94.20.77.77 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Azerbaijan

运营商(isp): Delta Telecom Ltd

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbots	Unauthorized connection attempt detected from IP address 94.20.77.77 to port 445	2020-06-22 19:19:05
attack	03/07/2020-10:22:45.254195 94.20.77.77 Protocol: 6 ET SCAN NMAP -sS window 1024	2020-03-08 01:05:01
attackspam	suspicious action Sat, 22 Feb 2020 13:49:32 -0300	2020-02-23 02:29:15
attackbotsspam	02/03/2020-01:11:29.316888 94.20.77.77 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433	2020-02-03 20:14:36
attackbotsspam	Portscan or hack attempt detected by psad/fwsnort	2020-01-12 05:42:59
attack	firewall-block, port(s): 1433/tcp	2019-12-19 07:00:58
attackspam	Scanning random ports - tries to find possible vulnerable services	2019-09-01 17:49:54

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 94.20.77.77
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 60084
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;94.20.77.77.			IN	A

;; AUTHORITY SECTION:
.			869	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019090100 1800 900 604800 86400

;; Query time: 1 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sun Sep 01 17:49:47 CST 2019
;; MSG SIZE  rcvd: 115

HOST信息:

Host 77.77.20.94.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 77.77.20.94.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
91.103.105.137	attack	Honeypot attack, port: 445, PTR: PTR record not found	2020-09-08 08:39:11
84.238.46.216	attackspam	Cowrie Honeypot: Unauthorised SSH/Telnet login attempt with user "root" at 2020-09-07T17:22:27Z	2020-09-08 08:11:53
81.225.88.26	attackspam	Automatic report - Banned IP Access	2020-09-08 08:10:16
212.154.85.215	attack	20/9/7@12:50:59: FAIL: Alarm-Intrusion address from=212.154.85.215 ...	2020-09-08 08:20:13
42.3.31.69	attackbotsspam	Sep 7 18:50:46 ks10 sshd[894795]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.3.31.69 Sep 7 18:50:48 ks10 sshd[894795]: Failed password for invalid user ubuntu from 42.3.31.69 port 55530 ssh2 ...	2020-09-08 08:33:44
102.39.199.245	attack	$f2bV_matches	2020-09-08 08:22:44
119.236.156.114	attack	Sep 7 23:17:39 vpn01 sshd[11638]: Failed password for root from 119.236.156.114 port 53365 ssh2 ...	2020-09-08 08:01:54
46.173.105.167	attack	Cowrie Honeypot: Unauthorised SSH/Telnet login attempt with user "support" at 2020-09-07T17:22:32Z	2020-09-08 08:28:53
179.113.169.216	attackspam	Lines containing failures of 179.113.169.216 Sep 7 01:43:04 dns-3 sshd[27300]: User r.r from 179.113.169.216 not allowed because not listed in AllowUsers Sep 7 01:43:04 dns-3 sshd[27300]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.113.169.216 user=r.r Sep 7 01:43:06 dns-3 sshd[27300]: Failed password for invalid user r.r from 179.113.169.216 port 48338 ssh2 Sep 7 01:43:08 dns-3 sshd[27300]: Received disconnect from 179.113.169.216 port 48338:11: Bye Bye [preauth] Sep 7 01:43:08 dns-3 sshd[27300]: Disconnected from invalid user r.r 179.113.169.216 port 48338 [preauth] Sep 7 01:47:58 dns-3 sshd[27380]: User r.r from 179.113.169.216 not allowed because not listed in AllowUsers Sep 7 01:47:58 dns-3 sshd[27380]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.113.169.216 user=r.r Sep 7 01:48:00 dns-3 sshd[27380]: Failed password for invalid user r.r from 179.113.169.216 port........ ------------------------------	2020-09-08 08:38:19
212.83.163.170	attackspambots	[2020-09-07 20:35:52] NOTICE[1194] chan_sip.c: Registration from '"1040"' failed for '212.83.163.170:8767' - Wrong password [2020-09-07 20:35:52] SECURITY[1233] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-07T20:35:52.435-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1040",SessionID="0x7f2ddce0c1b8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/212.83.163.170/8767",Challenge="57a1c494",ReceivedChallenge="57a1c494",ReceivedHash="7d6afbed88a559789a67a68713f41f38" [2020-09-07 20:38:14] NOTICE[1194] chan_sip.c: Registration from '"1045"' failed for '212.83.163.170:9019' - Wrong password [2020-09-07 20:38:14] SECURITY[1233] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-07T20:38:14.493-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1045",SessionID="0x7f2ddc0da798",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/2 ...	2020-09-08 08:40:32
122.51.91.131	attackbots	Sep 7 23:42:41 ns382633 sshd\[1954\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.91.131 user=root Sep 7 23:42:43 ns382633 sshd\[1954\]: Failed password for root from 122.51.91.131 port 39924 ssh2 Sep 7 23:51:53 ns382633 sshd\[3686\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.91.131 user=root Sep 7 23:51:55 ns382633 sshd\[3686\]: Failed password for root from 122.51.91.131 port 52006 ssh2 Sep 7 23:55:35 ns382633 sshd\[4562\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.91.131 user=root	2020-09-08 08:18:06
51.77.109.98	attack	$f2bV_matches	2020-09-08 08:26:22
184.168.152.167	attackspambots	Brute Force	2020-09-08 08:00:01
106.13.187.27	attack	2020-09-07T23:36:42.809392abusebot-8.cloudsearch.cf sshd[16256]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.187.27 user=root 2020-09-07T23:36:44.882528abusebot-8.cloudsearch.cf sshd[16256]: Failed password for root from 106.13.187.27 port 46956 ssh2 2020-09-07T23:41:12.478016abusebot-8.cloudsearch.cf sshd[16366]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.187.27 user=root 2020-09-07T23:41:13.946604abusebot-8.cloudsearch.cf sshd[16366]: Failed password for root from 106.13.187.27 port 41365 ssh2 2020-09-07T23:45:30.043166abusebot-8.cloudsearch.cf sshd[16426]: Invalid user squid from 106.13.187.27 port 35780 2020-09-07T23:45:30.049606abusebot-8.cloudsearch.cf sshd[16426]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.187.27 2020-09-07T23:45:30.043166abusebot-8.cloudsearch.cf sshd[16426]: Invalid user squid from 106.13.187.27 port 35780 ...	2020-09-08 08:08:53
186.219.216.56	attack	Honeypot attack, port: 445, PTR: 56-216-219-186.static.redeidlnet.com.br.	2020-09-08 08:04:46

最近上报的IP列表

85.209.43.119	85.172.170.162	135.24.239.54	84.236.51.195
84.80.49.102	186.77.1.206	71.93.255.239	83.219.20.100
54.248.109.5	83.150.214.204	83.110.251.29	82.208.111.237
81.218.183.128	81.163.37.108	81.4.253.12	80.177.214.111
80.91.176.173	79.52.207.188	79.31.92.33	203.217.224.193