城市(city): unknown
省份(region): unknown
国家(country): None
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 94.102.53.112 | attackbots | Sep 22 19:49:41 *hidden* kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:28:99:3a:4d:23:91:08:00 SRC=94.102.53.112 DST=173.212.244.83 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=64967 PROTO=TCP SPT=47405 DPT=56184 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 22 19:50:13 *hidden* kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:28:99:3a:4d:23:91:08:00 SRC=94.102.53.112 DST=173.212.244.83 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=55059 PROTO=TCP SPT=47405 DPT=57738 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 22 19:59:46 *hidden* kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:28:99:3a:4d:23:91:08:00 SRC=94.102.53.112 DST=173.212.244.83 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=25295 PROTO=TCP SPT=47405 DPT=55384 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 22 20:00:15 *hidden* kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:28:99:3a:4d:23:91:08:00 SRC=94.102.53.112 DST=173.212.244.83 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=48025 PROTO=TCP SPT=47405 DPT=55603 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 22 20:01:40 ... |
2020-09-23 02:26:17 |
| 94.102.53.112 | attackbots | Sep 22 11:24:28 *hidden* kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:28:99:3a:4d:23:91:08:00 SRC=94.102.53.112 DST=173.212.244.83 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=17068 PROTO=TCP SPT=47405 DPT=54077 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 22 11:27:13 *hidden* kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:28:99:3a:4d:23:91:08:00 SRC=94.102.53.112 DST=173.212.244.83 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=46683 PROTO=TCP SPT=47405 DPT=54299 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 22 11:27:34 *hidden* kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:28:99:3a:4d:23:91:08:00 SRC=94.102.53.112 DST=173.212.244.83 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=53915 PROTO=TCP SPT=47405 DPT=55299 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 22 11:28:14 *hidden* kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:28:99:3a:4d:23:91:08:00 SRC=94.102.53.112 DST=173.212.244.83 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=2437 PROTO=TCP SPT=47405 DPT=54029 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 22 11:28:20 * ... |
2020-09-22 18:30:21 |
| 94.102.53.112 | attackspambots | [N10.H2.VM2] Port Scanner Detected Blocked by UFW |
2020-09-22 00:22:59 |
| 94.102.53.112 | attackspam | Sep 21 09:01:03 *hidden* kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:28:99:3a:4d:23:91:08:00 SRC=94.102.53.112 DST=173.212.244.83 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=17971 PROTO=TCP SPT=47405 DPT=57452 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 21 09:01:14 *hidden* kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:28:99:3a:4d:23:91:08:00 SRC=94.102.53.112 DST=173.212.244.83 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=8030 PROTO=TCP SPT=47405 DPT=56362 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 21 09:02:13 *hidden* kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:28:99:3a:4d:23:91:08:00 SRC=94.102.53.112 DST=173.212.244.83 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=35275 PROTO=TCP SPT=47405 DPT=55720 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 21 09:02:56 *hidden* kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:28:99:3a:4d:23:91:08:00 SRC=94.102.53.112 DST=173.212.244.83 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=57017 PROTO=TCP SPT=47405 DPT=56338 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 21 09:04:33 * ... |
2020-09-21 16:04:01 |
| 94.102.53.112 | attack | Sep 21 01:48:45 *hidden* kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:28:99:3a:4d:23:91:08:00 SRC=94.102.53.112 DST=173.212.244.83 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=31180 PROTO=TCP SPT=47405 DPT=56733 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 21 01:50:15 *hidden* kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:28:99:3a:4d:23:91:08:00 SRC=94.102.53.112 DST=173.212.244.83 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=30201 PROTO=TCP SPT=47405 DPT=54320 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 21 01:50:54 *hidden* kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:28:99:3a:4d:23:91:08:00 SRC=94.102.53.112 DST=173.212.244.83 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=63633 PROTO=TCP SPT=47405 DPT=55532 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 21 01:53:48 *hidden* kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:28:99:3a:4d:23:91:08:00 SRC=94.102.53.112 DST=173.212.244.83 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=43016 PROTO=TCP SPT=47405 DPT=54571 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 21 01:57:34 ... |
