47.93.254.166 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): Aliyun Computing Co. Ltd

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Failed password for root from 47.93.254.166 port 45164 ssh2	2020-08-12 14:03:27

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:


; <<>> DiG 9.10.3-P4-Ubuntu <<>> 47.93.254.166
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 61986
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;47.93.254.166.			IN	A

;; AUTHORITY SECTION:
.			225	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020081200 1800 900 604800 86400

;; Query time: 1026 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Aug 12 14:04:01 CST 2020
;; MSG SIZE  rcvd: 117

HOST信息:

Host 166.254.93.47.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 166.254.93.47.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
222.186.15.158	attack	Aug 22 15:15:02 scw-6657dc sshd[11998]: Failed password for root from 222.186.15.158 port 26841 ssh2 Aug 22 15:15:02 scw-6657dc sshd[11998]: Failed password for root from 222.186.15.158 port 26841 ssh2 Aug 22 15:15:05 scw-6657dc sshd[11998]: Failed password for root from 222.186.15.158 port 26841 ssh2 ...	2020-08-22 23:15:26
46.228.93.242	attack	SSH login attempts.	2020-08-22 22:52:03
222.186.42.155	attack	Aug 22 17:16:56 v22018053744266470 sshd[11767]: Failed password for root from 222.186.42.155 port 12918 ssh2 Aug 22 17:17:06 v22018053744266470 sshd[11777]: Failed password for root from 222.186.42.155 port 49481 ssh2 ...	2020-08-22 23:17:38
223.19.54.41	attack	Aug 22 14:13:53 db sshd[17420]: User root from 223.19.54.41 not allowed because none of user's groups are listed in AllowGroups ...	2020-08-22 22:53:27
200.89.129.233	attack	E-Mail Spam (RBL) [REJECTED]	2020-08-22 22:48:25
94.31.85.173	attackspambots	Aug 22 16:44:10 relay dovecot: imap-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 secs\): user=\, method=PLAIN, rip=94.31.85.173, lip=5.9.254.190, session=\ Aug 22 16:44:12 relay dovecot: imap-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 secs\): user=\, method=PLAIN, rip=94.31.85.173, lip=5.9.254.190, session=\<25tLWHitsbdeH1Wt\> Aug 22 16:44:34 relay dovecot: imap-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 secs\): user=\, method=PLAIN, rip=94.31.85.173, lip=5.9.254.190, session=\ Aug 22 16:49:43 relay dovecot: imap-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 secs\): user=\, method=PLAIN, rip=94.31.85.173, lip=5.9.254.190, session=\<1fELbHitrNpeH1Wt\> Aug 22 16:49:45 relay dovecot: imap-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 secs\): user=\< ...	2020-08-22 23:16:48
177.7.62.18	attackbots	Aug 22 14:13:31 db sshd[17320]: Invalid user ubnt from 177.7.62.18 port 36115 ...	2020-08-22 23:21:54
192.144.216.70	attackbots	Bruteforce detected by fail2ban	2020-08-22 22:50:46
14.37.102.5	attackbotsspam	Aug 22 14:24:20 andromeda sshd\[32515\]: Invalid user netman from 14.37.102.5 port 51366 Aug 22 14:24:21 andromeda sshd\[32515\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.37.102.5 Aug 22 14:24:23 andromeda sshd\[32515\]: Failed password for invalid user netman from 14.37.102.5 port 51366 ssh2	2020-08-22 23:20:13
219.85.32.237	attackbotsspam	20/8/22@10:23:57: FAIL: Alarm-Network address from=219.85.32.237 20/8/22@10:23:57: FAIL: Alarm-Network address from=219.85.32.237 ...	2020-08-22 23:28:38
61.223.128.158	attack	Aug 22 14:13:30 db sshd[17318]: User root from 61.223.128.158 not allowed because none of user's groups are listed in AllowGroups ...	2020-08-22 23:24:30
115.58.193.180	attackbots	Aug 22 15:18:13 mout sshd[14082]: Invalid user server from 115.58.193.180 port 25474	2020-08-22 23:30:18
206.189.145.251	attack	2020-08-22T10:18:55.8618961495-001 sshd[54134]: Invalid user postgres from 206.189.145.251 port 37440 2020-08-22T10:18:55.8650031495-001 sshd[54134]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.145.251 2020-08-22T10:18:55.8618961495-001 sshd[54134]: Invalid user postgres from 206.189.145.251 port 37440 2020-08-22T10:18:57.0551131495-001 sshd[54134]: Failed password for invalid user postgres from 206.189.145.251 port 37440 ssh2 2020-08-22T10:23:31.9069861495-001 sshd[54369]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.145.251 user=root 2020-08-22T10:23:34.3213771495-001 sshd[54369]: Failed password for root from 206.189.145.251 port 46210 ssh2 ...	2020-08-22 23:08:36
64.57.253.22	attack	Aug 22 09:13:32 ws24vmsma01 sshd[30343]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.57.253.22 Aug 22 09:13:34 ws24vmsma01 sshd[30343]: Failed password for invalid user kun from 64.57.253.22 port 49138 ssh2 ...	2020-08-22 23:00:49
166.173.249.23	attack	[H1.VM6] Blocked by UFW	2020-08-22 23:11:17

最近上报的IP列表

167.89.105.219	138.122.98.149	103.25.132.90	78.8.188.6
62.193.129.247	52.147.11.240	49.52.44.131	45.232.64.101
45.164.203.170	31.170.61.26	31.170.51.152	200.66.115.10
191.53.193.130	189.89.210.245	177.91.188.168	177.21.204.183
170.233.69.114	170.150.54.4	149.72.193.137	109.164.6.9