城市(city): unknown
省份(region): unknown
国家(country): United States of America (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 3.148.72.242
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 23269
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;3.148.72.242. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021500 1800 900 604800 86400
;; Query time: 36 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 15 18:24:59 CST 2025
;; MSG SIZE rcvd: 105242.72.148.3.in-addr.arpa domain name pointer ec2-3-148-72-242.us-east-2.compute.amazonaws.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
242.72.148.3.in-addr.arpa name = ec2-3-148-72-242.us-east-2.compute.amazonaws.com.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 106.12.102.114 | attack | Jul 9 05:37:35 server sshd[28800]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.102.114 ... |
2019-07-09 20:45:28 |
| 94.177.242.121 | attackspambots | Spam Timestamp : 09-Jul-19 04:03 _ BlockList Provider barracudacentral _ (148) |
2019-07-09 20:52:28 |
| 118.24.104.152 | attackbots | Automated report - ssh fail2ban: Jul 9 05:05:44 authentication failure Jul 9 05:05:46 wrong password, user=atlas, port=60584, ssh2 Jul 9 05:11:50 authentication failure |
2019-07-09 20:48:10 |
| 125.40.217.32 | attack | Jul 9 05:05:14 cp1server sshd[496]: Invalid user ubnt from 125.40.217.32 Jul 9 05:05:14 cp1server sshd[496]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.40.217.32 Jul 9 05:05:15 cp1server sshd[496]: Failed password for invalid user ubnt from 125.40.217.32 port 56827 ssh2 Jul 9 05:05:17 cp1server sshd[496]: Failed password for invalid user ubnt from 125.40.217.32 port 56827 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=125.40.217.32 |
2019-07-09 21:04:28 |
| 54.37.232.137 | attack | 09.07.2019 09:22:47 SSH access blocked by firewall |
2019-07-09 20:21:08 |
| 218.92.0.173 | attackbotsspam | " " |
2019-07-09 21:13:26 |
| 51.158.111.68 | attack | Unauthorized SSH login attempts |
2019-07-09 20:42:24 |
| 83.142.127.26 | attackbotsspam | port scan and connect, tcp 80 (http) |
2019-07-09 20:24:43 |
| 118.89.33.81 | attackbotsspam | Jul 8 22:10:23 gcems sshd\[31596\]: Invalid user oleg from 118.89.33.81 port 36456 Jul 8 22:10:23 gcems sshd\[31596\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.89.33.81 Jul 8 22:10:24 gcems sshd\[31596\]: Failed password for invalid user oleg from 118.89.33.81 port 36456 ssh2 Jul 8 22:11:37 gcems sshd\[31615\]: Invalid user dropbox from 118.89.33.81 port 46862 Jul 8 22:11:37 gcems sshd\[31615\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.89.33.81 ... |
2019-07-09 20:54:20 |
| 103.215.221.195 | attackspambots | langenachtfulda.de 103.215.221.195 \[09/Jul/2019:11:23:10 +0200\] "POST /wp-login.php HTTP/1.1" 200 6029 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" langenachtfulda.de 103.215.221.195 \[09/Jul/2019:11:23:12 +0200\] "POST /wp-login.php HTTP/1.1" 200 5994 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" langenachtfulda.de 103.215.221.195 \[09/Jul/2019:11:23:13 +0200\] "POST /wp-login.php HTTP/1.1" 200 5986 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" |
2019-07-09 20:28:04 |
| 206.189.131.213 | attack | Jul 9 07:50:53 debian sshd\[18617\]: Invalid user nagios from 206.189.131.213 port 50052 Jul 9 07:50:53 debian sshd\[18617\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.131.213 Jul 9 07:50:55 debian sshd\[18617\]: Failed password for invalid user nagios from 206.189.131.213 port 50052 ssh2 ... |
2019-07-09 20:57:25 |
| 139.59.180.53 | attack | Jul 9 11:52:41 thevastnessof sshd[3718]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.180.53 ... |
2019-07-09 20:43:38 |
| 139.59.41.154 | attackbotsspam | Invalid user april from 139.59.41.154 port 33006 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.41.154 Failed password for invalid user april from 139.59.41.154 port 33006 ssh2 Invalid user frappe from 139.59.41.154 port 53616 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.41.154 |
2019-07-09 20:49:26 |
| 207.46.13.153 | attackspambots | Automatic report - Web App Attack |
2019-07-09 20:29:42 |
| 118.24.111.232 | attackbotsspam | Jul 9 14:01:18 vpn01 sshd\[17069\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.111.232 user=root Jul 9 14:01:20 vpn01 sshd\[17069\]: Failed password for root from 118.24.111.232 port 48860 ssh2 Jul 9 14:03:31 vpn01 sshd\[17086\]: Invalid user vnc from 118.24.111.232 |
2019-07-09 21:17:36 |