城市(city): unknown
省份(region): unknown
国家(country): Germany
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 134.130.15.160
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 35247
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;134.130.15.160. IN A
;; AUTHORITY SECTION:
. 490 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021702 1800 900 604800 86400
;; Query time: 20 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 11:40:24 CST 2022
;; MSG SIZE rcvd: 107160.15.130.134.in-addr.arpa domain name pointer coupons.ukaachen.de.
160.15.130.134.in-addr.arpa domain name pointer www.cbmb.ukaachen.de.
160.15.130.134.in-addr.arpa domain name pointer pwreset.ukaachen.de.
160.15.130.134.in-addr.arpa domain name pointer cbmb.ukaachen.de.
160.15.130.134.in-addr.arpa domain name pointer www.vm.ukaachen.de.
160.15.130.134.in-addr.arpa domain name pointer p-sop.ukaachen.de.
160.15.130.134.in-addr.arpa domain name pointer balu-app.ukaachen.de.
160.15.130.134.in-addr.arpa domain name pointer vv.ukaachen.de.
160.15.130.134.in-addr.arpa domain name pointer www.ukaachen.de.
160.15.130.134.in-addr.arpa domain name pointer ukaachen.de.
160.15.130.134.in-addr.arpa domain name pointer ds-handbuch.ukaachen.de.
160.15.130.134.in-addr.arpa domain name pointer web-ns-tst.ukaachen.de.
160.15.130.134.in-addr.arpa domain name pointer forschungsportal.ukaachen.de.
160.15.130.134.in-addr.arpa domain name pointer balu-api.ukaachen.de.
160.15.130.134.in-addr.arpa domain name pointer uka-sop.ukaachserver can't find 134.130.15.160.in-addr.arpa: SERVFAIL| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 49.236.203.163 | attackspambots | Nov 9 00:10:11 auw2 sshd\[7461\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.236.203.163 user=root Nov 9 00:10:13 auw2 sshd\[7461\]: Failed password for root from 49.236.203.163 port 50718 ssh2 Nov 9 00:14:39 auw2 sshd\[7815\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.236.203.163 user=root Nov 9 00:14:41 auw2 sshd\[7815\]: Failed password for root from 49.236.203.163 port 59476 ssh2 Nov 9 00:19:11 auw2 sshd\[8194\]: Invalid user kegreiss from 49.236.203.163 |
2019-11-09 20:19:40 |
| 148.70.249.72 | attackspam | Nov 9 09:31:35 root sshd[12987]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.249.72 Nov 9 09:31:37 root sshd[12987]: Failed password for invalid user zjbeyond from 148.70.249.72 port 34158 ssh2 Nov 9 09:38:12 root sshd[13059]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.249.72 ... |
2019-11-09 19:51:28 |
| 112.85.42.87 | attackspambots | 2019-11-08 UTC: 1176x - |
2019-11-09 20:18:22 |
| 103.211.42.135 | attack | BURG,WP GET /wp-login.php |
2019-11-09 20:08:47 |
| 206.189.108.59 | attackspambots | Nov 9 13:14:32 lcl-usvr-02 sshd[25100]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.108.59 user=root Nov 9 13:14:34 lcl-usvr-02 sshd[25100]: Failed password for root from 206.189.108.59 port 55230 ssh2 Nov 9 13:17:54 lcl-usvr-02 sshd[25947]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.108.59 user=root Nov 9 13:17:55 lcl-usvr-02 sshd[25947]: Failed password for root from 206.189.108.59 port 36328 ssh2 Nov 9 13:21:19 lcl-usvr-02 sshd[26872]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.108.59 user=root Nov 9 13:21:22 lcl-usvr-02 sshd[26872]: Failed password for root from 206.189.108.59 port 45662 ssh2 ... |
2019-11-09 20:23:29 |
| 71.6.146.186 | attackspam | 71.6.146.186 was recorded 5 times by 5 hosts attempting to connect to the following ports: 102,3299,1741,7474. Incident counter (4h, 24h, all-time): 5, 37, 191 |
2019-11-09 19:54:04 |
| 188.69.135.214 | attackspambots | SPAM Delivery Attempt |
2019-11-09 19:56:06 |
| 200.98.128.186 | attack | ET SCAN Suspicious inbound to MSSQL port 1433 - port: 1433 proto: TCP cat: Potentially Bad Traffic |
2019-11-09 19:46:41 |
| 42.159.113.152 | attack | Automatic report - Banned IP Access |
2019-11-09 20:02:04 |
| 43.241.57.8 | attackspambots | Automatic report - XMLRPC Attack |
2019-11-09 20:04:57 |
| 27.128.162.98 | attackbots | Nov 9 13:05:40 sso sshd[20026]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.128.162.98 Nov 9 13:05:42 sso sshd[20026]: Failed password for invalid user mcollins from 27.128.162.98 port 51400 ssh2 ... |
2019-11-09 20:06:53 |
| 148.72.232.37 | attack | Automatic report - XMLRPC Attack |
2019-11-09 20:12:24 |
| 176.106.178.197 | attack | Nov 8 20:17:14 php1 sshd\[28766\]: Invalid user pi from 176.106.178.197 Nov 8 20:17:14 php1 sshd\[28766\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.106.178.197 Nov 8 20:17:16 php1 sshd\[28766\]: Failed password for invalid user pi from 176.106.178.197 port 42607 ssh2 Nov 8 20:21:27 php1 sshd\[29241\]: Invalid user nie from 176.106.178.197 Nov 8 20:21:27 php1 sshd\[29241\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.106.178.197 |
2019-11-09 20:21:19 |
| 113.141.189.244 | attackbots | Port 1433 Scan |
2019-11-09 19:58:10 |
| 222.186.175.147 | attack | Nov 9 12:46:10 dcd-gentoo sshd[27075]: User root from 222.186.175.147 not allowed because none of user's groups are listed in AllowGroups Nov 9 12:46:15 dcd-gentoo sshd[27075]: error: PAM: Authentication failure for illegal user root from 222.186.175.147 Nov 9 12:46:10 dcd-gentoo sshd[27075]: User root from 222.186.175.147 not allowed because none of user's groups are listed in AllowGroups Nov 9 12:46:15 dcd-gentoo sshd[27075]: error: PAM: Authentication failure for illegal user root from 222.186.175.147 Nov 9 12:46:10 dcd-gentoo sshd[27075]: User root from 222.186.175.147 not allowed because none of user's groups are listed in AllowGroups Nov 9 12:46:15 dcd-gentoo sshd[27075]: error: PAM: Authentication failure for illegal user root from 222.186.175.147 Nov 9 12:46:15 dcd-gentoo sshd[27075]: Failed keyboard-interactive/pam for invalid user root from 222.186.175.147 port 6182 ssh2 ... |
2019-11-09 19:48:30 |