202.80.214.101

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Indonesia

运营商(isp): PT Dunia Informasi Teknologi

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Dec 1 09:47:46 MK-Soft-VM5 sshd[8414]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.80.214.101 Dec 1 09:47:47 MK-Soft-VM5 sshd[8414]: Failed password for invalid user user from 202.80.214.101 port 21049 ssh2 ...	2019-12-01 22:47:07

类型

评论内容

时间

attack

Dec  1 09:47:46 MK-Soft-VM5 sshd[8414]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.80.214.101 
Dec  1 09:47:47 MK-Soft-VM5 sshd[8414]: Failed password for invalid user user from 202.80.214.101 port 21049 ssh2
...

2019-12-01 22:47:07

相同子网IP讨论:

IP	类型	评论内容	时间
202.80.214.54	attackbotsspam	xmlrpc attack	2020-04-25 16:56:42
202.80.214.161	attack	1580941355 - 02/05/2020 23:22:35 Host: 202.80.214.161/202.80.214.161 Port: 445 TCP Blocked	2020-02-06 09:14:15
202.80.214.80	attack	Invalid user admin from 202.80.214.80 port 27187	2020-01-16 14:14:28
202.80.214.80	attackbotsspam	Jan 11 10:04:17 git-ovh sshd[1652]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.80.214.80 Jan 11 10:04:19 git-ovh sshd[1652]: Failed password for invalid user info from 202.80.214.80 port 38181 ssh2 ...	2020-01-15 05:06:16

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 202.80.214.101
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 42676
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;202.80.214.101.			IN	A

;; AUTHORITY SECTION:
.			330	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019120100 1800 900 604800 86400

;; Query time: 119 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Dec 01 22:47:01 CST 2019
;; MSG SIZE  rcvd: 118

HOST信息:

Host 101.214.80.202.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 101.214.80.202.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
61.177.172.128	attackspambots	...	2020-02-05 07:28:40
85.105.44.231	attack	Unauthorized connection attempt detected from IP address 85.105.44.231 to port 23 [J]	2020-02-05 08:02:43
222.186.175.212	attackspambots	Feb 5 04:39:11 gw1 sshd[6815]: Failed password for root from 222.186.175.212 port 7854 ssh2 Feb 5 04:39:15 gw1 sshd[6815]: Failed password for root from 222.186.175.212 port 7854 ssh2 ...	2020-02-05 07:49:40
218.92.0.175	attackbots	Feb 5 00:53:46 h2177944 sshd\[12857\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.175 user=root Feb 5 00:53:48 h2177944 sshd\[12857\]: Failed password for root from 218.92.0.175 port 51876 ssh2 Feb 5 00:53:52 h2177944 sshd\[12857\]: Failed password for root from 218.92.0.175 port 51876 ssh2 Feb 5 00:53:55 h2177944 sshd\[12857\]: Failed password for root from 218.92.0.175 port 51876 ssh2 ...	2020-02-05 07:56:51
14.177.211.172	attack	Feb 4 14:00:08 hanapaa sshd\[29336\]: Invalid user router from 14.177.211.172 Feb 4 14:00:08 hanapaa sshd\[29336\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.177.211.172 Feb 4 14:00:11 hanapaa sshd\[29336\]: Failed password for invalid user router from 14.177.211.172 port 59859 ssh2 Feb 4 14:00:18 hanapaa sshd\[29347\]: Invalid user router from 14.177.211.172 Feb 4 14:00:18 hanapaa sshd\[29347\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.177.211.172	2020-02-05 08:07:49
212.76.102.89	attackbotsspam	Feb 4 21:17:18 grey postfix/smtpd\[7951\]: NOQUEUE: reject: RCPT from unknown\[212.76.102.89\]: 554 5.7.1 Service unavailable\; Client host \[212.76.102.89\] blocked using cbl.abuseat.org\; Blocked - see http://www.abuseat.org/lookup.cgi\?ip=212.76.102.89\; from=\ to=\ proto=ESMTP helo=\<\[212.76.102.89\]\> ...	2020-02-05 08:02:06
139.59.38.169	attackbotsspam	Feb 4 22:03:45 srv-ubuntu-dev3 sshd[65031]: Invalid user pokemon from 139.59.38.169 Feb 4 22:03:45 srv-ubuntu-dev3 sshd[65031]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.38.169 Feb 4 22:03:45 srv-ubuntu-dev3 sshd[65031]: Invalid user pokemon from 139.59.38.169 Feb 4 22:03:47 srv-ubuntu-dev3 sshd[65031]: Failed password for invalid user pokemon from 139.59.38.169 port 44496 ssh2 Feb 4 22:06:53 srv-ubuntu-dev3 sshd[65314]: Invalid user char from 139.59.38.169 Feb 4 22:06:53 srv-ubuntu-dev3 sshd[65314]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.38.169 Feb 4 22:06:53 srv-ubuntu-dev3 sshd[65314]: Invalid user char from 139.59.38.169 Feb 4 22:06:55 srv-ubuntu-dev3 sshd[65314]: Failed password for invalid user char from 139.59.38.169 port 46396 ssh2 Feb 4 22:10:08 srv-ubuntu-dev3 sshd[65768]: Invalid user sadroudine from 139.59.38.169 ...	2020-02-05 07:42:20
122.117.49.170	attackspambots	Honeypot attack, port: 81, PTR: 122-117-49-170.HINET-IP.hinet.net.	2020-02-05 07:49:13
115.165.217.250	attackspam	Honeypot attack, port: 5555, PTR: PTR record not found	2020-02-05 07:43:01
222.186.175.150	attack	Feb 5 00:58:01 vps647732 sshd[27748]: Failed password for root from 222.186.175.150 port 18286 ssh2 Feb 5 00:58:05 vps647732 sshd[27748]: Failed password for root from 222.186.175.150 port 18286 ssh2 ...	2020-02-05 08:01:37
59.127.1.12	attackbots	Feb 4 17:11:13 plusreed sshd[19586]: Invalid user alicia from 59.127.1.12 ...	2020-02-05 07:59:58
182.75.231.123	attackbotsspam	Honeypot attack, port: 445, PTR: nsg-static-123.231.75.182-airtel.com.	2020-02-05 08:05:20
128.199.33.116	attackbotsspam	Feb 4 23:36:00 l02a sshd[5597]: Invalid user jira from 128.199.33.116 Feb 4 23:36:00 l02a sshd[5597]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=wifi.is Feb 4 23:36:00 l02a sshd[5597]: Invalid user jira from 128.199.33.116 Feb 4 23:36:02 l02a sshd[5597]: Failed password for invalid user jira from 128.199.33.116 port 51692 ssh2	2020-02-05 07:43:38
109.87.200.193	attackspam	WordPress login Brute force / Web App Attack on client site.	2020-02-05 07:29:47
123.162.182.243	attack	Honeypot attack, port: 445, PTR: PTR record not found	2020-02-05 07:46:41

最近上报的IP列表

178.92.198.221	172.68.90.52	5.212.61.72	183.87.14.30
36.90.19.49	172.68.90.76	95.181.2.92	150.126.86.6
187.59.102.116	117.44.25.151	43.184.79.217	135.136.144.133
156.112.174.115	184.22.8.99	18.109.248.154	123.58.251.214
175.97.212.74	158.17.183.201	168.186.148.144	111.178.219.65