城市(city): unknown
省份(region): unknown
国家(country): United States of America (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 54.202.68.54
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 60064
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;54.202.68.54. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012800 1800 900 604800 86400
;; Query time: 36 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jan 28 21:06:59 CST 2025
;; MSG SIZE rcvd: 105
54.68.202.54.in-addr.arpa domain name pointer ec2-54-202-68-54.us-west-2.compute.amazonaws.com.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
54.68.202.54.in-addr.arpa name = ec2-54-202-68-54.us-west-2.compute.amazonaws.com.
Authoritative answers can be found from:
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 91.134.169.25 | attack | 91.134.169.25 - - [05/Jun/2020:05:57:59 +0200] "GET /wp-login.php HTTP/1.1" 200 6042 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 91.134.169.25 - - [05/Jun/2020:05:57:59 +0200] "POST /wp-login.php HTTP/1.1" 200 6293 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 91.134.169.25 - - [05/Jun/2020:05:58:00 +0200] "GET /wp-login.php HTTP/1.1" 200 6042 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-06-05 12:43:09 |
| 118.24.121.69 | attack | port scan and connect, tcp 8080 (http-proxy) |
2020-06-05 12:52:43 |
| 114.67.110.227 | attackbotsspam | Jun 5 06:51:58 server sshd[7347]: Failed password for root from 114.67.110.227 port 40127 ssh2 Jun 5 06:54:04 server sshd[7503]: Failed password for root from 114.67.110.227 port 53082 ssh2 ... |
2020-06-05 13:12:11 |
| 222.186.180.223 | attackbots | (sshd) Failed SSH login from 222.186.180.223 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jun 5 06:50:10 amsweb01 sshd[2023]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.223 user=root Jun 5 06:50:10 amsweb01 sshd[2024]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.223 user=root Jun 5 06:50:12 amsweb01 sshd[2023]: Failed password for root from 222.186.180.223 port 27504 ssh2 Jun 5 06:50:12 amsweb01 sshd[2024]: Failed password for root from 222.186.180.223 port 26252 ssh2 Jun 5 06:50:16 amsweb01 sshd[2024]: Failed password for root from 222.186.180.223 port 26252 ssh2 |
2020-06-05 12:53:24 |
| 106.13.167.77 | attackspambots | Brute-force attempt banned |
2020-06-05 13:04:04 |
| 14.116.215.185 | attack | Jun 5 06:40:28 localhost sshd\[15203\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.116.215.185 user=root Jun 5 06:40:30 localhost sshd\[15203\]: Failed password for root from 14.116.215.185 port 56018 ssh2 Jun 5 06:43:22 localhost sshd\[15252\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.116.215.185 user=root Jun 5 06:43:24 localhost sshd\[15252\]: Failed password for root from 14.116.215.185 port 47948 ssh2 Jun 5 06:46:23 localhost sshd\[15509\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.116.215.185 user=root ... |
2020-06-05 13:01:36 |
| 110.136.57.101 | attackbotsspam | Icarus honeypot on github |
2020-06-05 13:07:54 |
| 197.14.116.223 | attackbotsspam | 2020-06-05 12:43:33 | |
| 213.160.181.10 | attackbotsspam | Jun 4 20:57:28 propaganda sshd[17189]: Connection from 213.160.181.10 port 51028 on 10.0.0.160 port 22 rdomain "" Jun 4 20:57:30 propaganda sshd[17189]: Invalid user pi from 213.160.181.10 port 51028 |
2020-06-05 13:08:47 |
| 213.202.223.189 | attackbotsspam | 2020-06-05 12:40:05 | |
| 23.250.54.168 | attackbots | (From eric@talkwithwebvisitor.com) Cool website! My name’s Eric, and I just found your site - hotzchiropractic.com - while surfing the net. You showed up at the top of the search results, so I checked you out. Looks like what you’re doing is pretty cool. But if you don’t mind me asking – after someone like me stumbles across hotzchiropractic.com, what usually happens? Is your site generating leads for your business? I’m guessing some, but I also bet you’d like more… studies show that 7 out 10 who land on a site wind up leaving without a trace. Not good. Here’s a thought – what if there was an easy way for every visitor to “raise their hand” to get a phone call from you INSTANTLY… the second they hit your site and said, “call me now.” You can – Talk With Web Visitor is a software widget that’s works on your site, ready to capture any visitor’s Name, Email address and Phone Number. It lets you know IMMEDIATELY – so that you can talk to that lead while they’re literally looking over |
2020-06-05 13:08:25 |
| 139.59.18.215 | attackbots | Jun 5 06:51:02 lukav-desktop sshd\[21662\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.18.215 user=root Jun 5 06:51:03 lukav-desktop sshd\[21662\]: Failed password for root from 139.59.18.215 port 45468 ssh2 Jun 5 06:54:26 lukav-desktop sshd\[21745\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.18.215 user=root Jun 5 06:54:28 lukav-desktop sshd\[21745\]: Failed password for root from 139.59.18.215 port 41656 ssh2 Jun 5 06:57:54 lukav-desktop sshd\[22964\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.18.215 user=root |
2020-06-05 12:47:45 |
| 24.130.9.68 | attack | Bruteforce detected by fail2ban |
2020-06-05 13:11:30 |
| 45.6.27.147 | attackspam | (BR/Brazil/-) SMTP Bruteforcing attempts |
2020-06-05 12:57:40 |
| 45.236.74.226 | attackspam | (BR/Brazil/-) SMTP Bruteforcing attempts |
2020-06-05 13:09:18 |