城市(city): unknown
省份(region): unknown
国家(country): None
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 13.51.75.91
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 4954
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;13.51.75.91. IN A
;; AUTHORITY SECTION:
. 300 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022030802 1800 900 604800 86400
;; Query time: 18 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 05:10:11 CST 2022
;; MSG SIZE rcvd: 10491.75.51.13.in-addr.arpa domain name pointer ec2-13-51-75-91.eu-north-1.compute.amazonaws.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
91.75.51.13.in-addr.arpa name = ec2-13-51-75-91.eu-north-1.compute.amazonaws.com.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 222.186.169.194 | attackspam | 2020-05-31T19:30:54.680913xentho-1 sshd[956290]: Failed password for root from 222.186.169.194 port 18330 ssh2 2020-05-31T19:30:48.243285xentho-1 sshd[956290]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.169.194 user=root 2020-05-31T19:30:50.079003xentho-1 sshd[956290]: Failed password for root from 222.186.169.194 port 18330 ssh2 2020-05-31T19:30:54.680913xentho-1 sshd[956290]: Failed password for root from 222.186.169.194 port 18330 ssh2 2020-05-31T19:30:59.095675xentho-1 sshd[956290]: Failed password for root from 222.186.169.194 port 18330 ssh2 2020-05-31T19:30:48.243285xentho-1 sshd[956290]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.169.194 user=root 2020-05-31T19:30:50.079003xentho-1 sshd[956290]: Failed password for root from 222.186.169.194 port 18330 ssh2 2020-05-31T19:30:54.680913xentho-1 sshd[956290]: Failed password for root from 222.186.169.194 port 18330 ssh2 2020-0 ... |
2020-06-01 07:33:31 |
| 13.233.128.117 | attackspam | Lines containing failures of 13.233.128.117 May 31 13:15:14 newdogma sshd[27158]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.233.128.117 user=r.r May 31 13:15:16 newdogma sshd[27158]: Failed password for r.r from 13.233.128.117 port 52232 ssh2 May 31 13:15:18 newdogma sshd[27158]: Received disconnect from 13.233.128.117 port 52232:11: Bye Bye [preauth] May 31 13:15:18 newdogma sshd[27158]: Disconnected from authenticating user r.r 13.233.128.117 port 52232 [preauth] May 31 13:21:22 newdogma sshd[27288]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.233.128.117 user=r.r May 31 13:21:24 newdogma sshd[27288]: Failed password for r.r from 13.233.128.117 port 41026 ssh2 May 31 13:21:24 newdogma sshd[27288]: Received disconnect from 13.233.128.117 port 41026:11: Bye Bye [preauth] May 31 13:21:24 newdogma sshd[27288]: Disconnected from authenticating user r.r 13.233.128.117 port 41026........ ------------------------------ |
2020-06-01 07:50:58 |
| 180.76.238.183 | attack | SSH brute force attempt |
2020-06-01 07:32:18 |
| 45.95.168.177 | attackspam | SmallBizIT.US 1 packets to tcp(23) |
2020-06-01 07:59:32 |
| 202.182.119.45 | attack | May 31 16:48:23 uapps sshd[31148]: Address 202.182.119.45 maps to 202.182.119.45.vultr.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! May 31 16:48:23 uapps sshd[31148]: User r.r from 202.182.119.45 not allowed because not listed in AllowUsers May 31 16:48:23 uapps sshd[31148]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.182.119.45 user=r.r May 31 16:48:25 uapps sshd[31148]: Failed password for invalid user r.r from 202.182.119.45 port 44902 ssh2 May 31 16:48:25 uapps sshd[31148]: Received disconnect from 202.182.119.45: 11: Bye Bye [preauth] May 31 17:13:17 uapps sshd[32103]: Address 202.182.119.45 maps to 202.182.119.45.vultr.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! May 31 17:13:17 uapps sshd[32103]: User r.r from 202.182.119.45 not allowed because not listed in AllowUsers May 31 17:13:17 uapps sshd[32103]: pam_unix(sshd:auth): authentication failure; lognam........ ------------------------------- |
2020-06-01 07:32:56 |
