202.112.51.124

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): CERNET Super Computer Center

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): University/College/School

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Automatic report - Port Scan	2019-11-08 14:43:19

相同子网IP讨论:

IP	类型	评论内容	时间
202.112.51.45	attackspam	Aug 26 04:53:00 shivevps sshd[4584]: Bad protocol version identification '\024' from 202.112.51.45 port 47964 Aug 26 04:53:03 shivevps sshd[4777]: Bad protocol version identification '\024' from 202.112.51.45 port 48050 Aug 26 04:53:08 shivevps sshd[5046]: Bad protocol version identification '\024' from 202.112.51.45 port 48242 ...	2020-08-26 13:45:37

类型

评论内容

时间

202.112.51.45

attackspam

Aug 26 04:53:00 shivevps sshd[4584]: Bad protocol version identification '\024' from 202.112.51.45 port 47964
Aug 26 04:53:03 shivevps sshd[4777]: Bad protocol version identification '\024' from 202.112.51.45 port 48050
Aug 26 04:53:08 shivevps sshd[5046]: Bad protocol version identification '\024' from 202.112.51.45 port 48242
...

2020-08-26 13:45:37

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 202.112.51.124
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 58480
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;202.112.51.124.			IN	A

;; AUTHORITY SECTION:
.			481	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019110800 1800 900 604800 86400

;; Query time: 117 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Nov 08 14:43:15 CST 2019
;; MSG SIZE  rcvd: 118

HOST信息:

Host 124.51.112.202.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 124.51.112.202.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
180.76.57.58	attack	Invalid user rajat from 180.76.57.58 port 49046	2020-10-03 20:25:31
114.67.77.159	attack	Invalid user deploy from 114.67.77.159 port 41294	2020-10-03 20:16:38
45.227.255.204	attackspambots	TCP (SYN) 45.227.255.204:56334 -> port 1080, len 60	2020-10-03 19:49:07
185.147.215.8	attack	[2020-10-03 07:36:48] NOTICE[1182] chan_sip.c: Registration from '' failed for '185.147.215.8:50507' - Wrong password [2020-10-03 07:36:48] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-03T07:36:48.249-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="681",SessionID="0x7f22f8572958",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.147.215.8/50507",Challenge="62416b62",ReceivedChallenge="62416b62",ReceivedHash="6b5b9a01efe696a27b885be9697d29a8" [2020-10-03 07:39:23] NOTICE[1182] chan_sip.c: Registration from '' failed for '185.147.215.8:56379' - Wrong password [2020-10-03 07:39:23] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-03T07:39:23.343-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="195",SessionID="0x7f22f83b6678",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.147.215.8/563 ...	2020-10-03 19:50:32
114.4.227.194	attack	2020-10-03T13:09:20.614817mail.standpoint.com.ua sshd[15978]: Invalid user yang from 114.4.227.194 port 57726 2020-10-03T13:09:20.617653mail.standpoint.com.ua sshd[15978]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.4.227.194 2020-10-03T13:09:20.614817mail.standpoint.com.ua sshd[15978]: Invalid user yang from 114.4.227.194 port 57726 2020-10-03T13:09:22.371814mail.standpoint.com.ua sshd[15978]: Failed password for invalid user yang from 114.4.227.194 port 57726 ssh2 2020-10-03T13:13:42.416069mail.standpoint.com.ua sshd[16585]: Invalid user tor from 114.4.227.194 port 36896 ...	2020-10-03 20:03:35
62.4.16.46	attackspambots	Invalid user ralph from 62.4.16.46 port 46574	2020-10-03 20:26:31
119.93.42.153	attackspambots	Unauthorised access (Oct 2) SRC=119.93.42.153 LEN=52 PREC=0x20 TTL=119 ID=11395 DF TCP DPT=445 WINDOW=8192 SYN	2020-10-03 19:54:26
222.67.231.1	attack	2020-10-02T20:29:21.719851abusebot-8.cloudsearch.cf sshd[24509]: Invalid user kvm from 222.67.231.1 port 48790 2020-10-02T20:29:21.726446abusebot-8.cloudsearch.cf sshd[24509]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.67.231.1 2020-10-02T20:29:21.719851abusebot-8.cloudsearch.cf sshd[24509]: Invalid user kvm from 222.67.231.1 port 48790 2020-10-02T20:29:24.315564abusebot-8.cloudsearch.cf sshd[24509]: Failed password for invalid user kvm from 222.67.231.1 port 48790 ssh2 2020-10-02T20:33:05.440009abusebot-8.cloudsearch.cf sshd[24652]: Invalid user admin from 222.67.231.1 port 53302 2020-10-02T20:33:05.449433abusebot-8.cloudsearch.cf sshd[24652]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.67.231.1 2020-10-02T20:33:05.440009abusebot-8.cloudsearch.cf sshd[24652]: Invalid user admin from 222.67.231.1 port 53302 2020-10-02T20:33:07.457229abusebot-8.cloudsearch.cf sshd[24652]: Failed password for ...	2020-10-03 20:12:58
189.162.61.193	attackbotsspam	1601670825 - 10/02/2020 22:33:45 Host: 189.162.61.193/189.162.61.193 Port: 445 TCP Blocked ...	2020-10-03 19:49:32
51.83.69.142	attackspam	Oct 3 11:22:47 ip106 sshd[29187]: Failed password for root from 51.83.69.142 port 32798 ssh2 ...	2020-10-03 19:44:08
5.160.243.153	attackbotsspam	Oct 3 10:24:04 XXX sshd[25449]: Invalid user oracle from 5.160.243.153 port 52194	2020-10-03 20:11:45
94.102.56.238	attackbots	2020-10-03 13:06:53 dovecot_login authenticator failed for \(User\) \[94.102.56.238\]: 535 Incorrect authentication data \(set_id=info@no-server.de\) 2020-10-03 13:06:59 dovecot_login authenticator failed for \(User\) \[94.102.56.238\]: 535 Incorrect authentication data \(set_id=info@no-server.de\) 2020-10-03 13:07:09 dovecot_login authenticator failed for \(User\) \[94.102.56.238\]: 535 Incorrect authentication data \(set_id=info@no-server.de\) 2020-10-03 13:07:26 dovecot_login authenticator failed for \(User\) \[94.102.56.238\]: 535 Incorrect authentication data \(set_id=info@no-server.de\) 2020-10-03 13:07:43 dovecot_login authenticator failed for \(User\) \[94.102.56.238\]: 535 Incorrect authentication data \(set_id=info@no-server.de\) 2020-10-03 13:08:00 dovecot_login authenticator failed for \(User\) \[94.102.56.238\]: 535 Incorrect authentication data \(set_id=info@no-server.de\) 2020-10-03 13:08:00 SMTP call from \(User\) \[94.102.56.238\] dropped: too many nonmail commands \(l ...	2020-10-03 20:01:35
115.159.214.200	attackspambots	SSH Brute-Force attacks	2020-10-03 20:14:02
175.24.147.134	attackspam	SSH login attempts.	2020-10-03 20:00:37
202.105.98.210	attackspambots	Invalid user test1 from 202.105.98.210 port 54658	2020-10-03 20:20:56

最近上报的IP列表

195.201.129.6	113.160.101.170	142.93.225.53	188.19.177.238
170.244.14.26	186.194.179.250	167.71.226.205	101.234.76.77
1.175.82.29	112.114.106.37	148.251.182.72	125.83.104.70
106.111.164.168	92.54.73.98	50.62.208.183	27.202.115.12
43.252.88.80	217.182.54.165	191.54.224.83	190.45.174.252