81.30.203.202 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Russian Federation

运营商(isp): OJSC Ufanet

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbots	spam	2020-04-06 13:17:43
attackbots	IP was detected trying to Brute-Force SSH, FTP, Web Apps, Port-Scan or Hacking.	2020-03-29 21:51:36
attack	spam	2020-02-29 17:42:01
attack	spam	2020-01-24 13:57:24
attackspam	2019-11-29T16:09:02.794737MailD postfix/smtpd[11924]: NOQUEUE: reject: RCPT from 81.30.203.202.static.ufanet.ru[81.30.203.202]: 554 5.7.1 Service unavailable; Client host [81.30.203.202] blocked using bl.spamcop.net; Blocked - see https://www.spamcop.net/bl.shtml?81.30.203.202; from= to= proto=ESMTP helo=<81.30.203.202.static.ufanet.ru> 2019-11-29T16:09:03.057675MailD postfix/smtpd[11924]: NOQUEUE: reject: RCPT from 81.30.203.202.static.ufanet.ru[81.30.203.202]: 554 5.7.1 Service unavailable; Client host [81.30.203.202] blocked using bl.spamcop.net; Blocked - see https://www.spamcop.net/bl.shtml?81.30.203.202; from= to= proto=ESMTP helo=<81.30.203.202.static.ufanet.ru> 2019-11-29T16:09:03.474311MailD postfix/smtpd[11924]: NOQUEUE: reject: RCPT from 81.30.203.202.static.ufanet.ru[81.30.203.202]: 554 5.7.1 Service unavailable; Client host [81.30.203.202] blocked using bl.spamcop.net; Blocked - see https://www.spamco	2019-11-30 03:25:11
attackbotsspam	Automatic report - Banned IP Access	2019-08-13 17:31:54
attack	Absender hat Spam-Falle ausgel?st	2019-07-04 20:37:31

相同子网IP讨论:

IP	类型	评论内容	时间
81.30.203.70	attackspambots	SSH Brute Force, server-1 sshd[6764]: Failed password for invalid user teamspeak-server from 81.30.203.70 port 42526 ssh2	2019-08-27 07:08:56
81.30.203.70	attackbots	Aug 22 00:41:20 lcprod sshd\[5571\]: Invalid user steam from 81.30.203.70 Aug 22 00:41:20 lcprod sshd\[5571\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.30.203.70 Aug 22 00:41:22 lcprod sshd\[5571\]: Failed password for invalid user steam from 81.30.203.70 port 51340 ssh2 Aug 22 00:45:43 lcprod sshd\[5939\]: Invalid user kp from 81.30.203.70 Aug 22 00:45:43 lcprod sshd\[5939\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.30.203.70	2019-08-23 02:11:20

类型

评论内容

时间

81.30.203.70

attackspambots

SSH Brute Force, server-1 sshd[6764]: Failed password for invalid user teamspeak-server from 81.30.203.70 port 42526 ssh2

2019-08-27 07:08:56

81.30.203.70

attackbots

Aug 22 00:41:20 lcprod sshd\[5571\]: Invalid user steam from 81.30.203.70
Aug 22 00:41:20 lcprod sshd\[5571\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.30.203.70
Aug 22 00:41:22 lcprod sshd\[5571\]: Failed password for invalid user steam from 81.30.203.70 port 51340 ssh2
Aug 22 00:45:43 lcprod sshd\[5939\]: Invalid user kp from 81.30.203.70
Aug 22 00:45:43 lcprod sshd\[5939\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.30.203.70

2019-08-23 02:11:20

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 81.30.203.202
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 1341
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;81.30.203.202.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019070400 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Thu Jul 04 20:37:23 CST 2019
;; MSG SIZE  rcvd: 117

HOST信息:

202.203.30.81.in-addr.arpa domain name pointer 81.30.203.202.static.ufanet.ru.

NSLOOKUP信息:

Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
202.203.30.81.in-addr.arpa	name = 81.30.203.202.static.ufanet.ru.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
178.62.47.177	attackbots	Sep 15 10:09:00 [host] sshd[29397]: Invalid user jenkins from 178.62.47.177 Sep 15 10:09:00 [host] sshd[29397]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.47.177 Sep 15 10:09:01 [host] sshd[29397]: Failed password for invalid user jenkins from 178.62.47.177 port 50646 ssh2	2019-09-15 21:00:00
153.36.242.143	attackspambots	Sep 15 18:57:32 areeb-Workstation sshd[4181]: Failed password for root from 153.36.242.143 port 63683 ssh2 Sep 15 18:57:34 areeb-Workstation sshd[4181]: Failed password for root from 153.36.242.143 port 63683 ssh2 ...	2019-09-15 21:39:14
94.177.250.221	attackspambots	Sep 15 04:22:11 dallas01 sshd[22524]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.177.250.221 Sep 15 04:22:14 dallas01 sshd[22524]: Failed password for invalid user icinga from 94.177.250.221 port 52468 ssh2 Sep 15 04:26:01 dallas01 sshd[22925]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.177.250.221	2019-09-15 21:11:14
52.51.225.142	attackbotsspam	52.51.225.142 - - [15/Sep/2019:09:06:41 +0200] "GET /wp-login.php HTTP/1.1" 200 1237 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 52.51.225.142 - - [15/Sep/2019:09:06:41 +0200] "POST /wp-login.php HTTP/1.1" 200 1632 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 52.51.225.142 - - [15/Sep/2019:09:06:41 +0200] "GET /wp-login.php HTTP/1.1" 200 1237 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 52.51.225.142 - - [15/Sep/2019:09:06:41 +0200] "POST /wp-login.php HTTP/1.1" 200 1607 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 52.51.225.142 - - [15/Sep/2019:09:06:41 +0200] "GET /wp-login.php HTTP/1.1" 200 1237 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 52.51.225.142 - - [15/Sep/2019:09:06:41 +0200] "POST /wp-login.php HTTP/1.1" 200 1608 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2019-09-15 21:16:00
176.9.24.90	attackspambots	Lines containing failures of 176.9.24.90 Sep 15 08:19:18 shared04 sshd[29706]: Invalid user testuser from 176.9.24.90 port 32772 Sep 15 08:19:18 shared04 sshd[29706]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.9.24.90 Sep 15 08:19:20 shared04 sshd[29706]: Failed password for invalid user testuser from 176.9.24.90 port 32772 ssh2 Sep 15 08:19:20 shared04 sshd[29706]: Received disconnect from 176.9.24.90 port 32772:11: Bye Bye [preauth] Sep 15 08:19:20 shared04 sshd[29706]: Disconnected from invalid user testuser 176.9.24.90 port 32772 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=176.9.24.90	2019-09-15 21:00:47
167.71.197.133	attackspam	Sep 15 15:14:51 mail sshd\[6831\]: Failed password for invalid user eee from 167.71.197.133 port 60822 ssh2 Sep 15 15:19:09 mail sshd\[7472\]: Invalid user pi from 167.71.197.133 port 46098 Sep 15 15:19:09 mail sshd\[7472\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.197.133 Sep 15 15:19:11 mail sshd\[7472\]: Failed password for invalid user pi from 167.71.197.133 port 46098 ssh2 Sep 15 15:23:35 mail sshd\[7992\]: Invalid user hduser from 167.71.197.133 port 59612 Sep 15 15:23:35 mail sshd\[7992\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.197.133	2019-09-15 21:43:18
45.119.80.98	attack	45.119.80.98 - - [15/Sep/2019:04:46:27 +0200] "POST /wp-login.php HTTP/1.1" 403 1595 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "-" 009046d19e1abd8596fa790b4ec5f2e4 Vietnam VN Quang Ngai B\xECnh Th\xE0nh 45.119.80.98 - - [15/Sep/2019:04:46:28 +0200] "POST /xmlrpc.php HTTP/1.1" 403 240 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "-" 5cdeedfe15aecde3cb640edb8d973ae9 Vietnam VN Quang Ngai B\xECnh Th\xE0nh	2019-09-15 21:17:51
223.202.201.138	attackspam	2019-09-15T13:24:10.396603abusebot-8.cloudsearch.cf sshd\[23625\]: Invalid user braxton from 223.202.201.138 port 50224	2019-09-15 21:33:49
120.52.120.18	attack	Sep 14 23:25:22 web9 sshd\[30873\]: Invalid user jhonny from 120.52.120.18 Sep 14 23:25:22 web9 sshd\[30873\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.52.120.18 Sep 14 23:25:24 web9 sshd\[30873\]: Failed password for invalid user jhonny from 120.52.120.18 port 60719 ssh2 Sep 14 23:33:08 web9 sshd\[32719\]: Invalid user web from 120.52.120.18 Sep 14 23:33:08 web9 sshd\[32719\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.52.120.18	2019-09-15 21:04:57
45.80.64.246	attackbots	Sep 15 15:16:35 MK-Soft-Root2 sshd\[32064\]: Invalid user Alphanetworks from 45.80.64.246 port 44100 Sep 15 15:16:35 MK-Soft-Root2 sshd\[32064\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.80.64.246 Sep 15 15:16:37 MK-Soft-Root2 sshd\[32064\]: Failed password for invalid user Alphanetworks from 45.80.64.246 port 44100 ssh2 ...	2019-09-15 21:18:22
115.62.12.120	attackspambots	Port Scan: TCP/23	2019-09-15 21:05:59
203.121.116.11	attack	Sep 15 08:44:51 plusreed sshd[5877]: Invalid user demo from 203.121.116.11 ...	2019-09-15 20:54:36
103.60.212.221	attack	Sep 15 03:20:56 auw2 sshd\[26372\]: Invalid user lenny from 103.60.212.221 Sep 15 03:20:56 auw2 sshd\[26372\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.60.212.221 Sep 15 03:20:57 auw2 sshd\[26372\]: Failed password for invalid user lenny from 103.60.212.221 port 58678 ssh2 Sep 15 03:25:09 auw2 sshd\[26743\]: Invalid user ovidio from 103.60.212.221 Sep 15 03:25:09 auw2 sshd\[26743\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.60.212.221	2019-09-15 21:42:13
195.225.229.214	attack	Sep 15 09:23:51 TORMINT sshd\[4619\]: Invalid user test from 195.225.229.214 Sep 15 09:23:51 TORMINT sshd\[4619\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.225.229.214 Sep 15 09:23:53 TORMINT sshd\[4619\]: Failed password for invalid user test from 195.225.229.214 port 50250 ssh2 ...	2019-09-15 21:30:32
171.244.129.66	attackbots	WordPress wp-login brute force :: 171.244.129.66 0.140 BYPASS [15/Sep/2019:22:43:07 1000] [censored_1] "POST /wp-login.php HTTP/1.1" 200 3972 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2019-09-15 21:01:37

最近上报的IP列表

2405:205:2300:24b:8503:3748:9f0b:49f	31.173.240.228	46.101.126.38	187.248.23.157
222.240.228.76	35.198.194.72	115.55.122.1	192.169.190.180
89.244.121.154	104.236.71.43	95.184.14.133	188.140.113.118
89.221.227.236	190.2.149.75	108.161.131.203	139.219.9.168
178.128.193.112	183.129.55.8	211.159.176.144	184.22.30.156