109.195.21.243

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Russian Federation

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
109.195.21.27	attackspam	Lines containing failures of 109.195.21.27 Jul 4 17:21:48 neweola postfix/smtpd[8638]: warning: hostname center-house.ru does not resolve to address 109.195.21.27 Jul 4 17:21:48 neweola postfix/smtpd[8638]: connect from unknown[109.195.21.27] Jul 4 17:21:48 neweola postfix/smtpd[8638]: lost connection after AUTH from unknown[109.195.21.27] Jul 4 17:21:48 neweola postfix/smtpd[8638]: disconnect from unknown[109.195.21.27] ehlo=1 auth=0/1 commands=1/2 Jul 4 17:21:48 neweola postfix/smtpd[8638]: warning: hostname center-house.ru does not resolve to address 109.195.21.27 Jul 4 17:21:48 neweola postfix/smtpd[8638]: connect from unknown[109.195.21.27] Jul 4 17:21:49 neweola postfix/smtpd[8638]: lost connection after AUTH from unknown[109.195.21.27] Jul 4 17:21:49 neweola postfix/smtpd[8638]: disconnect from unknown[109.195.21.27] ehlo=1 auth=0/1 commands=1/2 Jul 4 17:21:49 neweola postfix/smtpd[8638]: warning: hostname center-house.ru does not resolve to address 109.1........ ------------------------------	2020-07-05 06:53:47
109.195.21.86	attackbots	MIRAI HOST Fri Feb 21 14:28:48 2020 - Child process 137628 handling connection Fri Feb 21 14:28:48 2020 - New connection from: 109.195.21.86:51806 Fri Feb 21 14:28:48 2020 - Sending data to client: [Login: ] Fri Feb 21 14:28:48 2020 - Got data: admin Fri Feb 21 14:28:49 2020 - Sending data to client: [Password: ] Fri Feb 21 14:28:49 2020 - Got data: 54321 Fri Feb 21 14:28:51 2020 - Child 137629 granting shell Fri Feb 21 14:28:51 2020 - Child 137628 exiting Fri Feb 21 14:28:51 2020 - Sending data to client: [Logged in] Fri Feb 21 14:28:51 2020 - Sending data to client: [Welcome to MX990 Embedded Linux] Fri Feb 21 14:28:51 2020 - Sending data to client: [[root@dvrdvs /]# ] Fri Feb 21 14:28:52 2020 - Got data: enable system shell sh Fri Feb 21 14:28:52 2020 - Sending data to client: [Command not found] Fri Feb 21 14:28:52 2020 - Sending data to client: [[root@dvrdvs /]# ] Fri Feb 21 14:28:52 2020 - Got data: cat /proc/mounts; /bin/busybox PCOHJ Fri Feb 21 14:28:52 2020 - Sending data to clien	2020-02-22 08:23:07
109.195.211.54	attackbots	Brute force VPN server	2020-01-20 01:29:57

类型

评论内容

时间

109.195.21.27

attackspam

Lines containing failures of 109.195.21.27
Jul  4 17:21:48 neweola postfix/smtpd[8638]: warning: hostname center-house.ru does not resolve to address 109.195.21.27
Jul  4 17:21:48 neweola postfix/smtpd[8638]: connect from unknown[109.195.21.27]
Jul  4 17:21:48 neweola postfix/smtpd[8638]: lost connection after AUTH from unknown[109.195.21.27]
Jul  4 17:21:48 neweola postfix/smtpd[8638]: disconnect from unknown[109.195.21.27] ehlo=1 auth=0/1 commands=1/2
Jul  4 17:21:48 neweola postfix/smtpd[8638]: warning: hostname center-house.ru does not resolve to address 109.195.21.27
Jul  4 17:21:48 neweola postfix/smtpd[8638]: connect from unknown[109.195.21.27]
Jul  4 17:21:49 neweola postfix/smtpd[8638]: lost connection after AUTH from unknown[109.195.21.27]
Jul  4 17:21:49 neweola postfix/smtpd[8638]: disconnect from unknown[109.195.21.27] ehlo=1 auth=0/1 commands=1/2
Jul  4 17:21:49 neweola postfix/smtpd[8638]: warning: hostname center-house.ru does not resolve to address 109.1........
------------------------------

