41.79.16.132 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): South Africa

运营商(isp): AccessGlobal Communication (Pty) Ltd

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Sep 13 18:07:55 mail.srvfarm.net postfix/smtpd[1217748]: warning: unknown[41.79.16.132]: SASL PLAIN authentication failed: Sep 13 18:07:55 mail.srvfarm.net postfix/smtpd[1217748]: lost connection after AUTH from unknown[41.79.16.132] Sep 13 18:12:07 mail.srvfarm.net postfix/smtps/smtpd[1216115]: warning: unknown[41.79.16.132]: SASL PLAIN authentication failed: Sep 13 18:12:07 mail.srvfarm.net postfix/smtps/smtpd[1216115]: lost connection after AUTH from unknown[41.79.16.132] Sep 13 18:14:02 mail.srvfarm.net postfix/smtps/smtpd[1216379]: warning: unknown[41.79.16.132]: SASL PLAIN authentication failed:	2020-09-15 03:54:25
attackbots	Sep 13 18:07:55 mail.srvfarm.net postfix/smtpd[1217748]: warning: unknown[41.79.16.132]: SASL PLAIN authentication failed: Sep 13 18:07:55 mail.srvfarm.net postfix/smtpd[1217748]: lost connection after AUTH from unknown[41.79.16.132] Sep 13 18:12:07 mail.srvfarm.net postfix/smtps/smtpd[1216115]: warning: unknown[41.79.16.132]: SASL PLAIN authentication failed: Sep 13 18:12:07 mail.srvfarm.net postfix/smtps/smtpd[1216115]: lost connection after AUTH from unknown[41.79.16.132] Sep 13 18:14:02 mail.srvfarm.net postfix/smtps/smtpd[1216379]: warning: unknown[41.79.16.132]: SASL PLAIN authentication failed:	2020-09-14 19:53:42

类型

评论内容

时间

attack

Sep 13 18:07:55 mail.srvfarm.net postfix/smtpd[1217748]: warning: unknown[41.79.16.132]: SASL PLAIN authentication failed: 
Sep 13 18:07:55 mail.srvfarm.net postfix/smtpd[1217748]: lost connection after AUTH from unknown[41.79.16.132]
Sep 13 18:12:07 mail.srvfarm.net postfix/smtps/smtpd[1216115]: warning: unknown[41.79.16.132]: SASL PLAIN authentication failed: 
Sep 13 18:12:07 mail.srvfarm.net postfix/smtps/smtpd[1216115]: lost connection after AUTH from unknown[41.79.16.132]
Sep 13 18:14:02 mail.srvfarm.net postfix/smtps/smtpd[1216379]: warning: unknown[41.79.16.132]: SASL PLAIN authentication failed:

2020-09-15 03:54:25

attackbots

Sep 13 18:07:55 mail.srvfarm.net postfix/smtpd[1217748]: warning: unknown[41.79.16.132]: SASL PLAIN authentication failed: 
Sep 13 18:07:55 mail.srvfarm.net postfix/smtpd[1217748]: lost connection after AUTH from unknown[41.79.16.132]
Sep 13 18:12:07 mail.srvfarm.net postfix/smtps/smtpd[1216115]: warning: unknown[41.79.16.132]: SASL PLAIN authentication failed: 
Sep 13 18:12:07 mail.srvfarm.net postfix/smtps/smtpd[1216115]: lost connection after AUTH from unknown[41.79.16.132]
Sep 13 18:14:02 mail.srvfarm.net postfix/smtps/smtpd[1216379]: warning: unknown[41.79.16.132]: SASL PLAIN authentication failed:

2020-09-14 19:53:42

相同子网IP讨论:

IP	类型	评论内容	时间
41.79.163.65	attack	Unauthorized connection attempt from IP address 41.79.163.65 on Port 445(SMB)	2020-05-04 20:38:34
41.79.163.65	attackbotsspam	Unauthorized connection attempt from IP address 41.79.163.65 on Port 445(SMB)	2020-01-31 20:44:18
41.79.169.158	attack	445/tcp [2019-09-24]1pkt	2019-09-25 08:31:55
41.79.163.65	attackspam	Unauthorized connection attempt from IP address 41.79.163.65 on Port 445(SMB)	2019-09-22 10:08:37
41.79.163.65	attack	Unauthorized connection attempt from IP address 41.79.163.65 on Port 445(SMB)	2019-08-28 06:52:02

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 41.79.16.132
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 20063
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;41.79.16.132.			IN	A

;; AUTHORITY SECTION:
.			122	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020091400 1800 900 604800 86400

;; Query time: 69 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Sep 14 19:53:34 CST 2020
;; MSG SIZE  rcvd: 116

HOST信息:

