213.230.75.160

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Uzbekistan

运营商(isp): Uzbektelekom Joint Stock Company

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	IP 213.230.75.160 attacked honeypot on port: 8080 at 5/28/2020 4:55:11 AM	2020-05-28 15:50:46

相同子网IP讨论:

IP	类型	评论内容	时间
213.230.75.216	attackspambots	Email rejected due to spam filtering	2020-07-29 23:59:44
213.230.75.132	attackbotsspam	Nov 22 07:06:30 mxgate1 postfix/postscreen[24303]: CONNECT from [213.230.75.132]:21273 to [176.31.12.44]:25 Nov 22 07:06:30 mxgate1 postfix/dnsblog[24331]: addr 213.230.75.132 listed by domain cbl.abuseat.org as 127.0.0.2 Nov 22 07:06:30 mxgate1 postfix/dnsblog[24330]: addr 213.230.75.132 listed by domain zen.spamhaus.org as 127.0.0.10 Nov 22 07:06:30 mxgate1 postfix/dnsblog[24330]: addr 213.230.75.132 listed by domain zen.spamhaus.org as 127.0.0.4 Nov 22 07:06:30 mxgate1 postfix/dnsblog[24329]: addr 213.230.75.132 listed by domain b.barracudacentral.org as 127.0.0.2 Nov 22 07:06:30 mxgate1 postfix/postscreen[24303]: PREGREET 23 after 0.19 from [213.230.75.132]:21273: EHLO [213.230.75.132] Nov 22 07:06:30 mxgate1 postfix/postscreen[24303]: DNSBL rank 4 for [213.230.75.132]:21273 Nov x@x Nov 22 07:06:31 mxgate1 postfix/postscreen[24303]: HANGUP after 0.45 from [213.230.75.132]:21273 in tests after SMTP handshake Nov 22 07:06:31 mxgate1 postfix/postscreen[24303]: DISCONN........ -------------------------------	2019-11-22 18:03:06

类型

评论内容

时间

213.230.75.216

attackspambots

Email rejected due to spam filtering

2020-07-29 23:59:44

213.230.75.132

attackbotsspam

Nov 22 07:06:30 mxgate1 postfix/postscreen[24303]: CONNECT from [213.230.75.132]:21273 to [176.31.12.44]:25
Nov 22 07:06:30 mxgate1 postfix/dnsblog[24331]: addr 213.230.75.132 listed by domain cbl.abuseat.org as 127.0.0.2
Nov 22 07:06:30 mxgate1 postfix/dnsblog[24330]: addr 213.230.75.132 listed by domain zen.spamhaus.org as 127.0.0.10
Nov 22 07:06:30 mxgate1 postfix/dnsblog[24330]: addr 213.230.75.132 listed by domain zen.spamhaus.org as 127.0.0.4
Nov 22 07:06:30 mxgate1 postfix/dnsblog[24329]: addr 213.230.75.132 listed by domain b.barracudacentral.org as 127.0.0.2
Nov 22 07:06:30 mxgate1 postfix/postscreen[24303]: PREGREET 23 after 0.19 from [213.230.75.132]:21273: EHLO [213.230.75.132]

Nov 22 07:06:30 mxgate1 postfix/postscreen[24303]: DNSBL rank 4 for [213.230.75.132]:21273
Nov x@x
Nov 22 07:06:31 mxgate1 postfix/postscreen[24303]: HANGUP after 0.45 from [213.230.75.132]:21273 in tests after SMTP handshake
Nov 22 07:06:31 mxgate1 postfix/postscreen[24303]: DISCONN........
-------------------------------

2019-11-22 18:03:06

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 213.230.75.160
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 14836
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;213.230.75.160.			IN	A

;; AUTHORITY SECTION:
.			361	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020052800 1800 900 604800 86400

;; Query time: 62 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu May 28 15:50:37 CST 2020
;; MSG SIZE  rcvd: 118

HOST信息:

