城市(city): unknown
省份(region): unknown
国家(country): China
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 103.20.248.231 | attack | SSH login attempts. |
2020-03-29 20:26:34 |
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '103.20.248.0 - 103.20.251.255'
% Abuse contact for '103.20.248.0 - 103.20.251.255' is 'yuhg@51idc.com'
inetnum: 103.20.248.0 - 103.20.251.255
netname: Ruisu-51IDC
descr: Shanghai ruisu Network Technology Co.,Ltd
descr: Building 4,intelligence industry park,
descr: No.1 Hulan West Road,Shanghai
country: CN
admin-c: YW7308-AP
tech-c: YW7187-AP
mnt-by: MAINT-CNNIC-AP
mnt-lower: MAINT-CNNIC-AP
mnt-irt: IRT-51IDC-CN
mnt-routes: MAINT-CNNIC-AP
status: ALLOCATED PORTABLE
last-modified: 2023-12-27T06:10:19Z
source: APNIC
irt: IRT-51IDC-CN
address: Building 4,intelligence industry park,
address: No.1 Hulan West Road,Shanghai
e-mail: yuhg@51idc.com
abuse-mailbox: yuhg@51idc.com
admin-c: YW7308-AP
tech-c: YW7187-AP
auth: # Filtered
mnt-by: MAINT-CNNIC-AP
last-modified: 2025-11-18T00:37:27Z
source: APNIC
person: Yu Huagang
address: Building 4,intelligence industry park,
address: No.1 Hulan West Road,Shanghai
country: CN
phone: +86-13818683083
e-mail: yuhg@51idc.com
nic-hdl: YW7187-AP
mnt-by: MAINT-CNNIC-AP
last-modified: 2023-12-27T06:11:46Z
source: APNIC
person: Zheng Xiaochuan
address: Building 4,intelligence industry park,
address: No.1 Hulan West Road,Shanghai
country: CN
phone: +86-18516630940
e-mail: anch-resource@51idc.com
nic-hdl: YW7308-AP
mnt-by: MAINT-CNNIC-AP
last-modified: 2023-12-27T06:07:15Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.47 (WHOIS-AU4)
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 103.20.248.1
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 612
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;103.20.248.1. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026032302 1800 900 604800 86400
;; Query time: 10 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Mar 24 09:58:14 CST 2026
;; MSG SIZE rcvd: 105
Host 1.248.20.103.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 1.248.20.103.in-addr.arpa: NXDOMAIN
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 156.214.60.199 | attackspambots | UTC: 2019-12-07 port: 23/tcp |
2019-12-08 16:58:17 |
| 129.204.210.40 | attackbots | Dec 8 07:19:55 ns382633 sshd\[6822\]: Invalid user cordeiro from 129.204.210.40 port 41140 Dec 8 07:19:55 ns382633 sshd\[6822\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.210.40 Dec 8 07:19:56 ns382633 sshd\[6822\]: Failed password for invalid user cordeiro from 129.204.210.40 port 41140 ssh2 Dec 8 07:28:27 ns382633 sshd\[8967\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.210.40 user=root Dec 8 07:28:29 ns382633 sshd\[8967\]: Failed password for root from 129.204.210.40 port 36222 ssh2 |
2019-12-08 17:06:08 |
| 193.70.37.140 | attackbotsspam | Too many connections or unauthorized access detected from Arctic banned ip |
2019-12-08 17:05:44 |
| 188.166.5.84 | attackspambots | Dec 8 09:19:19 server sshd\[11621\]: Invalid user www from 188.166.5.84 Dec 8 09:19:19 server sshd\[11621\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.5.84 Dec 8 09:19:22 server sshd\[11621\]: Failed password for invalid user www from 188.166.5.84 port 42098 ssh2 Dec 8 09:28:43 server sshd\[14782\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.5.84 user=root Dec 8 09:28:45 server sshd\[14782\]: Failed password for root from 188.166.5.84 port 52018 ssh2 ... |
