城市(city): Ashburn
省份(region): Virginia
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 100.27.194.213
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 8665
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;100.27.194.213. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2024121301 1800 900 604800 86400
;; Query time: 13 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Dec 14 03:47:24 CST 2024
;; MSG SIZE rcvd: 107213.194.27.100.in-addr.arpa domain name pointer ec2-100-27-194-213.compute-1.amazonaws.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
213.194.27.100.in-addr.arpa name = ec2-100-27-194-213.compute-1.amazonaws.com.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 167.71.5.95 | attack | Sep 5 22:22:22 OPSO sshd\[28172\]: Invalid user sail_ftp from 167.71.5.95 port 45294 Sep 5 22:22:22 OPSO sshd\[28172\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.5.95 Sep 5 22:22:24 OPSO sshd\[28172\]: Failed password for invalid user sail_ftp from 167.71.5.95 port 45294 ssh2 Sep 5 22:27:27 OPSO sshd\[28826\]: Invalid user 201 from 167.71.5.95 port 59488 Sep 5 22:27:27 OPSO sshd\[28826\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.5.95 |
2019-09-06 04:37:52 |
| 218.98.26.171 | attack | Sep 5 22:11:35 srv206 sshd[16219]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.98.26.171 user=root Sep 5 22:11:38 srv206 sshd[16219]: Failed password for root from 218.98.26.171 port 42141 ssh2 Sep 5 22:11:40 srv206 sshd[16219]: Failed password for root from 218.98.26.171 port 42141 ssh2 Sep 5 22:11:35 srv206 sshd[16219]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.98.26.171 user=root Sep 5 22:11:38 srv206 sshd[16219]: Failed password for root from 218.98.26.171 port 42141 ssh2 Sep 5 22:11:40 srv206 sshd[16219]: Failed password for root from 218.98.26.171 port 42141 ssh2 ... |
2019-09-06 04:15:08 |
| 89.237.192.233 | attack | Sep 5 13:26:42 mxgate1 postfix/postscreen[13738]: CONNECT from [89.237.192.233]:16940 to [176.31.12.44]:25 Sep 5 13:26:42 mxgate1 postfix/dnsblog[14425]: addr 89.237.192.233 listed by domain zen.spamhaus.org as 127.0.0.4 Sep 5 13:26:42 mxgate1 postfix/dnsblog[14425]: addr 89.237.192.233 listed by domain zen.spamhaus.org as 127.0.0.3 Sep 5 13:26:42 mxgate1 postfix/dnsblog[14425]: addr 89.237.192.233 listed by domain zen.spamhaus.org as 127.0.0.11 Sep 5 13:26:42 mxgate1 postfix/dnsblog[14424]: addr 89.237.192.233 listed by domain cbl.abuseat.org as 127.0.0.2 Sep 5 13:26:42 mxgate1 postfix/dnsblog[14428]: addr 89.237.192.233 listed by domain ix.dnsbl.xxxxxx.net as 127.0.0.2 Sep 5 13:26:42 mxgate1 postfix/dnsblog[14427]: addr 89.237.192.233 listed by domain b.barracudacentral.org as 127.0.0.2 Sep 5 13:26:43 mxgate1 postfix/postscreen[13738]: PREGREET 37 after 0.26 from [89.237.192.233]:16940: EHLO 213-145-145-78.static.ktnet.kg Sep 5 13:26:43 mxgate1 postfix/posts........ ------------------------------- |
2019-09-06 04:12:54 |
| 144.217.4.14 | attackspam | Sep 5 09:06:00 php2 sshd\[20320\]: Invalid user odroid from 144.217.4.14 Sep 5 09:06:00 php2 sshd\[20320\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.ip-144-217-4.net Sep 5 09:06:02 php2 sshd\[20320\]: Failed password for invalid user odroid from 144.217.4.14 port 43227 ssh2 Sep 5 09:10:58 php2 sshd\[21283\]: Invalid user fachbereich from 144.217.4.14 Sep 5 09:10:58 php2 sshd\[21283\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.ip-144-217-4.net |
2019-09-06 03:57:38 |
| 201.182.152.75 | attackspambots | Sep 5 20:21:41 our-server-hostname postfix/smtpd[17098]: connect from unknown[201.182.152.75] Sep x@x Sep x@x Sep x@x Sep x@x Sep x@x Sep 5 20:21:50 our-server-hostname postfix/smtpd[17098]: lost connection after RCPT from unknown[201.182.152.75] Sep 5 20:21:50 our-server-hostname postfix/smtpd[17098]: disconnect from unknown[201.182.152.75] Sep 5 20:47:51 our-server-hostname postfix/smtpd[6771]: connect from unknown[201.182.152.75] Sep x@x Sep x@x Sep x@x Sep x@x Sep x@x Sep x@x Sep 5 20:47:58 our-server-hostname postfix/smtpd[6771]: lost connection after RCPT from unknown[201.182.152.75] Sep 5 20:47:58 our-server-hostname postfix/smtpd[6771]: disconnect from unknown[201.182.152.75] Sep 5 20:53:09 our-server-hostname postfix/smtpd[30515]: connect from unknown[201.182.152.75] Sep x@x Sep 5 20:53:18 our-server-hostname postfix/smtpd[30515]: lost connection after RCPT from unknown[201.182.152.75] Sep 5 20:53:18 our-server-hostname postfix/smtpd[30515]: disconnect........ ------------------------------- |
