城市(city): unknown
省份(region): unknown
国家(country): United States of America (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 34.195.109.138
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 40639
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;34.195.109.138. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020301 1800 900 604800 86400
;; Query time: 11 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 04 02:46:26 CST 2025
;; MSG SIZE rcvd: 107138.109.195.34.in-addr.arpa domain name pointer ec2-34-195-109-138.compute-1.amazonaws.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
138.109.195.34.in-addr.arpa name = ec2-34-195-109-138.compute-1.amazonaws.com.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 90.159.230.120 | attackspambots | [portscan] tcp/1433 [MsSQL] [scan/connect: 6 time(s)] *(RWIN=11392)(12201009) |
2019-12-20 15:58:30 |
| 46.38.144.146 | attack | 2019-12-20T07:23:26.919326beta postfix/smtpd[23615]: warning: unknown[46.38.144.146]: SASL LOGIN authentication failed: authentication failure 2019-12-20T07:24:41.434356beta postfix/smtpd[23615]: warning: unknown[46.38.144.146]: SASL LOGIN authentication failed: authentication failure 2019-12-20T07:25:53.093397beta postfix/smtpd[23615]: warning: unknown[46.38.144.146]: SASL LOGIN authentication failed: authentication failure ... |
2019-12-20 15:35:06 |
| 185.200.118.83 | attackspambots | Fail2Ban Ban Triggered |
2019-12-20 15:29:26 |
| 2404:8680:1101:320:150:95:24:187 | attackspambots | [FriDec2007:29:00.8182002019][:error][pid20621:tid47392776832768][client2404:8680:1101:320:150:95:24:187:36158][client2404:8680:1101:320:150:95:24:187]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"\(\?:\<\?script\|\(\?:\<\|\<\?/\)\(\?:\(\?:java\|vb\)script\|about\|applet\|activex\|chrome\|qx\?ss\|embed\)\|\<\?/\?i\?frame\\\\\\\\b\|\<\?imgsrc\?=\|\<\?basehref\?=\)"atARGS:fonts.[file"/usr/local/apache.ea3/conf/modsec_rules/10_asl_rules.conf"][line"1079"][id"340147"][rev"144"][msg"Atomicorp.comWAFRules:PotentialCrossSiteScriptingAttack"][data"\ |
2019-12-20 15:55:51 |
| 81.22.45.250 | attack | 12/20/2019-08:31:12.567218 81.22.45.250 Protocol: 6 ET DROP Dshield Block Listed Source group 1 |
2019-12-20 15:49:31 |
| 167.114.115.22 | attack | Dec 20 07:32:02 localhost sshd\[65776\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.114.115.22 user=root Dec 20 07:32:05 localhost sshd\[65776\]: Failed password for root from 167.114.115.22 port 53232 ssh2 Dec 20 07:37:46 localhost sshd\[65892\]: Invalid user xinlang from 167.114.115.22 port 33240 Dec 20 07:37:46 localhost sshd\[65892\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.114.115.22 Dec 20 07:37:48 localhost sshd\[65892\]: Failed password for invalid user xinlang from 167.114.115.22 port 33240 ssh2 ... |
2019-12-20 15:38:13 |
| 36.71.37.171 | attackbots | 1576823375 - 12/20/2019 07:29:35 Host: 36.71.37.171/36.71.37.171 Port: 445 TCP Blocked |
2019-12-20 15:40:28 |
| 40.92.23.83 | attack | Dec 20 09:29:30 debian-2gb-vpn-nbg1-1 kernel: [1201730.132145] [UFW BLOCK] IN=eth0 OUT= MAC=96:00:00:38:96:44:d2:74:7f:6e:37:e3:08:00 SRC=40.92.23.83 DST=78.46.192.101 LEN=40 TOS=0x00 PREC=0x00 TTL=230 ID=35257 DF PROTO=TCP SPT=6332 DPT=25 WINDOW=0 RES=0x00 ACK RST URGP=0 |
2019-12-20 15:46:49 |
| 37.212.56.211 | attack | Unauthorised access (Dec 20) SRC=37.212.56.211 LEN=52 TTL=116 ID=29701 DF TCP DPT=445 WINDOW=8192 SYN |
2019-12-20 15:59:32 |
| 106.13.57.239 | attackspambots | 2019-12-20T01:21:56.731078ns547587 sshd\[7233\]: Invalid user versace from 106.13.57.239 port 38360 2019-12-20T01:21:56.736615ns547587 sshd\[7233\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.57.239 2019-12-20T01:21:58.762027ns547587 sshd\[7233\]: Failed password for invalid user versace from 106.13.57.239 port 38360 ssh2 2019-12-20T01:29:31.305687ns547587 sshd\[18810\]: Invalid user helen from 106.13.57.239 port 58390 ... |
2019-12-20 15:44:15 |
| 221.204.11.106 | attackbots | Dec 20 07:29:44 MK-Soft-VM8 sshd[12498]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.204.11.106 Dec 20 07:29:46 MK-Soft-VM8 sshd[12498]: Failed password for invalid user beth from 221.204.11.106 port 47950 ssh2 ... |
2019-12-20 15:27:44 |
| 128.199.75.69 | attack | 2019-12-20T07:31:20.311610shield sshd\[23347\]: Invalid user cosburn from 128.199.75.69 port 39129 2019-12-20T07:31:20.316035shield sshd\[23347\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.75.69 2019-12-20T07:31:22.322015shield sshd\[23347\]: Failed password for invalid user cosburn from 128.199.75.69 port 39129 ssh2 2019-12-20T07:39:21.454362shield sshd\[25900\]: Invalid user rutger from 128.199.75.69 port 42470 2019-12-20T07:39:21.463037shield sshd\[25900\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.75.69 |
2019-12-20 15:41:25 |
| 124.195.199.171 | attackspam | Host Scan |
2019-12-20 16:01:06 |
| 49.65.215.214 | attackbots | RDP Bruteforce |
2019-12-20 15:26:48 |
| 99.86.243.111 | attackbots | TCP Port Scanning |
2019-12-20 15:38:01 |