城市(city): unknown
省份(region): unknown
国家(country): Hong Kong
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 43.199.239.138
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 30650
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;43.199.239.138. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022801 1800 900 604800 86400
;; Query time: 158 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Mar 01 05:30:04 CST 2025
;; MSG SIZE rcvd: 107138.239.199.43.in-addr.arpa domain name pointer ec2-43-199-239-138.ap-east-1.compute.amazonaws.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
138.239.199.43.in-addr.arpa name = ec2-43-199-239-138.ap-east-1.compute.amazonaws.com.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 2.139.185.217 | attack | firewall-block, port(s): 445/tcp |
2020-09-20 17:23:44 |
| 74.82.47.60 | attack |
|
2020-09-20 17:30:56 |
| 103.9.157.178 | attack | SSH brute-force attempt |
2020-09-20 17:49:24 |
| 45.184.225.2 | attackbotsspam | Sep 20 11:01:17 mout sshd[18478]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.184.225.2 user=root Sep 20 11:01:19 mout sshd[18478]: Failed password for root from 45.184.225.2 port 50220 ssh2 |
2020-09-20 17:32:57 |
| 217.182.68.93 | attackbotsspam | (sshd) Failed SSH login from 217.182.68.93 (FR/France/93.ip-217-182-68.eu): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 20 05:09:47 server sshd[10366]: Invalid user userftp from 217.182.68.93 port 53152 Sep 20 05:09:50 server sshd[10366]: Failed password for invalid user userftp from 217.182.68.93 port 53152 ssh2 Sep 20 05:23:02 server sshd[21133]: Invalid user system from 217.182.68.93 port 53900 Sep 20 05:23:04 server sshd[21133]: Failed password for invalid user system from 217.182.68.93 port 53900 ssh2 Sep 20 05:27:12 server sshd[25409]: Failed password for root from 217.182.68.93 port 36682 ssh2 |
2020-09-20 18:00:50 |
| 177.1.213.19 | attackspambots | Sep 20 03:14:45 mail sshd\[44524\]: Invalid user newuser from 177.1.213.19 Sep 20 03:14:45 mail sshd\[44524\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.1.213.19 ... |
2020-09-20 17:51:39 |
| 45.14.150.140 | attackspam | 45.14.150.140 (RO/Romania/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep 20 01:43:25 server2 sshd[12632]: Failed password for root from 51.79.84.101 port 47466 ssh2 Sep 20 01:43:10 server2 sshd[12434]: Failed password for root from 149.56.132.202 port 43078 ssh2 Sep 20 01:43:15 server2 sshd[12610]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.127.59 user=root Sep 20 01:43:17 server2 sshd[12610]: Failed password for root from 139.155.127.59 port 53912 ssh2 Sep 20 01:43:34 server2 sshd[12715]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.150.140 user=root IP Addresses Blocked: 51.79.84.101 (CA/Canada/-) 149.56.132.202 (CA/Canada/-) 139.155.127.59 (CN/China/-) |
2020-09-20 17:33:15 |
| 103.131.71.102 | attack | (mod_security) mod_security (id:210730) triggered by 103.131.71.102 (VN/Vietnam/bot-103-131-71-102.coccoc.com): 5 in the last 3600 secs |
2020-09-20 17:25:46 |
| 119.123.227.15 | attack | 119.123.227.15 (CN/China/-), 7 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep 20 02:44:30 jbs1 sshd[18097]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.123.227.15 user=root Sep 20 02:44:31 jbs1 sshd[18097]: Failed password for root from 119.123.227.15 port 2660 ssh2 Sep 20 02:44:22 jbs1 sshd[17943]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.79.110.73 user=root Sep 20 02:44:24 jbs1 sshd[17943]: Failed password for root from 177.79.110.73 port 2428 ssh2 Sep 20 02:45:50 jbs1 sshd[19207]: Failed password for root from 95.169.23.6 port 52094 ssh2 Sep 20 02:44:19 jbs1 sshd[17915]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.116.212 user=root Sep 20 02:44:21 jbs1 sshd[17915]: Failed password for root from 46.101.116.212 port 42682 ssh2 IP Addresses Blocked: |
2020-09-20 18:01:39 |
| 14.161.45.187 | attackbots | Invalid user tester from 14.161.45.187 port 35104 |
2020-09-20 18:04:22 |
| 139.59.169.103 | attackspam | Sep 20 09:43:45 abendstille sshd\[24764\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.169.103 user=root Sep 20 09:43:46 abendstille sshd\[24764\]: Failed password for root from 139.59.169.103 port 55790 ssh2 Sep 20 09:47:38 abendstille sshd\[28445\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.169.103 user=root Sep 20 09:47:41 abendstille sshd\[28445\]: Failed password for root from 139.59.169.103 port 37266 ssh2 Sep 20 09:51:28 abendstille sshd\[32082\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.169.103 user=root ... |
2020-09-20 17:32:25 |
| 150.109.115.108 | attack | (sshd) Failed SSH login from 150.109.115.108 (HK/Hong Kong/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 20 05:18:26 server2 sshd[10942]: Invalid user ftpuser from 150.109.115.108 Sep 20 05:18:26 server2 sshd[10942]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.109.115.108 Sep 20 05:18:28 server2 sshd[10942]: Failed password for invalid user ftpuser from 150.109.115.108 port 48480 ssh2 Sep 20 05:21:05 server2 sshd[13207]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.109.115.108 user=root Sep 20 05:21:07 server2 sshd[13207]: Failed password for root from 150.109.115.108 port 50272 ssh2 |
2020-09-20 17:24:41 |
| 181.22.5.230 | attackbotsspam | Postfix SMTP rejection |
2020-09-20 17:49:50 |
| 156.96.44.217 | attackspam | 37215/tcp [2020-09-20]1pkt |
2020-09-20 17:41:45 |
| 142.44.246.156 | attack | 2020-09-19 UTC: (21x) - root(21x) |
2020-09-20 17:56:53 |