城市(city): unknown
省份(region): unknown
国家(country): United States of America (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 54.166.252.40
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 17061
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;54.166.252.40. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025013000 1800 900 604800 86400
;; Query time: 41 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jan 30 18:23:17 CST 2025
;; MSG SIZE rcvd: 106
40.252.166.54.in-addr.arpa domain name pointer ec2-54-166-252-40.compute-1.amazonaws.com.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
40.252.166.54.in-addr.arpa name = ec2-54-166-252-40.compute-1.amazonaws.com.
Authoritative answers can be found from:
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 138.219.192.98 | attack | Nov 25 07:25:51 lnxmail61 sshd[21311]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.219.192.98 |
2019-11-25 18:16:03 |
| 185.176.27.166 | attack | UTC: 2019-11-24 pkts: 3 ports(tcp): 101, 301, 701 |
2019-11-25 18:16:56 |
| 124.93.2.233 | attackspam | 2019-11-25T09:32:07.140615abusebot-3.cloudsearch.cf sshd\[17180\]: Invalid user dufond from 124.93.2.233 port 43480 |
2019-11-25 17:50:59 |
| 106.12.211.247 | attackspam | 2019-11-25T09:54:23.301887abusebot-3.cloudsearch.cf sshd\[17304\]: Invalid user clamav1 from 106.12.211.247 port 45272 |
2019-11-25 17:56:17 |
| 106.13.114.228 | attack | Nov 25 05:13:42 linuxvps sshd\[25302\]: Invalid user ctm from 106.13.114.228 Nov 25 05:13:42 linuxvps sshd\[25302\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.114.228 Nov 25 05:13:45 linuxvps sshd\[25302\]: Failed password for invalid user ctm from 106.13.114.228 port 38626 ssh2 Nov 25 05:21:32 linuxvps sshd\[30058\]: Invalid user antiup from 106.13.114.228 Nov 25 05:21:32 linuxvps sshd\[30058\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.114.228 |
2019-11-25 18:21:42 |
| 36.46.142.80 | attack | Nov 25 07:26:11 jane sshd[21055]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.46.142.80 Nov 25 07:26:13 jane sshd[21055]: Failed password for invalid user lesmeister from 36.46.142.80 port 58729 ssh2 ... |
2019-11-25 18:05:06 |
| 78.156.251.230 | attack | Portscan or hack attempt detected by psad/fwsnort |
2019-11-25 18:03:33 |
| 51.77.148.248 | attackspam | Nov 25 07:38:14 xxxxxxx0 sshd[8864]: Invalid user erling from 51.77.148.248 port 60698 Nov 25 07:38:15 xxxxxxx0 sshd[8864]: Failed password for invalid user erling from 51.77.148.248 port 60698 ssh2 Nov 25 07:44:44 xxxxxxx0 sshd[9643]: Invalid user web from 51.77.148.248 port 41968 Nov 25 07:44:46 xxxxxxx0 sshd[9643]: Failed password for invalid user web from 51.77.148.248 port 41968 ssh2 Nov 25 07:56:54 xxxxxxx0 sshd[11356]: Invalid user naomi from 51.77.148.248 port 60478 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=51.77.148.248 |
2019-11-25 17:55:55 |
| 117.50.17.253 | attack | Nov 25 07:18:42 vserver sshd\[12630\]: Invalid user mike from 117.50.17.253Nov 25 07:18:44 vserver sshd\[12630\]: Failed password for invalid user mike from 117.50.17.253 port 46570 ssh2Nov 25 07:26:25 vserver sshd\[12695\]: Invalid user kolos from 117.50.17.253Nov 25 07:26:28 vserver sshd\[12695\]: Failed password for invalid user kolos from 117.50.17.253 port 15086 ssh2 ... |
2019-11-25 17:55:42 |
| 94.177.215.195 | attackspam | Nov 25 09:31:54 lnxweb61 sshd[26285]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.177.215.195 |
2019-11-25 18:06:47 |
| 111.205.6.222 | attack | 2019-11-25T09:00:01.311430hub.schaetter.us sshd\[9624\]: Invalid user brum from 111.205.6.222 port 45760 2019-11-25T09:00:01.322100hub.schaetter.us sshd\[9624\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.205.6.222 2019-11-25T09:00:02.428749hub.schaetter.us sshd\[9624\]: Failed password for invalid user brum from 111.205.6.222 port 45760 ssh2 2019-11-25T09:08:20.003296hub.schaetter.us sshd\[9712\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.205.6.222 user=adm 2019-11-25T09:08:21.947806hub.schaetter.us sshd\[9712\]: Failed password for adm from 111.205.6.222 port 35698 ssh2 ... |
2019-11-25 18:11:17 |
| 52.42.253.100 | attackspambots | 11/25/2019-10:02:02.227775 52.42.253.100 Protocol: 6 SURICATA TLS invalid record/traffic |
2019-11-25 18:12:29 |
| 106.12.189.2 | attack | Nov 25 06:52:48 server02 sshd[24079]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.189.2 Nov 25 06:52:50 server02 sshd[24079]: Failed password for invalid user csmp from 106.12.189.2 port 38834 ssh2 Nov 25 07:13:49 server02 sshd[25088]: User dovecot from 106.12.189.2 not allowed because not listed in AllowUsers Nov 25 07:13:49 server02 sshd[25088]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.189.2 user=dovecot ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=106.12.189.2 |
2019-11-25 18:19:15 |
| 39.134.26.20 | attackbots | 3389BruteforceFW21 |
2019-11-25 18:04:19 |
| 164.132.196.98 | attackbots | <6 unauthorized SSH connections |
2019-11-25 18:02:09 |