城市(city): unknown
省份(region): unknown
国家(country): United States of America (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 13.56.187.138
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 41251
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;13.56.187.138. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022000 1800 900 604800 86400
;; Query time: 9 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 20 22:45:48 CST 2025
;; MSG SIZE rcvd: 106138.187.56.13.in-addr.arpa domain name pointer ec2-13-56-187-138.us-west-1.compute.amazonaws.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
138.187.56.13.in-addr.arpa name = ec2-13-56-187-138.us-west-1.compute.amazonaws.com.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 92.53.65.40 | attackbots | Port scan: Attack repeated for 24 hours |
2019-12-07 20:13:38 |
| 216.167.134.158 | attack | 2019-12-07T12:52:49.029734scmdmz1 sshd\[31859\]: Invalid user ssh from 216.167.134.158 port 34424 2019-12-07T12:52:49.032463scmdmz1 sshd\[31859\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=microfour.nts-online.net 2019-12-07T12:52:50.570964scmdmz1 sshd\[31859\]: Failed password for invalid user ssh from 216.167.134.158 port 34424 ssh2 ... |
2019-12-07 20:11:42 |
| 175.139.243.83 | attackspam | Dec 6 18:09:11 liveconfig01 sshd[6625]: Invalid user home from 175.139.243.83 Dec 6 18:09:11 liveconfig01 sshd[6625]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.139.243.83 Dec 6 18:09:12 liveconfig01 sshd[6625]: Failed password for invalid user home from 175.139.243.83 port 9510 ssh2 Dec 6 18:09:12 liveconfig01 sshd[6625]: Received disconnect from 175.139.243.83 port 9510:11: Bye Bye [preauth] Dec 6 18:09:12 liveconfig01 sshd[6625]: Disconnected from 175.139.243.83 port 9510 [preauth] Dec 6 18:34:01 liveconfig01 sshd[7717]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.139.243.83 user=r.r Dec 6 18:34:02 liveconfig01 sshd[7717]: Failed password for r.r from 175.139.243.83 port 55314 ssh2 Dec 6 18:34:02 liveconfig01 sshd[7717]: Received disconnect from 175.139.243.83 port 55314:11: Bye Bye [preauth] Dec 6 18:34:02 liveconfig01 sshd[7717]: Disconnected from 175.139.243......... ------------------------------- |
2019-12-07 20:09:55 |
| 132.232.74.106 | attackbotsspam | Dec 7 11:50:40 MK-Soft-VM6 sshd[16993]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.74.106 Dec 7 11:50:42 MK-Soft-VM6 sshd[16993]: Failed password for invalid user cib from 132.232.74.106 port 47252 ssh2 ... |
2019-12-07 19:50:38 |
| 222.186.180.9 | attackbotsspam | Dec 6 18:57:38 debian sshd[18197]: Unable to negotiate with 222.186.180.9 port 9026: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 [preauth] Dec 7 07:04:11 debian sshd[23744]: Unable to negotiate with 222.186.180.9 port 49032: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 [preauth] ... |
2019-12-07 20:06:47 |
| 148.72.210.28 | attackspambots | Dec 7 12:35:21 localhost sshd\[800\]: Invalid user jaenisch from 148.72.210.28 port 36234 Dec 7 12:35:21 localhost sshd\[800\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.72.210.28 Dec 7 12:35:23 localhost sshd\[800\]: Failed password for invalid user jaenisch from 148.72.210.28 port 36234 ssh2 |
2019-12-07 19:53:13 |
| 125.45.60.149 | attackbotsspam | Portscan detected |
2019-12-07 20:18:28 |
| 144.217.93.79 | attack | UTC: 2019-12-06 port: 23/tcp |
2019-12-07 20:16:29 |
| 188.226.250.69 | attackspambots | Dec 7 07:00:38 plusreed sshd[4312]: Invalid user hung from 188.226.250.69 ... |
2019-12-07 20:04:12 |
| 83.103.98.211 | attackspambots | Dec 7 12:23:07 nextcloud sshd\[28836\]: Invalid user menqiong from 83.103.98.211 Dec 7 12:23:07 nextcloud sshd\[28836\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=83.103.98.211 Dec 7 12:23:09 nextcloud sshd\[28836\]: Failed password for invalid user menqiong from 83.103.98.211 port 3305 ssh2 ... |
2019-12-07 19:52:11 |
| 206.189.90.215 | attackbots | 206.189.90.215 - - \[07/Dec/2019:11:34:18 +0000\] "POST /wp-login.php HTTP/1.1" 200 6393 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 206.189.90.215 - - \[07/Dec/2019:11:34:19 +0000\] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" ... |
2019-12-07 19:55:31 |
| 59.127.40.211 | attackspam | Unauthorised access (Dec 7) SRC=59.127.40.211 LEN=40 TTL=43 ID=63237 TCP DPT=23 WINDOW=7638 SYN |
2019-12-07 20:04:45 |
| 182.163.227.54 | attack | UTC: 2019-12-06 port: 161/udp |
2019-12-07 19:47:16 |
| 194.180.179.66 | attackspambots | firewall-block, port(s): 445/tcp |
2019-12-07 19:53:38 |
| 178.128.222.84 | attackbotsspam | Too many connections or unauthorized access detected from Arctic banned ip |
2019-12-07 20:07:07 |