城市(city): unknown
省份(region): unknown
国家(country): None
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 13.212.30.4
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 46965
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;13.212.30.4. IN A
;; AUTHORITY SECTION:
. 318 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022030802 1800 900 604800 86400
;; Query time: 68 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 04:55:42 CST 2022
;; MSG SIZE rcvd: 1044.30.212.13.in-addr.arpa domain name pointer ec2-13-212-30-4.ap-southeast-1.compute.amazonaws.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
4.30.212.13.in-addr.arpa name = ec2-13-212-30-4.ap-southeast-1.compute.amazonaws.com.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 18.218.228.124 | attack | Aug 26 08:35:27 MK-Soft-Root1 sshd\[10216\]: Invalid user 1234 from 18.218.228.124 port 46670 Aug 26 08:35:28 MK-Soft-Root1 sshd\[10216\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=18.218.228.124 Aug 26 08:35:30 MK-Soft-Root1 sshd\[10216\]: Failed password for invalid user 1234 from 18.218.228.124 port 46670 ssh2 ... |
2019-08-26 15:36:12 |
| 91.195.99.114 | attack | Honeypot attack, port: 5555, PTR: no-rdns.m247.ro. |
2019-08-26 14:55:45 |
| 80.78.194.242 | attack | Aug 26 01:50:47 nxxxxxxx0 sshd[3741]: Did not receive identification string from 80.78.194.242 Aug 26 01:51:05 nxxxxxxx0 sshd[3793]: Did not receive identification string from 80.78.194.242 Aug 26 01:51:16 nxxxxxxx0 sshd[3794]: Invalid user trash from 80.78.194.242 Aug 26 01:51:16 nxxxxxxx0 sshd[3794]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.78.194.242 Aug 26 01:51:18 nxxxxxxx0 sshd[3794]: Failed password for invalid user trash from 80.78.194.242 port 54866 ssh2 Aug 26 01:51:18 nxxxxxxx0 sshd[3794]: Received disconnect from 80.78.194.242: 11: Normal Shutdown, Thank you for playing [preauth] Aug 26 01:51:21 nxxxxxxx0 sshd[3796]: Invalid user redmine from 80.78.194.242 Aug 26 01:51:21 nxxxxxxx0 sshd[3796]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.78.194.242 Aug 26 01:51:23 nxxxxxxx0 sshd[3796]: Failed password for invalid user redmine from 80.78.194.242 port 55768 ssh2 A........ ------------------------------- |
2019-08-26 15:39:43 |
| 35.167.204.6 | attackspam | Bad bot/spoofed identity |
2019-08-26 15:20:57 |
| 62.148.142.202 | attackbotsspam | Aug 25 23:25:51 Tower sshd[28448]: Connection from 62.148.142.202 port 36746 on 192.168.10.220 port 22 Aug 25 23:25:52 Tower sshd[28448]: Invalid user git from 62.148.142.202 port 36746 Aug 25 23:25:52 Tower sshd[28448]: error: Could not get shadow information for NOUSER Aug 25 23:25:52 Tower sshd[28448]: Failed password for invalid user git from 62.148.142.202 port 36746 ssh2 Aug 25 23:25:52 Tower sshd[28448]: Received disconnect from 62.148.142.202 port 36746:11: Bye Bye [preauth] Aug 25 23:25:52 Tower sshd[28448]: Disconnected from invalid user git 62.148.142.202 port 36746 [preauth] |
2019-08-26 15:31:22 |
| 49.232.18.45 | attack | Aug 26 09:32:38 server sshd\[23363\]: Invalid user centos from 49.232.18.45 port 44248 Aug 26 09:32:38 server sshd\[23363\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.232.18.45 Aug 26 09:32:39 server sshd\[23363\]: Failed password for invalid user centos from 49.232.18.45 port 44248 ssh2 Aug 26 09:36:41 server sshd\[12721\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.232.18.45 user=mail Aug 26 09:36:44 server sshd\[12721\]: Failed password for mail from 49.232.18.45 port 46156 ssh2 |
