城市(city): Elsfleth
省份(region): Lower Saxony
国家(country): Germany
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.13.18.80
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 12177
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;139.13.18.80. IN A
;; AUTHORITY SECTION:
. 201 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022011002 1800 900 604800 86400
;; Query time: 19 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jan 11 08:32:38 CST 2022
;; MSG SIZE rcvd: 105Host 80.18.13.139.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 80.18.13.139.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 189.213.100.254 | attackspam | Automatic report - Port Scan Attack |
2019-12-28 07:05:46 |
| 94.73.194.12 | attackspam | michaelklotzbier.de 94.73.194.12 [27/Dec/2019:23:57:01 +0100] "POST /wp-login.php HTTP/1.1" 200 6418 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" michaelklotzbier.de 94.73.194.12 [27/Dec/2019:23:57:02 +0100] "POST /wp-login.php HTTP/1.1" 200 6378 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2019-12-28 07:04:00 |
| 182.61.37.35 | attackspambots | Dec 27 17:56:06 plusreed sshd[26805]: Invalid user qwerty@111 from 182.61.37.35 ... |
2019-12-28 07:38:11 |
| 37.49.231.183 | attack | \[2019-12-27 23:56:40\] SECURITY\[2093\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-12-27T23:56:40.763+0100",Severity="Error",Service="SIP",EventVersion="2",AccountID="100",SessionID="0x7f2418581328",LocalAddress="IPV4/UDP/204.8.216.89/5060",RemoteAddress="IPV4/UDP/37.49.231.183/5362",Challenge="19915732",ReceivedChallenge="19915732",ReceivedHash="e3aa212a598a9b57f5ee5e1b67792b62" \[2019-12-27 23:56:41\] SECURITY\[2093\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-12-27T23:56:41.623+0100",Severity="Error",Service="SIP",EventVersion="2",AccountID="100",SessionID="0x7f241859b198",LocalAddress="IPV4/UDP/204.8.216.89/5060",RemoteAddress="IPV4/UDP/37.49.231.183/5362",Challenge="514046c6",ReceivedChallenge="514046c6",ReceivedHash="6803e3ca7a403267d1ee37c5b5610f9f" \[2019-12-27 23:56:41\] SECURITY\[2093\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-12-27T23:56:41.720+0100",Severity="Error",Service="SIP",EventVersion="2",Accoun ... |
2019-12-28 07:17:00 |
| 46.38.144.117 | attack | Dec 28 00:23:56 webserver postfix/smtpd\[30852\]: warning: unknown\[46.38.144.117\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Dec 28 00:25:33 webserver postfix/smtpd\[31504\]: warning: unknown\[46.38.144.117\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Dec 28 00:27:14 webserver postfix/smtpd\[30852\]: warning: unknown\[46.38.144.117\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Dec 28 00:28:55 webserver postfix/smtpd\[30852\]: warning: unknown\[46.38.144.117\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Dec 28 00:30:35 webserver postfix/smtpd\[30852\]: warning: unknown\[46.38.144.117\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2019-12-28 07:30:12 |
| 112.35.76.1 | attackspam | Lines containing failures of 112.35.76.1 Dec 27 23:49:50 mailserver sshd[21880]: Invalid user dbus from 112.35.76.1 port 48582 Dec 27 23:49:50 mailserver sshd[21880]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.35.76.1 Dec 27 23:49:52 mailserver sshd[21880]: Failed password for invalid user dbus from 112.35.76.1 port 48582 ssh2 Dec 27 23:49:52 mailserver sshd[21880]: Received disconnect from 112.35.76.1 port 48582:11: Bye Bye [preauth] Dec 27 23:49:52 mailserver sshd[21880]: Disconnected from invalid user dbus 112.35.76.1 port 48582 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=112.35.76.1 |
2019-12-28 07:25:31 |
| 190.231.177.44 | attack | Dec 27 23:56:58 cavern sshd[13748]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.231.177.44 |
2019-12-28 07:09:51 |
| 129.211.12.96 | attack | Dec 27 18:13:17 plusreed sshd[31236]: Invalid user admin from 129.211.12.96 ... |
2019-12-28 07:15:31 |
| 34.230.156.67 | attack | Looking for resource vulnerabilities |
2019-12-28 07:13:58 |
| 222.186.190.2 | attack | Triggered by Fail2Ban at Ares web server |
2019-12-28 07:03:19 |
| 201.217.210.194 | attackspam | 1577487403 - 12/27/2019 23:56:43 Host: 201.217.210.194/201.217.210.194 Port: 445 TCP Blocked |
2019-12-28 07:15:16 |
| 1.203.115.141 | attack | Dec 28 05:50:31 itv-usvr-02 sshd[498]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.203.115.141 user=root Dec 28 05:53:43 itv-usvr-02 sshd[546]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.203.115.141 user=games Dec 28 05:56:40 itv-usvr-02 sshd[593]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.203.115.141 |
2019-12-28 07:17:37 |
| 117.211.161.171 | attackbotsspam | Dec 27 23:56:44 MK-Soft-VM4 sshd[31021]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.211.161.171 ... |
2019-12-28 07:14:21 |
| 212.51.148.162 | attackspam | Invalid user wellhoff from 212.51.148.162 port 53510 |
2019-12-28 07:34:31 |
| 60.19.64.10 | attackspambots | Dec 27 17:56:22 web1 postfix/smtpd[18931]: warning: unknown[60.19.64.10]: SASL LOGIN authentication failed: authentication failure ... |
2019-12-28 07:28:10 |