2019-12-08 17:00:41 |
| 123.207.123.252 | attack | Dec 8 10:01:37 localhost sshd\[25844\]: Invalid user \|\|\|\|\|\|\| from 123.207.123.252 port 35234 Dec 8 10:01:37 localhost sshd\[25844\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.207.123.252 Dec 8 10:01:39 localhost sshd\[25844\]: Failed password for invalid user \|\|\|\|\|\|\| from 123.207.123.252 port 35234 ssh2 |
2019-12-08 17:02:19 |
| 138.197.25.187 | attackspam | Dec 8 09:01:48 zeus sshd[3400]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.25.187 Dec 8 09:01:50 zeus sshd[3400]: Failed password for invalid user ftp from 138.197.25.187 port 56888 ssh2 Dec 8 09:07:01 zeus sshd[3582]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.25.187 Dec 8 09:07:02 zeus sshd[3582]: Failed password for invalid user keithkyle from 138.197.25.187 port 37564 ssh2 |
2019-12-08 17:17:50 |
| 94.177.213.114 | attackbotsspam | Dec 8 10:08:41 meumeu sshd[2048]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.177.213.114 Dec 8 10:08:43 meumeu sshd[2048]: Failed password for invalid user dalen from 94.177.213.114 port 52736 ssh2 Dec 8 10:14:09 meumeu sshd[2935]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.177.213.114 ... |
2019-12-08 17:16:38 |
| 201.88.200.226 | attackspam | Host Scan |
2019-12-08 17:22:38 |
| 37.252.190.224 | attackbots | 2019-12-08T09:16:19.519062abusebot-3.cloudsearch.cf sshd\[20049\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.252.190.224 user=root |
2019-12-08 17:28:20 |
| 181.28.208.64 | attackspambots | sshd jail - ssh hack attempt |
2019-12-08 17:36:09 |
| 51.77.201.36 | attackspambots | Dec 8 10:17:05 server sshd\[28657\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.ip-51-77-201.eu user=root Dec 8 10:17:07 server sshd\[28657\]: Failed password for root from 51.77.201.36 port 42436 ssh2 Dec 8 10:24:09 server sshd\[30404\]: Invalid user admin from 51.77.201.36 Dec 8 10:24:09 server sshd\[30404\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.ip-51-77-201.eu Dec 8 10:24:12 server sshd\[30404\]: Failed password for invalid user admin from 51.77.201.36 port 52220 ssh2 ... |
2019-12-08 16:55:51 |
| 68.183.5.205 | attackbotsspam | SSH Brute-Forcing (ownc) |
2019-12-08 16:59:30 |
| 54.38.160.4 | attackspam | Fail2Ban - SSH Bruteforce Attempt |
2019-12-08 17:10:48 |
| 46.254.217.67 | attackbots | Dec 8 07:28:20 grey postfix/smtpd\[12399\]: NOQUEUE: reject: RCPT from unknown\[46.254.217.67\]: 554 5.7.1 Service unavailable\; Client host \[46.254.217.67\] blocked using bl.spamcop.net\; Blocked - see https://www.spamcop.net/bl.shtml\?46.254.217.67\; from=\ |
2019-12-08 17:24:53 |
| 167.71.223.191 | attackspam | 2019-12-08T07:43:33.457495shield sshd\[24986\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.223.191 user=root 2019-12-08T07:43:35.174645shield sshd\[24986\]: Failed password for root from 167.71.223.191 port 36530 ssh2 2019-12-08T07:52:24.231786shield sshd\[27195\]: Invalid user nasa from 167.71.223.191 port 45850 2019-12-08T07:52:24.236344shield sshd\[27195\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.223.191 2019-12-08T07:52:26.520052shield sshd\[27195\]: Failed password for invalid user nasa from 167.71.223.191 port 45850 ssh2 |
2019-12-08 16:57:23 |