城市(city): unknown
省份(region): unknown
国家(country): United States of America (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 34.203.214.172
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 9091
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;34.203.214.172. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012700 1800 900 604800 86400
;; Query time: 13 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jan 27 20:41:55 CST 2025
;; MSG SIZE rcvd: 107172.214.203.34.in-addr.arpa domain name pointer ec2-34-203-214-172.compute-1.amazonaws.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
172.214.203.34.in-addr.arpa name = ec2-34-203-214-172.compute-1.amazonaws.com.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 183.80.10.178 | attackbots | (Oct 3) LEN=40 TTL=46 ID=19235 TCP DPT=8080 WINDOW=52607 SYN (Oct 3) LEN=40 TTL=46 ID=32296 TCP DPT=8080 WINDOW=52607 SYN (Oct 3) LEN=40 TTL=46 ID=58487 TCP DPT=8080 WINDOW=52607 SYN (Oct 3) LEN=40 TTL=46 ID=19844 TCP DPT=8080 WINDOW=3718 SYN (Oct 2) LEN=40 TTL=46 ID=53079 TCP DPT=8080 WINDOW=52607 SYN (Oct 2) LEN=40 TTL=46 ID=43154 TCP DPT=8080 WINDOW=48225 SYN (Oct 2) LEN=40 TTL=46 ID=54984 TCP DPT=8080 WINDOW=52607 SYN (Oct 2) LEN=40 TTL=46 ID=54425 TCP DPT=8080 WINDOW=3718 SYN (Oct 2) LEN=40 TTL=46 ID=30048 TCP DPT=8080 WINDOW=42783 SYN (Oct 1) LEN=40 TTL=46 ID=47522 TCP DPT=8080 WINDOW=42783 SYN (Oct 1) LEN=40 TTL=46 ID=55570 TCP DPT=8080 WINDOW=52607 SYN (Oct 1) LEN=40 TTL=46 ID=58380 TCP DPT=8080 WINDOW=52607 SYN (Sep 30) LEN=40 TTL=42 ID=15107 TCP DPT=8080 WINDOW=52607 SYN (Sep 30) LEN=40 TTL=42 ID=156 TCP DPT=8080 WINDOW=42783 SYN (Sep 30) LEN=40 TTL=42 ID=18291 TCP DPT=8080 WINDOW=42783 SYN |
2019-10-03 18:56:00 |
| 134.209.97.61 | attackspam | 2019-09-11 20:20:12,255 fail2ban.actions [814]: NOTICE [sshd] Ban 134.209.97.61 2019-09-11 23:26:54,579 fail2ban.actions [814]: NOTICE [sshd] Ban 134.209.97.61 2019-09-12 02:36:19,426 fail2ban.actions [814]: NOTICE [sshd] Ban 134.209.97.61 ... |
2019-10-03 18:27:37 |
| 198.108.67.128 | attackspam | Honeypot hit. |
2019-10-03 18:59:21 |
| 178.62.237.38 | attackspambots | Oct 3 10:18:59 venus sshd\[13871\]: Invalid user pfmusr from 178.62.237.38 port 51280 Oct 3 10:18:59 venus sshd\[13871\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.237.38 Oct 3 10:19:01 venus sshd\[13871\]: Failed password for invalid user pfmusr from 178.62.237.38 port 51280 ssh2 ... |
2019-10-03 18:40:13 |
| 86.104.220.248 | attack | 2019-10-03T06:38:20.773869shield sshd\[10793\]: Invalid user aa from 86.104.220.248 port 46064 2019-10-03T06:38:20.782626shield sshd\[10793\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=86.104.220.248 2019-10-03T06:38:23.113303shield sshd\[10793\]: Failed password for invalid user aa from 86.104.220.248 port 46064 ssh2 2019-10-03T06:42:09.390295shield sshd\[11336\]: Invalid user warner from 86.104.220.248 port 57226 2019-10-03T06:42:09.395568shield sshd\[11336\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=86.104.220.248 |
2019-10-03 18:53:03 |
| 134.209.97.228 | attackbots | Oct 3 00:14:02 web9 sshd\[22367\]: Invalid user manager from 134.209.97.228 Oct 3 00:14:02 web9 sshd\[22367\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.97.228 Oct 3 00:14:04 web9 sshd\[22367\]: Failed password for invalid user manager from 134.209.97.228 port 51808 ssh2 Oct 3 00:18:52 web9 sshd\[23070\]: Invalid user debian from 134.209.97.228 Oct 3 00:18:52 web9 sshd\[23070\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.97.228 |
2019-10-03 18:30:20 |
| 103.228.19.86 | attack | Oct 3 12:37:01 SilenceServices sshd[13211]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.228.19.86 Oct 3 12:37:03 SilenceServices sshd[13211]: Failed password for invalid user 1234 from 103.228.19.86 port 63405 ssh2 Oct 3 12:42:10 SilenceServices sshd[14655]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.228.19.86 |
2019-10-03 19:00:37 |
| 222.186.175.167 | attackbotsspam | 19/10/3@06:40:12: FAIL: IoT-SSH address from=222.186.175.167 ... |
2019-10-03 18:57:04 |
| 134.209.97.30 | attack | 2019-09-22 23:36:50,205 fail2ban.actions [818]: NOTICE [sshd] Ban 134.209.97.30 2019-09-23 02:42:41,521 fail2ban.actions [818]: NOTICE [sshd] Ban 134.209.97.30 2019-09-23 05:49:13,704 fail2ban.actions [818]: NOTICE [sshd] Ban 134.209.97.30 ... |
2019-10-03 18:29:17 |
| 113.162.247.222 | attackspam | 10/02/2019-23:52:35.818833 113.162.247.222 Protocol: 6 ET SCAN NMAP -sS window 1024 |
2019-10-03 18:49:47 |
| 192.241.211.215 | attackspambots | Oct 3 00:52:37 ws22vmsma01 sshd[200824]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.241.211.215 Oct 3 00:52:39 ws22vmsma01 sshd[200824]: Failed password for invalid user matilda from 192.241.211.215 port 57469 ssh2 ... |
2019-10-03 18:46:00 |
| 149.129.252.83 | attackspambots | 2019-10-03T05:14:44.946654abusebot-4.cloudsearch.cf sshd\[21161\]: Invalid user luma from 149.129.252.83 port 58428 |
2019-10-03 18:33:34 |
| 159.192.243.102 | attackbots | Oct 3 08:52:17 gw1 sshd[16678]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.192.243.102 Oct 3 08:52:19 gw1 sshd[16678]: Failed password for invalid user admin from 159.192.243.102 port 37228 ssh2 ... |
2019-10-03 18:57:50 |
| 138.197.162.28 | attack | *Port Scan* detected from 138.197.162.28 (CA/Canada/-). 4 hits in the last 95 seconds |
2019-10-03 18:42:44 |
| 222.186.30.152 | attackbotsspam | 2019-10-03T17:34:11.524715enmeeting.mahidol.ac.th sshd\[20092\]: User root from 222.186.30.152 not allowed because not listed in AllowUsers 2019-10-03T17:34:11.881914enmeeting.mahidol.ac.th sshd\[20092\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.152 user=root 2019-10-03T17:34:14.563074enmeeting.mahidol.ac.th sshd\[20092\]: Failed password for invalid user root from 222.186.30.152 port 18555 ssh2 ... |
2019-10-03 18:38:22 |