81.30.203.202 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Russian Federation

运营商(isp): OJSC Ufanet

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbots	spam	2020-04-06 13:17:43
attackbots	IP was detected trying to Brute-Force SSH, FTP, Web Apps, Port-Scan or Hacking.	2020-03-29 21:51:36
attack	spam	2020-02-29 17:42:01
attack	spam	2020-01-24 13:57:24
attackspam	2019-11-29T16:09:02.794737MailD postfix/smtpd[11924]: NOQUEUE: reject: RCPT from 81.30.203.202.static.ufanet.ru[81.30.203.202]: 554 5.7.1 Service unavailable; Client host [81.30.203.202] blocked using bl.spamcop.net; Blocked - see https://www.spamcop.net/bl.shtml?81.30.203.202; from= to= proto=ESMTP helo=<81.30.203.202.static.ufanet.ru> 2019-11-29T16:09:03.057675MailD postfix/smtpd[11924]: NOQUEUE: reject: RCPT from 81.30.203.202.static.ufanet.ru[81.30.203.202]: 554 5.7.1 Service unavailable; Client host [81.30.203.202] blocked using bl.spamcop.net; Blocked - see https://www.spamcop.net/bl.shtml?81.30.203.202; from= to= proto=ESMTP helo=<81.30.203.202.static.ufanet.ru> 2019-11-29T16:09:03.474311MailD postfix/smtpd[11924]: NOQUEUE: reject: RCPT from 81.30.203.202.static.ufanet.ru[81.30.203.202]: 554 5.7.1 Service unavailable; Client host [81.30.203.202] blocked using bl.spamcop.net; Blocked - see https://www.spamco	2019-11-30 03:25:11
attackbotsspam	Automatic report - Banned IP Access	2019-08-13 17:31:54
attack	Absender hat Spam-Falle ausgel?st	2019-07-04 20:37:31

相同子网IP讨论:

IP	类型	评论内容	时间
81.30.203.70	attackspambots	SSH Brute Force, server-1 sshd[6764]: Failed password for invalid user teamspeak-server from 81.30.203.70 port 42526 ssh2	2019-08-27 07:08:56
81.30.203.70	attackbots	Aug 22 00:41:20 lcprod sshd\[5571\]: Invalid user steam from 81.30.203.70 Aug 22 00:41:20 lcprod sshd\[5571\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.30.203.70 Aug 22 00:41:22 lcprod sshd\[5571\]: Failed password for invalid user steam from 81.30.203.70 port 51340 ssh2 Aug 22 00:45:43 lcprod sshd\[5939\]: Invalid user kp from 81.30.203.70 Aug 22 00:45:43 lcprod sshd\[5939\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.30.203.70	2019-08-23 02:11:20

类型

评论内容

时间

81.30.203.70

attackspambots

SSH Brute Force, server-1 sshd[6764]: Failed password for invalid user teamspeak-server from 81.30.203.70 port 42526 ssh2

2019-08-27 07:08:56

81.30.203.70

attackbots

Aug 22 00:41:20 lcprod sshd\[5571\]: Invalid user steam from 81.30.203.70
Aug 22 00:41:20 lcprod sshd\[5571\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.30.203.70
Aug 22 00:41:22 lcprod sshd\[5571\]: Failed password for invalid user steam from 81.30.203.70 port 51340 ssh2
Aug 22 00:45:43 lcprod sshd\[5939\]: Invalid user kp from 81.30.203.70
Aug 22 00:45:43 lcprod sshd\[5939\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.30.203.70

2019-08-23 02:11:20

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 81.30.203.202
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 1341
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;81.30.203.202.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019070400 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Thu Jul 04 20:37:23 CST 2019
;; MSG SIZE  rcvd: 117

HOST信息:

202.203.30.81.in-addr.arpa domain name pointer 81.30.203.202.static.ufanet.ru.

NSLOOKUP信息:

Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
202.203.30.81.in-addr.arpa	name = 81.30.203.202.static.ufanet.ru.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
124.41.211.27	attackspam	Jul 14 06:42:34 OPSO sshd\[30763\]: Invalid user libsys from 124.41.211.27 port 43788 Jul 14 06:42:34 OPSO sshd\[30763\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.41.211.27 Jul 14 06:42:35 OPSO sshd\[30763\]: Failed password for invalid user libsys from 124.41.211.27 port 43788 ssh2 Jul 14 06:49:07 OPSO sshd\[31489\]: Invalid user mauro from 124.41.211.27 port 43798 Jul 14 06:49:07 OPSO sshd\[31489\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.41.211.27	2019-07-14 12:53:00
116.196.118.22	attackbotsspam	Jul 14 05:19:03 animalibera sshd[12585]: Invalid user sinusbot from 116.196.118.22 port 37412 ...	2019-07-14 13:21:48
176.58.149.10	attackspambots	Automatic report - Port Scan Attack	2019-07-14 13:20:28
190.15.203.153	attackspam	Jul 14 04:53:15 mail sshd\[21411\]: Invalid user liam from 190.15.203.153 port 50586 Jul 14 04:53:15 mail sshd\[21411\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.15.203.153 Jul 14 04:53:17 mail sshd\[21411\]: Failed password for invalid user liam from 190.15.203.153 port 50586 ssh2 Jul 14 04:59:43 mail sshd\[21505\]: Invalid user ssh from 190.15.203.153 port 49356 Jul 14 04:59:43 mail sshd\[21505\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.15.203.153 ...	2019-07-14 13:00:23
162.247.74.74	attackbotsspam	Jul 14 07:19:05 giegler sshd[29820]: Failed password for root from 162.247.74.74 port 52552 ssh2 Jul 14 07:19:08 giegler sshd[29820]: Failed password for root from 162.247.74.74 port 52552 ssh2 Jul 14 07:19:11 giegler sshd[29820]: Failed password for root from 162.247.74.74 port 52552 ssh2 Jul 14 07:19:14 giegler sshd[29820]: Failed password for root from 162.247.74.74 port 52552 ssh2 Jul 14 07:19:17 giegler sshd[29820]: Failed password for root from 162.247.74.74 port 52552 ssh2	2019-07-14 13:41:34
164.77.52.227	attackbots	Jul 14 04:55:17 MK-Soft-VM3 sshd\[31478\]: Invalid user system from 164.77.52.227 port 56770 Jul 14 04:55:17 MK-Soft-VM3 sshd\[31478\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.77.52.227 Jul 14 04:55:18 MK-Soft-VM3 sshd\[31478\]: Failed password for invalid user system from 164.77.52.227 port 56770 ssh2 ...	2019-07-14 13:16:12
185.220.101.15	attackbotsspam	The IP address [185.220.101.15] experienced 5 failed attempts when attempting to log into SSH	2019-07-14 12:52:42
159.65.242.16	attack	Jul 14 06:50:04 MK-Soft-Root2 sshd\[19389\]: Invalid user marius from 159.65.242.16 port 35914 Jul 14 06:50:04 MK-Soft-Root2 sshd\[19389\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.242.16 Jul 14 06:50:06 MK-Soft-Root2 sshd\[19389\]: Failed password for invalid user marius from 159.65.242.16 port 35914 ssh2 ...	2019-07-14 13:02:24
90.63.254.128	attack	Invalid user administrator from 90.63.254.128 port 38958	2019-07-14 13:22:44
104.248.161.244	attackbotsspam	Jul 14 04:43:05 MK-Soft-VM6 sshd\[30104\]: Invalid user adidas from 104.248.161.244 port 35360 Jul 14 04:43:05 MK-Soft-VM6 sshd\[30104\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.161.244 Jul 14 04:43:07 MK-Soft-VM6 sshd\[30104\]: Failed password for invalid user adidas from 104.248.161.244 port 35360 ssh2 ...	2019-07-14 13:25:30
66.70.130.144	attackspambots	Jul 14 04:46:01 MK-Soft-VM6 sshd\[30138\]: Invalid user igor from 66.70.130.144 port 48308 Jul 14 04:46:01 MK-Soft-VM6 sshd\[30138\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=66.70.130.144 Jul 14 04:46:03 MK-Soft-VM6 sshd\[30138\]: Failed password for invalid user igor from 66.70.130.144 port 48308 ssh2 ...	2019-07-14 12:50:13
188.131.218.175	attackbots	$f2bV_matches	2019-07-14 13:05:45
134.209.157.162	attackspam	Jul 14 06:35:54 amit sshd\[9525\]: Invalid user git from 134.209.157.162 Jul 14 06:35:54 amit sshd\[9525\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.157.162 Jul 14 06:35:56 amit sshd\[9525\]: Failed password for invalid user git from 134.209.157.162 port 46292 ssh2 ...	2019-07-14 13:11:17
125.236.193.31	attack	DATE:2019-07-14_02:34:33, IP:125.236.193.31, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc)	2019-07-14 13:36:23
51.68.70.175	attackbotsspam	Jul 14 06:46:56 SilenceServices sshd[8418]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.70.175 Jul 14 06:46:58 SilenceServices sshd[8418]: Failed password for invalid user me from 51.68.70.175 port 53742 ssh2 Jul 14 06:51:34 SilenceServices sshd[11511]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.70.175	2019-07-14 13:05:13

最近上报的IP列表

2405:205:2300:24b:8503:3748:9f0b:49f	31.173.240.228	46.101.126.38	187.248.23.157
222.240.228.76	35.198.194.72	115.55.122.1	192.169.190.180
89.244.121.154	104.236.71.43	95.184.14.133	188.140.113.118
89.221.227.236	190.2.149.75	108.161.131.203	139.219.9.168
178.128.193.112	183.129.55.8	211.159.176.144	184.22.30.156