81.30.203.202 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Russian Federation

运营商(isp): OJSC Ufanet

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbots	spam	2020-04-06 13:17:43
attackbots	IP was detected trying to Brute-Force SSH, FTP, Web Apps, Port-Scan or Hacking.	2020-03-29 21:51:36
attack	spam	2020-02-29 17:42:01
attack	spam	2020-01-24 13:57:24
attackspam	2019-11-29T16:09:02.794737MailD postfix/smtpd[11924]: NOQUEUE: reject: RCPT from 81.30.203.202.static.ufanet.ru[81.30.203.202]: 554 5.7.1 Service unavailable; Client host [81.30.203.202] blocked using bl.spamcop.net; Blocked - see https://www.spamcop.net/bl.shtml?81.30.203.202; from= to= proto=ESMTP helo=<81.30.203.202.static.ufanet.ru> 2019-11-29T16:09:03.057675MailD postfix/smtpd[11924]: NOQUEUE: reject: RCPT from 81.30.203.202.static.ufanet.ru[81.30.203.202]: 554 5.7.1 Service unavailable; Client host [81.30.203.202] blocked using bl.spamcop.net; Blocked - see https://www.spamcop.net/bl.shtml?81.30.203.202; from= to= proto=ESMTP helo=<81.30.203.202.static.ufanet.ru> 2019-11-29T16:09:03.474311MailD postfix/smtpd[11924]: NOQUEUE: reject: RCPT from 81.30.203.202.static.ufanet.ru[81.30.203.202]: 554 5.7.1 Service unavailable; Client host [81.30.203.202] blocked using bl.spamcop.net; Blocked - see https://www.spamco	2019-11-30 03:25:11
attackbotsspam	Automatic report - Banned IP Access	2019-08-13 17:31:54
attack	Absender hat Spam-Falle ausgel?st	2019-07-04 20:37:31

相同子网IP讨论:

IP	类型	评论内容	时间
81.30.203.70	attackspambots	SSH Brute Force, server-1 sshd[6764]: Failed password for invalid user teamspeak-server from 81.30.203.70 port 42526 ssh2	2019-08-27 07:08:56
81.30.203.70	attackbots	Aug 22 00:41:20 lcprod sshd\[5571\]: Invalid user steam from 81.30.203.70 Aug 22 00:41:20 lcprod sshd\[5571\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.30.203.70 Aug 22 00:41:22 lcprod sshd\[5571\]: Failed password for invalid user steam from 81.30.203.70 port 51340 ssh2 Aug 22 00:45:43 lcprod sshd\[5939\]: Invalid user kp from 81.30.203.70 Aug 22 00:45:43 lcprod sshd\[5939\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.30.203.70	2019-08-23 02:11:20

类型

评论内容

时间

81.30.203.70

attackspambots

SSH Brute Force, server-1 sshd[6764]: Failed password for invalid user teamspeak-server from 81.30.203.70 port 42526 ssh2

2019-08-27 07:08:56

81.30.203.70

attackbots

Aug 22 00:41:20 lcprod sshd\[5571\]: Invalid user steam from 81.30.203.70
Aug 22 00:41:20 lcprod sshd\[5571\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.30.203.70
Aug 22 00:41:22 lcprod sshd\[5571\]: Failed password for invalid user steam from 81.30.203.70 port 51340 ssh2
Aug 22 00:45:43 lcprod sshd\[5939\]: Invalid user kp from 81.30.203.70
Aug 22 00:45:43 lcprod sshd\[5939\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.30.203.70

2019-08-23 02:11:20

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 81.30.203.202
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 1341
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;81.30.203.202.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019070400 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Thu Jul 04 20:37:23 CST 2019
;; MSG SIZE  rcvd: 117

HOST信息:

202.203.30.81.in-addr.arpa domain name pointer 81.30.203.202.static.ufanet.ru.

NSLOOKUP信息:

Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
202.203.30.81.in-addr.arpa	name = 81.30.203.202.static.ufanet.ru.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
41.224.59.78	attackspambots	SSH brute force	2020-04-10 09:27:16
167.114.144.96	attackbotsspam	Apr 10 00:45:27 powerpi2 sshd[9472]: Invalid user ubuntu from 167.114.144.96 port 56290 Apr 10 00:45:29 powerpi2 sshd[9472]: Failed password for invalid user ubuntu from 167.114.144.96 port 56290 ssh2 Apr 10 00:52:45 powerpi2 sshd[9888]: Invalid user test from 167.114.144.96 port 48712 ...	2020-04-10 09:29:16
51.89.213.90	attackbotsspam	Automatic report - XMLRPC Attack	2020-04-10 09:19:09
111.229.118.227	attackbotsspam	SSH Authentication Attempts Exceeded	2020-04-10 09:53:08
118.112.181.37	attack	SSH / Telnet Brute Force Attempts on Honeypot	2020-04-10 09:39:49
185.202.1.164	attackbots	SSH-BruteForce	2020-04-10 09:26:32
122.224.232.66	attackbots	SSH-BruteForce	2020-04-10 09:30:20
162.243.237.90	attack	Apr 10 02:22:31 server sshd[19763]: Failed password for invalid user test from 162.243.237.90 port 47563 ssh2 Apr 10 02:24:42 server sshd[28369]: Failed password for root from 162.243.237.90 port 60005 ssh2 Apr 10 02:26:22 server sshd[2887]: Failed password for invalid user fauro from 162.243.237.90 port 43814 ssh2	2020-04-10 09:24:01
52.130.85.172	attackbotsspam	SSH brute force attempt	2020-04-10 09:37:13
185.176.222.99	attack	" "	2020-04-10 09:22:02
106.13.216.231	attackspam	Apr 10 01:30:28 odroid64 sshd\[30824\]: Invalid user admin from 106.13.216.231 Apr 10 01:30:28 odroid64 sshd\[30824\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.216.231 ...	2020-04-10 09:21:35
138.36.99.176	attackbotsspam	(sshd) Failed SSH login from 138.36.99.176 (AR/Argentina/138-36-99-176.reduno.com.ar): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Apr 9 23:53:27 ubnt-55d23 sshd[24423]: Invalid user ubuntu from 138.36.99.176 port 56504 Apr 9 23:53:29 ubnt-55d23 sshd[24423]: Failed password for invalid user ubuntu from 138.36.99.176 port 56504 ssh2	2020-04-10 09:33:42
216.168.90.218	attack	tried to invade my microsoft account	2020-04-10 09:26:07
206.189.132.8	attack	(sshd) Failed SSH login from 206.189.132.8 (IN/India/-): 5 in the last 3600 secs	2020-04-10 09:40:58
201.221.186.113	attackbots	Apr 10 02:44:57 v22018086721571380 sshd[16002]: Failed password for invalid user deploy from 201.221.186.113 port 49784 ssh2	2020-04-10 09:31:18

最近上报的IP列表

2405:205:2300:24b:8503:3748:9f0b:49f	31.173.240.228	46.101.126.38	187.248.23.157
222.240.228.76	35.198.194.72	115.55.122.1	192.169.190.180
89.244.121.154	104.236.71.43	95.184.14.133	188.140.113.118
89.221.227.236	190.2.149.75	108.161.131.203	139.219.9.168
178.128.193.112	183.129.55.8	211.159.176.144	184.22.30.156