2020-07-05 06:53:47

109.195.21.86

attackbots

** MIRAI HOST **
Fri Feb 21 14:28:48 2020 - Child process 137628 handling connection
Fri Feb 21 14:28:48 2020 - New connection from: 109.195.21.86:51806
Fri Feb 21 14:28:48 2020 - Sending data to client: [Login: ]
Fri Feb 21 14:28:48 2020 - Got data: admin
Fri Feb 21 14:28:49 2020 - Sending data to client: [Password: ]
Fri Feb 21 14:28:49 2020 - Got data: 54321
Fri Feb 21 14:28:51 2020 - Child 137629 granting shell
Fri Feb 21 14:28:51 2020 - Child 137628 exiting
Fri Feb 21 14:28:51 2020 - Sending data to client: [Logged in]
Fri Feb 21 14:28:51 2020 - Sending data to client: [Welcome to MX990 Embedded Linux]
Fri Feb 21 14:28:51 2020 - Sending data to client: [[root@dvrdvs /]# ]
Fri Feb 21 14:28:52 2020 - Got data: enable
system
shell
sh
Fri Feb 21 14:28:52 2020 - Sending data to client: [Command not found]
Fri Feb 21 14:28:52 2020 - Sending data to client: [[root@dvrdvs /]# ]
Fri Feb 21 14:28:52 2020 - Got data: cat /proc/mounts; /bin/busybox PCOHJ
Fri Feb 21 14:28:52 2020 - Sending data to clien

2020-02-22 08:23:07

109.195.211.54

attackbots

Brute force VPN server

2020-01-20 01:29:57

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 109.195.21.243
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 58520
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;109.195.21.243.			IN	A

;; AUTHORITY SECTION:
.			477	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022800 1800 900 604800 86400

;; Query time: 63 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 28 17:35:20 CST 2022
;; MSG SIZE  rcvd: 107

HOST信息:

