城市(city): unknown
省份(region): unknown
国家(country): Germany
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 141.3.159.32
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 18853
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;141.3.159.32. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020400 1800 900 604800 86400
;; Query time: 66 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 04 14:04:44 CST 2025
;; MSG SIZE rcvd: 10532.159.3.141.in-addr.arpa domain name pointer dyn-dhcp-141-3-159-32.iam.kit.edu.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
32.159.3.141.in-addr.arpa name = dyn-dhcp-141-3-159-32.iam.kit.edu.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 222.186.31.83 | attackspambots | Feb 12 19:47:19 MK-Soft-VM5 sshd[28704]: Failed password for root from 222.186.31.83 port 33025 ssh2 Feb 12 19:47:22 MK-Soft-VM5 sshd[28704]: Failed password for root from 222.186.31.83 port 33025 ssh2 ... |
2020-02-13 02:54:53 |
| 190.128.171.250 | attack | Feb 12 19:54:43 MK-Soft-VM3 sshd[359]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.128.171.250 Feb 12 19:54:45 MK-Soft-VM3 sshd[359]: Failed password for invalid user scchou from 190.128.171.250 port 54550 ssh2 ... |
2020-02-13 03:04:55 |
| 110.90.99.49 | attack | Feb 10 19:59:14 nbi10516-7 sshd[19347]: Invalid user dsg from 110.90.99.49 port 43494 Feb 10 19:59:15 nbi10516-7 sshd[19347]: Failed password for invalid user dsg from 110.90.99.49 port 43494 ssh2 Feb 10 19:59:16 nbi10516-7 sshd[19347]: Received disconnect from 110.90.99.49 port 43494:11: Bye Bye [preauth] Feb 10 19:59:16 nbi10516-7 sshd[19347]: Disconnected from 110.90.99.49 port 43494 [preauth] Feb 10 20:14:41 nbi10516-7 sshd[22628]: Connection closed by 110.90.99.49 port 34158 [preauth] Feb 10 20:18:18 nbi10516-7 sshd[31767]: Invalid user mri from 110.90.99.49 port 59586 Feb 10 20:18:20 nbi10516-7 sshd[31767]: Failed password for invalid user mri from 110.90.99.49 port 59586 ssh2 Feb 10 20:18:20 nbi10516-7 sshd[31767]: Received disconnect from 110.90.99.49 port 59586:11: Bye Bye [preauth] Feb 10 20:18:20 nbi10516-7 sshd[31767]: Disconnected from 110.90.99.49 port 59586 [preauth] Feb 10 20:24:43 nbi10516-7 sshd[12462]: Connection closed by 110.90.99.49 port 41252 [pre........ ------------------------------- |
2020-02-13 02:28:08 |
| 92.63.194.107 | attackbots | Feb 12 19:46:26 * sshd[24753]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.63.194.107 Feb 12 19:46:28 * sshd[24753]: Failed password for invalid user support from 92.63.194.107 port 38263 ssh2 |
2020-02-13 02:55:54 |
| 92.63.194.7 | attackspambots | Feb 12 19:46:31 * sshd[24795]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.63.194.7 Feb 12 19:46:34 * sshd[24795]: Failed password for invalid user admin from 92.63.194.7 port 35976 ssh2 |
2020-02-13 02:52:39 |
| 89.248.172.85 | attackbotsspam | ET DROP Dshield Block Listed Source group 1 - port: 8532 proto: TCP cat: Misc Attack |
2020-02-13 02:27:28 |
| 103.23.138.25 | attack | KH_APNIC-HM_<177>1581514960 [1:2403498:55307] ET CINS Active Threat Intelligence Poor Reputation IP TCP group 100 [Classification: Misc Attack] [Priority: 2] {TCP} 103.23.138.25:50068 |
2020-02-13 02:26:04 |
| 193.70.114.154 | attackspam | Feb 12 08:09:42 auw2 sshd\[19306\]: Invalid user kuang from 193.70.114.154 Feb 12 08:09:42 auw2 sshd\[19306\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.ip-193-70-114.eu Feb 12 08:09:44 auw2 sshd\[19306\]: Failed password for invalid user kuang from 193.70.114.154 port 42526 ssh2 Feb 12 08:12:28 auw2 sshd\[19555\]: Invalid user f1 from 193.70.114.154 Feb 12 08:12:28 auw2 sshd\[19555\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.ip-193-70-114.eu |
2020-02-13 02:29:31 |
| 185.211.245.170 | attack | Feb 12 18:02:41 s1 postfix/submission/smtpd\[10124\]: warning: unknown\[185.211.245.170\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Feb 12 18:02:48 s1 postfix/submission/smtpd\[10124\]: warning: unknown\[185.211.245.170\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Feb 12 18:03:06 s1 postfix/submission/smtpd\[10124\]: warning: unknown\[185.211.245.170\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Feb 12 18:03:13 s1 postfix/submission/smtpd\[10124\]: warning: unknown\[185.211.245.170\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Feb 12 18:03:32 s1 postfix/submission/smtpd\[11294\]: warning: unknown\[185.211.245.170\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Feb 12 18:03:37 s1 postfix/submission/smtpd\[10124\]: warning: unknown\[185.211.245.170\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Feb 12 18:03:38 s1 postfix/submission/smtpd\[11288\]: warning: unknown\[185.211.245.170\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Feb 12 18:03:39 s1 postfix/submission/smtpd\[11294\]: warn |
2020-02-13 02:32:57 |
| 111.63.21.98 | attack | port scan and connect, tcp 1433 (ms-sql-s) |
2020-02-13 03:03:47 |
| 171.207.67.77 | attackspam | Feb 12 14:39:35 server378 sshd[18211]: Invalid user pmail from 171.207.67.77 Feb 12 14:39:35 server378 sshd[18211]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.207.67.77 Feb 12 14:39:38 server378 sshd[18211]: Failed password for invalid user pmail from 171.207.67.77 port 50636 ssh2 Feb 12 14:39:38 server378 sshd[18211]: Received disconnect from 171.207.67.77: 11: Bye Bye [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=171.207.67.77 |
2020-02-13 02:40:38 |
| 45.118.183.234 | attackspam | Invalid user aline from 45.118.183.234 port 42544 |
2020-02-13 02:57:26 |
| 222.185.244.178 | attackspambots | 02/12/2020-18:15:26.627568 222.185.244.178 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433 |
2020-02-13 02:29:14 |
| 27.65.252.144 | attackspam | Unauthorised access (Feb 12) SRC=27.65.252.144 LEN=44 TTL=42 ID=25387 TCP DPT=23 WINDOW=8577 SYN |
2020-02-13 02:46:28 |
| 178.128.221.237 | attack | Feb 12 19:34:22 silence02 sshd[31662]: Failed password for root from 178.128.221.237 port 60766 ssh2 Feb 12 19:37:36 silence02 sshd[31902]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.221.237 Feb 12 19:37:38 silence02 sshd[31902]: Failed password for invalid user dmontano from 178.128.221.237 port 33270 ssh2 |
2020-02-13 02:40:06 |