城市(city): unknown
省份(region): unknown
国家(country): United States of America (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 54.148.217.66
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 14372
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;54.148.217.66. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020302 1800 900 604800 86400
;; Query time: 44 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 04 11:55:29 CST 2025
;; MSG SIZE rcvd: 106
66.217.148.54.in-addr.arpa domain name pointer ec2-54-148-217-66.us-west-2.compute.amazonaws.com.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
66.217.148.54.in-addr.arpa name = ec2-54-148-217-66.us-west-2.compute.amazonaws.com.
Authoritative answers can be found from:
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 132.145.170.174 | attackbots | Nov 13 08:30:10 * sshd[18910]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.145.170.174 Nov 13 08:30:12 * sshd[18910]: Failed password for invalid user 000 from 132.145.170.174 port 25734 ssh2 |
2019-11-13 15:45:41 |
| 167.71.206.126 | attackspam | web-1 [ssh_2] SSH Attack |
2019-11-13 15:45:57 |
| 167.114.226.137 | attackspambots | Nov 13 07:25:19 meumeu sshd[1999]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.114.226.137 Nov 13 07:25:21 meumeu sshd[1999]: Failed password for invalid user mysql from 167.114.226.137 port 33908 ssh2 Nov 13 07:28:57 meumeu sshd[2392]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.114.226.137 ... |
2019-11-13 15:36:09 |
| 113.172.108.147 | attack | Lines containing failures of 113.172.108.147 Nov 13 07:22:26 shared09 sshd[6759]: Invalid user admin from 113.172.108.147 port 39216 Nov 13 07:22:26 shared09 sshd[6759]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.172.108.147 Nov 13 07:22:29 shared09 sshd[6759]: Failed password for invalid user admin from 113.172.108.147 port 39216 ssh2 Nov 13 07:22:29 shared09 sshd[6759]: Connection closed by invalid user admin 113.172.108.147 port 39216 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=113.172.108.147 |
2019-11-13 15:24:08 |
| 51.38.48.127 | attack | $f2bV_matches |
2019-11-13 15:46:31 |
| 138.197.195.52 | attack | Nov 12 20:56:04 sachi sshd\[22860\]: Invalid user admin from 138.197.195.52 Nov 12 20:56:04 sachi sshd\[22860\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.195.52 Nov 12 20:56:06 sachi sshd\[22860\]: Failed password for invalid user admin from 138.197.195.52 port 42126 ssh2 Nov 12 21:00:00 sachi sshd\[23236\]: Invalid user sporsheim from 138.197.195.52 Nov 12 21:00:00 sachi sshd\[23236\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.195.52 |
2019-11-13 15:21:53 |
| 49.88.112.110 | attack | Nov 13 07:56:14 OPSO sshd\[10322\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.110 user=root Nov 13 07:56:16 OPSO sshd\[10322\]: Failed password for root from 49.88.112.110 port 31552 ssh2 Nov 13 07:56:18 OPSO sshd\[10322\]: Failed password for root from 49.88.112.110 port 31552 ssh2 Nov 13 07:56:20 OPSO sshd\[10322\]: Failed password for root from 49.88.112.110 port 31552 ssh2 Nov 13 07:56:57 OPSO sshd\[10365\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.110 user=root |
2019-11-13 15:23:18 |
| 81.28.100.137 | attack | 2019-11-13T07:29:06.488638stark.klein-stark.info postfix/smtpd\[14812\]: NOQUEUE: reject: RCPT from twig.shrewdmhealth.com\[81.28.100.137\]: 554 5.7.1 \ |
2019-11-13 15:24:54 |
| 42.157.129.158 | attack | Nov 13 01:28:32 srv2 sshd\[4663\]: Invalid user triplex from 42.157.129.158 Nov 13 01:28:32 srv2 sshd\[4663\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.129.158 Nov 13 01:28:34 srv2 sshd\[4663\]: Failed password for invalid user triplex from 42.157.129.158 port 59484 ssh2 ... |
2019-11-13 15:55:47 |
| 116.108.44.28 | attackspambots | Automatic report - Port Scan Attack |
2019-11-13 15:32:13 |
| 63.88.23.155 | attackbotsspam | 63.88.23.155 was recorded 6 times by 4 hosts attempting to connect to the following ports: 80. Incident counter (4h, 24h, all-time): 6, 21, 45 |
2019-11-13 15:34:02 |
| 103.236.253.28 | attackbotsspam | $f2bV_matches |
2019-11-13 15:44:53 |
| 45.82.153.76 | attackbots | 2019-11-13 08:40:07 dovecot_login authenticator failed for \(\[45.82.153.76\]\) \[45.82.153.76\]: 535 Incorrect authentication data \(set_id=bt@opso.it\) 2019-11-13 08:40:16 dovecot_login authenticator failed for \(\[45.82.153.76\]\) \[45.82.153.76\]: 535 Incorrect authentication data 2019-11-13 08:40:27 dovecot_login authenticator failed for \(\[45.82.153.76\]\) \[45.82.153.76\]: 535 Incorrect authentication data 2019-11-13 08:40:33 dovecot_login authenticator failed for \(\[45.82.153.76\]\) \[45.82.153.76\]: 535 Incorrect authentication data 2019-11-13 08:40:47 dovecot_login authenticator failed for \(\[45.82.153.76\]\) \[45.82.153.76\]: 535 Incorrect authentication data |
2019-11-13 15:47:01 |
| 106.12.93.160 | attackbots | 2019-11-13T07:02:23.758351abusebot-4.cloudsearch.cf sshd\[29285\]: Invalid user elvis from 106.12.93.160 port 35586 |
2019-11-13 15:26:39 |
| 103.132.30.126 | attackspambots | port scan and connect, tcp 1433 (ms-sql-s) |
2019-11-13 15:29:53 |