城市(city): unknown
省份(region): unknown
国家(country): Sweden
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 13.48.180.59
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 38840
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;13.48.180.59. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022801 1800 900 604800 86400
;; Query time: 18 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Mar 01 05:40:31 CST 2025
;; MSG SIZE rcvd: 10559.180.48.13.in-addr.arpa domain name pointer ec2-13-48-180-59.eu-north-1.compute.amazonaws.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
59.180.48.13.in-addr.arpa name = ec2-13-48-180-59.eu-north-1.compute.amazonaws.com.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 196.201.81.238 | attackspambots | Brute force attempt |
2019-09-07 09:31:13 |
| 188.226.226.82 | attack | Sep 7 03:01:37 microserver sshd[4848]: Invalid user test from 188.226.226.82 port 49928 Sep 7 03:01:37 microserver sshd[4848]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.226.226.82 Sep 7 03:01:39 microserver sshd[4848]: Failed password for invalid user test from 188.226.226.82 port 49928 ssh2 Sep 7 03:05:48 microserver sshd[5532]: Invalid user oracle from 188.226.226.82 port 43238 Sep 7 03:05:48 microserver sshd[5532]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.226.226.82 Sep 7 03:18:02 microserver sshd[7802]: Invalid user test2 from 188.226.226.82 port 51397 Sep 7 03:18:02 microserver sshd[7802]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.226.226.82 Sep 7 03:18:04 microserver sshd[7802]: Failed password for invalid user test2 from 188.226.226.82 port 51397 ssh2 Sep 7 03:22:12 microserver sshd[8496]: Invalid user guest from 188.226.226.82 port 44705 Sep 7 |
2019-09-07 09:46:28 |
| 132.232.2.184 | attack | Sep 6 15:26:58 web1 sshd\[13516\]: Invalid user owncloud from 132.232.2.184 Sep 6 15:26:58 web1 sshd\[13516\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.2.184 Sep 6 15:27:01 web1 sshd\[13516\]: Failed password for invalid user owncloud from 132.232.2.184 port 13528 ssh2 Sep 6 15:32:19 web1 sshd\[13994\]: Invalid user p@ssw0rd from 132.232.2.184 Sep 6 15:32:19 web1 sshd\[13994\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.2.184 |
2019-09-07 09:34:40 |
| 139.199.113.140 | attack | Sep 6 15:46:26 eddieflores sshd\[14318\]: Invalid user deploy from 139.199.113.140 Sep 6 15:46:26 eddieflores sshd\[14318\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.113.140 Sep 6 15:46:29 eddieflores sshd\[14318\]: Failed password for invalid user deploy from 139.199.113.140 port 59624 ssh2 Sep 6 15:51:54 eddieflores sshd\[14758\]: Invalid user odoo from 139.199.113.140 Sep 6 15:51:54 eddieflores sshd\[14758\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.113.140 |
2019-09-07 10:01:55 |
| 193.32.160.143 | attack | MagicSpam Rule: valid_helo_domain; Spammer IP: 193.32.160.143 |
2019-09-07 09:37:17 |
| 98.213.58.68 | attackspambots | Sep 6 15:43:08 hcbb sshd\[27003\]: Invalid user git from 98.213.58.68 Sep 6 15:43:08 hcbb sshd\[27003\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=c-98-213-58-68.hsd1.il.comcast.net Sep 6 15:43:10 hcbb sshd\[27003\]: Failed password for invalid user git from 98.213.58.68 port 48396 ssh2 Sep 6 15:47:39 hcbb sshd\[27369\]: Invalid user testuser from 98.213.58.68 Sep 6 15:47:39 hcbb sshd\[27369\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=c-98-213-58-68.hsd1.il.comcast.net |
2019-09-07 09:56:07 |
| 123.231.124.61 | attackspambots | Hit on /wp-login.php |
2019-09-07 09:49:01 |
| 146.83.216.216 | attackspam | Sep 6 15:33:00 tdfoods sshd\[12487\]: Invalid user duser from 146.83.216.216 Sep 6 15:33:00 tdfoods sshd\[12487\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.83.216.216 Sep 6 15:33:02 tdfoods sshd\[12487\]: Failed password for invalid user duser from 146.83.216.216 port 50564 ssh2 Sep 6 15:38:37 tdfoods sshd\[12968\]: Invalid user user from 146.83.216.216 Sep 6 15:38:37 tdfoods sshd\[12968\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.83.216.216 |
2019-09-07 09:47:22 |
| 164.68.110.182 | attack | Sep 7 03:52:50 SilenceServices sshd[25587]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.68.110.182 Sep 7 03:52:53 SilenceServices sshd[25587]: Failed password for invalid user apache from 164.68.110.182 port 34756 ssh2 Sep 7 03:54:19 SilenceServices sshd[26666]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.68.110.182 |
2019-09-07 10:04:38 |
| 117.200.213.113 | attackspambots | Automatic report - Port Scan Attack |
2019-09-07 10:09:51 |
| 69.0.149.222 | attack | 69.0.149.222 - - [07/Sep/2019:02:44:35 +0200] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 69.0.149.222 - - [07/Sep/2019:02:44:36 +0200] "POST /wp-login.php HTTP/1.1" 200 1503 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 69.0.149.222 - - [07/Sep/2019:02:44:36 +0200] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 69.0.149.222 - - [07/Sep/2019:02:44:37 +0200] "POST /wp-login.php HTTP/1.1" 200 1486 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 69.0.149.222 - - [07/Sep/2019:02:44:37 +0200] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 69.0.149.222 - - [07/Sep/2019:02:44:38 +0200] "POST /wp-login.php HTTP/1.1" 200 1486 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2019-09-07 09:56:28 |
| 153.36.242.143 | attack | Sep 7 04:04:48 eventyay sshd[18355]: Failed password for root from 153.36.242.143 port 16769 ssh2 Sep 7 04:05:00 eventyay sshd[18364]: Failed password for root from 153.36.242.143 port 53952 ssh2 Sep 7 04:05:02 eventyay sshd[18364]: Failed password for root from 153.36.242.143 port 53952 ssh2 ... |
2019-09-07 10:06:05 |
| 192.227.252.2 | attackspam | Sep 7 01:53:10 MK-Soft-VM5 sshd\[18473\]: Invalid user 12345678 from 192.227.252.2 port 36394 Sep 7 01:53:10 MK-Soft-VM5 sshd\[18473\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.227.252.2 Sep 7 01:53:13 MK-Soft-VM5 sshd\[18473\]: Failed password for invalid user 12345678 from 192.227.252.2 port 36394 ssh2 ... |
2019-09-07 10:00:41 |
| 106.12.76.91 | attackbots | Sep 6 15:57:34 auw2 sshd\[2403\]: Invalid user webcam from 106.12.76.91 Sep 6 15:57:34 auw2 sshd\[2403\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.76.91 Sep 6 15:57:36 auw2 sshd\[2403\]: Failed password for invalid user webcam from 106.12.76.91 port 52408 ssh2 Sep 6 16:02:54 auw2 sshd\[2830\]: Invalid user ubuntu from 106.12.76.91 Sep 6 16:02:54 auw2 sshd\[2830\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.76.91 |
2019-09-07 10:12:06 |
| 188.118.146.22 | attack | RDP Brute-Force (Grieskirchen RZ2) |
2019-09-07 09:23:38 |