159.203.199.93

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States

运营商(isp): DigitalOcean LLC

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspambots	9160/tcp 58097/tcp 8088/tcp... [2019-09-06/08]6pkt,5pt.(tcp),1pt.(udp)	2019-09-09 11:24:45

相同子网IP讨论:

IP	类型	评论内容	时间
159.203.199.97	attackspambots	11326/tcp 995/tcp 22036/tcp... [2019-09-07/11]7pkt,7pt.(tcp)	2019-09-13 03:52:30
159.203.199.238	attackspambots	2019-09-11 20:11:05 SMTP protocol synchronization error (input sent whostnamehout wahostnameing for greeting): rejected connection from H=[159.203.199.238] input="EHLO zg-0905a-242 " ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=159.203.199.238	2019-09-12 08:00:42
159.203.199.205	attackbotsspam	Port Scan detected from 159.203.199.205 (US/United States/zg-0905a-211.stretchoid.com). 4 hits in the last 206 seconds	2019-09-12 06:52:58
159.203.199.176	attackspam	" "	2019-09-12 06:28:11
159.203.199.184	attackspambots	Sep 11 20:45:27 nopemail postfix/smtps/smtpd[1844]: SSL_accept error from unknown[159.203.199.184]: -1 ...	2019-09-12 05:59:01
159.203.199.214	attackspambots	" "	2019-09-12 02:38:48
159.203.199.156	attack	Automated reporting of bulk port scanning	2019-09-12 00:17:37
159.203.199.195	attackbotsspam	" "	2019-09-12 00:16:06
159.203.199.245	attackbots	firewall-block, port(s): 46046/tcp	2019-09-11 19:09:35
159.203.199.243	attackbots	" "	2019-09-11 12:18:05
159.203.199.76	attackspambots	Honeypot hit, critical abuseConfidenceScore, incoming Traffic from this IP	2019-09-11 11:38:50
159.203.199.8	attack	" "	2019-09-11 11:18:56
159.203.199.245	attackbots	Port Scan detected from 159.203.199.245 (US/United States/zg-0905a-249.stretchoid.com). 4 hits in the last 185 seconds	2019-09-11 04:48:31
159.203.199.89	attackbotsspam	Honeypot hit.	2019-09-10 15:02:31
159.203.199.160	attackbotsspam	Hits on port : 9160	2019-09-10 14:00:32

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 159.203.199.93
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 35474
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;159.203.199.93.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019090801 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Mon Sep 09 11:24:39 CST 2019
;; MSG SIZE  rcvd: 118

HOST信息:

93.199.203.159.in-addr.arpa domain name pointer zg-0905b-69.stretchoid.com.

NSLOOKUP信息:

Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
93.199.203.159.in-addr.arpa	name = zg-0905b-69.stretchoid.com.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
116.236.189.134	attack	Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-09-20T10:36:00Z and 2020-09-20T10:45:27Z	2020-09-20 20:28:45
222.186.42.7	attackbotsspam	Sep 20 14:30:12 freya sshd[9058]: Disconnected from authenticating user root 222.186.42.7 port 39805 [preauth] ...	2020-09-20 20:30:21
112.119.25.190	attack	Sep 19 19:02:59 vps639187 sshd\[27241\]: Invalid user user from 112.119.25.190 port 40535 Sep 19 19:03:00 vps639187 sshd\[27241\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.119.25.190 Sep 19 19:03:01 vps639187 sshd\[27241\]: Failed password for invalid user user from 112.119.25.190 port 40535 ssh2 ...	2020-09-20 20:43:47
203.189.239.116	attack	TCP (SYN) 203.189.239.116:56458 -> port 80, len 60	2020-09-20 20:50:57
185.220.102.244	attackbots	Sep 20 08:10:55 scw-tender-jepsen sshd[22585]: Failed password for root from 185.220.102.244 port 17600 ssh2 Sep 20 08:10:57 scw-tender-jepsen sshd[22585]: Failed password for root from 185.220.102.244 port 17600 ssh2 Sep 20 08:10:57 scw-tender-jepsen sshd[22585]: Failed password for root from 185.220.102.244 port 17600 ssh2	2020-09-20 20:28:03
114.141.55.178	attackspambots	Sep 20 05:44:56 mout sshd[10625]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.141.55.178 user=root Sep 20 05:44:59 mout sshd[10625]: Failed password for root from 114.141.55.178 port 60184 ssh2	2020-09-20 20:46:55
91.217.63.14	attackbots	Sep 20 11:45:53 [host] sshd[3142]: pam_unix(sshd:a Sep 20 11:45:55 [host] sshd[3142]: Failed password Sep 20 11:49:59 [host] sshd[3179]: pam_unix(sshd:a	2020-09-20 20:26:44
121.168.83.191	attack	Connection to SSH Honeypot - Detected by HoneypotDB	2020-09-20 20:53:16
177.100.244.79	attackspam	2020-09-19 11:57:35.885403-0500 localhost smtpd[24990]: NOQUEUE: reject: RCPT from unknown[177.100.244.79]: 554 5.7.1 Service unavailable; Client host [177.100.244.79] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS / https://www.spamhaus.org/query/ip/177.100.244.79; from= to= proto=ESMTP helo=	2020-09-20 20:35:24
115.231.130.25	attackspambots	fail2ban -- 115.231.130.25 ...	2020-09-20 20:12:26
104.41.33.227	attackbots	(sshd) Failed SSH login from 104.41.33.227 (BR/Brazil/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 20 03:24:42 optimus sshd[10669]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.41.33.227 user=mysql Sep 20 03:24:44 optimus sshd[10669]: Failed password for mysql from 104.41.33.227 port 48402 ssh2 Sep 20 03:29:44 optimus sshd[13028]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.41.33.227 user=root Sep 20 03:29:46 optimus sshd[13028]: Failed password for root from 104.41.33.227 port 59158 ssh2 Sep 20 03:34:42 optimus sshd[14955]: Invalid user vps from 104.41.33.227	2020-09-20 20:22:58
222.186.173.183	attack	(sshd) Failed SSH login from 222.186.173.183 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 20 08:26:53 optimus sshd[26682]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.183 user=root Sep 20 08:26:53 optimus sshd[26686]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.183 user=root Sep 20 08:26:53 optimus sshd[26688]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.183 user=root Sep 20 08:26:54 optimus sshd[26692]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.183 user=root Sep 20 08:26:54 optimus sshd[26683]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.183 user=root	2020-09-20 20:29:44
139.155.71.61	attackbots	Sep 20 12:26:09 staging sshd[9745]: Invalid user ubuntu from 139.155.71.61 port 51152 Sep 20 12:26:12 staging sshd[9745]: Failed password for invalid user ubuntu from 139.155.71.61 port 51152 ssh2 Sep 20 12:28:10 staging sshd[9756]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.71.61 user=root Sep 20 12:28:11 staging sshd[9756]: Failed password for root from 139.155.71.61 port 45684 ssh2 ...	2020-09-20 20:53:00
95.142.121.18	attack	slow and persistent scanner	2020-09-20 20:16:45
40.67.254.36	attackspambots	Blocked by Sophos UTM Network Protection . / / proto=6 . srcport=443 . dstport=64072 . (2321)	2020-09-20 20:17:04

最近上报的IP列表

194.113.106.146	159.203.199.151	162.243.58.198	2a01:4f8:121:5009::2
162.63.125.186	169.157.190.8	167.151.64.59	148.251.11.82
124.194.51.102	51.15.57.137	188.212.197.136	95.8.253.114
42.232.233.254	159.203.199.5	70.36.114.124	23.254.247.147
176.53.85.88	194.67.87.4	188.27.166.233	44.214.128.45