243.21.195.109.in-addr.arpa domain name pointer 109x195x21x243.static-customer.saratov.ertelecom.ru.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
243.21.195.109.in-addr.arpa	name = 109x195x21x243.static-customer.saratov.ertelecom.ru.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
178.128.217.58	attackspam	Jan 4 17:31:48 host sshd[27916]: Invalid user renato from 178.128.217.58 port 60948 ...	2020-01-05 00:40:46
189.57.140.10	attack	Jan 4 14:28:02 124388 sshd[3908]: Invalid user qcd from 189.57.140.10 port 45280 Jan 4 14:28:02 124388 sshd[3908]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.57.140.10 Jan 4 14:28:02 124388 sshd[3908]: Invalid user qcd from 189.57.140.10 port 45280 Jan 4 14:28:04 124388 sshd[3908]: Failed password for invalid user qcd from 189.57.140.10 port 45280 ssh2 Jan 4 14:30:10 124388 sshd[3928]: Invalid user hadoop from 189.57.140.10 port 54207	2020-01-05 00:21:39
81.23.145.254	attackbots	81.23.145.254 has been banned for [spam] ...	2020-01-05 00:13:38
171.38.221.211	attackbots	Honeypot attack, port: 23, PTR: PTR record not found	2020-01-05 00:13:08
103.86.43.27	attackspambots	Automatic report - XMLRPC Attack	2020-01-05 00:50:03
72.249.235.194	attackspambots	2020-01-04 07:11:54 H=(thurlowpa.com) [72.249.235.194]:58593 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/query/ip/72.249.235.194) 2020-01-04 07:11:54 H=(thurlowpa.com) [72.249.235.194]:58593 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/query/ip/72.249.235.194) 2020-01-04 07:11:54 H=(thurlowpa.com) [72.249.235.194]:58593 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/query/ip/72.249.235.194) ...	2020-01-05 00:41:37
13.64.18.44	attackspambots	Jan 3 15:58:41 amida sshd[711340]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.64.18.44 user=carminefiore Jan 3 15:58:44 amida sshd[711340]: Failed password for carminefiore from 13.64.18.44 port 56982 ssh2 Jan 3 15:58:44 amida sshd[711340]: Received disconnect from 13.64.18.44: 11: Bye Bye [preauth] Jan 3 15:58:45 amida sshd[711353]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.64.18.44 user=carminefiore Jan 3 15:58:47 amida sshd[711353]: Failed password for carminefiore from 13.64.18.44 port 57866 ssh2 Jan 3 15:58:48 amida sshd[711353]: Received disconnect from 13.64.18.44: 11: Bye Bye [preauth] Jan 3 15:58:49 amida sshd[711373]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.64.18.44 user=carminefiore ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=13.64.18.44	2020-01-05 00:32:43
178.128.68.121	attack	178.128.68.121 - - [04/Jan/2020:14:12:37 +0100] "POST /wp-login.php HTTP/1.1" 200 3121 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 178.128.68.121 - - [04/Jan/2020:14:12:38 +0100] "POST /wp-login.php HTTP/1.1" 200 3100 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-01-05 00:07:19
14.232.179.155	attackspambots	1578143547 - 01/04/2020 14:12:27 Host: 14.232.179.155/14.232.179.155 Port: 445 TCP Blocked	2020-01-05 00:19:22
3.233.234.238	attackbotsspam	Jan 4 17:06:27 163-172-32-151 sshd[27999]: Invalid user user from 3.233.234.238 port 45020 ...	2020-01-05 00:13:55
159.192.216.238	attackbotsspam	Unauthorized connection attempt detected from IP address 159.192.216.238 to port 445	2020-01-05 00:47:17
61.177.172.128	attack	Jan 4 16:56:32 vmanager6029 sshd\[15469\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.128 user=root Jan 4 16:56:34 vmanager6029 sshd\[15469\]: Failed password for root from 61.177.172.128 port 54820 ssh2 Jan 4 16:56:37 vmanager6029 sshd\[15469\]: Failed password for root from 61.177.172.128 port 54820 ssh2	2020-01-05 00:28:27
219.142.140.2	attackbots	Jan 4 16:32:14 ip-172-31-62-245 sshd\[19294\]: Invalid user qrb from 219.142.140.2\ Jan 4 16:32:16 ip-172-31-62-245 sshd\[19294\]: Failed password for invalid user qrb from 219.142.140.2 port 55579 ssh2\ Jan 4 16:36:30 ip-172-31-62-245 sshd\[19374\]: Invalid user nate from 219.142.140.2\ Jan 4 16:36:32 ip-172-31-62-245 sshd\[19374\]: Failed password for invalid user nate from 219.142.140.2 port 17916 ssh2\ Jan 4 16:40:32 ip-172-31-62-245 sshd\[19500\]: Invalid user tgz from 219.142.140.2\	2020-01-05 00:45:45
93.80.10.11	attackbots	20/1/4@08:12:39: FAIL: Alarm-Network address from=93.80.10.11 ...	2020-01-05 00:06:16
185.56.183.37	attackbotsspam	Automatic report - Port Scan Attack	2020-01-05 00:24:48

最近上报的IP列表

109.195.210.160	109.195.210.178	109.195.210.180	109.195.209.174
109.195.210.20	109.195.210.196	109.195.210.228	109.195.210.235
109.195.210.35	109.195.212.196	109.195.215.11	109.195.215.137
109.195.215.150	109.195.215.247	109.195.22.15	109.195.215.71
109.195.22.16	109.195.215.194	109.195.22.4	109.195.220.243