城市(city): unknown
省份(region): unknown
国家(country): Germany
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 131.169.139.230
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 41045
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;131.169.139.230. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012901 1800 900 604800 86400
;; Query time: 34 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jan 30 00:42:48 CST 2025
;; MSG SIZE rcvd: 108230.139.169.131.in-addr.arpa domain name pointer uh2ulnmpc11.desy.de.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
230.139.169.131.in-addr.arpa name = uh2ulnmpc11.desy.de.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 125.27.12.20 | attackspambots | Jun 30 19:33:00 dedicated sshd[3071]: Invalid user andy from 125.27.12.20 port 36520 |
2019-07-01 01:33:03 |
| 168.232.131.91 | attack | SMTP-sasl brute force ... |
2019-07-01 01:27:04 |
| 190.116.55.89 | attack | f2b trigger Multiple SASL failures |
2019-07-01 01:14:08 |
| 212.44.104.102 | attack | Jun 30 15:17:31 mxgate1 postfix/postscreen[15628]: CONNECT from [212.44.104.102]:47586 to [176.31.12.44]:25 Jun 30 15:17:31 mxgate1 postfix/dnsblog[15631]: addr 212.44.104.102 listed by domain cbl.abuseat.org as 127.0.0.2 Jun 30 15:17:31 mxgate1 postfix/dnsblog[15630]: addr 212.44.104.102 listed by domain zen.spamhaus.org as 127.0.0.4 Jun 30 15:17:31 mxgate1 postfix/dnsblog[15633]: addr 212.44.104.102 listed by domain bl.spamcop.net as 127.0.0.2 Jun 30 15:17:31 mxgate1 postfix/dnsblog[15632]: addr 212.44.104.102 listed by domain ix.dnsbl.xxxxxx.net as 127.0.0.2 Jun 30 15:17:37 mxgate1 postfix/postscreen[15628]: DNSBL rank 5 for [212.44.104.102]:47586 Jun x@x Jun 30 15:17:37 mxgate1 postfix/postscreen[15628]: HANGUP after 0.2 from [212.44.104.102]:47586 in tests after SMTP handshake Jun 30 15:17:37 mxgate1 postfix/postscreen[15628]: DISCONNECT [212.44.104.102]:47586 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=212.44.104.102 |
2019-07-01 01:36:57 |
| 125.123.141.190 | attackbots | Jun 30 09:17:23 esmtp postfix/smtpd[7222]: lost connection after AUTH from unknown[125.123.141.190] Jun 30 09:17:30 esmtp postfix/smtpd[6962]: lost connection after AUTH from unknown[125.123.141.190] Jun 30 09:17:36 esmtp postfix/smtpd[7222]: lost connection after AUTH from unknown[125.123.141.190] Jun 30 09:17:43 esmtp postfix/smtpd[6962]: lost connection after AUTH from unknown[125.123.141.190] Jun 30 09:17:45 esmtp postfix/smtpd[7224]: lost connection after AUTH from unknown[125.123.141.190] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=125.123.141.190 |
2019-07-01 01:46:47 |
| 41.204.191.53 | attackbotsspam | $f2bV_matches |
2019-07-01 01:26:10 |
| 187.18.51.149 | attackbotsspam | Jun 30 15:15:19 mxgate1 postfix/postscreen[15628]: CONNECT from [187.18.51.149]:50408 to [176.31.12.44]:25 Jun 30 15:15:19 mxgate1 postfix/dnsblog[15629]: addr 187.18.51.149 listed by domain zen.spamhaus.org as 127.0.0.4 Jun 30 15:15:19 mxgate1 postfix/dnsblog[15630]: addr 187.18.51.149 listed by domain cbl.abuseat.org as 127.0.0.2 Jun 30 15:15:19 mxgate1 postfix/dnsblog[15631]: addr 187.18.51.149 listed by domain bl.spamcop.net as 127.0.0.2 Jun 30 15:15:19 mxgate1 postfix/dnsblog[15632]: addr 187.18.51.149 listed by domain ix.dnsbl.xxxxxx.net as 127.0.0.2 Jun 30 15:15:25 mxgate1 postfix/postscreen[15628]: DNSBL rank 5 for [187.18.51.149]:50408 Jun x@x Jun 30 15:15:26 mxgate1 postfix/postscreen[15628]: HANGUP after 0.91 from [187.18.51.149]:50408 in tests after SMTP handshake Jun 30 15:15:26 mxgate1 postfix/postscreen[15628]: DISCONNECT [187.18.51.149]:50408 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=187.18.51.149 |
