城市(city): unknown
省份(region): unknown
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 52.91.107.50
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 41488
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;52.91.107.50. IN A
;; AUTHORITY SECTION:
. 479 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019103001 1800 900 604800 86400
;; Query time: 622 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Oct 31 07:31:44 CST 2019
;; MSG SIZE rcvd: 116
50.107.91.52.in-addr.arpa domain name pointer ec2-52-91-107-50.compute-1.amazonaws.com.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
50.107.91.52.in-addr.arpa name = ec2-52-91-107-50.compute-1.amazonaws.com.
Authoritative answers can be found from:
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 200.233.163.65 | attack | $f2bV_matches |
2020-08-28 14:09:19 |
| 213.32.122.82 | attackbots | scan |
2020-08-28 14:22:55 |
| 117.6.219.104 | attackbotsspam | 20/8/27@23:53:42: FAIL: Alarm-Intrusion address from=117.6.219.104 ... |
2020-08-28 14:23:27 |
| 14.63.167.192 | attackspam | Aug 28 07:37:18 PorscheCustomer sshd[16575]: Failed password for root from 14.63.167.192 port 54606 ssh2 Aug 28 07:41:13 PorscheCustomer sshd[16725]: Failed password for root from 14.63.167.192 port 57270 ssh2 ... |
2020-08-28 13:52:07 |
| 119.29.216.238 | attackbotsspam | Aug 28 08:19:10 lukav-desktop sshd\[28877\]: Invalid user ivete from 119.29.216.238 Aug 28 08:19:10 lukav-desktop sshd\[28877\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.29.216.238 Aug 28 08:19:12 lukav-desktop sshd\[28877\]: Failed password for invalid user ivete from 119.29.216.238 port 35468 ssh2 Aug 28 08:23:47 lukav-desktop sshd\[28920\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.29.216.238 user=root Aug 28 08:23:50 lukav-desktop sshd\[28920\]: Failed password for root from 119.29.216.238 port 34192 ssh2 |
2020-08-28 14:00:40 |
| 182.191.117.83 | attackbots | 182.191.117.83 - - [27/Aug/2020:23:54:16 -0400] "POST /xmlrpc.php HTTP/1.1" 404 208 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/32.0.1667.0 Safari/537.36" 182.191.117.83 - - [27/Aug/2020:23:54:21 -0400] "POST /wordpress/xmlrpc.php HTTP/1.1" 404 218 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/32.0.1667.0 Safari/537.36" 182.191.117.83 - - [27/Aug/2020:23:54:23 -0400] "POST /blog/xmlrpc.php HTTP/1.1" 404 213 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/32.0.1667.0 Safari/537.36" ... |
2020-08-28 13:53:01 |
| 139.162.75.99 | attackspam | Port Scan ... |
2020-08-28 14:08:22 |
| 119.181.19.21 | attackspambots | Aug 28 07:42:25 Ubuntu-1404-trusty-64-minimal sshd\[15998\]: Invalid user testftp from 119.181.19.21 Aug 28 07:42:25 Ubuntu-1404-trusty-64-minimal sshd\[15998\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.181.19.21 Aug 28 07:42:27 Ubuntu-1404-trusty-64-minimal sshd\[15998\]: Failed password for invalid user testftp from 119.181.19.21 port 60210 ssh2 Aug 28 07:49:36 Ubuntu-1404-trusty-64-minimal sshd\[20076\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.181.19.21 user=games Aug 28 07:49:38 Ubuntu-1404-trusty-64-minimal sshd\[20076\]: Failed password for games from 119.181.19.21 port 44136 ssh2 |
2020-08-28 14:33:17 |
| 218.92.0.185 | attackbots | Aug 28 08:06:57 ns381471 sshd[20044]: Failed password for root from 218.92.0.185 port 57728 ssh2 Aug 28 08:07:10 ns381471 sshd[20044]: error: maximum authentication attempts exceeded for root from 218.92.0.185 port 57728 ssh2 [preauth] |
2020-08-28 14:14:39 |
| 218.92.0.224 | attackbotsspam | 2020-08-28T05:55:16.426747shield sshd\[7192\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.224 user=root 2020-08-28T05:55:18.033838shield sshd\[7192\]: Failed password for root from 218.92.0.224 port 15552 ssh2 2020-08-28T05:55:21.294721shield sshd\[7192\]: Failed password for root from 218.92.0.224 port 15552 ssh2 2020-08-28T05:55:24.630353shield sshd\[7192\]: Failed password for root from 218.92.0.224 port 15552 ssh2 2020-08-28T05:55:28.385180shield sshd\[7192\]: Failed password for root from 218.92.0.224 port 15552 ssh2 |
2020-08-28 14:01:26 |
| 185.220.101.203 | attackbotsspam | 2020-08-28T05:15:38.569716abusebot-2.cloudsearch.cf sshd[14202]: Invalid user admin from 185.220.101.203 port 28110 2020-08-28T05:15:38.774865abusebot-2.cloudsearch.cf sshd[14202]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.220.101.203 2020-08-28T05:15:38.569716abusebot-2.cloudsearch.cf sshd[14202]: Invalid user admin from 185.220.101.203 port 28110 2020-08-28T05:15:40.588174abusebot-2.cloudsearch.cf sshd[14202]: Failed password for invalid user admin from 185.220.101.203 port 28110 ssh2 2020-08-28T05:15:41.754216abusebot-2.cloudsearch.cf sshd[14204]: Invalid user admin from 185.220.101.203 port 15518 2020-08-28T05:15:41.958830abusebot-2.cloudsearch.cf sshd[14204]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.220.101.203 2020-08-28T05:15:41.754216abusebot-2.cloudsearch.cf sshd[14204]: Invalid user admin from 185.220.101.203 port 15518 2020-08-28T05:15:43.852243abusebot-2.cloudsearch.cf sshd[ ... |
2020-08-28 14:10:50 |
| 128.53.216.201 | attackspambots | Brute Force |
2020-08-28 13:51:27 |
| 106.52.177.213 | attackspam | Aug 28 00:18:28 Host-KEWR-E sshd[13659]: Disconnected from invalid user root 106.52.177.213 port 45558 [preauth] ... |
2020-08-28 14:00:54 |
| 37.59.58.142 | attackspambots | Aug 28 06:08:28 plex-server sshd[370030]: Invalid user lyp from 37.59.58.142 port 38500 Aug 28 06:08:28 plex-server sshd[370030]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.59.58.142 Aug 28 06:08:28 plex-server sshd[370030]: Invalid user lyp from 37.59.58.142 port 38500 Aug 28 06:08:31 plex-server sshd[370030]: Failed password for invalid user lyp from 37.59.58.142 port 38500 ssh2 Aug 28 06:11:54 plex-server sshd[371626]: Invalid user sandi from 37.59.58.142 port 43476 ... |
2020-08-28 14:14:53 |
| 121.7.127.92 | attackspam | Invalid user cible from 121.7.127.92 port 38953 |
2020-08-28 14:26:30 |