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020300 1800 900 604800 86400
;; Query time: 12 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 04 01:21:57 CST 2025
;; MSG SIZE rcvd: 107
145.158.21.107.in-addr.arpa domain name pointer ec2-107-21-158-145.compute-1.amazonaws.com.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
145.158.21.107.in-addr.arpa name = ec2-107-21-158-145.compute-1.amazonaws.com.
Authoritative answers can be found from:
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 139.219.143.176 | attackbotsspam | Sep 23 09:23:12 Tower sshd[39629]: Connection from 139.219.143.176 port 35739 on 192.168.10.220 port 22 Sep 23 09:23:13 Tower sshd[39629]: Invalid user xg from 139.219.143.176 port 35739 Sep 23 09:23:13 Tower sshd[39629]: error: Could not get shadow information for NOUSER Sep 23 09:23:13 Tower sshd[39629]: Failed password for invalid user xg from 139.219.143.176 port 35739 ssh2 Sep 23 09:23:14 Tower sshd[39629]: Received disconnect from 139.219.143.176 port 35739:11: Bye Bye [preauth] Sep 23 09:23:14 Tower sshd[39629]: Disconnected from invalid user xg 139.219.143.176 port 35739 [preauth] |
2019-09-23 22:19:49 |
| 94.191.89.180 | attackbots | Sep 23 03:52:53 eddieflores sshd\[10299\]: Invalid user temp from 94.191.89.180 Sep 23 03:52:53 eddieflores sshd\[10299\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.89.180 Sep 23 03:52:55 eddieflores sshd\[10299\]: Failed password for invalid user temp from 94.191.89.180 port 54668 ssh2 Sep 23 03:59:27 eddieflores sshd\[10846\]: Invalid user ts from 94.191.89.180 Sep 23 03:59:27 eddieflores sshd\[10846\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.89.180 |
2019-09-23 22:03:43 |
| 221.227.248.2 | attack | 2019-09-23 07:39:19 dovecot_login authenticator failed for (bpUya7) [221.227.248.2]:1046 I=[192.147.25.65]:25: 535 Incorrect authentication data (set_id=exuian@lerctr.org) 2019-09-23 07:39:48 dovecot_login authenticator failed for (s5YP9PSjs) [221.227.248.2]:2307 I=[192.147.25.65]:25: 535 Incorrect authentication data (set_id=exuian@lerctr.org) 2019-09-23 07:40:17 dovecot_login authenticator failed for (6EDKxuLxE) [221.227.248.2]:3429 I=[192.147.25.65]:25: 535 Incorrect authentication data (set_id=exuian@lerctr.org) ... |
2019-09-23 22:19:22 |
| 9.137.3.55 | attackbotsspam | Autoban 9.137.3.55 VIRUS |
2019-09-23 22:18:48 |
| 54.38.241.162 | attack | Sep 23 04:14:49 auw2 sshd\[11223\]: Invalid user wcddl from 54.38.241.162 Sep 23 04:14:49 auw2 sshd\[11223\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.ip-54-38-241.eu Sep 23 04:14:51 auw2 sshd\[11223\]: Failed password for invalid user wcddl from 54.38.241.162 port 58796 ssh2 Sep 23 04:22:58 auw2 sshd\[11895\]: Invalid user believe from 54.38.241.162 Sep 23 04:22:58 auw2 sshd\[11895\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.ip-54-38-241.eu |
2019-09-23 22:42:42 |
| 49.88.112.80 | attack | Sep 23 16:25:24 MK-Soft-VM6 sshd[11093]: Failed password for root from 49.88.112.80 port 56109 ssh2 Sep 23 16:25:29 MK-Soft-VM6 sshd[11093]: Failed password for root from 49.88.112.80 port 56109 ssh2 ... |
2019-09-23 22:26:27 |
| 185.176.27.18 | attackspambots | 09/23/2019-09:36:56.406849 185.176.27.18 Protocol: 6 ET SCAN NMAP -sS window 1024 |
2019-09-23 22:12:49 |
| 51.77.64.186 | attackbots | Automatic report - Banned IP Access |
2019-09-23 22:23:15 |
| 46.38.144.32 | attack | Sep 23 15:52:19 webserver postfix/smtpd\[4736\]: warning: unknown\[46.38.144.32\]: SASL LOGIN authentication failed: VXNlcm5hbWU6 Sep 23 15:54:48 webserver postfix/smtpd\[2280\]: warning: unknown\[46.38.144.32\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 23 15:57:13 webserver postfix/smtpd\[4666\]: warning: unknown\[46.38.144.32\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 23 15:59:38 webserver postfix/smtpd\[2280\]: warning: unknown\[46.38.144.32\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 23 16:02:04 webserver postfix/smtpd\[2280\]: warning: unknown\[46.38.144.32\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2019-09-23 22:14:56 |
| 196.1.237.186 | attack | Unauthorised access (Sep 23) SRC=196.1.237.186 LEN=52 TTL=114 ID=24510 DF TCP DPT=445 WINDOW=8192 SYN |
2019-09-23 22:04:46 |
| 203.81.99.194 | attack | 2019-09-23T13:10:43.047954abusebot-6.cloudsearch.cf sshd\[32340\]: Invalid user postgres from 203.81.99.194 port 56948 |
2019-09-23 22:04:15 |
| 82.208.162.115 | attackbotsspam | 2019-09-23T14:29:56.990533abusebot-2.cloudsearch.cf sshd\[4614\]: Invalid user stack from 82.208.162.115 port 40190 |
2019-09-23 22:35:14 |
| 104.211.242.189 | attack | Automatic report - Banned IP Access |
2019-09-23 22:27:20 |
| 1.174.55.227 | attack | 3 failed ftp login attempts in 3600s |
2019-09-23 22:28:36 |
| 153.156.45.206 | attackbots | Unauthorised access (Sep 23) SRC=153.156.45.206 LEN=40 TOS=0x10 PREC=0x40 TTL=50 ID=6484 TCP DPT=8080 WINDOW=30473 SYN |
2019-09-23 22:46:29 |