城市(city): Boardman
省份(region): Oregon
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 52.40.55.169
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 34660
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;52.40.55.169. IN A
;; AUTHORITY SECTION:
. 170 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020100200 1800 900 604800 86400
;; Query time: 13 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Oct 02 15:06:25 CST 2020
;; MSG SIZE rcvd: 116169.55.40.52.in-addr.arpa domain name pointer ec2-52-40-55-169.us-west-2.compute.amazonaws.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
169.55.40.52.in-addr.arpa name = ec2-52-40-55-169.us-west-2.compute.amazonaws.com.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 193.70.85.206 | attackspam | Oct 12 18:11:59 legacy sshd[18391]: Failed password for root from 193.70.85.206 port 39343 ssh2 Oct 12 18:16:00 legacy sshd[18522]: Failed password for root from 193.70.85.206 port 59322 ssh2 ... |
2019-10-13 00:30:04 |
| 178.69.12.30 | attackbotsspam | proto=tcp . spt=60699 . dpt=25 . (Listed on dnsbl-sorbs plus abuseat-org and barracuda) (885) |
2019-10-13 01:07:31 |
| 95.79.34.52 | attackspam | Unauthorised access (Oct 12) SRC=95.79.34.52 LEN=44 TOS=0x10 PREC=0x60 TTL=242 ID=1365 TCP DPT=1433 WINDOW=1024 SYN |
2019-10-13 00:50:53 |
| 115.186.148.38 | attack | Oct 12 18:35:40 meumeu sshd[23775]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.186.148.38 Oct 12 18:35:42 meumeu sshd[23775]: Failed password for invalid user Lolita123 from 115.186.148.38 port 19531 ssh2 Oct 12 18:41:03 meumeu sshd[24574]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.186.148.38 ... |
2019-10-13 00:43:00 |
| 106.13.23.35 | attackspam | Oct 12 19:39:06 areeb-Workstation sshd[2778]: Failed password for root from 106.13.23.35 port 32876 ssh2 ... |
2019-10-13 00:39:45 |
| 106.248.41.245 | attackspambots | Jul 7 04:03:24 vtv3 sshd\[3588\]: Invalid user yi from 106.248.41.245 port 33334 Jul 7 04:03:24 vtv3 sshd\[3588\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.248.41.245 Jul 7 04:03:26 vtv3 sshd\[3588\]: Failed password for invalid user yi from 106.248.41.245 port 33334 ssh2 Jul 7 04:06:50 vtv3 sshd\[5302\]: Invalid user nate from 106.248.41.245 port 39078 Jul 7 04:06:50 vtv3 sshd\[5302\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.248.41.245 Jul 7 04:19:16 vtv3 sshd\[10890\]: Invalid user yamada from 106.248.41.245 port 53222 Jul 7 04:19:16 vtv3 sshd\[10890\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.248.41.245 Jul 7 04:19:18 vtv3 sshd\[10890\]: Failed password for invalid user yamada from 106.248.41.245 port 53222 ssh2 Jul 7 04:21:50 vtv3 sshd\[12293\]: Invalid user jenkins from 106.248.41.245 port 50406 Jul 7 04:21:50 vtv3 sshd\[12293\]: pam_ |
2019-10-13 01:05:14 |
| 52.52.66.127 | attackspam | Automatic report - XMLRPC Attack |
2019-10-13 00:32:05 |
| 92.222.33.4 | attack | Oct 12 17:27:50 SilenceServices sshd[344]: Failed password for root from 92.222.33.4 port 51686 ssh2 Oct 12 17:32:17 SilenceServices sshd[1520]: Failed password for root from 92.222.33.4 port 34394 ssh2 |
2019-10-13 01:03:02 |
| 52.57.168.236 | attackspam | Unsolicited bulk porn & phishing - varying ISPs (primarily Chinanet); repetitive redirects from blacklisted IP 92.63.192.124 & .151; spam volume up to 15/day. Spam link 4-gkb.ru = 92.63.192.151 NVFOPServer-net (previous IP 92.63.192.124) - repetitive redirects: - www.benaughty.com = 2.17.43.33, 2.17.43.17 Akamai - walkondates.com = 52.57.168.236, 52.58.193.171 Amazon - retargetcore.com = 52.29.68.89, 35.158.186.87 Amazon - t.insigit.com = 52.28.205.175, 54.93.35.219 Amazon - uf.noclef.com = 3.121.133.104, 52.59.105.243 Amazon Unsolicited bulk spam - unimplemented.likethin.eu, China Mobile Communications Corporation - 120.208.209.206 Sender domain harmsenheftrucks.nl = 136.144.206.196 TransIP BV |
2019-10-13 00:29:33 |
| 14.142.57.66 | attack | Oct 12 18:45:26 meumeu sshd[25260]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.142.57.66 Oct 12 18:45:27 meumeu sshd[25260]: Failed password for invalid user Contrast123 from 14.142.57.66 port 59256 ssh2 Oct 12 18:50:17 meumeu sshd[25945]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.142.57.66 ... |
2019-10-13 00:54:03 |
| 93.149.79.247 | attackbotsspam | Oct 12 18:39:34 vps691689 sshd[16070]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.149.79.247 Oct 12 18:39:36 vps691689 sshd[16070]: Failed password for invalid user Problem@123 from 93.149.79.247 port 45827 ssh2 ... |
2019-10-13 01:12:24 |
| 222.186.31.136 | attack | Oct 12 06:27:52 php1 sshd\[6369\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.31.136 user=root Oct 12 06:27:54 php1 sshd\[6369\]: Failed password for root from 222.186.31.136 port 39151 ssh2 Oct 12 06:27:57 php1 sshd\[6369\]: Failed password for root from 222.186.31.136 port 39151 ssh2 Oct 12 06:27:59 php1 sshd\[6369\]: Failed password for root from 222.186.31.136 port 39151 ssh2 Oct 12 06:35:45 php1 sshd\[7768\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.31.136 user=root |
2019-10-13 00:37:01 |
| 116.239.252.25 | attack | SASL broute force |
2019-10-13 00:44:28 |
| 23.129.64.180 | attackbotsspam | abcdata-sys.de:80 23.129.64.180 - - \[12/Oct/2019:18:25:36 +0200\] "POST /xmlrpc.php HTTP/1.0" 301 497 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/68.0.3440.106 Safari/537.36" www.goldgier.de 23.129.64.180 \[12/Oct/2019:18:25:38 +0200\] "POST /xmlrpc.php HTTP/1.0" 200 4081 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/68.0.3440.106 Safari/537.36" |
2019-10-13 00:31:04 |
| 27.72.102.190 | attackspam | Oct 12 16:39:26 hcbbdb sshd\[2711\]: Invalid user 123 from 27.72.102.190 Oct 12 16:39:26 hcbbdb sshd\[2711\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.72.102.190 Oct 12 16:39:28 hcbbdb sshd\[2711\]: Failed password for invalid user 123 from 27.72.102.190 port 42866 ssh2 Oct 12 16:44:38 hcbbdb sshd\[3287\]: Invalid user 123Books from 27.72.102.190 Oct 12 16:44:38 hcbbdb sshd\[3287\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.72.102.190 |
2019-10-13 00:55:23 |