城市(city): unknown
省份(region): unknown
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 52.196.231.34
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 14174
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;52.196.231.34. IN A
;; AUTHORITY SECTION:
. 307 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019103000 1800 900 604800 86400
;; Query time: 61 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Oct 30 21:43:27 CST 2019
;; MSG SIZE rcvd: 11734.231.196.52.in-addr.arpa domain name pointer ec2-52-196-231-34.ap-northeast-1.compute.amazonaws.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
34.231.196.52.in-addr.arpa name = ec2-52-196-231-34.ap-northeast-1.compute.amazonaws.com.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 139.217.227.32 | attackbotsspam | 2020-04-24T05:03:32.239546shield sshd\[12416\]: Invalid user ubuntu from 139.217.227.32 port 45600 2020-04-24T05:03:32.243046shield sshd\[12416\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.217.227.32 2020-04-24T05:03:34.276184shield sshd\[12416\]: Failed password for invalid user ubuntu from 139.217.227.32 port 45600 ssh2 2020-04-24T05:09:01.586163shield sshd\[13727\]: Invalid user kx from 139.217.227.32 port 50664 2020-04-24T05:09:01.590077shield sshd\[13727\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.217.227.32 |
2020-04-24 13:14:13 |
| 51.75.207.61 | attack | Apr 23 19:10:56 eddieflores sshd\[29594\]: Invalid user go from 51.75.207.61 Apr 23 19:10:56 eddieflores sshd\[29594\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.ip-51-75-207.eu Apr 23 19:10:58 eddieflores sshd\[29594\]: Failed password for invalid user go from 51.75.207.61 port 59818 ssh2 Apr 23 19:14:54 eddieflores sshd\[29866\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.ip-51-75-207.eu user=root Apr 23 19:14:56 eddieflores sshd\[29866\]: Failed password for root from 51.75.207.61 port 44836 ssh2 |
2020-04-24 13:48:25 |
| 104.214.72.28 | attack | Unauthorized SSH login attempts |
2020-04-24 13:04:13 |
| 41.36.137.236 | attack | Portscan detected |
2020-04-24 13:19:26 |
| 52.167.224.118 | attack | RDP Bruteforce |
2020-04-24 13:54:17 |
| 123.207.65.225 | attackspam | Invalid user minecraft from 123.207.65.225 port 41398 |
2020-04-24 13:24:43 |
| 82.103.70.227 | attackspam | Brute force attempt |
2020-04-24 13:47:13 |
| 77.42.125.139 | attackbots | Automatic report - Port Scan Attack |
2020-04-24 13:08:36 |
| 106.75.172.103 | attackspambots | Invalid user ubuntu from 106.75.172.103 port 55688 |
2020-04-24 13:47:40 |
| 217.160.172.187 | attackspambots | Apr 24 07:12:35 amida sshd[605400]: Invalid user postgres from 217.160.172.187 Apr 24 07:12:35 amida sshd[605400]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.160.172.187 Apr 24 07:12:37 amida sshd[605400]: Failed password for invalid user postgres from 217.160.172.187 port 55606 ssh2 Apr 24 07:12:37 amida sshd[605400]: Received disconnect from 217.160.172.187: 11: Bye Bye [preauth] Apr 24 07:16:53 amida sshd[606392]: Invalid user admin from 217.160.172.187 Apr 24 07:16:53 amida sshd[606392]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.160.172.187 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=217.160.172.187 |
2020-04-24 13:26:07 |
| 121.69.10.62 | attackspambots | Brute forcing RDP port 3389 |
2020-04-24 13:11:12 |
| 77.232.100.253 | attack | Apr 24 05:47:45 h1745522 sshd[29119]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.232.100.253 user=root Apr 24 05:47:47 h1745522 sshd[29119]: Failed password for root from 77.232.100.253 port 44084 ssh2 Apr 24 05:52:09 h1745522 sshd[29209]: Invalid user hadoop from 77.232.100.253 port 59740 Apr 24 05:52:09 h1745522 sshd[29209]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.232.100.253 Apr 24 05:52:09 h1745522 sshd[29209]: Invalid user hadoop from 77.232.100.253 port 59740 Apr 24 05:52:11 h1745522 sshd[29209]: Failed password for invalid user hadoop from 77.232.100.253 port 59740 ssh2 Apr 24 05:56:29 h1745522 sshd[29357]: Invalid user ei from 77.232.100.253 port 47164 Apr 24 05:56:29 h1745522 sshd[29357]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.232.100.253 Apr 24 05:56:29 h1745522 sshd[29357]: Invalid user ei from 77.232.100.253 port 47164 Apr 2 ... |
2020-04-24 13:20:31 |
| 106.12.125.241 | attack | Apr 24 11:29:47 f sshd\[30668\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.125.241 user=root Apr 24 11:29:49 f sshd\[30668\]: Failed password for root from 106.12.125.241 port 43864 ssh2 Apr 24 11:56:04 f sshd\[31043\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.125.241 ... |
2020-04-24 13:40:39 |
| 185.39.11.151 | attackbots | 04/23/2020-23:56:46.180694 185.39.11.151 Protocol: 6 ET SCAN NMAP -sS window 1024 |
2020-04-24 13:14:54 |
| 89.248.160.150 | attackspambots | 89.248.160.150 was recorded 18 times by 11 hosts attempting to connect to the following ports: 20002,20001,21874. Incident counter (4h, 24h, all-time): 18, 103, 12229 |
2020-04-24 13:26:22 |