2019-07-01 01:33:40 |
| 188.166.1.123 | attackbotsspam | Jun 30 15:33:11 *** sshd[13261]: User root from 188.166.1.123 not allowed because not listed in AllowUsers |
2019-07-01 01:58:28 |
| 134.175.141.166 | attackbotsspam | Jun 30 15:21:22 * sshd[13467]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.141.166 Jun 30 15:21:24 * sshd[13467]: Failed password for invalid user fini from 134.175.141.166 port 50194 ssh2 |
2019-07-01 01:42:14 |
| 211.210.13.201 | attackbots | Jun 30 16:47:31 MK-Soft-VM4 sshd\[918\]: Invalid user ftp from 211.210.13.201 port 38234 Jun 30 16:47:31 MK-Soft-VM4 sshd\[918\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.210.13.201 Jun 30 16:47:34 MK-Soft-VM4 sshd\[918\]: Failed password for invalid user ftp from 211.210.13.201 port 38234 ssh2 ... |
2019-07-01 01:55:41 |
| 46.54.254.114 | attack | Jun 30 15:07:56 xb3 sshd[21868]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46-54-254-114.static.kate-wing.si user=r.r Jun 30 15:07:58 xb3 sshd[21868]: Failed password for r.r from 46.54.254.114 port 58431 ssh2 Jun 30 15:08:00 xb3 sshd[21868]: Failed password for r.r from 46.54.254.114 port 58431 ssh2 Jun 30 15:08:01 xb3 sshd[21868]: Failed password for r.r from 46.54.254.114 port 58431 ssh2 Jun 30 15:08:01 xb3 sshd[21868]: Disconnecting: Too many authentication failures for r.r from 46.54.254.114 port 58431 ssh2 [preauth] Jun 30 15:08:01 xb3 sshd[21868]: PAM 2 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=46-54-254-114.static.kate-wing.si user=r.r Jun 30 15:08:03 xb3 sshd[22349]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46-54-254-114.static.kate-wing.si user=r.r Jun 30 15:08:05 xb3 sshd[22349]: Failed password for r.r from 46.54.254.114 port 58437 s........ ------------------------------- |
2019-07-01 01:14:48 |
| 134.73.161.99 | attackbotsspam | Jun 30 15:10:12 mail1 sshd[18589]: Invalid user nagios from 134.73.161.99 port 50216 Jun 30 15:10:12 mail1 sshd[18589]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.73.161.99 Jun 30 15:10:14 mail1 sshd[18589]: Failed password for invalid user nagios from 134.73.161.99 port 50216 ssh2 Jun 30 15:10:14 mail1 sshd[18589]: Received disconnect from 134.73.161.99 port 50216:11: Bye Bye [preauth] Jun 30 15:10:14 mail1 sshd[18589]: Disconnected from 134.73.161.99 port 50216 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=134.73.161.99 |
2019-07-01 01:17:51 |
| 192.228.100.16 | attack | 2019-06-30T17:26:22.713538abusebot-3.cloudsearch.cf sshd\[4338\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.228.100.16 user=root |
2019-07-01 01:40:20 |
| 153.120.181.184 | attack | xmlrpc attack |
2019-07-01 01:59:39 |
| 163.204.246.120 | attack | 2019-06-30 15:17:16 H=(localhost.localdomain) [163.204.246.120] F= |
2019-07-01 01:43:02 |