城市(city): unknown
省份(region): unknown
国家(country): United States of America (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 44.194.92.34
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 56327
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;44.194.92.34. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012300 1800 900 604800 86400
;; Query time: 16 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jan 23 16:43:29 CST 2025
;; MSG SIZE rcvd: 10534.92.194.44.in-addr.arpa domain name pointer ec2-44-194-92-34.compute-1.amazonaws.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
34.92.194.44.in-addr.arpa name = ec2-44-194-92-34.compute-1.amazonaws.com.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 1.190.9.25 | attackbots | Splunk® : port scan detected: Aug 18 18:11:05 testbed kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=82:c6:52:d1:6e:53:64:c3:d6:0b:ef:f0:08:00 SRC=1.190.9.25 DST=104.248.11.191 LEN=40 TOS=0x00 PREC=0x00 TTL=47 ID=21845 PROTO=TCP SPT=51392 DPT=8080 WINDOW=54157 RES=0x00 SYN URGP=0 |
2019-08-19 07:13:55 |
| 103.229.247.202 | attackspambots | SPF Fail sender not permitted to send mail for @123.net / Sent mail to target address hacked/leaked from abandonia in 2016 |
2019-08-19 07:32:46 |
| 222.186.42.15 | attack | Aug 19 07:17:53 [hidden] sshd[2527]: refused connect from 222.186.42.15 (222.186.42.15) Aug 19 08:31:36 [hidden] sshd[5756]: refused connect from 222.186.42.15 (222.186.42.15) Aug 19 09:03:55 [hidden] sshd[6650]: refused connect from 222.186.42.15 (222.186.42.15) |
2019-08-19 07:05:19 |
| 117.50.84.166 | attack | Aug 18 18:00:58 aat-srv002 sshd[3890]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.84.166 Aug 18 18:01:00 aat-srv002 sshd[3890]: Failed password for invalid user mirror from 117.50.84.166 port 53304 ssh2 Aug 18 18:05:39 aat-srv002 sshd[4017]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.84.166 Aug 18 18:05:41 aat-srv002 sshd[4017]: Failed password for invalid user bwadmin from 117.50.84.166 port 42630 ssh2 ... |
2019-08-19 07:12:00 |
| 106.52.95.68 | attackspambots | Aug 19 01:14:52 mail sshd\[3595\]: Failed password for invalid user 123456 from 106.52.95.68 port 44536 ssh2 Aug 19 01:19:44 mail sshd\[4317\]: Invalid user 123456789sorin from 106.52.95.68 port 34050 Aug 19 01:19:44 mail sshd\[4317\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.95.68 Aug 19 01:19:46 mail sshd\[4317\]: Failed password for invalid user 123456789sorin from 106.52.95.68 port 34050 ssh2 Aug 19 01:24:28 mail sshd\[4938\]: Invalid user 123 from 106.52.95.68 port 51796 Aug 19 01:24:28 mail sshd\[4938\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.95.68 |
2019-08-19 07:36:22 |
| 24.4.128.213 | attack | Aug 18 13:00:18 hanapaa sshd\[31314\]: Invalid user danikar from 24.4.128.213 Aug 18 13:00:18 hanapaa sshd\[31314\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=c-24-4-128-213.hsd1.ca.comcast.net Aug 18 13:00:19 hanapaa sshd\[31314\]: Failed password for invalid user danikar from 24.4.128.213 port 48932 ssh2 Aug 18 13:04:54 hanapaa sshd\[31674\]: Invalid user usuario from 24.4.128.213 Aug 18 13:04:54 hanapaa sshd\[31674\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=c-24-4-128-213.hsd1.ca.comcast.net |
2019-08-19 07:13:37 |
| 140.206.75.18 | attackbots | Aug 18 12:44:43 auw2 sshd\[4721\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.206.75.18 user=root Aug 18 12:44:45 auw2 sshd\[4721\]: Failed password for root from 140.206.75.18 port 4472 ssh2 Aug 18 12:49:28 auw2 sshd\[5162\]: Invalid user financeiro from 140.206.75.18 Aug 18 12:49:28 auw2 sshd\[5162\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.206.75.18 Aug 18 12:49:30 auw2 sshd\[5162\]: Failed password for invalid user financeiro from 140.206.75.18 port 4473 ssh2 |
2019-08-19 07:01:50 |
| 54.37.233.192 | attackspambots | Aug 19 00:09:55 XXX sshd[22621]: Invalid user milo from 54.37.233.192 port 51794 |
2019-08-19 07:37:51 |
| 223.226.123.91 | attack | $f2bV_matches |
2019-08-19 07:14:13 |
| 208.58.129.131 | attackbotsspam | Aug 18 13:16:28 tdfoods sshd\[16165\]: Invalid user richards from 208.58.129.131 Aug 18 13:16:28 tdfoods sshd\[16165\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=208.58.129.131 Aug 18 13:16:30 tdfoods sshd\[16165\]: Failed password for invalid user richards from 208.58.129.131 port 60324 ssh2 Aug 18 13:20:37 tdfoods sshd\[16503\]: Invalid user ralph from 208.58.129.131 Aug 18 13:20:37 tdfoods sshd\[16503\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=208.58.129.131 |
2019-08-19 07:25:37 |
| 164.132.24.138 | attackbotsspam | Automatic report - Banned IP Access |
2019-08-19 07:38:26 |
| 140.143.25.160 | attackbotsspam | $f2bV_matches |
2019-08-19 07:14:39 |
| 185.109.54.156 | attackspam | Aug 18 23:12:21 hb sshd\[20721\]: Invalid user matias from 185.109.54.156 Aug 18 23:12:21 hb sshd\[20721\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.109.54.156 Aug 18 23:12:22 hb sshd\[20721\]: Failed password for invalid user matias from 185.109.54.156 port 60968 ssh2 Aug 18 23:16:21 hb sshd\[21124\]: Invalid user mosquitto from 185.109.54.156 Aug 18 23:16:21 hb sshd\[21124\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.109.54.156 |
2019-08-19 07:17:55 |
| 51.75.205.122 | attackspam | Aug 19 01:13:41 * sshd[31267]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.205.122 Aug 19 01:13:42 * sshd[31267]: Failed password for invalid user teamspeak from 51.75.205.122 port 57326 ssh2 |
2019-08-19 07:18:53 |
| 5.249.145.245 | attackspam | SSH Brute-Force reported by Fail2Ban |
2019-08-19 07:34:23 |