城市(city): unknown
省份(region): unknown
国家(country): Singapore
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 54.179.141.216
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 45404
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;54.179.141.216. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020401 1800 900 604800 86400
;; Query time: 13 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 05 13:39:26 CST 2025
;; MSG SIZE rcvd: 107
216.141.179.54.in-addr.arpa domain name pointer ec2-54-179-141-216.ap-southeast-1.compute.amazonaws.com.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
216.141.179.54.in-addr.arpa name = ec2-54-179-141-216.ap-southeast-1.compute.amazonaws.com.
Authoritative answers can be found from:
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 167.71.204.13 | attackbots | (sshd) Failed SSH login from 167.71.204.13 (SG/Singapore/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jul 12 01:12:02 testbed sshd[13652]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.204.13 user=root Jul 12 01:12:04 testbed sshd[13652]: Failed password for root from 167.71.204.13 port 50706 ssh2 Jul 12 01:12:06 testbed sshd[13657]: Invalid user admin from 167.71.204.13 port 60326 Jul 12 01:12:08 testbed sshd[13657]: Failed password for invalid user admin from 167.71.204.13 port 60326 ssh2 Jul 12 01:12:10 testbed sshd[13662]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.204.13 user=root |
2019-07-12 13:21:01 |
| 51.83.72.243 | attackbots | Jul 12 06:27:28 localhost sshd\[54503\]: Invalid user tan from 51.83.72.243 port 47856 Jul 12 06:27:28 localhost sshd\[54503\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.83.72.243 ... |
2019-07-12 13:38:08 |
| 212.224.95.115 | attack | 212.224.95.115 - - [12/Jul/2019:01:59:55 +0200] "GET /wp-login.php HTTP/1.1" 200 1237 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 212.224.95.115 - - [12/Jul/2019:01:59:55 +0200] "POST /wp-login.php HTTP/1.1" 200 1632 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 212.224.95.115 - - [12/Jul/2019:01:59:55 +0200] "GET /wp-login.php HTTP/1.1" 200 1237 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 212.224.95.115 - - [12/Jul/2019:01:59:55 +0200] "POST /wp-login.php HTTP/1.1" 200 1607 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 212.224.95.115 - - [12/Jul/2019:01:59:55 +0200] "GET /wp-login.php HTTP/1.1" 200 1237 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 212.224.95.115 - - [12/Jul/2019:01:59:55 +0200] "POST /wp-login.php HTTP/1.1" 200 1608 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2019-07-12 12:53:34 |
| 37.49.225.219 | attack | Jul 12 07:04:13 dev postfix/smtpd\[1225\]: warning: unknown\[37.49.225.219\]: SASL LOGIN authentication failed: authentication failure Jul 12 07:04:13 dev postfix/smtpd\[1225\]: warning: unknown\[37.49.225.219\]: SASL LOGIN authentication failed: authentication failure Jul 12 07:04:13 dev postfix/smtpd\[1225\]: warning: unknown\[37.49.225.219\]: SASL LOGIN authentication failed: authentication failure Jul 12 07:04:13 dev postfix/smtpd\[1225\]: warning: unknown\[37.49.225.219\]: SASL LOGIN authentication failed: authentication failure Jul 12 07:04:13 dev postfix/smtpd\[1225\]: warning: unknown\[37.49.225.219\]: SASL LOGIN authentication failed: authentication failure |
2019-07-12 13:13:52 |
| 64.53.14.211 | attackspam | Jul 12 04:55:54 animalibera sshd[26886]: Invalid user dd from 64.53.14.211 port 55220 ... |
2019-07-12 13:08:21 |
| 138.255.148.5 | attackbots | 2019-07-12T01:56:53.061091mail01 postfix/smtpd[4414]: warning: 5.148.255.138.clicfacilitb.com.br[138.255.148.5]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2019-07-12T01:57:00.423487mail01 postfix/smtpd[11248]: warning: 5.148.255.138.clicfacilitb.com.br[138.255.148.5]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2019-07-12T01:59:48.495639mail01 postfix/smtpd[17219]: warning: 5.148.255.138.clicfacilitb.com.br[138.255.148.5]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 |
2019-07-12 13:24:38 |
| 58.220.51.158 | attackbots | Jul 12 04:08:36 hal sshd[3035]: Bad protocol version identification '' from 58.220.51.158 port 54378 Jul 12 04:08:38 hal sshd[3036]: Invalid user support from 58.220.51.158 port 58448 Jul 12 04:08:38 hal sshd[3036]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.220.51.158 Jul 12 04:08:40 hal sshd[3036]: Failed password for invalid user support from 58.220.51.158 port 58448 ssh2 Jul 12 04:08:40 hal sshd[3036]: Connection closed by 58.220.51.158 port 58448 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=58.220.51.158 |
2019-07-12 13:29:26 |
| 94.156.119.230 | attack | Brute force attempt |
2019-07-12 13:04:07 |
| 41.40.167.151 | attack | port scan and connect, tcp 23 (telnet) |
2019-07-12 13:09:53 |
| 174.138.18.157 | attackspam | Jul 12 06:51:55 vps647732 sshd[5086]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=174.138.18.157 Jul 12 06:51:57 vps647732 sshd[5086]: Failed password for invalid user kkk from 174.138.18.157 port 49376 ssh2 ... |
2019-07-12 12:58:50 |
| 201.150.22.245 | attack | Jul 11 20:00:29 web1 postfix/smtpd[15292]: warning: unknown[201.150.22.245]: SASL PLAIN authentication failed: authentication failure ... |
2019-07-12 12:53:52 |
| 213.33.157.204 | attack | Spamassassin_213.33.157.204 |
2019-07-12 13:15:31 |
| 54.37.232.137 | attackspambots | Jul 12 05:13:48 localhost sshd\[8294\]: Invalid user testid from 54.37.232.137 port 32788 Jul 12 05:13:48 localhost sshd\[8294\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.232.137 Jul 12 05:13:51 localhost sshd\[8294\]: Failed password for invalid user testid from 54.37.232.137 port 32788 ssh2 Jul 12 05:18:42 localhost sshd\[8350\]: Invalid user bigman from 54.37.232.137 port 33360 Jul 12 05:18:42 localhost sshd\[8350\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.232.137 ... |
2019-07-12 13:39:29 |
| 81.136.255.20 | attackbotsspam | Jul 12 01:51:42 eventyay sshd[3731]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.136.255.20 Jul 12 01:51:44 eventyay sshd[3731]: Failed password for invalid user jason from 81.136.255.20 port 55553 ssh2 Jul 12 01:59:57 eventyay sshd[5894]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.136.255.20 ... |
2019-07-12 13:07:13 |
| 206.189.131.213 | attackspam | Jul 12 07:03:46 ns3367391 sshd\[24056\]: Invalid user marco from 206.189.131.213 port 42716 Jul 12 07:03:46 ns3367391 sshd\[24056\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.131.213 ... |
2019-07-12 13:17:09 |