2020-09-21 07:58:37 |
| 94.102.53.112 | attack | Fail2Ban Ban Triggered |
2020-09-12 01:03:54 |
| 94.102.53.112 | attackspambots | Sep 11 10:46:08 *hidden* kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:28:99:3a:4d:23:91:08:00 SRC=94.102.53.112 DST=173.212.244.83 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=14603 PROTO=TCP SPT=54264 DPT=47578 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 11 10:47:41 *hidden* kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:28:99:3a:4d:23:91:08:00 SRC=94.102.53.112 DST=173.212.244.83 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=48855 PROTO=TCP SPT=54264 DPT=48632 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 11 10:50:31 *hidden* kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:28:99:3a:4d:23:91:08:00 SRC=94.102.53.112 DST=173.212.244.83 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=35108 PROTO=TCP SPT=54264 DPT=49545 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 11 10:50:57 *hidden* kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:28:99:3a:4d:23:91:08:00 SRC=94.102.53.112 DST=173.212.244.83 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=33718 PROTO=TCP SPT=54264 DPT=46805 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 11 10:54:30 ... |
2020-09-11 17:00:15 |
| 94.102.53.112 | attack | [H1.VM2] Blocked by UFW |
2020-09-11 09:12:55 |
| 94.102.53.112 | attack | [MK-VM6] Blocked by UFW |
2020-09-09 03:55:14 |
| 94.102.53.112 | attack | Sep 8 11:15:02 [host] kernel: [5223053.217784] [U Sep 8 11:17:05 [host] kernel: [5223176.069358] [U Sep 8 11:18:28 [host] kernel: [5223258.852837] [U Sep 8 11:18:50 [host] kernel: [5223281.334385] [U Sep 8 11:20:52 [host] kernel: [5223402.951904] [U Sep 8 11:27:39 [host] kernel: [5223810.195981] [U |
2020-09-08 19:34:39 |
| 94.102.53.112 | attackspambots | [MK-Root1] Blocked by UFW |
2020-09-06 21:04:43 |
| 94.102.53.112 | attackspam | Sep605:39:07server2kernel:Firewall:\*TCP_INBlocked\*IN=eth0OUT=MAC=00:16:3e:3f:7a:43:52:54:00:a2:7f:43:08:00SRC=94.102.53.112DST=136.243.224.57LEN=40TOS=0x00PREC=0x00TTL=249ID=57372PROTO=TCPSPT=54264DPT=48514WINDOW=1024RES=0x00SYNURGP=0Sep605:39:21server2kernel:Firewall:\*TCP_INBlocked\*IN=eth0OUT=MAC=00:16:3e:3f:7a:43:52:54:00:a2:7f:43:08:00SRC=94.102.53.112DST=136.243.224.51LEN=40TOS=0x00PREC=0x00TTL=249ID=56208PROTO=TCPSPT=54264DPT=47431WINDOW=1024RES=0x00SYNURGP=0Sep605:39:24server2kernel:Firewall:\*TCP_INBlocked\*IN=eth0OUT=MAC=00:16:3e:3f:7a:43:52:54:00:a2:7f:43:08:00SRC=94.102.53.112DST=136.243.224.57LEN=40TOS=0x00PREC=0x00TTL=249ID=24382PROTO=TCPSPT=54264DPT=48906WINDOW=1024RES=0x00SYNURGP=0Sep605:39:31server2kernel:Firewall:\*TCP_INBlocked\*IN=eth0OUT=MAC=00:16:3e:3f:7a:43:52:54:00:a2:7f:43:08:00SRC=94.102.53.112DST=136.243.224.53LEN=40TOS=0x00PREC=0x00TTL=249ID=41730PROTO=TCPSPT=54264DPT=47417WINDOW=1024RES=0x00SYNURGP=0Sep605:39:37server2kernel:Firewall:\*TCP_INBlocked\*IN=eth0OUT=MAC=00:16:3e:3f:7 |
2020-09-06 12:42:20 |
| 94.102.53.112 | attack | Sep 5 20:19:38 [host] kernel: [4996571.194594] [U Sep 5 20:19:48 [host] kernel: [4996581.278273] [U Sep 5 20:26:44 [host] kernel: [4996997.816185] [U Sep 5 20:39:01 [host] kernel: [4997734.271342] [U Sep 5 20:45:21 [host] kernel: [4998113.673015] [U Sep 5 20:45:47 [host] kernel: [4998140.247833] [U |
2020-09-06 05:02:52 |
| 94.102.53.112 | attackspam | [H1.VM7] Blocked by UFW |
2020-08-27 14:40:29 |
| 94.102.53.112 | attack | [H1.VM8] Blocked by UFW |
2020-08-21 21:06:26 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 94.102.53.159
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 24065
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;94.102.53.159. IN A
;; AUTHORITY SECTION:
. 201 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022062600 1800 900 604800 86400
;; Query time: 21 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jun 27 01:49:20 CST 2022
