94.102.49.93 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Netherlands

运营商(isp): Incrediserve Ltd

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbotsspam	Port-scan: detected 200 distinct ports within a 24-hour window.	2020-10-04 06:25:39
attackbotsspam	Port-scan: detected 200 distinct ports within a 24-hour window.	2020-10-03 22:30:11
attackspam	[Sun Sep 27 22:47:43 2020] - Syn Flood From IP: 94.102.49.93 Port: 59653	2020-10-03 14:13:26

相同子网IP讨论:

IP	类型	评论内容	时间
94.102.49.193	botsattackproxy	Bot	2024-04-11 12:03:13
94.102.49.190	proxy	VPN fraud	2023-05-29 12:52:27
94.102.49.191	attackspam	ET DROP Dshield Block Listed Source group 1 - port: 132 proto: tcp cat: Misc Attackbytes: 60	2020-10-14 05:37:55
94.102.49.191	attackspambots	Port-scan: detected 174 distinct ports within a 24-hour window.	2020-10-07 17:07:10
94.102.49.117	attack	massive Port Scan	2020-10-07 04:15:40
94.102.49.59	attack	port scan	2020-10-07 00:57:42
94.102.49.117	attackspambots	massive Port Scan	2020-10-06 20:19:06
94.102.49.59	attack	Hacker	2020-10-06 16:51:13
94.102.49.193	attackbots	TCP (SYN) 94.102.49.193:6707 -> port 502, len 44	2020-10-05 03:01:09
94.102.49.193	attackspambots	TCP (SYN) 94.102.49.193:6707 -> port 502, len 44	2020-10-04 18:45:20
94.102.49.137	attackspam	Fri, 2020-10-02 08:33:48 - TCP Packet - Source:94.102.49.137 Destination:xxx.xxx.xxx.xxx - [PORT SCAN]	2020-10-03 04:32:19
94.102.49.137	attack	Oct 2 15:35:22 hidden kernel: [UFW BLOCK] IN=ens192 OUT= MAC=00:50:56:bc:13:b8:30:e4:db:97:3e:3f:08:00 SRC=94.102.49.137 DST=217.198.117.163 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=42330 PROTO=TCP SPT=45720 DPT=11117 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 2 15:35:22 hidden kernel: [UFW BLOCK] IN=ens192 OUT= MAC=00:50:56:bc:13:b8:30:e4:db:97:3e:3f:08:00 SRC=94.102.49.137 DST=217.198.117.163 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=28079 PROTO=TCP SPT=45720 DPT=11218 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 2 15:35:25 hidden kernel: [UFW BLOCK] IN=ens192 OUT= MAC=00:50:56:bc:13:b8:30:e4:db:97:3e:3f:08:00 SRC=94.102.49.137 DST=217.198.117.163 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=3153 PROTO=TCP SPT=45720 DPT=11222 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 2 15:35:25 hidden kernel: [UFW BLOCK] IN=ens192 OUT= MAC=00:50:56:bc:13:b8:30:e4:db:97:3e:3f:08:00 SRC=94.102.49.137 DST=217.198.117.163 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=16947 PROTO=TCP SPT=45720 DPT=11215 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 2 15: ...	2020-10-02 23:52:54
94.102.49.137	attackbotsspam	no-reverse-dns-configured.com	2020-10-02 20:24:29
94.102.49.137	attackspambots	port scan	2020-10-02 16:56:50
94.102.49.137	attackbots	Oct 1 21:04:31 TCP Attack: SRC=94.102.49.137 DST=[Masked] LEN=40 TOS=0x08 PREC=0x20 TTL=246 PROTO=TCP SPT=46270 DPT=10848 WINDOW=1024 RES=0x00 SYN URGP=0	2020-10-02 13:18:12

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 94.102.49.93
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 51848
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;94.102.49.93.			IN	A

;; AUTHORITY SECTION:
.			322	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020100300 1800 900 604800 86400

;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Oct 03 14:13:20 CST 2020
;; MSG SIZE  rcvd: 116

HOST信息:

