城市(city): unknown
省份(region): unknown
国家(country): Germany
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 212.201.138.107
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 31809
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;212.201.138.107. IN A
;; AUTHORITY SECTION:
. 399 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021800 1800 900 604800 86400
;; Query time: 55 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 19 01:32:22 CST 2022
;; MSG SIZE rcvd: 108107.138.201.212.in-addr.arpa domain name pointer kompetenzz2018.fh-bielefeld.de.
107.138.201.212.in-addr.arpa domain name pointer www.kompetenzz.de.
107.138.201.212.in-addr.arpa domain name pointer admin.kompetenzz.de.
107.138.201.212.in-addr.arpa domain name pointer frauen-technik-impulse.de.
107.138.201.212.in-addr.arpa domain name pointer zukunftsberuf-erzieher.de.
107.138.201.212.in-addr.arpa domain name pointer zukunftsberuf-pfleger.de.
107.138.201.212.in-addr.arpa domain name pointer zukunftsberuf-grundschullehrer.de.
107.138.201.212.in-addr.arpa domain name pointer kompetenzz.de.
107.138.201.212.in-addr.arpa domain name pointer girlday.de.
107.138.201.212.in-addr.arpa domain name pointer girl-day.de.
107.138.201.212.in-addr.arpa domain name pointer boyday.de.
107.138.201.212.in-addr.arpa domain name pointer boy-day.de.
107.138.201.212.in-addr.arpa domain name pointer boys-day.de.
107.138.201.212.in-addr.arpa domain name pointer girlsday.de.
107.138.201.212.in-addr.arpa domain name pointer girls-day.de.b'107.138.201.212.in-addr.arpa name = girlday.de.
107.138.201.212.in-addr.arpa name = girls-day.de.
107.138.201.212.in-addr.arpa name = kompetenzz2018.fh-bielefeld.de.
107.138.201.212.in-addr.arpa name = girl-day.de.
107.138.201.212.in-addr.arpa name = zukunftsberuf-pfleger.de.
107.138.201.212.in-addr.arpa name = kompetenzz.de.
107.138.201.212.in-addr.arpa name = www.kompetenzz.de.
107.138.201.212.in-addr.arpa name = demografiewerkstatt-kommunen.de.
107.138.201.212.in-addr.arpa name = boyday.de.
107.138.201.212.in-addr.arpa name = admin.kompetenzz.de.
107.138.201.212.in-addr.arpa name = boys-day.de.
107.138.201.212.in-addr.arpa name = zukunftsberuf-grundschullehrer.de.
107.138.201.212.in-addr.arpa name = frauen-technik-impulse.de.
107.138.201.212.in-addr.arpa name = boy-day.de.
107.138.201.212.in-addr.arpa name = zukunftsberuf-erzieher.de.
107.138.201.212.in-addr.arpa name = girlsday.de.
Authoritative answers can be found from:
'| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 81.22.45.23 | attackspambots | Portscan or hack attempt detected by psad/fwsnort |
2019-07-17 20:09:02 |
| 159.89.235.61 | attackspam | SSH Brute Force, server-1 sshd[29473]: Failed password for invalid user server from 159.89.235.61 port 58086 ssh2 |
2019-07-17 19:53:03 |
| 153.36.236.234 | attackbots | Bruteforce on SSH Honeypot |
2019-07-17 19:54:28 |
| 190.153.144.198 | attackbots | Honeypot attack, port: 23, PTR: PTR record not found |
2019-07-17 20:31:33 |
| 192.200.207.2 | attackbotsspam | Honeypot attack, port: 445, PTR: PTR record not found |
2019-07-17 20:26:58 |
| 103.10.211.193 | attackbotsspam | Jul 17 06:03:31 flomail postfix/smtps/smtpd[23979]: warning: unknown[103.10.211.193]: SASL PLAIN authentication failed: Jul 17 06:03:38 flomail postfix/smtps/smtpd[23979]: warning: unknown[103.10.211.193]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 17 06:03:46 flomail postfix/smtps/smtpd[23979]: warning: unknown[103.10.211.193]: SASL PLAIN authentication failed: |
2019-07-17 20:13:39 |
| 110.232.86.40 | attack | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-17 00:39:18,662 INFO [shellcode_manager] (110.232.86.40) no match, writing hexdump (4c938feddc0b93cfd10673c5ccacd391 :2531471) - MS17010 (EternalBlue) |
2019-07-17 20:04:32 |
| 154.51.153.85 | attackbots | Invalid user info from 154.51.153.85 port 51066 |
2019-07-17 20:10:53 |
| 64.202.187.152 | attackbotsspam | Jul 17 12:13:32 [munged] sshd[23347]: Invalid user delgado from 64.202.187.152 port 37370 Jul 17 12:13:32 [munged] sshd[23347]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.202.187.152 |
2019-07-17 20:23:06 |
| 61.153.246.187 | attackspambots | 2019-07-17T06:03:52.295544abusebot-8.cloudsearch.cf sshd\[14107\]: Invalid user nologin from 61.153.246.187 port 54811 |
2019-07-17 20:11:46 |
| 68.183.76.81 | attack | 65476/udp 65476/udp [2019-06-29/07-17]2pkt |
2019-07-17 20:25:14 |
| 197.253.6.249 | attackspam | SSH Brute Force, server-1 sshd[29475]: Failed password for invalid user neo from 197.253.6.249 port 40761 ssh2 |
2019-07-17 19:51:20 |
| 212.8.243.42 | attackbots | 2019-07-17T13:51:07.330365lon01.zurich-datacenter.net sshd\[442\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.8.243.42 user=redis 2019-07-17T13:51:08.588149lon01.zurich-datacenter.net sshd\[442\]: Failed password for redis from 212.8.243.42 port 9689 ssh2 2019-07-17T13:51:10.658301lon01.zurich-datacenter.net sshd\[442\]: Failed password for redis from 212.8.243.42 port 9689 ssh2 2019-07-17T13:51:13.002711lon01.zurich-datacenter.net sshd\[442\]: Failed password for redis from 212.8.243.42 port 9689 ssh2 2019-07-17T13:51:14.759874lon01.zurich-datacenter.net sshd\[442\]: Failed password for redis from 212.8.243.42 port 9689 ssh2 ... |
2019-07-17 20:27:52 |
| 153.36.242.114 | attack | Jul 17 07:37:17 TORMINT sshd\[11637\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=153.36.242.114 user=root Jul 17 07:37:19 TORMINT sshd\[11637\]: Failed password for root from 153.36.242.114 port 45996 ssh2 Jul 17 07:37:27 TORMINT sshd\[11639\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=153.36.242.114 user=root ... |
2019-07-17 19:53:31 |
| 27.72.170.175 | attackbotsspam | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-17 00:39:10,858 INFO [shellcode_manager] (27.72.170.175) no match, writing hexdump (d83a8cc5cf1c72b9dd6826d5ee111740 :2474238) - MS17010 (EternalBlue) |
2019-07-17 20:21:28 |