;; MSG SIZE rcvd: 106159.53.102.94.in-addr.arpa domain name pointer no-reverse-dns-configured.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
159.53.102.94.in-addr.arpa name = no-reverse-dns-configured.com.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 176.31.172.40 | attackspam | Dec 20 14:11:51 kapalua sshd\[17657\]: Invalid user germana from 176.31.172.40 Dec 20 14:11:51 kapalua sshd\[17657\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.ip-176-31-172.eu Dec 20 14:11:54 kapalua sshd\[17657\]: Failed password for invalid user germana from 176.31.172.40 port 37760 ssh2 Dec 20 14:17:04 kapalua sshd\[18240\]: Invalid user sierra from 176.31.172.40 Dec 20 14:17:04 kapalua sshd\[18240\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.ip-176-31-172.eu |
2019-12-21 08:21:30 |
| 103.141.137.39 | attack | 2019-12-21T01:19:52.202891www postfix/smtpd[7719]: warning: unknown[103.141.137.39]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2019-12-21T01:20:02.259948www postfix/smtpd[7719]: warning: unknown[103.141.137.39]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2019-12-21T01:20:15.403228www postfix/smtpd[7719]: warning: unknown[103.141.137.39]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2019-12-21 08:22:38 |
| 167.172.42.30 | attackspam | xmlrpc.php attack |
2019-12-21 08:24:09 |
| 123.252.227.43 | attackbotsspam | Unauthorized connection attempt from IP address 123.252.227.43 on Port 445(SMB) |
2019-12-21 08:29:56 |
| 82.102.18.43 | attackbotsspam | Scanning unused Default website or suspicious access to valid sites from IP marked as abusive |
2019-12-21 08:08:52 |
| 94.231.136.154 | attackbotsspam | Dec 21 01:11:55 eventyay sshd[14300]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.231.136.154 Dec 21 01:11:57 eventyay sshd[14300]: Failed password for invalid user moralez from 94.231.136.154 port 47722 ssh2 Dec 21 01:17:10 eventyay sshd[14528]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.231.136.154 ... |
2019-12-21 08:20:05 |
| 119.29.13.114 | attack | Unauthorized connection attempt from IP address 119.29.13.114 on Port 445(SMB) |
2019-12-21 08:28:13 |
| 190.72.180.235 | attackbots | Unauthorized connection attempt from IP address 190.72.180.235 on Port 445(SMB) |
2019-12-21 08:25:31 |
| 45.134.179.20 | attackspambots | Automatic report - Port Scan |
2019-12-21 07:52:55 |
| 195.154.119.48 | attackbotsspam | Dec 20 19:19:45 plusreed sshd[13047]: Invalid user shoutcast from 195.154.119.48 ... |
2019-12-21 08:31:45 |
| 41.159.18.20 | attackspambots | Dec 21 00:43:51 sticky sshd\[19242\]: Invalid user ume_kikaku740 from 41.159.18.20 port 33889 Dec 21 00:43:51 sticky sshd\[19242\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.159.18.20 Dec 21 00:43:53 sticky sshd\[19242\]: Failed password for invalid user ume_kikaku740 from 41.159.18.20 port 33889 ssh2 Dec 21 00:50:09 sticky sshd\[19320\]: Invalid user gina from 41.159.18.20 port 37829 Dec 21 00:50:09 sticky sshd\[19320\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.159.18.20 ... |
2019-12-21 07:58:50 |
| 83.159.162.26 | attackbotsspam | Unauthorized connection attempt from IP address 83.159.162.26 on Port 445(SMB) |
2019-12-21 08:04:13 |
| 51.75.207.61 | attackbots | Dec 21 00:05:14 localhost sshd\[93084\]: Invalid user koay from 51.75.207.61 port 43954 Dec 21 00:05:14 localhost sshd\[93084\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.207.61 Dec 21 00:05:16 localhost sshd\[93084\]: Failed password for invalid user koay from 51.75.207.61 port 43954 ssh2 Dec 21 00:10:06 localhost sshd\[93297\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.207.61 user=uucp Dec 21 00:10:07 localhost sshd\[93297\]: Failed password for uucp from 51.75.207.61 port 50306 ssh2 ... |
2019-12-21 08:30:53 |
| 186.1.132.74 | attackspam | Unauthorized connection attempt from IP address 186.1.132.74 on Port 445(SMB) |
2019-12-21 08:15:50 |
| 222.186.169.194 | attackbots | Dec 21 00:45:56 ovpn sshd\[4893\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.169.194 user=root Dec 21 00:45:58 ovpn sshd\[4893\]: Failed password for root from 222.186.169.194 port 10742 ssh2 Dec 21 00:46:01 ovpn sshd\[4893\]: Failed password for root from 222.186.169.194 port 10742 ssh2 Dec 21 00:46:04 ovpn sshd\[4893\]: Failed password for root from 222.186.169.194 port 10742 ssh2 Dec 21 00:46:20 ovpn sshd\[5003\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.169.194 user=root |
2019-12-21 07:55:09 |