城市(city): unknown
省份(region): unknown
国家(country): Pakistan
运营商(isp): Corporate Internet Users
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): Fixed Line ISP
| 类型 | 评论内容 | 时间 |
|---|---|---|
| attack | Unauthorized connection attempt from IP address 118.107.139.181 on Port 445(SMB) |
2020-06-02 03:29:28 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 118.107.139.181
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 58382
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;118.107.139.181. IN A
;; AUTHORITY SECTION:
. 549 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020060101 1800 900 604800 86400
;; Query time: 116 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jun 02 03:29:23 CST 2020
;; MSG SIZE rcvd: 119181.139.107.118.in-addr.arpa domain name pointer 118-107-139-181.snet.net.pk.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
181.139.107.118.in-addr.arpa name = 118-107-139-181.snet.net.pk.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 94.231.130.172 | attack | [portscan] tcp/1433 [MsSQL] *(RWIN=1024)(11190859) |
2019-11-19 18:00:31 |
| 218.17.244.83 | attack | [portscan] tcp/1433 [MsSQL] *(RWIN=1024)(11190859) |
2019-11-19 17:48:58 |
| 202.91.84.148 | attack | [portscan] tcp/23 [TELNET] *(RWIN=14600)(11190859) |
2019-11-19 17:50:31 |
| 201.229.156.107 | attack | [portscan] tcp/1433 [MsSQL] *(RWIN=1024)(11190859) |
2019-11-19 18:07:37 |
| 85.186.39.158 | attackbots | Scanning random ports - tries to find possible vulnerable services |
2019-11-19 17:43:28 |
| 182.126.96.186 | attack | [portscan] tcp/23 [TELNET] *(RWIN=39576)(11190859) |
2019-11-19 17:52:16 |
| 177.185.217.151 | attack | [portscan] tcp/23 [TELNET] in DroneBL:'listed [SOCKS Proxy]' *(RWIN=5040)(11190859) |
2019-11-19 18:10:02 |
| 175.119.91.147 | attack | " " |
2019-11-19 17:54:49 |
| 186.71.144.66 | attackbots | [portscan] tcp/1433 [MsSQL] *(RWIN=1024)(11190859) |
2019-11-19 18:09:30 |
| 211.76.130.19 | attackbots | [portscan] tcp/1433 [MsSQL] *(RWIN=1024)(11190859) |
2019-11-19 17:49:40 |
| 222.133.8.170 | attackspambots | [portscan] tcp/21 [FTP] [scan/connect: 6 time(s)] in blocklist.de:'listed [ftp]' *(RWIN=65535)(11190859) |
2019-11-19 18:05:14 |
| 58.96.206.3 | attackbots | [portscan] tcp/23 [TELNET] *(RWIN=45645)(11190859) |
2019-11-19 17:45:34 |
| 115.213.61.217 | attack | [portscan] tcp/1433 [MsSQL] *(RWIN=1024)(11190859) |
2019-11-19 17:57:46 |
| 121.26.201.158 | attackspam | [portscan] tcp/21 [FTP] [scan/connect: 6 time(s)] in blocklist.de:'listed [ftp]' *(RWIN=65535)(11190859) |
2019-11-19 17:40:10 |
| 211.143.120.94 | attack | [portscan] tcp/23 [TELNET] *(RWIN=50780)(11190859) |
2019-11-19 18:06:46 |