城市(city): Jakarta
省份(region): Jakarta
国家(country): Indonesia
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 202.158.41.6
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 52042
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;202.158.41.6. IN A
;; AUTHORITY SECTION:
. 585 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019113002 1800 900 604800 86400
;; Query time: 130 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Dec 01 03:52:07 CST 2019
;; MSG SIZE rcvd: 1166.41.158.202.in-addr.arpa domain name pointer www.ptcpi-online.com.
6.41.158.202.in-addr.arpa domain name pointer www.aspacmart.com.
6.41.158.202.in-addr.arpa domain name pointer www.indoprom.net.
6.41.158.202.in-addr.arpa domain name pointer ftp.ird.or.id.
6.41.158.202.in-addr.arpa domain name pointer www.kadinbogor.com.
6.41.158.202.in-addr.arpa domain name pointer commercea.cbn.net.id.
6.41.158.202.in-addr.arpa domain name pointer ftp.commercea.cbn.net.id.
6.41.158.202.in-addr.arpa domain name pointer www.hildco.co.id.
6.41.158.202.in-addr.arpa domain name pointer ftp.kadinbogor.com.
6.41.158.202.in-addr.arpa domain name pointer ftp.three-ss.com.
6.41.158.202.in-addr.arpa domain name pointer ftp.skyrinkjakarta.com.
6.41.158.202.in-addr.arpa domain name pointer ftp.astrido-finance.co.id.
6.41.158.202.in-addr.arpa domain name pointer www.studyline.co.id.
6.41.158.202.in-addr.arpa domain name pointer ftp.riauprovince.com.
6.41.158.202.in-addr.arpa domain name pointer www.cgprtstat.org.
6.41.158.202.in-addr.ar;; Truncated, retrying in TCP mode.
Server: 100.100.2.136
Address: 100.100.2.136#53
Non-authoritative answer:
6.41.158.202.in-addr.arpa name = ftp.netwave.co.id.
6.41.158.202.in-addr.arpa name = www.three-ss.com.
6.41.158.202.in-addr.arpa name = www.studyline.co.id.
6.41.158.202.in-addr.arpa name = www.ptcpi-online.com.
6.41.158.202.in-addr.arpa name = www.caltex-pacific-indonesia.com.
6.41.158.202.in-addr.arpa name = commercea.cbn.net.id.
6.41.158.202.in-addr.arpa name = ftp.bigg.or.id.
6.41.158.202.in-addr.arpa name = ftp.three-ss.com.
6.41.158.202.in-addr.arpa name = www.indoprom.net.
6.41.158.202.in-addr.arpa name = ftp.sandrafine.co.id.
6.41.158.202.in-addr.arpa name = www.e-propertybiz.com.
6.41.158.202.in-addr.arpa name = ftp.shangbao.co.id.
6.41.158.202.in-addr.arpa name = www.astrido-finance.co.id.
6.41.158.202.in-addr.arpa name = www.icma.or.id.
6.41.158.202.in-addr.arpa name = ftp.aspacmart.com.
6.41.158.202.in-addr.arpa name = www.bigg.or.id.
6.41.158.202.in-addr.arpa name = www.ird.or.id.
6.41.158.202.in-addr.arpa name = www.pikhospital.co.id.
6.41.158.202.in-addr.arpa name = www.ikutlah-aku.org.
6.41.158.202.in-addr.arpa name = www.riauprovince.com.
6.41.158.202.in-addr.arpa name = ftp.indorattanwood.com.
6.41.158.202.in-addr.arpa name = www.shangbao.co.id.
6.41.158.202.in-addr.arpa name = ftp.icma.or.id.
6.41.158.202.in-addr.arpa name = ftp.scl3pl.com.
6.41.158.202.in-addr.arpa name = ftp.enerkon.co.id.
6.41.158.202.in-addr.arpa name = ftp.skyrinkjakarta.com.
6.41.158.202.in-addr.arpa name = www.cgprtstat.org.
6.41.158.202.in-addr.arpa name = www.scl3pl.com.
6.41.158.202.in-addr.arpa name = ftp.ird.or.id.
6.41.158.202.in-addr.arpa name = ftp.ptcpi-online.com.
6.41.158.202.in-addr.arpa name = ftp.kadinbogor.com.
6.41.158.202.in-addr.arpa name = ftp.hildco.co.id.
