92.81.42.107 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Romania

运营商(isp): Romtelecom Data Network

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Spam Timestamp : 08-Sep-19 08:13 BlockList Provider combined abuse (723)	2019-09-08 22:44:10

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 92.81.42.107
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 24575
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;92.81.42.107.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019090800 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sun Sep 08 22:43:59 CST 2019
;; MSG SIZE  rcvd: 116

HOST信息:

Host 107.42.81.92.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 107.42.81.92.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
81.130.234.235	attackspam	Aug 31 01:23:35 XXX sshd[51924]: Invalid user mallorie from 81.130.234.235 port 50446	2019-08-31 08:43:38
54.38.185.87	attack	Aug 30 11:54:13 friendsofhawaii sshd\[16589\]: Invalid user hayden from 54.38.185.87 Aug 30 11:54:13 friendsofhawaii sshd\[16589\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=87.ip-54-38-185.eu Aug 30 11:54:15 friendsofhawaii sshd\[16589\]: Failed password for invalid user hayden from 54.38.185.87 port 58076 ssh2 Aug 30 11:58:09 friendsofhawaii sshd\[16906\]: Invalid user adm1 from 54.38.185.87 Aug 30 11:58:09 friendsofhawaii sshd\[16906\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=87.ip-54-38-185.eu	2019-08-31 08:15:38
181.113.65.164	attack	Hits on port : 445	2019-08-31 08:02:37
45.80.64.246	attackspambots	SSH-BruteForce	2019-08-31 08:19:38
60.170.101.25	attackspam	Telnet/23 MH Probe, BF, Hack -	2019-08-31 08:44:20
51.77.157.2	attackbots	Invalid user a from 51.77.157.2 port 50538	2019-08-31 08:32:05
95.86.32.4	attack	Aug 30 23:48:21 smtp postfix/smtpd[59126]: NOQUEUE: reject: RCPT from unknown[95.86.32.4]: 554 5.7.1 Service unavailable; Client host [95.86.32.4] blocked using bl.spamcop.net; Blocked - see https://www.spamcop.net/bl.shtml?95.86.32.4; from= to= proto=ESMTP helo= ...	2019-08-31 08:21:09
217.21.54.173	attackspam	proto=tcp . spt=55646 . dpt=25 . (listed on Blocklist de Aug 29) (692)	2019-08-31 08:41:33
159.89.165.36	attackspambots	Invalid user party from 159.89.165.36 port 38306	2019-08-31 08:30:55
118.187.6.24	attack	fraudulent SSH attempt	2019-08-31 08:34:57
23.129.64.186	attack	v+ssh-bruteforce	2019-08-31 08:05:56
78.1.132.166	attack	Aug 30 13:10:45 mx01 sshd[16312]: Did not receive identification string from 78.1.132.166 Aug 30 13:19:39 mx01 sshd[17356]: Received disconnect from 78.1.132.166: 11: Bye Bye [preauth] Aug 30 13:22:46 mx01 sshd[17712]: Invalid user admin from 78.1.132.166 Aug 30 13:22:46 mx01 sshd[17712]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78-1-132-166.adsl.net.t-com.hr Aug 30 13:22:48 mx01 sshd[17712]: Failed password for invalid user admin from 78.1.132.166 port 39408 ssh2 Aug 30 13:22:48 mx01 sshd[17712]: Received disconnect from 78.1.132.166: 11: Bye Bye [preauth] Aug 30 13:23:01 mx01 sshd[17754]: Invalid user ubuntu from 78.1.132.166 Aug 30 13:23:01 mx01 sshd[17754]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78-1-132-166.adsl.net.t-com.hr Aug 30 13:23:03 mx01 sshd[17754]: Failed password for invalid user ubuntu from 78.1.132.166 port 39574 ssh2 Aug 30 13:23:03 mx01 sshd[17754]: Rece........ -------------------------------	2019-08-31 08:12:18
71.171.122.239	attack	Aug 30 02:53:47 fwweb01 sshd[7359]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=pool-71-171-122-239.clppva.fios.verizon.net user=r.r Aug 30 02:53:49 fwweb01 sshd[7359]: Failed password for r.r from 71.171.122.239 port 48978 ssh2 Aug 30 02:53:49 fwweb01 sshd[7359]: Received disconnect from 71.171.122.239: 11: Bye Bye [preauth] Aug 30 03:04:13 fwweb01 sshd[7901]: Invalid user alumni from 71.171.122.239 Aug 30 03:04:13 fwweb01 sshd[7901]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=pool-71-171-122-239.clppva.fios.verizon.net Aug 30 03:04:15 fwweb01 sshd[7901]: Failed password for invalid user alumni from 71.171.122.239 port 38804 ssh2 Aug 30 03:04:16 fwweb01 sshd[7901]: Received disconnect from 71.171.122.239: 11: Bye Bye [preauth] Aug 30 03:08:06 fwweb01 sshd[8184]: Invalid user idea from 71.171.122.239 Aug 30 03:08:06 fwweb01 sshd[8184]: pam_unix(sshd:auth): authentication failure; ........ -------------------------------	2019-08-31 08:11:00
210.120.112.18	attackbotsspam	Aug 31 00:07:52 ip-172-31-1-72 sshd\[16444\]: Invalid user jimmy from 210.120.112.18 Aug 31 00:07:52 ip-172-31-1-72 sshd\[16444\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.120.112.18 Aug 31 00:07:54 ip-172-31-1-72 sshd\[16444\]: Failed password for invalid user jimmy from 210.120.112.18 port 48340 ssh2 Aug 31 00:12:16 ip-172-31-1-72 sshd\[16655\]: Invalid user brenda from 210.120.112.18 Aug 31 00:12:16 ip-172-31-1-72 sshd\[16655\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.120.112.18	2019-08-31 08:16:39
220.121.97.43	attack	08/30/2019-17:25:20.303545 220.121.97.43 Protocol: 6 ET SCAN NMAP -sS window 1024	2019-08-31 08:26:01

最近上报的IP列表

45.136.109.36	221.232.180.106	123.129.34.46	181.113.22.70
181.114.45.203	68.139.97.75	37.217.90.172	136.208.82.149
211.249.180.222	53.106.179.75	159.203.199.214	181.236.163.234
151.45.64.50	115.85.204.110	226.219.73.177	106.12.60.137
81.242.58.230	229.195.119.132	50.99.71.168	206.85.16.77