160.75.230.213.in-addr.arpa domain name pointer 160.64.uzpak.uz.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
160.75.230.213.in-addr.arpa	name = 160.64.uzpak.uz.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
114.141.191.195	attack	Apr 11 14:20:29 odroid64 sshd\[31220\]: User root from 114.141.191.195 not allowed because not listed in AllowUsers Apr 11 14:20:29 odroid64 sshd\[31220\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.141.191.195 user=root ...	2020-04-11 21:00:33
219.233.49.254	attackbotsspam	DATE:2020-04-11 14:20:46, IP:219.233.49.254, PORT:1433 MSSQL brute force auth on honeypot server (epe-honey1-hq)	2020-04-11 20:41:03
60.169.208.5	attackspambots	Apr 11 22:14:11 our-server-hostname postfix/smtpd[27217]: connect from unknown[60.169.208.5] Apr x@x Apr x@x Apr x@x Apr x@x Apr x@x Apr x@x Apr x@x Apr x@x Apr x@x Apr x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=60.169.208.5	2020-04-11 20:32:53
58.211.191.20	attackspambots	Apr 11 09:20:41 ws24vmsma01 sshd[160135]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.211.191.20 Apr 11 09:20:43 ws24vmsma01 sshd[160135]: Failed password for invalid user jacob from 58.211.191.20 port 56712 ssh2 ...	2020-04-11 20:43:10
54.38.53.251	attack	Apr 11 14:16:49 sso sshd[22566]: Failed password for root from 54.38.53.251 port 41276 ssh2 ...	2020-04-11 20:59:07
106.12.78.40	attackspam	Apr 11 14:20:32 ncomp sshd[9162]: Invalid user ntps from 106.12.78.40 Apr 11 14:20:32 ncomp sshd[9162]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.78.40 Apr 11 14:20:32 ncomp sshd[9162]: Invalid user ntps from 106.12.78.40 Apr 11 14:20:34 ncomp sshd[9162]: Failed password for invalid user ntps from 106.12.78.40 port 43330 ssh2	2020-04-11 20:57:11
27.255.246.13	attackspambots	Fail2Ban - HTTP Auth Bruteforce Attempt	2020-04-11 20:33:20
176.113.70.60	attackbots	176.113.70.60 was recorded 12 times by 5 hosts attempting to connect to the following ports: 1900. Incident counter (4h, 24h, all-time): 12, 68, 5541	2020-04-11 20:34:53
102.142.59.94	attackbotsspam	Apr 11 12:20:44 hermescis postfix/smtpd[8852]: NOQUEUE: reject: RCPT from unknown[102.142.59.94]: 550 5.1.1 : Recipient address rejected:* from= to= proto=ESMTP helo=<[102.142.59.94]>	2020-04-11 20:38:03
222.252.20.146	attack	$f2bV_matches	2020-04-11 20:37:32
122.14.228.229	attackbots	Apr 11 14:20:41 [host] sshd[32637]: Invalid user h Apr 11 14:20:41 [host] sshd[32637]: pam_unix(sshd: Apr 11 14:20:43 [host] sshd[32637]: Failed passwor	2020-04-11 20:44:58
188.166.5.84	attackspam	Apr 11 14:43:43 plex sshd[6218]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.5.84 user=root Apr 11 14:43:45 plex sshd[6218]: Failed password for root from 188.166.5.84 port 34996 ssh2	2020-04-11 20:59:40
190.147.165.128	attackbots	Apr 11 02:18:25 web1 sshd\[7960\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.147.165.128 user=root Apr 11 02:18:27 web1 sshd\[7960\]: Failed password for root from 190.147.165.128 port 48164 ssh2 Apr 11 02:19:28 web1 sshd\[8101\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.147.165.128 user=root Apr 11 02:19:30 web1 sshd\[8101\]: Failed password for root from 190.147.165.128 port 32998 ssh2 Apr 11 02:20:34 web1 sshd\[8237\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.147.165.128 user=root	2020-04-11 20:53:50
2400:8901::f03c:92ff:fe60:3384	attackspambots	Automatic report - Port Scan	2020-04-11 21:01:52
52.164.203.103	attackbotsspam	Repeated RDP login failures. Last user: Postgres	2020-04-11 20:41:51

最近上报的IP列表

225.236.62.173	23.134.202.75	221.172.250.242	46.128.238.173
214.131.242.229	22.44.42.42	111.68.167.6	124.222.146.55
225.214.227.220	251.65.107.85	76.125.227.190	61.67.132.85
49.183.240.209	21.35.36.85	103.120.16.191	85.171.146.92
180.180.203.142	91.93.44.36	18.140.3.96	97.92.62.94