城市(city): Boardman
省份(region): Oregon
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 52.41.18.138
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 1590
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;52.41.18.138. IN A
;; AUTHORITY SECTION:
. 597 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020041801 1800 900 604800 86400
;; Query time: 144 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Apr 19 05:58:51 CST 2020
;; MSG SIZE rcvd: 116138.18.41.52.in-addr.arpa domain name pointer ec2-52-41-18-138.us-west-2.compute.amazonaws.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
138.18.41.52.in-addr.arpa name = ec2-52-41-18-138.us-west-2.compute.amazonaws.com.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 167.114.98.233 | attackspambots | Failed password for root from 167.114.98.233 port 37534 ssh2 |
2020-08-08 07:10:23 |
| 104.245.44.233 | attackspam | 2020-08-07T22:17:54.022527shield sshd\[12462\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.245.44.233.16clouds.com user=root 2020-08-07T22:17:56.284149shield sshd\[12462\]: Failed password for root from 104.245.44.233 port 33532 ssh2 2020-08-07T22:20:43.690429shield sshd\[13071\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.245.44.233.16clouds.com user=root 2020-08-07T22:20:47.565103shield sshd\[13071\]: Failed password for root from 104.245.44.233 port 45758 ssh2 2020-08-07T22:24:07.018414shield sshd\[13816\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.245.44.233.16clouds.com user=root |
2020-08-08 06:56:54 |
| 122.228.19.80 | attack | 122.228.19.80 was recorded 8 times by 1 hosts attempting to connect to the following ports: 3001,6488,8123,4880,34567,3310,8140,8083. Incident counter (4h, 24h, all-time): 8, 38, 33251 |
2020-08-08 07:23:19 |
| 123.231.12.97 | attackbotsspam | Automatic report - Banned IP Access |
2020-08-08 07:30:07 |
| 51.77.148.7 | attackspam | Fail2Ban |
2020-08-08 07:00:34 |
| 89.216.102.123 | attackspambots | Attempted Brute Force (dovecot) |
2020-08-08 07:29:24 |
| 82.79.236.65 | attack | diesunddas.net 82.79.236.65 [07/Aug/2020:22:25:20 +0200] "POST /wp-login.php HTTP/1.1" 200 12716 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.116 Safari/537.36" diesunddas.net 82.79.236.65 [07/Aug/2020:22:25:21 +0200] "POST /wp-login.php HTTP/1.1" 200 12716 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.116 Safari/537.36" |
2020-08-08 07:03:00 |
| 111.230.56.118 | attackspam | 2020-08-07T02:44:51.523287perso.[domain] sshd[4012812]: Failed password for root from 111.230.56.118 port 45360 ssh2 2020-08-07T02:50:42.371992perso.[domain] sshd[4015540]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.230.56.118 user=root 2020-08-07T02:50:44.093848perso.[domain] sshd[4015540]: Failed password for root from 111.230.56.118 port 49132 ssh2 ... |
2020-08-08 07:05:10 |
| 77.65.17.2 | attackspambots | 2020-08-07T20:20:24.696084shield sshd\[25998\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.65.17.2 user=root 2020-08-07T20:20:26.514318shield sshd\[25998\]: Failed password for root from 77.65.17.2 port 54082 ssh2 2020-08-07T20:22:51.477004shield sshd\[26407\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.65.17.2 user=root 2020-08-07T20:22:53.475815shield sshd\[26407\]: Failed password for root from 77.65.17.2 port 39022 ssh2 2020-08-07T20:25:16.209982shield sshd\[26850\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.65.17.2 user=root |
2020-08-08 07:05:26 |
| 61.177.172.177 | attack | Aug 7 20:31:08 firewall sshd[22239]: Failed password for root from 61.177.172.177 port 42132 ssh2 Aug 7 20:31:11 firewall sshd[22239]: Failed password for root from 61.177.172.177 port 42132 ssh2 Aug 7 20:31:15 firewall sshd[22239]: Failed password for root from 61.177.172.177 port 42132 ssh2 ... |
2020-08-08 07:32:00 |
| 138.197.180.29 | attackspambots | SSH Brute Force |
2020-08-08 07:13:52 |
| 46.238.122.54 | attackbots | Aug 8 00:25:32 marvibiene sshd[3017]: Failed password for root from 46.238.122.54 port 61202 ssh2 Aug 8 00:29:34 marvibiene sshd[3238]: Failed password for root from 46.238.122.54 port 63519 ssh2 |
2020-08-08 06:58:53 |
| 200.105.221.147 | attackbotsspam | Lines containing failures of 200.105.221.147 Aug 4 07:29:41 nexus sshd[638]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.105.221.147 user=r.r Aug 4 07:29:43 nexus sshd[638]: Failed password for r.r from 200.105.221.147 port 60787 ssh2 Aug 4 07:29:43 nexus sshd[638]: Received disconnect from 200.105.221.147 port 60787:11: Bye Bye [preauth] Aug 4 07:29:43 nexus sshd[638]: Disconnected from 200.105.221.147 port 60787 [preauth] Aug 4 07:34:35 nexus sshd[779]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.105.221.147 user=r.r Aug 4 07:34:37 nexus sshd[779]: Failed password for r.r from 200.105.221.147 port 38084 ssh2 Aug 4 07:34:37 nexus sshd[779]: Received disconnect from 200.105.221.147 port 38084:11: Bye Bye [preauth] Aug 4 07:34:37 nexus sshd[779]: Disconnected from 200.105.221.147 port 38084 [preauth] Aug 4 07:39:30 nexus sshd[806]: pam_unix(sshd:auth): authentication........ ------------------------------ |
2020-08-08 07:32:14 |
| 79.6.216.208 | attack | Lines containing failures of 79.6.216.208 Aug 3 14:59:16 neweola sshd[16388]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.6.216.208 user=r.r Aug 3 14:59:17 neweola sshd[16388]: Failed password for r.r from 79.6.216.208 port 51069 ssh2 Aug 3 14:59:18 neweola sshd[16388]: Received disconnect from 79.6.216.208 port 51069:11: Bye Bye [preauth] Aug 3 14:59:18 neweola sshd[16388]: Disconnected from authenticating user r.r 79.6.216.208 port 51069 [preauth] Aug 3 15:03:16 neweola sshd[16588]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.6.216.208 user=r.r Aug 3 15:03:18 neweola sshd[16588]: Failed password for r.r from 79.6.216.208 port 59073 ssh2 Aug 3 15:03:18 neweola sshd[16588]: Received disconnect from 79.6.216.208 port 59073:11: Bye Bye [preauth] Aug 3 15:03:18 neweola sshd[16588]: Disconnected from authenticating user r.r 79.6.216.208 port 59073 [preauth] Aug 3 15:07:17........ ------------------------------ |
2020-08-08 07:14:53 |
| 54.38.134.219 | attackspambots | REQUESTED PAGE: /wp-login.php |
2020-08-08 07:04:40 |