城市(city): Zürich
省份(region): Zurich
国家(country): Switzerland
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 16.63.80.218
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 65467
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;16.63.80.218. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021902 1800 900 604800 86400
;; Query time: 16 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 20 12:26:38 CST 2025
;; MSG SIZE rcvd: 105218.80.63.16.in-addr.arpa domain name pointer ec2-16-63-80-218.eu-central-2.compute.amazonaws.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
218.80.63.16.in-addr.arpa name = ec2-16-63-80-218.eu-central-2.compute.amazonaws.com.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 194.84.17.5 | attackspam | Lines containing failures of 194.84.17.5 Oct 28 08:07:04 shared11 sshd[1765]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.84.17.5 user=r.r Oct 28 08:07:05 shared11 sshd[1765]: Failed password for r.r from 194.84.17.5 port 33240 ssh2 Oct 28 08:07:05 shared11 sshd[1765]: Received disconnect from 194.84.17.5 port 33240:11: Bye Bye [preauth] Oct 28 08:07:05 shared11 sshd[1765]: Disconnected from authenticating user r.r 194.84.17.5 port 33240 [preauth] Oct 28 08:24:33 shared11 sshd[6653]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.84.17.5 user=r.r Oct 28 08:24:35 shared11 sshd[6653]: Failed password for r.r from 194.84.17.5 port 60302 ssh2 Oct 28 08:24:35 shared11 sshd[6653]: Received disconnect from 194.84.17.5 port 60302:11: Bye Bye [preauth] Oct 28 08:24:35 shared11 sshd[6653]: Disconnected from authenticating user r.r 194.84.17.5 port 60302 [preauth] Oct 28 08:32:29 shared11........ ------------------------------ |
2019-10-29 17:30:38 |
| 200.116.195.122 | attack | Oct 29 05:45:04 server sshd\[23990\]: Invalid user tsk from 200.116.195.122 port 58938 Oct 29 05:45:04 server sshd\[23990\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.116.195.122 Oct 29 05:45:06 server sshd\[23990\]: Failed password for invalid user tsk from 200.116.195.122 port 58938 ssh2 Oct 29 05:49:04 server sshd\[5046\]: Invalid user gerrit2123 from 200.116.195.122 port 41268 Oct 29 05:49:04 server sshd\[5046\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.116.195.122 |
2019-10-29 17:16:18 |
| 159.224.220.209 | attack | Invalid user dev from 159.224.220.209 port 56020 |
2019-10-29 17:19:53 |
| 202.45.147.125 | attack | Oct 29 04:43:15 anodpoucpklekan sshd[64380]: Invalid user Juhana from 202.45.147.125 port 40030 ... |
2019-10-29 17:43:48 |
| 37.79.63.100 | attackspambots | Chat Spam |
2019-10-29 17:13:45 |
| 148.70.62.12 | attackbotsspam | Invalid user sa444444 from 148.70.62.12 port 43620 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.62.12 Failed password for invalid user sa444444 from 148.70.62.12 port 43620 ssh2 Invalid user 123456 from 148.70.62.12 port 53590 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.62.12 |
2019-10-29 17:24:48 |
| 106.13.140.138 | attackspambots | 2019-10-29T09:42:03.020514scmdmz1 sshd\[15923\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.140.138 user=root 2019-10-29T09:42:05.326108scmdmz1 sshd\[15923\]: Failed password for root from 106.13.140.138 port 58736 ssh2 2019-10-29T09:47:02.390133scmdmz1 sshd\[16284\]: Invalid user 55idc from 106.13.140.138 port 39210 ... |
2019-10-29 17:24:06 |
| 171.235.67.30 | attackspambots | 19/10/28@23:48:57: FAIL: Alarm-Intrusion address from=171.235.67.30 ... |
2019-10-29 17:24:22 |
| 104.36.71.146 | attackspambots | fail2ban |
2019-10-29 17:39:03 |
| 141.98.80.102 | attackbots | 2019-10-29T10:05:20.084706mail01 postfix/smtpd[31827]: warning: unknown[141.98.80.102]: SASL PLAIN authentication failed: 2019-10-29T10:05:29.100720mail01 postfix/smtpd[14354]: warning: unknown[141.98.80.102]: SASL PLAIN authentication failed: 2019-10-29T10:06:27.251712mail01 postfix/smtpd[13028]: warning: unknown[141.98.80.102]: SASL PLAIN authentication failed: |
2019-10-29 17:12:33 |
| 111.67.192.121 | attackbots | Oct 29 10:13:33 legacy sshd[16991]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.67.192.121 Oct 29 10:13:36 legacy sshd[16991]: Failed password for invalid user zq from 111.67.192.121 port 59573 ssh2 Oct 29 10:19:08 legacy sshd[17121]: Failed password for root from 111.67.192.121 port 54693 ssh2 ... |
2019-10-29 17:20:36 |
| 201.48.4.15 | attackspambots | $f2bV_matches |
2019-10-29 17:26:58 |
| 130.61.93.5 | attackspam | Oct 28 11:43:29 carla sshd[3652]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=130.61.93.5 user=r.r Oct 28 11:43:32 carla sshd[3652]: Failed password for r.r from 130.61.93.5 port 55108 ssh2 Oct 28 11:43:32 carla sshd[3653]: Received disconnect from 130.61.93.5: 11: Bye Bye Oct 28 11:57:22 carla sshd[3754]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=130.61.93.5 user=r.r Oct 28 11:57:24 carla sshd[3754]: Failed password for r.r from 130.61.93.5 port 33572 ssh2 Oct 28 11:57:24 carla sshd[3755]: Received disconnect from 130.61.93.5: 11: Bye Bye Oct 28 12:02:09 carla sshd[3802]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=130.61.93.5 user=r.r Oct 28 12:02:11 carla sshd[3802]: Failed password for r.r from 130.61.93.5 port 46596 ssh2 Oct 28 12:02:11 carla sshd[3803]: Received disconnect from 130.61.93.5: 11: Bye Bye Oct 28 12:05:53 carla sshd[........ ------------------------------- |
2019-10-29 17:20:21 |
| 104.248.40.59 | attackbots | www.xn--netzfundstckderwoche-yec.de 104.248.40.59 \[29/Oct/2019:10:21:36 +0100\] "POST /wp-login.php HTTP/1.1" 200 5662 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" www.xn--netzfundstckderwoche-yec.de 104.248.40.59 \[29/Oct/2019:10:21:37 +0100\] "POST /xmlrpc.php HTTP/1.1" 200 4096 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" |
2019-10-29 17:35:16 |
| 112.91.149.134 | attackspambots | sshd jail - ssh hack attempt |
2019-10-29 17:25:46 |