城市(city): Singapore
省份(region): unknown
国家(country): Singapore
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 18.139.207.106
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 59143
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;18.139.207.106. IN A
;; AUTHORITY SECTION:
. 540 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022032401 1800 900 604800 86400
;; Query time: 21 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Mar 25 01:50:18 CST 2022
;; MSG SIZE rcvd: 107
106.207.139.18.in-addr.arpa domain name pointer ec2-18-139-207-106.ap-southeast-1.compute.amazonaws.com.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
106.207.139.18.in-addr.arpa name = ec2-18-139-207-106.ap-southeast-1.compute.amazonaws.com.
Authoritative answers can be found from:
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 218.92.0.219 | attackspambots | 2020-08-14T23:20:01.606011vps751288.ovh.net sshd\[945\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.219 user=root 2020-08-14T23:20:03.655809vps751288.ovh.net sshd\[945\]: Failed password for root from 218.92.0.219 port 13923 ssh2 2020-08-14T23:20:05.576410vps751288.ovh.net sshd\[945\]: Failed password for root from 218.92.0.219 port 13923 ssh2 2020-08-14T23:20:08.098807vps751288.ovh.net sshd\[945\]: Failed password for root from 218.92.0.219 port 13923 ssh2 2020-08-14T23:20:10.249422vps751288.ovh.net sshd\[947\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.219 user=root |
2020-08-15 05:20:20 |
| 69.245.71.26 | attackbotsspam | 2020-08-14T15:45:09.444771morrigan.ad5gb.com sshd[3455204]: Failed password for root from 69.245.71.26 port 49244 ssh2 2020-08-14T15:45:11.784193morrigan.ad5gb.com sshd[3455204]: Disconnected from authenticating user root 69.245.71.26 port 49244 [preauth] |
2020-08-15 04:52:22 |
| 87.116.179.227 | attackbots | 87.116.179.227 - [15/Aug/2020:00:03:29 +0300] "POST /wp-login.php HTTP/1.1" 403 4030 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" "-" 87.116.179.227 - [15/Aug/2020:00:04:30 +0300] "POST /wp-login.php HTTP/1.1" 404 164 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" "-" 87.116.179.227 - [15/Aug/2020:00:05:31 +0300] "POST /wp-login.php HTTP/1.1" 404 164 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" "-" 87.116.179.227 - [15/Aug/2020:00:10:25 +0300] "POST /wp-login.php HTTP/1.1" 404 164 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" "-" 87.116.179.227 - [15/Aug/2020:00:11:25 +0300] "POST /wp-login.php HTTP/1.1" 404 164 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" "-" ... |
2020-08-15 05:23:31 |
| 187.192.163.197 | attackspambots | Aug 13 17:35:49 www6-3 sshd[4281]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.192.163.197 user=r.r Aug 13 17:35:51 www6-3 sshd[4281]: Failed password for r.r from 187.192.163.197 port 36053 ssh2 Aug 13 17:35:51 www6-3 sshd[4281]: Received disconnect from 187.192.163.197 port 36053:11: Bye Bye [preauth] Aug 13 17:35:51 www6-3 sshd[4281]: Disconnected from 187.192.163.197 port 36053 [preauth] Aug 13 17:39:49 www6-3 sshd[4528]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.192.163.197 user=r.r Aug 13 17:39:51 www6-3 sshd[4528]: Failed password for r.r from 187.192.163.197 port 40102 ssh2 Aug 13 17:39:51 www6-3 sshd[4528]: Received disconnect from 187.192.163.197 port 40102:11: Bye Bye [preauth] Aug 13 17:39:51 www6-3 sshd[4528]: Disconnected from 187.192.163.197 port 40102 [preauth] Aug 13 17:43:51 www6-3 sshd[4715]: pam_unix(sshd:auth): authentication failure; logname= uid=0 e........ ------------------------------- |
2020-08-15 05:22:22 |
| 222.186.175.212 | attack | Aug 14 22:44:52 * sshd[5709]: Failed password for root from 222.186.175.212 port 62832 ssh2 Aug 14 22:45:06 * sshd[5709]: error: maximum authentication attempts exceeded for root from 222.186.175.212 port 62832 ssh2 [preauth] |
2020-08-15 05:00:06 |
| 1.192.94.61 | attackbots | web-1 [ssh] SSH Attack |
2020-08-15 05:20:33 |
| 89.215.168.133 | attack | web-1 [ssh] SSH Attack |
2020-08-15 05:04:57 |
| 104.131.112.168 | attackspambots | Automatic report - Brute Force attack using this IP address |
2020-08-15 05:20:00 |
| 171.243.115.194 | attackspam | Aug 14 16:39:26 ny01 sshd[28322]: Failed password for root from 171.243.115.194 port 32900 ssh2 Aug 14 16:42:19 ny01 sshd[28681]: Failed password for root from 171.243.115.194 port 44582 ssh2 |
2020-08-15 05:01:17 |
| 180.101.145.234 | attackspam | $f2bV_matches |
2020-08-15 05:21:44 |
| 202.153.37.205 | attack | Aug 12 13:53:56 v11 sshd[23728]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.153.37.205 user=r.r Aug 12 13:53:58 v11 sshd[23728]: Failed password for r.r from 202.153.37.205 port 11849 ssh2 Aug 12 13:53:59 v11 sshd[23728]: Received disconnect from 202.153.37.205 port 11849:11: Bye Bye [preauth] Aug 12 13:53:59 v11 sshd[23728]: Disconnected from 202.153.37.205 port 11849 [preauth] Aug 12 13:58:36 v11 sshd[24086]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.153.37.205 user=r.r Aug 12 13:58:38 v11 sshd[24086]: Failed password for r.r from 202.153.37.205 port 34292 ssh2 Aug 12 13:58:38 v11 sshd[24086]: Received disconnect from 202.153.37.205 port 34292:11: Bye Bye [preauth] Aug 12 13:58:38 v11 sshd[24086]: Disconnected from 202.153.37.205 port 34292 [preauth] Aug 12 14:03:22 v11 sshd[24442]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost........ ------------------------------- |
2020-08-15 04:57:00 |
| 221.7.213.133 | attackspambots | Aug 14 22:37:42 eventyay sshd[16889]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.7.213.133 Aug 14 22:37:44 eventyay sshd[16889]: Failed password for invalid user com from 221.7.213.133 port 47410 ssh2 Aug 14 22:45:09 eventyay sshd[17072]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.7.213.133 ... |
2020-08-15 04:55:11 |
| 42.2.159.19 | attackspam | SSH break in attempt ... |
2020-08-15 04:56:03 |
| 217.182.23.55 | attackspambots | Aug 14 22:41:00 ip40 sshd[907]: Failed password for root from 217.182.23.55 port 41102 ssh2 ... |
2020-08-15 05:24:20 |
| 198.98.49.181 | attackspambots | 2020-08-14T21:02:10.456771shield sshd\[5196\]: Invalid user postgres from 198.98.49.181 port 48672 2020-08-14T21:02:10.461326shield sshd\[5194\]: Invalid user oracle from 198.98.49.181 port 48666 2020-08-14T21:02:10.463517shield sshd\[5197\]: Invalid user alfresco from 198.98.49.181 port 48686 2020-08-14T21:02:10.465084shield sshd\[5192\]: Invalid user jenkins from 198.98.49.181 port 48682 2020-08-14T21:02:10.467955shield sshd\[5195\]: Invalid user centos from 198.98.49.181 port 48674 |
2020-08-15 05:13:51 |