城市(city): Liestal
省份(region): Basel-Landschaft
国家(country): Switzerland
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 131.152.84.29
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 46203
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;131.152.84.29. IN A
;; AUTHORITY SECTION:
. 467 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020080701 1800 900 604800 86400
;; Query time: 83 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Aug 08 09:19:17 CST 2020
;; MSG SIZE rcvd: 11729.84.152.131.in-addr.arpa domain name pointer kb-kbsb01-plm01.pz.unibas.ch.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
29.84.152.131.in-addr.arpa name = kb-kbsb01-plm01.pz.unibas.ch.
Authoritative answers can be found from:
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 125.64.94.211 | attackbots | 29.06.2019 05:34:18 Connection to port 7776 blocked by firewall |
2019-06-29 14:23:12 |
| 206.189.129.131 | attackbots | Jun 25 10:28:50 w sshd[32479]: Invalid user fake from 206.189.129.131 Jun 25 10:28:50 w sshd[32479]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.129.131 Jun 25 10:28:52 w sshd[32479]: Failed password for invalid user fake from 206.189.129.131 port 40044 ssh2 Jun 25 10:28:53 w sshd[32479]: Received disconnect from 206.189.129.131: 11: Bye Bye [preauth] Jun 25 10:28:55 w sshd[32481]: Invalid user ubnt from 206.189.129.131 Jun 25 10:28:55 w sshd[32481]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.129.131 Jun 25 10:28:56 w sshd[32481]: Failed password for invalid user ubnt from 206.189.129.131 port 49992 ssh2 Jun 25 10:28:57 w sshd[32481]: Received disconnect from 206.189.129.131: 11: Bye Bye [preauth] Jun 25 10:28:59 w sshd[32483]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.129.131 user=r.r Jun 25 10:29:00 w sshd[32........ ------------------------------- |
2019-06-29 13:25:35 |
| 180.242.96.184 | attackspambots | web-1 [ssh] SSH Attack |
2019-06-29 13:51:29 |
| 61.148.29.198 | attack | Brute force attempt |
2019-06-29 14:18:33 |
| 89.248.160.193 | attack | Portscan or hack attempt detected by psad/fwsnort |
2019-06-29 13:41:14 |
| 92.118.161.45 | attackspam | 5060/udp 5353/udp 5351/udp... [2019-04-28/06-28]76pkt,42pt.(tcp),7pt.(udp) |
2019-06-29 13:53:25 |
| 185.176.27.30 | attack | 29.06.2019 06:09:39 Connection to port 15693 blocked by firewall |
2019-06-29 14:15:37 |
| 221.181.24.246 | attackbotsspam | Invalid user support from 221.181.24.246 port 34200 |
2019-06-29 14:21:51 |
| 79.157.122.213 | attack | 2019-06-27T01:27:15.685389ldap.arvenenaske.de sshd[25485]: Connection from 79.157.122.213 port 49318 on 5.199.128.55 port 22 2019-06-27T01:27:16.803811ldap.arvenenaske.de sshd[25485]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.157.122.213 user=r.r 2019-06-27T01:27:18.698467ldap.arvenenaske.de sshd[25485]: Failed password for r.r from 79.157.122.213 port 49318 ssh2 2019-06-27T01:30:07.199644ldap.arvenenaske.de sshd[25487]: Connection from 79.157.122.213 port 53610 on 5.199.128.55 port 22 2019-06-27T01:30:07.553721ldap.arvenenaske.de sshd[25487]: Invalid user adam from 79.157.122.213 port 53610 2019-06-27T01:30:07.561362ldap.arvenenaske.de sshd[25487]: pam_sss(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.157.122.213 user=adam 2019-06-27T01:30:07.562389ldap.arvenenaske.de sshd[25487]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.157.122.213 201........ ------------------------------ |
2019-06-29 14:20:12 |
| 191.53.194.201 | attackbots | SMTP-sasl brute force ... |
2019-06-29 13:46:26 |
| 220.178.18.42 | attackbots | Jun 29 01:11:09 ns3042688 courier-imapd: LOGIN FAILED, method=PLAIN, ip=\[::ffff:220.178.18.42\] ... |
2019-06-29 13:58:15 |
| 120.52.152.18 | attackspambots | 29.06.2019 04:06:43 Connection to port 8161 blocked by firewall |
2019-06-29 13:24:57 |
| 58.209.79.180 | attackbotsspam | SASL broute force |
2019-06-29 13:37:31 |
| 157.230.38.113 | attackspam | SNORT TCP Port: 25 Classtype misc-attack - ET DROP Spamhaus DROP Listed Traffic Inbound group 12 - - Destination xx.xx.4.1 Port: 25 - - Source 157.230.38.113 Port: 35332 _ (Listed on dnsbl-sorbs abuseat-org spamcop zen-spamhaus eatingmonkey spam-sorbs) _ _ (1) |
2019-06-29 13:55:09 |
| 202.182.55.90 | attack | firewall-block, port(s): 80/tcp |
2019-06-29 14:11:03 |