Host 93.49.102.94.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 93.49.102.94.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
112.85.42.177	attackbots	Nov 26 02:57:58 TORMINT sshd\[30277\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.177 user=root Nov 26 02:58:00 TORMINT sshd\[30277\]: Failed password for root from 112.85.42.177 port 10879 ssh2 Nov 26 02:58:10 TORMINT sshd\[30277\]: Failed password for root from 112.85.42.177 port 10879 ssh2 ...	2019-11-26 15:58:27
112.141.202.143	attack	TCP Port Scanning	2019-11-26 15:49:36
218.92.0.134	attack	Nov 26 08:34:28 sso sshd[14224]: Failed password for root from 218.92.0.134 port 40032 ssh2 Nov 26 08:34:31 sso sshd[14224]: Failed password for root from 218.92.0.134 port 40032 ssh2 ...	2019-11-26 15:42:09
61.177.172.128	attack	Nov 26 08:30:45 [host] sshd[16943]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.128 user=root Nov 26 08:30:47 [host] sshd[16943]: Failed password for root from 61.177.172.128 port 59861 ssh2 Nov 26 08:31:06 [host] sshd[16945]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.128 user=root	2019-11-26 15:34:14
185.184.24.33	attackspam	"Fail2Ban detected SSH brute force attempt"	2019-11-26 15:47:12
150.249.114.20	attackspambots	Nov 26 08:12:34 mout sshd[320]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.249.114.20 user=root Nov 26 08:12:36 mout sshd[320]: Failed password for root from 150.249.114.20 port 59200 ssh2	2019-11-26 15:33:54
46.244.28.66	attack	TCP Port Scanning	2019-11-26 15:36:03
112.85.42.179	attack	Nov 26 09:42:45 server sshd\[10841\]: User root from 112.85.42.179 not allowed because listed in DenyUsers Nov 26 09:42:45 server sshd\[10841\]: Failed none for invalid user root from 112.85.42.179 port 60979 ssh2 Nov 26 09:42:46 server sshd\[10841\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.179 user=root Nov 26 09:42:48 server sshd\[10841\]: Failed password for invalid user root from 112.85.42.179 port 60979 ssh2 Nov 26 09:42:51 server sshd\[10841\]: Failed password for invalid user root from 112.85.42.179 port 60979 ssh2	2019-11-26 15:52:28
119.18.154.196	attackbotsspam	2019-11-26 00:29:08 H=(ip-154-194.jlm.net.id) [119.18.154.196]:52812 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/sbl/query/SBLCSS) 2019-11-26 00:29:09 H=(ip-154-194.jlm.net.id) [119.18.154.196]:52812 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4, 127.0.0.3) (https://www.spamhaus.org/sbl/query/SBLCSS) 2019-11-26 00:29:10 H=(ip-154-194.jlm.net.id) [119.18.154.196]:52812 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/sbl/query/SBLCSS) ...	2019-11-26 15:43:02
43.243.128.213	attackspambots	2019-11-26T07:36:43.617350abusebot-7.cloudsearch.cf sshd\[21039\]: Invalid user curtin from 43.243.128.213 port 54613	2019-11-26 15:48:40
51.79.99.7	attackbots	Port Scan detected from 51.79.99.7 (CA/Canada/ns567620.ip-51-79-99.net). 11 hits in the last 175 seconds	2019-11-26 15:51:11
51.83.138.91	attack	51.83.138.91 was recorded 40 times by 24 hosts attempting to connect to the following ports: 3390,53389,63389,3388,33892,33893,3399,33389,33899,3391,33890,23389,13389. Incident counter (4h, 24h, all-time): 40, 237, 5111	2019-11-26 16:00:17
41.76.169.43	attack	2019-11-26T07:09:17.366634shield sshd\[8438\]: Invalid user kolski from 41.76.169.43 port 46670 2019-11-26T07:09:17.370934shield sshd\[8438\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.76.169.43 2019-11-26T07:09:19.255104shield sshd\[8438\]: Failed password for invalid user kolski from 41.76.169.43 port 46670 ssh2 2019-11-26T07:17:10.956229shield sshd\[10785\]: Invalid user hokanson from 41.76.169.43 port 54072 2019-11-26T07:17:10.960280shield sshd\[10785\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.76.169.43	2019-11-26 15:57:45
115.236.35.107	attackspam	Nov 26 08:35:44 OPSO sshd\[28284\]: Invalid user kawatake from 115.236.35.107 port 38041 Nov 26 08:35:44 OPSO sshd\[28284\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.236.35.107 Nov 26 08:35:46 OPSO sshd\[28284\]: Failed password for invalid user kawatake from 115.236.35.107 port 38041 ssh2 Nov 26 08:39:53 OPSO sshd\[29070\]: Invalid user longthorpe from 115.236.35.107 port 54431 Nov 26 08:39:53 OPSO sshd\[29070\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.236.35.107	2019-11-26 15:41:44
217.76.40.82	attackspam	Nov 23 04:54:39 server6 sshd[21461]: reveeclipse mapping checking getaddrinfo for unreachable [217.76.40.82] failed - POSSIBLE BREAK-IN ATTEMPT! Nov 23 04:54:41 server6 sshd[21461]: Failed password for invalid user neelima from 217.76.40.82 port 35743 ssh2 Nov 23 04:54:41 server6 sshd[21461]: Received disconnect from 217.76.40.82: 11: Bye Bye [preauth] Nov 23 05:10:56 server6 sshd[1353]: reveeclipse mapping checking getaddrinfo for unreachable [217.76.40.82] failed - POSSIBLE BREAK-IN ATTEMPT! Nov 23 05:10:58 server6 sshd[1353]: Failed password for invalid user admin from 217.76.40.82 port 57890 ssh2 Nov 23 05:10:58 server6 sshd[1353]: Received disconnect from 217.76.40.82: 11: Bye Bye [preauth] Nov 23 05:14:20 server6 sshd[2967]: reveeclipse mapping checking getaddrinfo for unreachable [217.76.40.82] failed - POSSIBLE BREAK-IN ATTEMPT! Nov 23 05:14:23 server6 sshd[2967]: Failed password for invalid user test from 217.76.40.82 port 47753 ssh2 Nov 23 05:14:23 server6 ssh........ -------------------------------	2019-11-26 15:49:22

最近上报的IP列表

149.202.4.67	24.168.190.53	185.12.104.62	144.155.241.186
195.197.167.182	216.169.234.10	124.29.235.8	195.97.178.188
17.197.178.225	177.71.209.57	215.98.1.162	46.170.37.255
42.178.89.71	96.176.185.145	182.58.223.153	111.231.187.242
85.141.236.14	158.59.209.189	169.112.10.35	117.69.159.201