城市(city): unknown
省份(region): unknown
国家(country): United States of America (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 52.27.242.90
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 54791
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;52.27.242.90. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020602 1800 900 604800 86400
;; Query time: 12 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 07 07:03:58 CST 2025
;; MSG SIZE rcvd: 10590.242.27.52.in-addr.arpa domain name pointer ec2-52-27-242-90.us-west-2.compute.amazonaws.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
90.242.27.52.in-addr.arpa name = ec2-52-27-242-90.us-west-2.compute.amazonaws.com.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 185.220.101.139 | attackbotsspam | Mar 31 14:34:56 srv-ubuntu-dev3 sshd[57346]: Invalid user guest from 185.220.101.139 Mar 31 14:34:56 srv-ubuntu-dev3 sshd[57346]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.220.101.139 Mar 31 14:34:56 srv-ubuntu-dev3 sshd[57346]: Invalid user guest from 185.220.101.139 Mar 31 14:34:58 srv-ubuntu-dev3 sshd[57346]: Failed password for invalid user guest from 185.220.101.139 port 45503 ssh2 Mar 31 14:34:56 srv-ubuntu-dev3 sshd[57346]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.220.101.139 Mar 31 14:34:56 srv-ubuntu-dev3 sshd[57346]: Invalid user guest from 185.220.101.139 Mar 31 14:34:58 srv-ubuntu-dev3 sshd[57346]: Failed password for invalid user guest from 185.220.101.139 port 45503 ssh2 Mar 31 14:35:00 srv-ubuntu-dev3 sshd[57346]: Failed password for invalid user guest from 185.220.101.139 port 45503 ssh2 Mar 31 14:34:56 srv-ubuntu-dev3 sshd[57346]: pam_unix(sshd:auth): authentication fai ... |
2020-03-31 20:44:47 |
| 103.138.41.74 | attackspambots | Mar 31 13:02:09 jane sshd[6196]: Failed password for root from 103.138.41.74 port 60499 ssh2 ... |
2020-03-31 20:22:56 |
| 104.127.126.70 | attackspam | Mar 31 05:47:46 debian-2gb-nbg1-2 kernel: \[7885520.675906\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=104.127.126.70 DST=195.201.40.59 LEN=44 TOS=0x00 PREC=0x00 TTL=51 ID=0 DF PROTO=TCP SPT=443 DPT=45751 WINDOW=29200 RES=0x00 ACK SYN URGP=0 |
2020-03-31 20:31:54 |
| 116.72.18.57 | attack | SSH login attempts. |
2020-03-31 20:58:39 |
| 162.247.73.192 | attackspambots | 8,19-01/01 [bc01/m16] PostRequest-Spammer scoring: paris |
2020-03-31 20:17:48 |
| 198.23.189.18 | attackbotsspam | Invalid user rylee from 198.23.189.18 port 58958 |
2020-03-31 20:27:24 |
| 186.185.242.68 | attackbots | IP address logged by my Netflix account after the individual hacked into and locked me out of my account. Individual also changed my account settings to the most expensive plan, which allows multiple people (profiles) to watch, and several profiles were added. The name on my account was changed to "Juan". The address, 186.185.242.68 was the first person to use my account on 25 March 2020. I contacted Netflix to have my account restored, so I was able to see the various IP addresses used. I will report all of them as well. |
2020-03-31 20:25:16 |
| 111.10.24.147 | attack | Mar 31 12:28:40 |
2020-03-31 20:38:12 |
| 39.45.156.232 | attackbots | 445/tcp [2020-03-31]1pkt |
2020-03-31 20:48:28 |
| 162.214.68.174 | attack | port |
2020-03-31 20:18:41 |
| 89.20.130.2 | attack | Mar 31 14:35:00 debian-2gb-nbg1-2 kernel: \[7917153.590153\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=89.20.130.2 DST=195.201.40.59 LEN=44 TOS=0x00 PREC=0x00 TTL=52 ID=3041 PROTO=TCP SPT=55494 DPT=23 WINDOW=51926 RES=0x00 SYN URGP=0 |
2020-03-31 20:52:18 |
| 51.77.210.216 | attackbotsspam | 2020-03-31T05:51:57.128344abusebot.cloudsearch.cf sshd[749]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=216.ip-51-77-210.eu user=root 2020-03-31T05:51:59.137730abusebot.cloudsearch.cf sshd[749]: Failed password for root from 51.77.210.216 port 40052 ssh2 2020-03-31T05:56:03.419346abusebot.cloudsearch.cf sshd[1000]: Invalid user mc from 51.77.210.216 port 52256 2020-03-31T05:56:03.425383abusebot.cloudsearch.cf sshd[1000]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=216.ip-51-77-210.eu 2020-03-31T05:56:03.419346abusebot.cloudsearch.cf sshd[1000]: Invalid user mc from 51.77.210.216 port 52256 2020-03-31T05:56:05.874476abusebot.cloudsearch.cf sshd[1000]: Failed password for invalid user mc from 51.77.210.216 port 52256 ssh2 2020-03-31T06:00:08.035702abusebot.cloudsearch.cf sshd[1288]: Invalid user mc from 51.77.210.216 port 36232 ... |
2020-03-31 20:38:40 |
| 27.76.240.249 | attackspam | Unauthorized connection attempt detected from IP address 27.76.240.249 to port 445 |
2020-03-31 20:19:48 |
| 181.209.165.10 | attackspam | Triggered: repeated knocking on closed ports. |
2020-03-31 20:15:47 |
| 94.176.189.11 | attack | SpamScore above: 10.0 |
2020-03-31 20:11:42 |