城市(city): unknown
省份(region): unknown
国家(country): Australia
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 13.54.189.229
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 35261
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;13.54.189.229. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012201 1800 900 604800 86400
;; Query time: 10 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jan 23 02:29:01 CST 2025
;; MSG SIZE rcvd: 106229.189.54.13.in-addr.arpa domain name pointer ec2-13-54-189-229.ap-southeast-2.compute.amazonaws.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
229.189.54.13.in-addr.arpa name = ec2-13-54-189-229.ap-southeast-2.compute.amazonaws.com.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 51.195.43.245 | attack | 2020-10-09 12:56:18.897444-0500 localhost sshd[7952]: Failed password for root from 51.195.43.245 port 45176 ssh2 |
2020-10-10 04:00:01 |
| 2.90.5.172 | attackspam | 1602190152 - 10/08/2020 22:49:12 Host: 2.90.5.172/2.90.5.172 Port: 445 TCP Blocked |
2020-10-10 04:21:29 |
| 178.128.243.225 | attackbots | Invalid user user from 178.128.243.225 port 38820 |
2020-10-10 04:03:30 |
| 122.252.239.5 | attack | Repeated brute force against a port |
2020-10-10 04:24:18 |
| 222.186.42.213 | attackbots | Oct 9 22:33:32 vps647732 sshd[21486]: Failed password for root from 222.186.42.213 port 21926 ssh2 ... |
2020-10-10 04:33:54 |
| 32.117.164.214 | attack | Oct 6 15:51:35 master sshd[5584]: Failed password for root from 32.117.164.214 port 39938 ssh2 Oct 9 09:47:24 master sshd[31584]: Failed password for invalid user wubao from 32.117.164.214 port 48004 ssh2 Oct 9 09:55:30 master sshd[31654]: Failed password for root from 32.117.164.214 port 39630 ssh2 Oct 9 09:59:50 master sshd[31695]: Failed password for invalid user master from 32.117.164.214 port 42820 ssh2 Oct 9 10:04:15 master sshd[31758]: Failed password for invalid user games1 from 32.117.164.214 port 46262 ssh2 Oct 9 10:08:41 master sshd[31799]: Failed password for root from 32.117.164.214 port 49630 ssh2 Oct 9 10:14:03 master sshd[31861]: Failed password for invalid user new from 32.117.164.214 port 54136 ssh2 Oct 9 10:18:21 master sshd[31922]: Failed password for root from 32.117.164.214 port 57334 ssh2 Oct 9 10:22:34 master sshd[31970]: Failed password for root from 32.117.164.214 port 60378 ssh2 |
2020-10-10 04:28:44 |
| 182.96.47.14 | attackspambots | 1602190156 - 10/08/2020 22:49:16 Host: 182.96.47.14/182.96.47.14 Port: 445 TCP Blocked |
2020-10-10 04:18:35 |
| 148.72.64.192 | attackspambots | 148.72.64.192 - - [09/Oct/2020:20:05:41 +0100] "POST /wp-login.php HTTP/1.1" 200 2451 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 148.72.64.192 - - [09/Oct/2020:20:05:43 +0100] "POST /wp-login.php HTTP/1.1" 200 2452 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 148.72.64.192 - - [09/Oct/2020:20:05:44 +0100] "POST /wp-login.php HTTP/1.1" 200 2454 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-10-10 04:09:07 |
| 212.60.20.219 | attackbots | C1,Magento Bruteforce Login Attack POST /index.php/admin/ |
2020-10-10 04:16:56 |
| 103.231.92.123 | attackspambots | 103.231.92.123 - - [08/Oct/2020:21:41:03 +0100] "POST /xmlrpc.php HTTP/1.1" 200 229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.109 Safari/537.36" 103.231.92.123 - - [08/Oct/2020:21:41:12 +0100] "POST /xmlrpc.php HTTP/1.1" 200 229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.109 Safari/537.36" 103.231.92.123 - - [08/Oct/2020:21:41:20 +0100] "POST /xmlrpc.php HTTP/1.1" 200 229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.109 Safari/537.36" ... |
2020-10-10 04:10:29 |
| 201.209.96.181 | attack | Port Scan ... |
2020-10-10 03:59:12 |
| 175.6.21.77 | attackspambots | ET SCAN NMAP -sS window 1024 |
2020-10-10 04:05:18 |
| 103.25.132.168 | attack | Oct 9 10:03:55 mail.srvfarm.net postfix/smtps/smtpd[236501]: warning: unknown[103.25.132.168]: SASL PLAIN authentication failed: Oct 9 10:03:55 mail.srvfarm.net postfix/smtps/smtpd[236501]: lost connection after AUTH from unknown[103.25.132.168] Oct 9 10:09:58 mail.srvfarm.net postfix/smtpd[233992]: warning: unknown[103.25.132.168]: SASL PLAIN authentication failed: Oct 9 10:09:58 mail.srvfarm.net postfix/smtpd[233992]: lost connection after AUTH from unknown[103.25.132.168] Oct 9 10:10:17 mail.srvfarm.net postfix/smtpd[233992]: warning: unknown[103.25.132.168]: SASL PLAIN authentication failed: |
2020-10-10 04:24:44 |
| 120.92.94.95 | attackspam | Banned for a week because repeated abuses, for example SSH, but not only |
2020-10-10 04:35:54 |
| 187.107.68.86 | attackbotsspam | 5x Failed Password |
2020-10-10 04:26:03 |