2019-08-26 14:47:46 |
| 104.175.32.206 | attackbots | Aug 26 02:13:29 aat-srv002 sshd[3183]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.175.32.206 Aug 26 02:13:32 aat-srv002 sshd[3183]: Failed password for invalid user admin from 104.175.32.206 port 54416 ssh2 Aug 26 02:17:36 aat-srv002 sshd[3268]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.175.32.206 Aug 26 02:17:38 aat-srv002 sshd[3268]: Failed password for invalid user ccc from 104.175.32.206 port 44754 ssh2 ... |
2019-08-26 15:18:45 |
| 52.169.136.28 | attackspam | Aug 26 08:12:48 mail sshd\[13195\]: Failed password for invalid user frosty from 52.169.136.28 port 39972 ssh2 Aug 26 08:32:18 mail sshd\[13475\]: Invalid user machine from 52.169.136.28 port 58536 ... |
2019-08-26 15:44:13 |
| 106.13.52.74 | attack | Aug 25 21:07:27 eddieflores sshd\[4552\]: Invalid user morris from 106.13.52.74 Aug 25 21:07:27 eddieflores sshd\[4552\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.52.74 Aug 25 21:07:29 eddieflores sshd\[4552\]: Failed password for invalid user morris from 106.13.52.74 port 47184 ssh2 Aug 25 21:12:56 eddieflores sshd\[5099\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.52.74 user=root Aug 25 21:12:58 eddieflores sshd\[5099\]: Failed password for root from 106.13.52.74 port 58030 ssh2 |
2019-08-26 15:23:58 |
| 119.96.157.243 | attackspam | Aug 26 07:28:21 vps691689 sshd[24998]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.96.157.243 Aug 26 07:28:23 vps691689 sshd[24998]: Failed password for invalid user igkim from 119.96.157.243 port 41022 ssh2 ... |
2019-08-26 14:45:12 |
| 24.69.133.64 | attackspambots | Aug 25 23:00:42 typhoon sshd[2988]: Failed password for r.r from 24.69.133.64 port 46961 ssh2 Aug 25 23:00:46 typhoon sshd[2988]: Failed password for r.r from 24.69.133.64 port 46961 ssh2 Aug 25 23:00:50 typhoon sshd[2988]: Failed password for r.r from 24.69.133.64 port 46961 ssh2 Aug 25 23:00:54 typhoon sshd[2988]: Failed password for r.r from 24.69.133.64 port 46961 ssh2 Aug 25 23:00:59 typhoon sshd[2988]: Failed password for r.r from 24.69.133.64 port 46961 ssh2 Aug 25 23:01:02 typhoon sshd[2988]: Failed password for r.r from 24.69.133.64 port 46961 ssh2 Aug 25 23:01:02 typhoon sshd[2988]: Disconnecting: Too many authentication failures for r.r from 24.69.133.64 port 46961 ssh2 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=24.69.133.64 |
2019-08-26 15:16:53 |
| 137.74.25.247 | attackspam | Aug 25 20:49:17 lcprod sshd\[18288\]: Invalid user it from 137.74.25.247 Aug 25 20:49:17 lcprod sshd\[18288\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.25.247 Aug 25 20:49:19 lcprod sshd\[18288\]: Failed password for invalid user it from 137.74.25.247 port 38380 ssh2 Aug 25 20:53:19 lcprod sshd\[18639\]: Invalid user navy from 137.74.25.247 Aug 25 20:53:19 lcprod sshd\[18639\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.25.247 |
2019-08-26 15:04:49 |
| 51.68.220.249 | attackbots | $f2bV_matches |
2019-08-26 15:40:45 |
| 185.176.27.34 | attack | MultiHost/MultiPort Probe, Scan, Hack - |
2019-08-26 15:17:28 |
| 104.140.188.42 | attackbots | Honeypot attack, port: 81, PTR: cbfd1.rederatural.com. |
2019-08-26 15:42:52 |