城市(city): unknown
省份(region): unknown
国家(country): Indonesia
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 117.20.53.64
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 15296
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;117.20.53.64. IN A
;; AUTHORITY SECTION:
. 98 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022030600 1800 900 604800 86400
;; Query time: 21 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Mar 06 17:01:47 CST 2022
;; MSG SIZE rcvd: 105
64.53.20.117.in-addr.arpa domain name pointer 117-20-53-64.jogja.citra.net.id.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
64.53.20.117.in-addr.arpa name = 117-20-53-64.jogja.citra.net.id.
Authoritative answers can be found from:
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 141.98.80.100 | attack | 2019-11-09T19:37:25.339939mail01 postfix/smtpd[15664]: warning: unknown[141.98.80.100]: SASL PLAIN authentication failed: 2019-11-09T19:37:32.377653mail01 postfix/smtpd[15219]: warning: unknown[141.98.80.100]: SASL PLAIN authentication failed: 2019-11-09T19:39:50.062926mail01 postfix/smtpd[15664]: warning: unknown[141.98.80.100]: SASL PLAIN authentication failed: |
2019-11-10 02:41:13 |
| 77.247.110.42 | attackbots | \[2019-11-09 13:23:43\] SECURITY\[2634\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-11-09T13:23:43.087-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="01518552172838",SessionID="0x7fdf2cd1cd48",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.110.42/5060",ACLName="no_extension_match" \[2019-11-09 13:28:55\] SECURITY\[2634\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-11-09T13:28:55.121-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="01618552172838",SessionID="0x7fdf2c8a8ab8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.110.42/5060",ACLName="no_extension_match" \[2019-11-09 13:33:17\] SECURITY\[2634\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-11-09T13:33:17.464-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="191018552172838",SessionID="0x7fdf2caef968",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.110.42/5060",ACLName="no_extensio |
2019-11-10 03:21:58 |
| 218.94.136.90 | attackbots | Nov 9 13:58:21 plusreed sshd[8032]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.94.136.90 user=root Nov 9 13:58:23 plusreed sshd[8032]: Failed password for root from 218.94.136.90 port 6578 ssh2 ... |
2019-11-10 03:19:47 |
| 193.189.89.5 | attackspambots | Unauthorised access (Nov 9) SRC=193.189.89.5 LEN=52 TTL=115 ID=20873 DF TCP DPT=445 WINDOW=8192 SYN |
2019-11-10 03:17:57 |
| 46.38.144.57 | attack | 2019-11-09T19:45:24.071566mail01 postfix/smtpd[30691]: warning: unknown[46.38.144.57]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2019-11-09T19:45:30.091651mail01 postfix/smtpd[5315]: warning: unknown[46.38.144.57]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2019-11-09T19:45:39.465634mail01 postfix/smtpd[15220]: warning: unknown[46.38.144.57]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 |
2019-11-10 03:00:55 |
| 190.36.15.6 | attackbotsspam | Unauthorised access (Nov 9) SRC=190.36.15.6 LEN=48 TTL=113 ID=24396 DF TCP DPT=445 WINDOW=8192 SYN |
2019-11-10 02:52:30 |
| 51.83.78.109 | attack | $f2bV_matches |
2019-11-10 03:13:35 |
| 106.13.45.212 | attack | Nov 9 16:04:28 vtv3 sshd\[17099\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.45.212 user=root Nov 9 16:04:30 vtv3 sshd\[17099\]: Failed password for root from 106.13.45.212 port 44881 ssh2 Nov 9 16:09:15 vtv3 sshd\[19467\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.45.212 user=root Nov 9 16:09:18 vtv3 sshd\[19467\]: Failed password for root from 106.13.45.212 port 33501 ssh2 Nov 9 16:14:24 vtv3 sshd\[22090\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.45.212 user=root Nov 9 16:35:04 vtv3 sshd\[32625\]: Invalid user admin from 106.13.45.212 port 33068 Nov 9 16:35:04 vtv3 sshd\[32625\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.45.212 Nov 9 16:35:06 vtv3 sshd\[32625\]: Failed password for invalid user admin from 106.13.45.212 port 33068 ssh2 Nov 9 16:40:20 vtv3 sshd\[3331\]: pam_u |
2019-11-10 02:45:17 |
| 185.83.115.196 | attackspam | $f2bV_matches |
2019-11-10 03:14:28 |
| 185.176.27.162 | attackbots | Nov 9 19:58:17 mc1 kernel: \[4612185.411726\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=185.176.27.162 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=48352 PROTO=TCP SPT=51216 DPT=6262 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 9 19:58:47 mc1 kernel: \[4612215.071666\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=185.176.27.162 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=30910 PROTO=TCP SPT=51216 DPT=98 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 9 20:01:50 mc1 kernel: \[4612398.336880\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=185.176.27.162 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=47434 PROTO=TCP SPT=51216 DPT=7355 WINDOW=1024 RES=0x00 SYN URGP=0 ... |
2019-11-10 03:02:51 |
| 188.166.246.46 | attackbotsspam | Nov 9 16:35:03 localhost sshd\[44827\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.246.46 user=root Nov 9 16:35:05 localhost sshd\[44827\]: Failed password for root from 188.166.246.46 port 42146 ssh2 Nov 9 16:39:16 localhost sshd\[44965\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.246.46 user=root Nov 9 16:39:18 localhost sshd\[44965\]: Failed password for root from 188.166.246.46 port 50774 ssh2 Nov 9 16:43:26 localhost sshd\[45056\]: Invalid user nick from 188.166.246.46 port 59358 ... |
2019-11-10 02:59:14 |
| 171.12.10.206 | attackbots | Automatic report - Port Scan |
2019-11-10 03:09:08 |
| 27.128.175.209 | attackspambots | Nov 9 17:20:28 mail sshd[16661]: Failed password for root from 27.128.175.209 port 46750 ssh2 Nov 9 17:26:22 mail sshd[19371]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.128.175.209 Nov 9 17:26:24 mail sshd[19371]: Failed password for invalid user support from 27.128.175.209 port 54602 ssh2 |
2019-11-10 02:56:02 |
| 80.82.77.86 | attack | 80.82.77.86 was recorded 5 times by 5 hosts attempting to connect to the following ports: 123. Incident counter (4h, 24h, all-time): 5, 6, 501 |
2019-11-10 02:58:45 |
| 51.68.123.198 | attack | Nov 9 16:41:53 OneL sshd\[21692\]: Invalid user diete from 51.68.123.198 port 40076 Nov 9 16:41:53 OneL sshd\[21692\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.123.198 Nov 9 16:41:55 OneL sshd\[21692\]: Failed password for invalid user diete from 51.68.123.198 port 40076 ssh2 Nov 9 16:45:21 OneL sshd\[21740\]: Invalid user chaojianani from 51.68.123.198 port 47928 Nov 9 16:45:21 OneL sshd\[21740\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.123.198 ... |
2019-11-10 03:17:31 |