| 222.186.30.57 | attackspambots | 2020-05-31T23:21:37.758388shield sshd\[4783\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.57 user=root 2020-05-31T23:21:39.617452shield sshd\[4783\]: Failed password for root from 222.186.30.57 port 45975 ssh2 2020-05-31T23:21:42.323396shield sshd\[4783\]: Failed password for root from 222.186.30.57 port 45975 ssh2 2020-05-31T23:21:44.761917shield sshd\[4783\]: Failed password for root from 222.186.30.57 port 45975 ssh2 2020-05-31T23:22:00.057283shield sshd\[4828\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.57 user=root |
2020-06-01 07:25:18 |
| 158.69.42.3 | attackbotsspam | May 31 22:23:05 debian-2gb-nbg1-2 kernel: \[13215360.341731\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=158.69.42.3 DST=195.201.40.59 LEN=40 TOS=0x14 PREC=0x00 TTL=238 ID=5080 PROTO=TCP SPT=59211 DPT=1433 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-06-01 07:44:49 |
| 142.93.101.30 | attackspambots | May 31 23:23:21 root sshd[27157]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.101.30 user=root May 31 23:23:23 root sshd[27157]: Failed password for root from 142.93.101.30 port 34070 ssh2 ... |
2020-06-01 07:32:01 |
| 164.132.70.22 | attackbotsspam | [ssh] SSH attack |
2020-06-01 07:56:48 |
| 60.49.92.77 | attackspambots | blogonese.net 60.49.92.77 [31/May/2020:22:23:15 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4263 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.109 Safari/537.36" blogonese.net 60.49.92.77 [31/May/2020:22:23:19 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4263 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.109 Safari/537.36" |
2020-06-01 07:33:50 |
| 43.226.69.71 | attack | May 31 18:50:09 vps34202 sshd[10532]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.226.69.71 user=r.r May 31 18:50:10 vps34202 sshd[10532]: Failed password for r.r from 43.226.69.71 port 38398 ssh2 May 31 18:50:11 vps34202 sshd[10532]: Received disconnect from 43.226.69.71: 11: Bye Bye [preauth] May 31 18:59:04 vps34202 sshd[10607]: Connection closed by 43.226.69.71 [preauth] May 31 19:00:37 vps34202 sshd[10653]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.226.69.71 user=r.r May 31 19:00:39 vps34202 sshd[10653]: Failed password for r.r from 43.226.69.71 port 49778 ssh2 May 31 19:00:40 vps34202 sshd[10653]: Received disconnect from 43.226.69.71: 11: Bye Bye [preauth] May 31 19:03:00 vps34202 sshd[10672]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.226.69.71 user=r.r May 31 19:03:02 vps34202 sshd[10672]: Failed password for r.r fro........ ------------------------------- |
2020-06-01 07:48:08 |
| 94.102.49.109 | attack | RDP brute force to non-standard port. |
2020-06-01 07:39:50 |
| 27.69.164.113 | attackbotsspam | Jun 1 01:08:28 OPSO sshd\[21648\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.69.164.113 user=root Jun 1 01:08:30 OPSO sshd\[21648\]: Failed password for root from 27.69.164.113 port 40276 ssh2 Jun 1 01:12:27 OPSO sshd\[22819\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.69.164.113 user=root Jun 1 01:12:29 OPSO sshd\[22819\]: Failed password for root from 27.69.164.113 port 37320 ssh2 Jun 1 01:16:08 OPSO sshd\[23757\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.69.164.113 user=root |
2020-06-01 07:34:02 |
| 185.143.74.144 | attack | Jun 1 01:04:13 mail postfix/smtpd\[7195\]: warning: unknown\[185.143.74.144\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Jun 1 01:05:42 mail postfix/smtpd\[7195\]: warning: unknown\[185.143.74.144\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Jun 1 01:07:18 mail postfix/smtpd\[7195\]: warning: unknown\[185.143.74.144\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Jun 1 01:38:14 mail postfix/smtpd\[9252\]: warning: unknown\[185.143.74.144\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ |
2020-06-01 07:41:00 |
| 89.216.99.163 | attack | ... |
2020-06-01 07:54:34 |