132.16.79.41.in-addr.arpa domain name pointer 132-16-79.agc.net.za.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
132.16.79.41.in-addr.arpa	name = 132-16-79.agc.net.za.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
106.38.203.230	attack	Jan 24 05:35:24 php1 sshd\[7506\]: Invalid user acacia from 106.38.203.230 Jan 24 05:35:24 php1 sshd\[7506\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.38.203.230 Jan 24 05:35:26 php1 sshd\[7506\]: Failed password for invalid user acacia from 106.38.203.230 port 42876 ssh2 Jan 24 05:38:14 php1 sshd\[7836\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.38.203.230 user=root Jan 24 05:38:16 php1 sshd\[7836\]: Failed password for root from 106.38.203.230 port 52605 ssh2	2020-01-24 23:51:37
218.92.0.175	attack	Jan 24 16:48:17 host sshd\[17677\]: Unable to negotiate with 218.92.0.175 port 23368: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 \[preauth\] ...	2020-01-24 23:48:46
51.91.102.173	attack	Invalid user midgear from 51.91.102.173 port 45110	2020-01-25 00:27:44
209.85.220.65	attack	Received-SPF: pass (google.com: domain of anan11+bncbcrzbwf6xikbbh5gvpyqkgqetybgzxq@techsaga.es designates 209.85.220.69 as permitted sender) client-ip=209.85.220.69; Authentication-Results: mx.google.com; dkim=pass header.i=@techsaga-es.20150623.gappssmtp.com header.s=20150623 header.b=jnwOUSzs; arc=pass (i=2 spf=pass spfdomain=gmail.com dkim=pass dkdomain=gmail.com dmarc=pass fromdomain=gmail.com); spf=pass (google.com: domain of anan11+bncbcrzbwf6xikbbh5gvpyqkgqetybgzxq@techsaga.es designates 209.85.220.69 as permitted sender) smtp.mailfrom=anan11+bncBCRZBWF6XIKBBH5GVPYQKGQETYBGZXQ@techsaga.es; dmarc=fail (p=NONE sp=QUARANTINE dis=NONE arc=pass) header.from=gmail.com	2020-01-25 00:28:38
41.99.39.36	attackspambots	Mail/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -	2020-01-24 23:47:51
36.92.100.109	attackspambots	Jan 24 04:36:02 mockhub sshd[32367]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.92.100.109 Jan 24 04:36:04 mockhub sshd[32367]: Failed password for invalid user hell from 36.92.100.109 port 34846 ssh2 ...	2020-01-25 00:18:35
91.183.171.187	attackbots	Jan 24 19:00:12 hosting sshd[25308]: Invalid user unbound from 91.183.171.187 port 47766 ...	2020-01-25 00:06:08
198.245.63.133	attack	$lgm	2020-01-25 00:00:26
120.132.22.92	attackspambots	Unauthorized connection attempt detected from IP address 120.132.22.92 to port 2220 [J]	2020-01-25 00:04:12
122.51.41.57	attackspambots	Jan 24 05:47:46 eddieflores sshd\[23678\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.41.57 user=root Jan 24 05:47:48 eddieflores sshd\[23678\]: Failed password for root from 122.51.41.57 port 34966 ssh2 Jan 24 05:53:36 eddieflores sshd\[24581\]: Invalid user user2 from 122.51.41.57 Jan 24 05:53:36 eddieflores sshd\[24581\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.41.57 Jan 24 05:53:38 eddieflores sshd\[24581\]: Failed password for invalid user user2 from 122.51.41.57 port 34166 ssh2	2020-01-24 23:57:20
112.85.42.173	attackspam	Jan 24 17:28:24 markkoudstaal sshd[11036]: Failed password for root from 112.85.42.173 port 29543 ssh2 Jan 24 17:28:29 markkoudstaal sshd[11036]: Failed password for root from 112.85.42.173 port 29543 ssh2 Jan 24 17:28:33 markkoudstaal sshd[11036]: Failed password for root from 112.85.42.173 port 29543 ssh2 Jan 24 17:28:36 markkoudstaal sshd[11036]: Failed password for root from 112.85.42.173 port 29543 ssh2	2020-01-25 00:29:17
92.119.160.145	attack	ET CINS Active Threat Intelligence Poor Reputation IP group 93 - port: 2001 proto: TCP cat: Misc Attack	2020-01-24 23:53:41
37.187.192.162	attackspambots	Jan 24 14:54:49 vmd17057 sshd\[12676\]: Invalid user hadoop from 37.187.192.162 port 53106 Jan 24 14:54:49 vmd17057 sshd\[12676\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.192.162 Jan 24 14:54:51 vmd17057 sshd\[12676\]: Failed password for invalid user hadoop from 37.187.192.162 port 53106 ssh2 ...	2020-01-25 00:22:41
105.29.64.195	attack	2020-01-24 06:35:30 H=(toyotavarna.com) [105.29.64.195]:45804 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4, 127.0.0.3) (https://www.spamhaus.org/sbl/query/SBLCSS) 2020-01-24 06:35:31 H=(toyotavarna.com) [105.29.64.195]:45804 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4, 127.0.0.3) (https://www.spamhaus.org/sbl/query/SBLCSS) 2020-01-24 06:35:32 H=(toyotavarna.com) [105.29.64.195]:45804 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4, 127.0.0.3) (https://www.spamhaus.org/query/ip/105.29.64.195) ...	2020-01-25 00:20:46
198.50.200.80	attackspambots	Unauthorized connection attempt detected from IP address 198.50.200.80 to port 2220 [J]	2020-01-24 23:49:46

最近上报的IP列表

194.5.49.16	84.178.54.84	177.99.184.146	20.8.8.100
10.5.48.55	92.73.205.37	156.198.227.25	50.93.23.58
168.67.141.244	118.244.42.117	18.118.113.160	176.214.108.130
225.13.50.128	241.147.64.238	194.182.97.208	242.191.184.90
103.119.146.255	9.150.240.119	23.6.73.86	58.226.184.227