城市(city): Ashburn
省份(region): Virginia
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 54.82.134.140
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 44014
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;54.82.134.140. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021301 1800 900 604800 86400
;; Query time: 64 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 14 02:54:51 CST 2025
;; MSG SIZE rcvd: 106
140.134.82.54.in-addr.arpa domain name pointer ec2-54-82-134-140.compute-1.amazonaws.com.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
140.134.82.54.in-addr.arpa name = ec2-54-82-134-140.compute-1.amazonaws.com.
Authoritative answers can be found from:
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 129.152.141.71 | attackspam | Unauthorized access or intrusion attempt detected from Thor banned IP |
2020-06-20 03:31:49 |
| 112.85.42.178 | attackbotsspam | Jun 19 21:08:44 pve1 sshd[7479]: Failed password for root from 112.85.42.178 port 18520 ssh2 Jun 19 21:08:48 pve1 sshd[7479]: Failed password for root from 112.85.42.178 port 18520 ssh2 ... |
2020-06-20 03:09:08 |
| 104.215.151.21 | attack | $f2bV_matches |
2020-06-20 03:19:46 |
| 192.99.222.155 | attack | 192.99.222.155 - - [19/Jun/2020:14:45:21 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" |
2020-06-20 03:11:09 |
| 2a0e:d601:7220:5704:1ab8:2f39:6d1:4752 | attackspambots | Unsolicited porn spam junk sent through domain of @zailtin.com designates 2a0e:d601:7220:5704:1ab8:2f39:6d1:4752 as permitted sender. |
2020-06-20 03:00:48 |
| 138.255.184.109 | attackbotsspam | Port probing on unauthorized port 23 |
2020-06-20 03:13:54 |
| 128.199.162.2 | attackspam | 2020-06-19T14:09:36.5429661495-001 sshd[44943]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.162.2 2020-06-19T14:09:36.5394491495-001 sshd[44943]: Invalid user redmine from 128.199.162.2 port 41553 2020-06-19T14:09:38.0880361495-001 sshd[44943]: Failed password for invalid user redmine from 128.199.162.2 port 41553 ssh2 2020-06-19T14:13:18.9702261495-001 sshd[45065]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.162.2 user=root 2020-06-19T14:13:20.9920551495-001 sshd[45065]: Failed password for root from 128.199.162.2 port 34450 ssh2 2020-06-19T14:16:46.3851801495-001 sshd[45150]: Invalid user postgres from 128.199.162.2 port 55573 ... |
2020-06-20 03:29:29 |
| 62.102.148.69 | attackbotsspam | The IP has triggered Cloudflare WAF. CF-Ray: 5a5be077cf18cb00 | WAF_Rule_ID: torfallback | WAF_Kind: firewall | CF_Action: challenge | Country: T1 | CF_IPClass: tor | Protocol: HTTP/1.1 | Method: GET | Host: wevg.org | User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 12_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.0 Mobile/15E148 Safari/604.1 | CF_DC: ARN. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB). |
2020-06-20 02:58:41 |
| 195.154.29.107 | attackbotsspam | xmlrpc attack |
2020-06-20 03:08:19 |
| 186.232.136.240 | attackspam | Brute forcing email accounts |
2020-06-20 03:09:37 |
| 60.249.82.121 | attackspambots | 2020-06-19T20:51:41.9842291240 sshd\[20712\]: Invalid user lzb from 60.249.82.121 port 45020 2020-06-19T20:51:41.9882571240 sshd\[20712\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.249.82.121 2020-06-19T20:51:44.5061451240 sshd\[20712\]: Failed password for invalid user lzb from 60.249.82.121 port 45020 ssh2 ... |
2020-06-20 03:03:08 |
| 185.234.216.247 | attackspambots | 112 requests, including : GET /auth/.env HTTP/1.1 GET /docker/.env HTTP/1.1 GET /development/.env HTTP/1.1 GET /system/.env HTTP/1.1 GET /api/.env HTTP/1.1 GET /~dev/.env HTTP/1.1 GET /project/.env HTTP/1.1 GET /.env HTTP/1.1 GET /rest/.env HTTP/1.1 GET /web/.env HTTP/1.1 GET /shared/.env HTTP/1.1 GET /server/.env HTTP/1.1 GET /laravel/.env HTTP/1.1 GET /framework/.env HTTP/1.1 GET /personal/.env HTTP/1.1 GET /mods/.env HTTP/1.1 GET /dependencies/.env HTTP/1.1 GET /scripts/.env HTTP/1.1 GET /back/.env HTTP/1.1 GET /react/.env HTTP/1.1 GET /ironment/.env HTTP/1.1 GET /m/.env HTTP/1.1 GET /vod_installer/.env HTTP/1.1 GET /core/.env HTTP/1.1 GET /frontend/.env HTTP/1.1 GET /fedex/.env HTTP/1.1 |
2020-06-20 03:20:29 |
| 45.134.179.57 | attackbots | Jun 19 15:44:43 debian-2gb-nbg1-2 kernel: \[14832972.047519\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=45.134.179.57 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=5405 PROTO=TCP SPT=56496 DPT=62899 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-06-20 03:22:04 |
| 222.186.175.202 | attackbotsspam | pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.202 user=root Failed password for root from 222.186.175.202 port 33058 ssh2 Failed password for root from 222.186.175.202 port 33058 ssh2 Failed password for root from 222.186.175.202 port 33058 ssh2 Failed password for root from 222.186.175.202 port 33058 ssh2 |
2020-06-20 03:32:15 |
| 177.93.252.20 | attack | Automatic report - Port Scan Attack |
2020-06-20 03:16:03 |