城市(city): unknown
省份(region): unknown
国家(country): None
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 134.76.163.19
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 41407
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;134.76.163.19. IN A
;; AUTHORITY SECTION:
. 157 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022022000 1800 900 604800 86400
;; Query time: 59 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 20 21:10:55 CST 2022
;; MSG SIZE rcvd: 10619.163.76.134.in-addr.arpa domain name pointer meetmap.sub.uni-goettingen.de.
19.163.76.134.in-addr.arpa domain name pointer mhdwb.uni-goettingen.de.
19.163.76.134.in-addr.arpa domain name pointer swarmnode9.sub.uni-goettingen.de.
19.163.76.134.in-addr.arpa domain name pointer index.live.qmh.sub.uni-goettingen.de.
19.163.76.134.in-addr.arpa domain name pointer index.dev.qmh.sub.uni-goettingen.de.
19.163.76.134.in-addr.arpa domain name pointer solr.live.adw.sub.uni-goettingen.de.
19.163.76.134.in-addr.arpa domain name pointer germania-sacra.uni-goettingen.de.
19.163.76.134.in-addr.arpa domain name pointer ojs-de.net.
19.163.76.134.in-addr.arpa domain name pointer open-access.network.
19.163.76.134.in-addr.arpa domain name pointer www.adw-goettingen.gwdg.de.
19.163.76.134.in-addr.arpa domain name pointer www.ojs-de.net.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
19.163.76.134.in-addr.arpa name = ojs-de.net.
19.163.76.134.in-addr.arpa name = open-access.network.
19.163.76.134.in-addr.arpa name = www.adw-goettingen.gwdg.de.
19.163.76.134.in-addr.arpa name = www.ojs-de.net.
19.163.76.134.in-addr.arpa name = meetmap.sub.uni-goettingen.de.
19.163.76.134.in-addr.arpa name = mhdwb.uni-goettingen.de.
19.163.76.134.in-addr.arpa name = swarmnode9.sub.uni-goettingen.de.
19.163.76.134.in-addr.arpa name = index.live.qmh.sub.uni-goettingen.de.
19.163.76.134.in-addr.arpa name = index.dev.qmh.sub.uni-goettingen.de.
19.163.76.134.in-addr.arpa name = solr.live.adw.sub.uni-goettingen.de.
19.163.76.134.in-addr.arpa name = germania-sacra.uni-goettingen.de.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 2.38.158.60 | attackbotsspam | Automatic report - Port Scan Attack |
2019-09-20 19:01:03 |
| 124.41.217.24 | attack | Automatic report - Banned IP Access |
2019-09-20 17:54:38 |
| 134.209.126.196 | attackspam | 2019-09-20T10:18:01.784232hub.schaetter.us sshd\[19987\]: Invalid user sr from 134.209.126.196 2019-09-20T10:18:01.835924hub.schaetter.us sshd\[19987\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.126.196 2019-09-20T10:18:03.555618hub.schaetter.us sshd\[19987\]: Failed password for invalid user sr from 134.209.126.196 port 56162 ssh2 2019-09-20T10:22:06.521362hub.schaetter.us sshd\[20020\]: Invalid user service from 134.209.126.196 2019-09-20T10:22:06.576074hub.schaetter.us sshd\[20020\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.126.196 ... |
2019-09-20 18:24:29 |
| 129.211.67.188 | attackbots | Sep 19 23:46:07 web9 sshd\[28121\]: Invalid user mad from 129.211.67.188 Sep 19 23:46:07 web9 sshd\[28121\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.67.188 Sep 19 23:46:10 web9 sshd\[28121\]: Failed password for invalid user mad from 129.211.67.188 port 49148 ssh2 Sep 19 23:52:07 web9 sshd\[29237\]: Invalid user teamspeak from 129.211.67.188 Sep 19 23:52:07 web9 sshd\[29237\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.67.188 |
2019-09-20 17:53:38 |
| 46.101.81.143 | attackspambots | Sep 19 23:59:14 lcprod sshd\[27343\]: Invalid user transfer from 46.101.81.143 Sep 19 23:59:14 lcprod sshd\[27343\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.81.143 Sep 19 23:59:16 lcprod sshd\[27343\]: Failed password for invalid user transfer from 46.101.81.143 port 33840 ssh2 Sep 20 00:04:45 lcprod sshd\[27809\]: Invalid user db2fenc1 from 46.101.81.143 Sep 20 00:04:45 lcprod sshd\[27809\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.81.143 |
