城市(city): unknown
省份(region): unknown
国家(country): United States of America (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 54.245.38.105
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 38593
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;54.245.38.105. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025011200 1800 900 604800 86400
;; Query time: 55 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jan 13 01:22:51 CST 2025
;; MSG SIZE rcvd: 106
105.38.245.54.in-addr.arpa domain name pointer ec2-54-245-38-105.us-west-2.compute.amazonaws.com.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
105.38.245.54.in-addr.arpa name = ec2-54-245-38-105.us-west-2.compute.amazonaws.com.
Authoritative answers can be found from:
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 157.55.39.101 | attack | Automatic report - Banned IP Access |
2019-08-28 07:48:48 |
| 180.248.251.6 | attack | Unauthorized connection attempt from IP address 180.248.251.6 on Port 445(SMB) |
2019-08-28 07:44:37 |
| 197.38.13.88 | attackbots | Automatic report - Port Scan Attack |
2019-08-28 07:29:33 |
| 178.128.87.245 | attackspambots | Aug 28 01:21:34 vps01 sshd[32240]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.87.245 Aug 28 01:21:36 vps01 sshd[32240]: Failed password for invalid user odoo from 178.128.87.245 port 39812 ssh2 |
2019-08-28 07:26:38 |
| 36.156.24.79 | attack | Aug 28 02:37:09 srv-4 sshd\[32235\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.156.24.79 user=root Aug 28 02:37:11 srv-4 sshd\[32235\]: Failed password for root from 36.156.24.79 port 37348 ssh2 Aug 28 02:37:18 srv-4 sshd\[32246\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.156.24.79 user=root ... |
2019-08-28 07:40:30 |
| 113.178.121.147 | attackspam | Unauthorized connection attempt from IP address 113.178.121.147 on Port 445(SMB) |
2019-08-28 07:23:11 |
| 51.158.74.14 | attack | Aug 24 07:15:38 vtv3 sshd\[19775\]: Invalid user teacher from 51.158.74.14 port 52018 Aug 24 07:15:38 vtv3 sshd\[19775\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.158.74.14 Aug 24 07:15:40 vtv3 sshd\[19775\]: Failed password for invalid user teacher from 51.158.74.14 port 52018 ssh2 Aug 24 07:19:34 vtv3 sshd\[21353\]: Invalid user artur from 51.158.74.14 port 40502 Aug 24 07:19:34 vtv3 sshd\[21353\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.158.74.14 Aug 24 07:31:27 vtv3 sshd\[27304\]: Invalid user tommy from 51.158.74.14 port 34234 Aug 24 07:31:27 vtv3 sshd\[27304\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.158.74.14 Aug 24 07:31:29 vtv3 sshd\[27304\]: Failed password for invalid user tommy from 51.158.74.14 port 34234 ssh2 Aug 24 07:35:32 vtv3 sshd\[29329\]: Invalid user amssys from 51.158.74.14 port 50962 Aug 24 07:35:32 vtv3 sshd\[29329\]: pam_unix\ |
2019-08-28 07:46:07 |
| 220.246.61.114 | attackbotsspam | Aug 27 05:28:38 xxx sshd[1640]: Invalid user admin from 220.246.61.114 Aug 27 05:28:41 xxx sshd[1640]: Failed password for invalid user admin from 220.246.61.114 port 55632 ssh2 Aug 27 05:28:44 xxx sshd[1640]: Failed password for invalid user admin from 220.246.61.114 port 55632 ssh2 Aug 27 05:28:47 xxx sshd[1640]: Failed password for invalid user admin from 220.246.61.114 port 55632 ssh2 Aug 27 05:28:49 xxx sshd[1640]: Failed password for invalid user admin from 220.246.61.114 port 55632 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=220.246.61.114 |
2019-08-28 07:18:57 |
| 69.171.206.254 | attackbotsspam | Aug 27 21:24:25 meumeu sshd[27154]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.171.206.254 Aug 27 21:24:27 meumeu sshd[27154]: Failed password for invalid user marian from 69.171.206.254 port 46717 ssh2 Aug 27 21:32:35 meumeu sshd[28317]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.171.206.254 ... |
2019-08-28 07:55:45 |
| 92.118.37.74 | attack | Aug 27 23:02:24 mail kernel: [2028561.551698] [UFW BLOCK] IN=eth0 OUT= MAC=fa:16:3e:d3:64:42:4c:5e:0c:c9:30:5f:08:00 SRC=92.118.37.74 DST=185.101.93.72 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=32883 PROTO=TCP SPT=46525 DPT=27496 WINDOW=1024 RES=0x00 SYN URGP=0 Aug 27 23:02:40 mail kernel: [2028577.976119] [UFW BLOCK] IN=eth0 OUT= MAC=fa:16:3e:d3:64:42:4c:5e:0c:c9:30:5f:08:00 SRC=92.118.37.74 DST=185.101.93.72 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=14839 PROTO=TCP SPT=46525 DPT=19231 WINDOW=1024 RES=0x00 SYN URGP=0 Aug 27 23:04:02 mail kernel: [2028659.616612] [UFW BLOCK] IN=eth0 OUT= MAC=fa:16:3e:d3:64:42:4c:5e:0c:c9:30:5f:08:00 SRC=92.118.37.74 DST=185.101.93.72 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=43759 PROTO=TCP SPT=46525 DPT=39861 WINDOW=1024 RES=0x00 SYN URGP=0 Aug 27 23:07:48 mail kernel: [2028886.070429] [UFW BLOCK] IN=eth0 OUT= MAC=fa:16:3e:d3:64:42:4c:5e:0c:c9:30:5f:08:00 SRC=92.118.37.74 DST=185.101.93.72 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=54342 PROTO=TCP SPT=46525 DPT=24451 WINDOW=1024 RES=0x00 SYN |
2019-08-28 07:29:07 |
| 109.72.100.88 | attackbots | Unauthorized connection attempt from IP address 109.72.100.88 on Port 445(SMB) |
2019-08-28 07:41:00 |
| 206.189.51.28 | attackspam | WordPress login Brute force / Web App Attack on client site. |
2019-08-28 07:48:31 |
| 167.71.200.201 | attackbots | Aug 28 07:38:14 localhost sshd[31940]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.200.201 user=root Aug 28 07:38:17 localhost sshd[31940]: Failed password for root from 167.71.200.201 port 32792 ssh2 Aug 28 07:48:18 localhost sshd[32129]: Invalid user bsugar from 167.71.200.201 port 46483 ... |
2019-08-28 08:02:33 |
| 138.99.134.166 | attackbots | Unauthorized connection attempt from IP address 138.99.134.166 on Port 445(SMB) |
2019-08-28 07:42:31 |
| 107.170.195.219 | attackspam | MultiHost/MultiPort Probe, Scan, Hack - |
2019-08-28 07:47:31 |