城市(city): Ashburn
省份(region): Virginia
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 54.204.49.117
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 34499
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;54.204.49.117. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012201 1800 900 604800 86400
;; Query time: 40 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jan 23 08:18:26 CST 2025
;; MSG SIZE rcvd: 106
117.49.204.54.in-addr.arpa domain name pointer ec2-54-204-49-117.compute-1.amazonaws.com.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
117.49.204.54.in-addr.arpa name = ec2-54-204-49-117.compute-1.amazonaws.com.
Authoritative answers can be found from:
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 222.186.175.154 | attackbotsspam | Sep 2 19:41:00 v22019058497090703 sshd[29682]: Failed password for root from 222.186.175.154 port 35718 ssh2 Sep 2 19:41:03 v22019058497090703 sshd[29682]: Failed password for root from 222.186.175.154 port 35718 ssh2 ... |
2020-09-03 01:48:34 |
| 129.226.190.74 | attackspambots | Sep 2 10:50:37 Host-KLAX-C sshd[16680]: User root from 129.226.190.74 not allowed because not listed in AllowUsers ... |
2020-09-03 01:17:56 |
| 49.233.90.200 | attackbots | 2020-09-02T12:22:48.526952cyberdyne sshd[2981198]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.90.200 2020-09-02T12:22:48.524377cyberdyne sshd[2981198]: Invalid user anjana from 49.233.90.200 port 53070 2020-09-02T12:22:50.536529cyberdyne sshd[2981198]: Failed password for invalid user anjana from 49.233.90.200 port 53070 ssh2 2020-09-02T12:25:40.135905cyberdyne sshd[2982044]: Invalid user jrodriguez from 49.233.90.200 port 35414 ... |
2020-09-03 01:46:21 |
| 103.239.84.11 | attack | SSH invalid-user multiple login try |
2020-09-03 01:30:24 |
| 111.229.138.230 | attackbots | Sep 2 21:11:13 gw1 sshd[20602]: Failed password for root from 111.229.138.230 port 37894 ssh2 ... |
2020-09-03 01:29:30 |
| 52.156.169.35 | attackspambots | (smtpauth) Failed SMTP AUTH login from 52.156.169.35 (AU/Australia/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-09-02 22:06:20 login authenticator failed for (ADMIN) [52.156.169.35]: 535 Incorrect authentication data (set_id=phtd@toliddaru.ir) |
2020-09-03 01:39:33 |
| 159.203.85.196 | attack | Invalid user oracle from 159.203.85.196 port 43905 |
2020-09-03 01:25:05 |
| 112.85.42.174 | attackbots | Sep 2 19:23:50 minden010 sshd[29686]: Failed password for root from 112.85.42.174 port 31723 ssh2 Sep 2 19:24:00 minden010 sshd[29686]: Failed password for root from 112.85.42.174 port 31723 ssh2 Sep 2 19:24:03 minden010 sshd[29686]: Failed password for root from 112.85.42.174 port 31723 ssh2 Sep 2 19:24:03 minden010 sshd[29686]: error: maximum authentication attempts exceeded for root from 112.85.42.174 port 31723 ssh2 [preauth] ... |
2020-09-03 01:37:14 |
| 144.168.164.26 | attackbots | 2020-09-02T12:27:05.950345mail.thespaminator.com sshd[28059]: Failed password for root from 144.168.164.26 port 48276 ssh2 2020-09-02T12:27:08.653053mail.thespaminator.com sshd[28059]: Failed password for root from 144.168.164.26 port 48276 ssh2 ... |
2020-09-03 01:51:24 |
| 189.18.203.217 | attackspambots | Unauthorised access (Sep 1) SRC=189.18.203.217 LEN=52 TOS=0x10 PREC=0x40 TTL=113 ID=17882 DF TCP DPT=445 WINDOW=8192 SYN |
2020-09-03 01:19:43 |
| 200.69.218.197 | attackbots | Sep 2 19:47:40 ns392434 sshd[27727]: Invalid user ventas from 200.69.218.197 port 47537 Sep 2 19:47:40 ns392434 sshd[27727]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.69.218.197 Sep 2 19:47:40 ns392434 sshd[27727]: Invalid user ventas from 200.69.218.197 port 47537 Sep 2 19:47:41 ns392434 sshd[27727]: Failed password for invalid user ventas from 200.69.218.197 port 47537 ssh2 Sep 2 19:52:21 ns392434 sshd[27810]: Invalid user zj from 200.69.218.197 port 64567 Sep 2 19:52:21 ns392434 sshd[27810]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.69.218.197 Sep 2 19:52:21 ns392434 sshd[27810]: Invalid user zj from 200.69.218.197 port 64567 Sep 2 19:52:23 ns392434 sshd[27810]: Failed password for invalid user zj from 200.69.218.197 port 64567 ssh2 Sep 2 19:53:57 ns392434 sshd[27819]: Invalid user hqy from 200.69.218.197 port 34940 |
2020-09-03 01:55:38 |
| 83.166.4.17 | attackspam | Tried our host z. |
2020-09-03 01:44:01 |
| 49.49.242.15 | attackbots | "XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES: |
2020-09-03 01:28:07 |
| 218.92.0.171 | attackspambots | "Unauthorized connection attempt on SSHD detected" |
2020-09-03 01:32:25 |
| 132.232.43.111 | attackspambots | Sep 2 19:09:39 vpn01 sshd[22002]: Failed password for root from 132.232.43.111 port 55884 ssh2 ... |
2020-09-03 01:21:23 |