城市(city): Ashburn
省份(region): Virginia
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 54.144.9.5
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 2256
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;54.144.9.5. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019091300 1800 900 604800 86400
;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sat Sep 14 01:42:41 CST 2019
;; MSG SIZE rcvd: 114
5.9.144.54.in-addr.arpa domain name pointer ec2-54-144-9-5.compute-1.amazonaws.com.
Server: 67.207.67.2
Address: 67.207.67.2#53
Non-authoritative answer:
5.9.144.54.in-addr.arpa name = ec2-54-144-9-5.compute-1.amazonaws.com.
Authoritative answers can be found from:
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 81.22.45.115 | attackbots | Nov 16 00:20:32 h2177944 kernel: \[6735519.876694\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=81.22.45.115 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=37917 PROTO=TCP SPT=40293 DPT=1055 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 16 00:22:59 h2177944 kernel: \[6735666.327282\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=81.22.45.115 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=5139 PROTO=TCP SPT=40293 DPT=944 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 16 00:23:33 h2177944 kernel: \[6735700.313829\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=81.22.45.115 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=14282 PROTO=TCP SPT=40293 DPT=1896 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 16 00:24:36 h2177944 kernel: \[6735763.449720\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=81.22.45.115 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=58129 PROTO=TCP SPT=40293 DPT=1456 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 16 00:25:57 h2177944 kernel: \[6735844.918841\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=81.22.45.115 DST=85.214.117.9 LEN=40 |
2019-11-16 08:08:40 |
| 192.144.253.79 | attackspam | Nov 13 03:15:02 itv-usvr-01 sshd[11790]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.144.253.79 user=backup Nov 13 03:15:04 itv-usvr-01 sshd[11790]: Failed password for backup from 192.144.253.79 port 55230 ssh2 Nov 13 03:18:18 itv-usvr-01 sshd[11893]: Invalid user wildwest from 192.144.253.79 Nov 13 03:18:18 itv-usvr-01 sshd[11893]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.144.253.79 Nov 13 03:18:18 itv-usvr-01 sshd[11893]: Invalid user wildwest from 192.144.253.79 Nov 13 03:18:19 itv-usvr-01 sshd[11893]: Failed password for invalid user wildwest from 192.144.253.79 port 57070 ssh2 |
2019-11-16 08:30:18 |
| 191.7.152.13 | attackbotsspam | Invalid user imnadm from 191.7.152.13 port 50680 |
2019-11-16 08:33:36 |
| 104.236.142.200 | attackbotsspam | Automatic report - Banned IP Access |
2019-11-16 08:11:03 |
| 196.53.224.186 | attackbotsspam | 2323/tcp 23/tcp... [2019-09-16/11-15]8pkt,2pt.(tcp) |
2019-11-16 08:38:30 |
| 195.40.80.148 | attack | 445/tcp 1433/tcp... [2019-10-17/11-15]5pkt,2pt.(tcp) |
2019-11-16 08:48:27 |
| 51.38.234.224 | attack | Nov 16 00:12:51 web8 sshd\[12613\]: Invalid user fuquay from 51.38.234.224 Nov 16 00:12:51 web8 sshd\[12613\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.234.224 Nov 16 00:12:53 web8 sshd\[12613\]: Failed password for invalid user fuquay from 51.38.234.224 port 40756 ssh2 Nov 16 00:16:29 web8 sshd\[14507\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.234.224 user=games Nov 16 00:16:32 web8 sshd\[14507\]: Failed password for games from 51.38.234.224 port 50154 ssh2 |
2019-11-16 08:43:18 |
| 138.122.20.5 | attackbots | 1433/tcp 1433/tcp 445/tcp [2019-10-09/11-15]3pkt |
2019-11-16 08:30:49 |
| 189.115.92.79 | attack | Invalid user gearhart from 189.115.92.79 port 48198 |
2019-11-16 08:47:26 |
| 193.169.39.254 | attackspambots | Nov 11 11:04:10 itv-usvr-01 sshd[6230]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.169.39.254 user=nobody Nov 11 11:04:12 itv-usvr-01 sshd[6230]: Failed password for nobody from 193.169.39.254 port 48618 ssh2 |
2019-11-16 08:20:19 |
| 104.128.48.61 | attackspam | 1433/tcp 445/tcp... [2019-09-15/11-15]10pkt,2pt.(tcp) |
2019-11-16 08:34:48 |
| 192.254.73.218 | attackbotsspam | Nov 14 06:54:52 itv-usvr-01 sshd[17663]: Invalid user www from 192.254.73.218 Nov 14 06:54:52 itv-usvr-01 sshd[17663]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.254.73.218 Nov 14 06:54:52 itv-usvr-01 sshd[17663]: Invalid user www from 192.254.73.218 Nov 14 06:54:54 itv-usvr-01 sshd[17663]: Failed password for invalid user www from 192.254.73.218 port 47540 ssh2 Nov 14 06:58:28 itv-usvr-01 sshd[17816]: Invalid user parzych from 192.254.73.218 |
2019-11-16 08:26:47 |
| 59.120.189.234 | attackspam | Nov 15 22:58:59 *** sshd[27108]: Invalid user markmc from 59.120.189.234 |
2019-11-16 08:11:59 |
| 185.209.0.84 | attackbots | 185.209.0.84 was recorded 5 times by 2 hosts attempting to connect to the following ports: 5157,5161,5152,5160,5165. Incident counter (4h, 24h, all-time): 5, 29, 171 |
2019-11-16 08:32:24 |
| 195.29.105.125 | attack | 2019-11-15T03:26:15.0300961495-001 sshd\[838\]: Invalid user godfree from 195.29.105.125 port 43722 2019-11-15T03:26:15.0371071495-001 sshd\[838\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.29.105.125 2019-11-15T03:26:16.8562771495-001 sshd\[838\]: Failed password for invalid user godfree from 195.29.105.125 port 43722 ssh2 2019-11-15T15:20:03.7300271495-001 sshd\[26821\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.29.105.125 user=sshd 2019-11-15T15:20:05.0881431495-001 sshd\[26821\]: Failed password for sshd from 195.29.105.125 port 59344 ssh2 2019-11-15T18:18:40.1181271495-001 sshd\[33124\]: Invalid user vcsa from 195.29.105.125 port 59042 2019-11-15T18:18:40.1254881495-001 sshd\[33124\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.29.105.125 ... |
2019-11-16 08:08:10 |