6.41.158.202.in-addr.arpa name = ftp.pnmi.co.id.
6.41.158.202.in-addr.arpa name = www.enerkon.co.id.
6.41.158.202.in-addr.arpa name = www.pnmi.co.id.
6.41.158.202.in-addr.arpa name = ftp.e-propertybiz.com.
6.41.158.202.in-addr.arpa name = | IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 123.20.123.239 | attackbotsspam | 445/tcp 445/tcp [2019-07-01]2pkt |
2019-07-01 21:54:14 |
| 79.137.74.57 | attackspambots | Jul 1 08:49:16 tux-35-217 sshd\[23157\]: Invalid user alpha from 79.137.74.57 port 47774 Jul 1 08:49:16 tux-35-217 sshd\[23157\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.137.74.57 Jul 1 08:49:18 tux-35-217 sshd\[23157\]: Failed password for invalid user alpha from 79.137.74.57 port 47774 ssh2 Jul 1 08:51:50 tux-35-217 sshd\[23161\]: Invalid user leng from 79.137.74.57 port 35413 Jul 1 08:51:50 tux-35-217 sshd\[23161\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.137.74.57 ... |
2019-07-01 21:42:13 |
| 131.100.77.171 | attackbots | failed_logins |
2019-07-01 21:36:16 |
| 209.17.96.2 | attack | MultiHost/MultiPort Probe, Scan, Hack - |
2019-07-01 21:53:17 |
| 210.192.94.12 | attackspambots | MultiHost/MultiPort Probe, Scan, Hack - |
2019-07-01 21:59:12 |
| 59.10.251.85 | attackspam | port scan and connect, tcp 23 (telnet) |
2019-07-01 21:36:53 |
| 159.65.233.171 | attackspambots | Jul 1 05:39:36 vpn01 sshd\[24603\]: Invalid user db2inst1 from 159.65.233.171 Jul 1 05:39:36 vpn01 sshd\[24603\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.233.171 Jul 1 05:39:38 vpn01 sshd\[24603\]: Failed password for invalid user db2inst1 from 159.65.233.171 port 60570 ssh2 |
2019-07-01 21:39:55 |
| 75.65.169.180 | attackspam | Trying ports that it shouldn't be. |
2019-07-01 21:51:08 |
| 209.17.97.18 | attack | MultiHost/MultiPort Probe, Scan, Hack - |
2019-07-01 21:57:03 |
| 124.13.71.146 | spambots | 用了别人户口登记 |
2019-07-01 22:02:51 |
| 116.249.152.234 | attack | 5500/tcp [2019-07-01]1pkt |
2019-07-01 21:58:43 |
| 1.20.156.243 | attackspambots | 445/tcp [2019-07-01]1pkt |
2019-07-01 21:52:59 |
| 219.153.33.162 | attackbots | Jul 1 14:45:16 SilenceServices sshd[25878]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.153.33.162 Jul 1 14:45:18 SilenceServices sshd[25878]: Failed password for invalid user trinity from 219.153.33.162 port 57502 ssh2 Jul 1 14:46:53 SilenceServices sshd[26952]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.153.33.162 |
2019-07-01 21:19:16 |
| 50.115.120.240 | attack | techno.ws 50.115.120.240 \[01/Jul/2019:15:41:31 +0200\] "POST /wp-login.php HTTP/1.1" 200 5602 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" techno.ws 50.115.120.240 \[01/Jul/2019:15:41:32 +0200\] "POST /xmlrpc.php HTTP/1.1" 200 4068 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" |
2019-07-01 22:12:19 |
| 212.83.183.22 | attackspambots | \[2019-06-30 23:34:16\] SECURITY\[5156\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-06-30T23:34:16.121-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="49011972592277524",SessionID="0x7f13a87ffc98",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/212.83.183.22/57852",ACLName="no_extension_match" \[2019-06-30 23:37:08\] SECURITY\[5156\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-06-30T23:37:08.232-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="50011972592277524",SessionID="0x7f13a93816e8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/212.83.183.22/61556",ACLName="no_extension_match" \[2019-06-30 23:40:08\] SECURITY\[5156\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-06-30T23:40:08.708-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="51011972592277524",SessionID="0x7f13a8e39958",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/212.83.183.22/53806",ACLName=" |
2019-07-01 21:23:30 |