城市(city): unknown
省份(region): unknown
国家(country): Norway
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 193.213.201.134
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 61570
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;193.213.201.134. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020401 1800 900 604800 86400
;; Query time: 13 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 05 02:31:26 CST 2025
;; MSG SIZE rcvd: 108134.201.213.193.in-addr.arpa domain name pointer 134.201.213.193.static.cust.telenor.net.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
134.201.213.193.in-addr.arpa name = 134.201.213.193.static.cust.telenor.net.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 125.63.116.106 | attackbotsspam | Jun 28 08:10:32 sanyalnet-cloud-vps4 sshd[3621]: Connection from 125.63.116.106 port 7864 on 64.137.160.124 port 23 Jun 28 08:10:35 sanyalnet-cloud-vps4 sshd[3621]: Address 125.63.116.106 maps to 125.63.116.106.reveeclipse.spectranet.in, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Jun 28 08:10:35 sanyalnet-cloud-vps4 sshd[3621]: Invalid user mirc from 125.63.116.106 Jun 28 08:10:35 sanyalnet-cloud-vps4 sshd[3621]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.63.116.106 Jun 28 08:10:36 sanyalnet-cloud-vps4 sshd[3621]: Failed password for invalid user mirc from 125.63.116.106 port 7864 ssh2 Jun 28 08:10:37 sanyalnet-cloud-vps4 sshd[3621]: Received disconnect from 125.63.116.106: 11: Bye Bye [preauth] Jun 28 08:14:13 sanyalnet-cloud-vps4 sshd[3632]: Connection from 125.63.116.106 port 42480 on 64.137.160.124 port 23 Jun 28 08:14:15 sanyalnet-cloud-vps4 sshd[3632]: Address 125.63.116.106 maps to 125......... ------------------------------- |
2019-07-22 12:40:05 |
| 102.184.24.137 | attackbotsspam | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-22 01:38:44,679 INFO [shellcode_manager] (102.184.24.137) no match, writing hexdump (232c697c22154b74c13d0f64971daacc :2290206) - MS17010 (EternalBlue) |
2019-07-22 12:40:34 |
| 5.135.181.11 | attack | Jul 22 04:32:13 localhost sshd\[59775\]: Invalid user ag from 5.135.181.11 port 41654 Jul 22 04:32:13 localhost sshd\[59775\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.135.181.11 Jul 22 04:32:15 localhost sshd\[59775\]: Failed password for invalid user ag from 5.135.181.11 port 41654 ssh2 Jul 22 04:37:31 localhost sshd\[59921\]: Invalid user oliver from 5.135.181.11 port 38852 Jul 22 04:37:31 localhost sshd\[59921\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.135.181.11 ... |
2019-07-22 12:44:46 |
| 116.1.3.209 | attack | Jul 22 04:27:33 localhost sshd\[19194\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.1.3.209 user=root Jul 22 04:27:36 localhost sshd\[19194\]: Failed password for root from 116.1.3.209 port 21781 ssh2 ... |
2019-07-22 13:12:54 |
| 217.112.128.203 | attack | Jul 22 04:45:51 srv1 postfix/smtpd[9190]: connect from prognoses.jamihydraulics.com[217.112.128.203] Jul x@x Jul 22 04:45:57 srv1 postfix/smtpd[9190]: disconnect from prognoses.jamihydraulics.com[217.112.128.203] Jul 22 04:47:28 srv1 postfix/smtpd[9190]: connect from prognoses.jamihydraulics.com[217.112.128.203] Jul x@x Jul 22 04:47:33 srv1 postfix/smtpd[9190]: disconnect from prognoses.jamihydraulics.com[217.112.128.203] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=217.112.128.203 |
2019-07-22 12:57:40 |
| 119.176.90.236 | attackspambots | Jul 21 21:41:52 localhost kernel: [15003906.159189] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:aa:c1:08:00 SRC=119.176.90.236 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=41090 PROTO=TCP SPT=38618 DPT=52869 WINDOW=47383 RES=0x00 SYN URGP=0 Jul 21 21:41:52 localhost kernel: [15003906.159197] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:aa:c1:08:00 SRC=119.176.90.236 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=41090 PROTO=TCP SPT=38618 DPT=52869 SEQ=758669438 ACK=0 WINDOW=47383 RES=0x00 SYN URGP=0 Jul 21 23:11:55 localhost kernel: [15009308.849269] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=119.176.90.236 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=38872 PROTO=TCP SPT=27098 DPT=52869 WINDOW=47383 RES=0x00 SYN URGP=0 Jul 21 23:11:55 localhost kernel: [15009308.849294] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=119.176.90.236 DST=[mungedIP2] LEN=40 TOS |
2019-07-22 12:45:54 |
| 180.150.253.172 | attackspam | Spam Timestamp : 22-Jul-19 04:01 _ BlockList Provider combined abuse _ (221) |
2019-07-22 13:04:46 |
| 186.120.177.141 | attackspambots | Spam Timestamp : 22-Jul-19 03:14 _ BlockList Provider combined abuse _ (219) |
2019-07-22 13:05:58 |
| 187.188.176.238 | attackbotsspam | Unauthorised access (Jul 22) SRC=187.188.176.238 LEN=40 TTL=240 ID=28504 TCP DPT=445 WINDOW=1024 SYN |
2019-07-22 13:01:11 |
| 189.103.69.191 | attackspam | Jul 22 10:13:33 vibhu-HP-Z238-Microtower-Workstation sshd\[31975\]: Invalid user zl from 189.103.69.191 Jul 22 10:13:33 vibhu-HP-Z238-Microtower-Workstation sshd\[31975\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.103.69.191 Jul 22 10:13:35 vibhu-HP-Z238-Microtower-Workstation sshd\[31975\]: Failed password for invalid user zl from 189.103.69.191 port 44778 ssh2 Jul 22 10:19:14 vibhu-HP-Z238-Microtower-Workstation sshd\[32162\]: Invalid user admin1 from 189.103.69.191 Jul 22 10:19:14 vibhu-HP-Z238-Microtower-Workstation sshd\[32162\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.103.69.191 ... |
2019-07-22 13:03:30 |
| 142.44.137.62 | attack | Jul 22 07:00:32 SilenceServices sshd[10827]: Failed password for git from 142.44.137.62 port 53702 ssh2 Jul 22 07:04:41 SilenceServices sshd[15403]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.44.137.62 Jul 22 07:04:43 SilenceServices sshd[15403]: Failed password for invalid user nexus from 142.44.137.62 port 48120 ssh2 |
2019-07-22 13:06:37 |
| 202.142.101.45 | attack | SS5,WP GET /wp-login.php |
2019-07-22 13:18:20 |
| 27.147.56.152 | attackbots | Jul 22 06:02:43 vps647732 sshd[1574]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.147.56.152 Jul 22 06:02:45 vps647732 sshd[1574]: Failed password for invalid user yash from 27.147.56.152 port 49392 ssh2 ... |
2019-07-22 12:30:46 |
| 177.92.245.157 | attackspambots | Brute force attempt |
2019-07-22 12:32:46 |
| 191.53.221.240 | attackbotsspam | Brute force attempt |
2019-07-22 12:38:55 |