城市(city): unknown
省份(region): unknown
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 13.52.189.80
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 51624
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;13.52.189.80. IN A
;; AUTHORITY SECTION:
. 217 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022022601 1800 900 604800 86400
;; Query time: 57 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 27 12:06:24 CST 2022
;; MSG SIZE rcvd: 105
80.189.52.13.in-addr.arpa domain name pointer ec2-13-52-189-80.us-west-1.compute.amazonaws.com.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
80.189.52.13.in-addr.arpa name = ec2-13-52-189-80.us-west-1.compute.amazonaws.com.
Authoritative answers can be found from:
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 95.57.195.41 | attack | 2020-09-06 18:49:47 1kExrO-0007y2-QH SMTP connection from \(95.57.195.41.megaline.telecom.kz\) \[95.57.195.41\]:31210 I=\[193.107.88.166\]:25 closed by DROP in ACL 2020-09-06 18:50:02 1kExrd-0007zh-Ps SMTP connection from \(95.57.195.41.megaline.telecom.kz\) \[95.57.195.41\]:31350 I=\[193.107.88.166\]:25 closed by DROP in ACL 2020-09-06 18:50:11 1kExrm-000808-PL SMTP connection from \(95.57.195.41.megaline.telecom.kz\) \[95.57.195.41\]:31418 I=\[193.107.88.166\]:25 closed by DROP in ACL ... |
2020-09-07 16:13:40 |
| 200.93.93.205 | attackspam | Sun Sep 6 19:49:43 2020 \[pid 42894\] \[anonymous\] FAIL LOGIN: Client "200.93.93.205"Sun Sep 6 19:49:47 2020 \[pid 42903\] \[www\] FAIL LOGIN: Client "200.93.93.205"Sun Sep 6 19:49:52 2020 \[pid 42908\] \[www\] FAIL LOGIN: Client "200.93.93.205"Sun Sep 6 19:49:56 2020 \[pid 42914\] \[www\] FAIL LOGIN: Client "200.93.93.205"Sun Sep 6 19:50:00 2020 \[pid 42919\] \[www\] FAIL LOGIN: Client "200.93.93.205" ... |
2020-09-07 16:27:06 |
| 191.235.85.199 | attackbots | Port scan denied |
2020-09-07 16:37:05 |
| 164.77.117.10 | attackspambots | Sep 7 07:54:31 root sshd[32698]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.77.117.10 ... |
2020-09-07 16:24:31 |
| 174.138.43.162 | attack | 2020-09-07T10:04:28.933065ks3355764 sshd[18142]: Invalid user nexus from 174.138.43.162 port 59890 2020-09-07T10:04:30.922602ks3355764 sshd[18142]: Failed password for invalid user nexus from 174.138.43.162 port 59890 ssh2 ... |
2020-09-07 16:14:48 |
| 191.250.225.15 | attackbots | Icarus honeypot on github |
2020-09-07 16:40:49 |
| 111.72.194.229 | attackspam | Sep 6 20:01:41 srv01 postfix/smtpd\[32179\]: warning: unknown\[111.72.194.229\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 6 20:05:08 srv01 postfix/smtpd\[31471\]: warning: unknown\[111.72.194.229\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 6 20:05:20 srv01 postfix/smtpd\[31471\]: warning: unknown\[111.72.194.229\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 6 20:05:36 srv01 postfix/smtpd\[31471\]: warning: unknown\[111.72.194.229\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 6 20:05:54 srv01 postfix/smtpd\[31471\]: warning: unknown\[111.72.194.229\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2020-09-07 16:42:20 |
| 91.240.118.100 | attackbotsspam | 2020-09-06 17:12:44 Reject access to port(s):3389 1 times a day |
2020-09-07 16:21:29 |
| 222.186.180.223 | attackbotsspam | Sep 7 10:30:22 abendstille sshd\[1090\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.223 user=root Sep 7 10:30:24 abendstille sshd\[1090\]: Failed password for root from 222.186.180.223 port 13118 ssh2 Sep 7 10:30:43 abendstille sshd\[1514\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.223 user=root Sep 7 10:30:45 abendstille sshd\[1514\]: Failed password for root from 222.186.180.223 port 28536 ssh2 Sep 7 10:31:07 abendstille sshd\[1926\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.223 user=root ... |
2020-09-07 16:36:37 |
| 167.99.66.74 | attack | Tried sshing with brute force. |
2020-09-07 16:30:25 |
| 92.249.14.159 | attackbotsspam | Registration form abuse |
2020-09-07 16:43:28 |
| 79.173.76.242 | attackspambots | Honeypot attack, port: 445, PTR: host76-242.new-line.net. |
2020-09-07 16:13:59 |
| 175.24.103.72 | attack | Sep 7 06:03:26 root sshd[28554]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.24.103.72 ... |
2020-09-07 16:43:50 |
| 173.212.242.65 | attackbotsspam | Port probing on unauthorized port 111 |
2020-09-07 16:15:12 |
| 157.230.125.207 | attackbots | $f2bV_matches |
2020-09-07 16:37:38 |