2019-09-20 18:05:53 |
| 218.241.134.34 | attack | Sep 20 05:49:06 ny01 sshd[29605]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.241.134.34 Sep 20 05:49:08 ny01 sshd[29605]: Failed password for invalid user leng from 218.241.134.34 port 31572 ssh2 Sep 20 05:54:02 ny01 sshd[30442]: Failed password for root from 218.241.134.34 port 53051 ssh2 |
2019-09-20 18:23:35 |
| 142.93.201.168 | attackbots | 2019-09-20T09:16:43.271515abusebot-3.cloudsearch.cf sshd\[24521\]: Invalid user enrica from 142.93.201.168 port 36582 |
2019-09-20 17:46:04 |
| 178.170.164.138 | attackbots | plussize.fitness 178.170.164.138 \[20/Sep/2019:11:15:50 +0200\] "POST /wp-login.php HTTP/1.1" 200 5629 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" plussize.fitness 178.170.164.138 \[20/Sep/2019:11:15:50 +0200\] "POST /wp-login.php HTTP/1.1" 200 5582 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" |
2019-09-20 18:26:54 |
| 115.112.176.13 | attackbotsspam | Unauthorised access (Sep 20) SRC=115.112.176.13 LEN=52 PREC=0x20 TTL=115 ID=7602 DF TCP DPT=445 WINDOW=8192 SYN |
2019-09-20 17:58:22 |
| 14.63.223.226 | attackspam | Sep 20 10:23:57 web8 sshd\[2770\]: Invalid user sigmund from 14.63.223.226 Sep 20 10:23:57 web8 sshd\[2770\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.63.223.226 Sep 20 10:23:59 web8 sshd\[2770\]: Failed password for invalid user sigmund from 14.63.223.226 port 46403 ssh2 Sep 20 10:30:10 web8 sshd\[5874\]: Invalid user caden from 14.63.223.226 Sep 20 10:30:10 web8 sshd\[5874\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.63.223.226 |
2019-09-20 18:42:26 |
| 222.255.146.19 | attack | detected by Fail2Ban |
2019-09-20 18:42:49 |
| 77.55.214.122 | attackbots | Sep 19 23:47:32 kapalua sshd\[1320\]: Invalid user receivedmail from 77.55.214.122 Sep 19 23:47:32 kapalua sshd\[1320\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=dedicated-aig122.rev.nazwa.pl Sep 19 23:47:33 kapalua sshd\[1320\]: Failed password for invalid user receivedmail from 77.55.214.122 port 46120 ssh2 Sep 19 23:52:05 kapalua sshd\[1741\]: Invalid user uranus from 77.55.214.122 Sep 19 23:52:05 kapalua sshd\[1741\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=dedicated-aig122.rev.nazwa.pl |
2019-09-20 18:20:21 |
| 139.59.80.189 | attackspam | WordPress login Brute force / Web App Attack on client site. |
2019-09-20 18:58:01 |
| 139.59.74.183 | attackbotsspam | Sep 20 11:16:54 MK-Soft-VM7 sshd\[11641\]: Invalid user natematias from 139.59.74.183 port 42918 Sep 20 11:16:54 MK-Soft-VM7 sshd\[11641\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.74.183 Sep 20 11:16:56 MK-Soft-VM7 sshd\[11641\]: Failed password for invalid user natematias from 139.59.74.183 port 42918 ssh2 ... |
2019-09-20 17:32:50 |
| 68.183.204.6 | attack | 68.183.204.6 - - [20/Sep/2019:11:15:17 +0200] "GET /wp-login.php HTTP/1.1" 200 1237 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 68.183.204.6 - - [20/Sep/2019:11:15:19 +0200] "POST /wp-login.php HTTP/1.1" 200 1632 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 68.183.204.6 - - [20/Sep/2019:11:15:21 +0200] "GET /wp-login.php HTTP/1.1" 200 1237 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 68.183.204.6 - - [20/Sep/2019:11:15:22 +0200] "POST /wp-login.php HTTP/1.1" 200 1607 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 68.183.204.6 - - [20/Sep/2019:11:15:22 +0200] "GET /wp-login.php HTTP/1.1" 200 1237 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 68.183.204.6 - - [20/Sep/2019:11:15:23 +0200] "POST /wp-login.php HTTP/1.1" 200 1608 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 68.183.204.6 - - [2 |
2019-09-20 18:50:34 |