城市(city): unknown
省份(region): unknown
国家(country): United States of America (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 44.209.47.55
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 19418
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;44.209.47.55. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022800 1800 900 604800 86400
;; Query time: 33 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Mar 01 01:43:51 CST 2025
;; MSG SIZE rcvd: 105
55.47.209.44.in-addr.arpa domain name pointer ec2-44-209-47-55.compute-1.amazonaws.com.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
55.47.209.44.in-addr.arpa name = ec2-44-209-47-55.compute-1.amazonaws.com.
Authoritative answers can be found from:
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 51.38.48.127 | attackbots | 2019-10-20T23:46:18.296566ns525875 sshd\[10886\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=127.ip-51-38-48.eu user=root 2019-10-20T23:46:19.801348ns525875 sshd\[10886\]: Failed password for root from 51.38.48.127 port 43802 ssh2 2019-10-20T23:49:54.815472ns525875 sshd\[15398\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=127.ip-51-38-48.eu user=root 2019-10-20T23:49:56.641183ns525875 sshd\[15398\]: Failed password for root from 51.38.48.127 port 54828 ssh2 2019-10-20T23:53:35.365216ns525875 sshd\[20011\]: Invalid user Matrix from 51.38.48.127 port 37658 2019-10-20T23:53:35.371873ns525875 sshd\[20011\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=127.ip-51-38-48.eu 2019-10-20T23:53:37.537341ns525875 sshd\[20011\]: Failed password for invalid user Matrix from 51.38.48.127 port 37658 ssh2 2019-10-20T23:57:09.245676ns525875 sshd\[24354\]: pam_uni ... |
2019-10-28 17:16:30 |
| 68.183.84.213 | attackbotsspam | 10/28/2019-04:48:57.586375 68.183.84.213 Protocol: 6 ET POLICY Cleartext WordPress Login |
2019-10-28 17:33:02 |
| 200.111.137.132 | attackbots | 2019-10-28T09:05:58.571752abusebot.cloudsearch.cf sshd\[18897\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.111.137.132 user=root |
2019-10-28 17:17:39 |
| 54.39.138.246 | attackbots | 2019-10-11T06:35:14.505186ns525875 sshd\[31127\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip246.ip-54-39-138.net user=root 2019-10-11T06:35:15.886647ns525875 sshd\[31127\]: Failed password for root from 54.39.138.246 port 46112 ssh2 2019-10-11T06:38:45.274874ns525875 sshd\[3145\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip246.ip-54-39-138.net user=root 2019-10-11T06:38:47.292728ns525875 sshd\[3145\]: Failed password for root from 54.39.138.246 port 56956 ssh2 2019-10-11T06:42:15.997622ns525875 sshd\[7383\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip246.ip-54-39-138.net user=root 2019-10-11T06:42:17.846209ns525875 sshd\[7383\]: Failed password for root from 54.39.138.246 port 39564 ssh2 2019-10-11T06:45:43.154991ns525875 sshd\[11528\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip246.ip ... |
2019-10-28 17:16:57 |
| 27.15.194.74 | attack | Honeypot attack, port: 23, PTR: PTR record not found |
2019-10-28 17:19:52 |
| 139.155.71.154 | attack | Oct 28 06:28:05 pl3server sshd[21773]: Invalid user ubnt from 139.155.71.154 Oct 28 06:28:05 pl3server sshd[21773]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.71.154 Oct 28 06:28:07 pl3server sshd[21773]: Failed password for invalid user ubnt from 139.155.71.154 port 43678 ssh2 Oct 28 06:28:07 pl3server sshd[21773]: Received disconnect from 139.155.71.154: 11: Bye Bye [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=139.155.71.154 |
2019-10-28 17:32:18 |
| 69.30.232.22 | attack | [portscan] Port scan |
2019-10-28 17:21:53 |
| 185.220.101.35 | attackbotsspam | 10/28/2019-04:49:25.781135 185.220.101.35 Protocol: 6 ET TOR Known Tor Exit Node Traffic group 32 |
2019-10-28 17:14:38 |
| 104.244.76.13 | attack | 10/28/2019-04:49:40.819205 104.244.76.13 Protocol: 6 ET TOR Known Tor Exit Node Traffic group 3 |
2019-10-28 17:04:09 |
| 165.22.231.238 | attack | Automatic report - SSH Brute-Force Attack |
2019-10-28 17:12:11 |
| 138.197.5.224 | attackbots | 138.197.5.224 - - [28/Oct/2019:06:48:20 +0100] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.197.5.224 - - [28/Oct/2019:06:48:20 +0100] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.197.5.224 - - [28/Oct/2019:06:48:21 +0100] "POST /wp-login.php HTTP/1.1" 200 1486 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.197.5.224 - - [28/Oct/2019:06:48:21 +0100] "POST /wp-login.php HTTP/1.1" 200 1503 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.197.5.224 - - [28/Oct/2019:06:48:21 +0100] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.197.5.224 - - [28/Oct/2019:06:48:21 +0100] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2019-10-28 17:39:40 |
| 186.4.123.139 | attackbots | Automatic report - Banned IP Access |
2019-10-28 17:18:45 |
| 218.92.0.204 | attackspam | Oct 28 09:20:24 venus sshd\[533\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.204 user=root Oct 28 09:20:26 venus sshd\[533\]: Failed password for root from 218.92.0.204 port 18575 ssh2 Oct 28 09:20:28 venus sshd\[533\]: Failed password for root from 218.92.0.204 port 18575 ssh2 ... |
2019-10-28 17:31:24 |
| 115.254.63.52 | attack | Oct 28 09:06:09 venus sshd\[337\]: Invalid user smtpuser from 115.254.63.52 port 54766 Oct 28 09:06:09 venus sshd\[337\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.254.63.52 Oct 28 09:06:11 venus sshd\[337\]: Failed password for invalid user smtpuser from 115.254.63.52 port 54766 ssh2 ... |
2019-10-28 17:21:07 |
| 81.22.45.190 | attackspam | Oct 28 09:34:57 h2177944 kernel: \[5127475.229310\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=81.22.45.190 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=34228 PROTO=TCP SPT=46730 DPT=32825 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 28 09:40:01 h2177944 kernel: \[5127779.466668\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=81.22.45.190 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=14057 PROTO=TCP SPT=46730 DPT=33230 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 28 09:40:22 h2177944 kernel: \[5127799.961036\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=81.22.45.190 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=21987 PROTO=TCP SPT=46730 DPT=33106 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 28 09:46:44 h2177944 kernel: \[5128182.038881\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=81.22.45.190 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=50398 PROTO=TCP SPT=46730 DPT=32613 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 28 09:51:51 h2177944 kernel: \[5128488.606866\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=81.22.45.190 DST=85.214.117.9 |
2019-10-28 17:04:51 |