2019-09-06 04:09:48 |
| 83.166.154.159 | attackspambots | Sep 5 21:54:05 meumeu sshd[24878]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=83.166.154.159 Sep 5 21:54:07 meumeu sshd[24878]: Failed password for invalid user postgres from 83.166.154.159 port 60954 ssh2 Sep 5 21:58:05 meumeu sshd[25310]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=83.166.154.159 ... |
2019-09-06 04:05:48 |
| 68.183.124.53 | attack | Sep 5 09:27:54 hcbb sshd\[24541\]: Invalid user postgres from 68.183.124.53 Sep 5 09:27:54 hcbb sshd\[24541\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.124.53 Sep 5 09:27:56 hcbb sshd\[24541\]: Failed password for invalid user postgres from 68.183.124.53 port 36512 ssh2 Sep 5 09:32:14 hcbb sshd\[24926\]: Invalid user ts3 from 68.183.124.53 Sep 5 09:32:14 hcbb sshd\[24926\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.124.53 |
2019-09-06 03:58:36 |
| 82.146.33.59 | attackbotsspam | Sep 5 22:49:26 server sshd\[20283\]: Invalid user sftpuser from 82.146.33.59 port 33034 Sep 5 22:49:26 server sshd\[20283\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.146.33.59 Sep 5 22:49:28 server sshd\[20283\]: Failed password for invalid user sftpuser from 82.146.33.59 port 33034 ssh2 Sep 5 22:53:47 server sshd\[20798\]: Invalid user svnuser from 82.146.33.59 port 54531 Sep 5 22:53:47 server sshd\[20798\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.146.33.59 |
2019-09-06 03:55:18 |
| 218.71.136.108 | attack | firewall-block, port(s): 38080/tcp |
2019-09-06 04:26:54 |
| 197.155.115.60 | attackspam | Sep 5 21:10:07 bouncer sshd\[7086\]: Invalid user pi from 197.155.115.60 port 58844 Sep 5 21:10:07 bouncer sshd\[7086\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.155.115.60 Sep 5 21:10:07 bouncer sshd\[7088\]: Invalid user pi from 197.155.115.60 port 58846 ... |
2019-09-06 04:36:24 |
| 35.194.4.128 | attackbots | RDP Bruteforce |
2019-09-06 04:13:30 |
| 111.230.247.243 | attackbotsspam | Sep 6 00:40:16 areeb-Workstation sshd[29238]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.230.247.243 Sep 6 00:40:18 areeb-Workstation sshd[29238]: Failed password for invalid user test from 111.230.247.243 port 42177 ssh2 ... |
2019-09-06 04:24:07 |
| 92.118.37.74 | attack | Sep 5 19:13:58 mail kernel: [2792451.279072] [UFW BLOCK] IN=eth0 OUT= MAC=fa:16:3e:d3:64:42:4c:5e:0c:c9:30:5f:08:00 SRC=92.118.37.74 DST=185.101.93.72 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=33558 PROTO=TCP SPT=46525 DPT=11461 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 5 19:17:12 mail kernel: [2792645.835426] [UFW BLOCK] IN=eth0 OUT= MAC=fa:16:3e:d3:64:42:4c:5e:0c:c9:30:5f:08:00 SRC=92.118.37.74 DST=185.101.93.72 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=34503 PROTO=TCP SPT=46525 DPT=35661 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 5 19:18:52 mail kernel: [2792746.195897] [UFW BLOCK] IN=eth0 OUT= MAC=fa:16:3e:d3:64:42:4c:5e:0c:c9:30:5f:08:00 SRC=92.118.37.74 DST=185.101.93.72 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=10227 PROTO=TCP SPT=46525 DPT=11484 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 5 19:24:05 mail kernel: [2793058.764510] [UFW BLOCK] IN=eth0 OUT= MAC=fa:16:3e:d3:64:42:4c:5e:0c:c9:30:5f:08:00 SRC=92.118.37.74 DST=185.101.93.72 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=35524 PROTO=TCP SPT=46525 DPT=56417 WINDOW=1024 RES=0x00 SYN |
2019-09-06 04:09:17 |
| 185.216.140.252 | attackspambots | firewall-block, port(s): 3770/tcp, 3776/tcp, 3778/tcp, 3797/tcp, 3798/tcp, 3799/tcp |
2019-09-06 03:59:36 |
| 127.0.0.1 | attackspam | Test Connectivity |
2019-09-06 04:14:23 |