94.53.199.106 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Romania

运营商(isp): SC Nextgen Communications SRL

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspam	Unauthorized connection attempt detected from IP address 94.53.199.106 to port 81 [J]	2020-01-29 05:18:30
attackspambots	Automatic report - Port Scan Attack	2020-01-19 16:59:30
attack	Unauthorized connection attempt detected from IP address 94.53.199.106 to port 8080 [J]	2020-01-19 06:03:39

类型

评论内容

时间

attackspam

Unauthorized connection attempt detected from IP address 94.53.199.106 to port 81 [J]

2020-01-29 05:18:30

attackspambots

Automatic report - Port Scan Attack

2020-01-19 16:59:30

attack

Unauthorized connection attempt detected from IP address 94.53.199.106 to port 8080 [J]

2020-01-19 06:03:39

相同子网IP讨论:

IP	类型	评论内容	时间
94.53.199.250	attackbotsspam	DATE:2020-03-20 14:01:22, IP:94.53.199.250, PORT:ssh SSH brute force auth on honeypot server (epe-honey1-hq)	2020-03-21 05:01:50

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 94.53.199.106
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 59212
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;94.53.199.106.			IN	A

;; AUTHORITY SECTION:
.			320	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020011800 1800 900 604800 86400

;; Query time: 119 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jan 19 06:03:36 CST 2020
;; MSG SIZE  rcvd: 117

HOST信息:

106.199.53.94.in-addr.arpa domain name pointer 94-53-199-106.next-gen.ro.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
106.199.53.94.in-addr.arpa	name = 94-53-199-106.next-gen.ro.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
117.242.147.93	attackspambots	Sep 9 18:42:56 xeon cyrus/imaps[34233]: badlogin: [117.242.147.93] plaintext szabo.abel@taylor.hu SASL(-13): authentication failure: checkpass failed	2020-09-10 17:17:17
20.185.231.189	attackspambots	SSH-BruteForce	2020-09-10 17:03:59
5.189.136.58	attack	2020-09-09 23:14:54.020086-0500 localhost screensharingd[54424]: Authentication: FAILED :: User Name: N/A :: Viewer Address: 5.189.136.58 :: Type: VNC DES	2020-09-10 17:13:59
50.47.140.203	attack	2020-09-10T03:22:41.047574yoshi.linuxbox.ninja sshd[60827]: Failed password for root from 50.47.140.203 port 53350 ssh2 2020-09-10T03:22:45.546238yoshi.linuxbox.ninja sshd[60827]: Failed password for root from 50.47.140.203 port 53350 ssh2 2020-09-10T03:22:49.904464yoshi.linuxbox.ninja sshd[60827]: Failed password for root from 50.47.140.203 port 53350 ssh2 ...	2020-09-10 16:38:17
103.105.67.146	attackspam	Sep 10 09:11:54 root sshd[3116]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.105.67.146 Sep 10 09:18:03 root sshd[9446]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.105.67.146 ...	2020-09-10 16:49:49
186.29.223.245	attack	1599670243 - 09/09/2020 18:50:43 Host: 186.29.223.245/186.29.223.245 Port: 445 TCP Blocked	2020-09-10 16:50:08
94.102.51.29	attackspam	TCP (SYN) 94.102.51.29:51751 -> port 3390, len 44	2020-09-10 17:08:59
165.227.193.157	attackspambots	Sep 10 09:43:39 root sshd[4010]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.193.157 ...	2020-09-10 17:16:54
111.229.57.21	attack	Sep 10 08:42:50 root sshd[5184]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.57.21 ...	2020-09-10 17:06:46
185.108.106.251	attackspambots	[2020-09-10 04:53:52] NOTICE[1239] chan_sip.c: Registration from '' failed for '185.108.106.251:55119' - Wrong password [2020-09-10 04:53:52] SECURITY[1264] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-10T04:53:52.909-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="5941",SessionID="0x7f4d48115e28",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.108.106.251/55119",Challenge="13f294ce",ReceivedChallenge="13f294ce",ReceivedHash="6662c9f8b16369b43533a507e7b1726d" [2020-09-10 04:54:23] NOTICE[1239] chan_sip.c: Registration from '' failed for '185.108.106.251:54583' - Wrong password [2020-09-10 04:54:23] SECURITY[1264] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-10T04:54:23.996-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="8738",SessionID="0x7f4d4804ac88",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.108 ...	2020-09-10 17:07:56
201.75.3.65	attackspambots	Unauthorized connection attempt from IP address 201.75.3.65 on Port 445(SMB)	2020-09-10 17:10:28
139.198.18.230	attackbots	Sep 10 08:22:01 hidden sshd[48972]: Failed password for hidden from 139.198.18.230 port 37655 ssh2 Sep 10 08:24:38 hidden sshd[49027]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.198.18.230 user=root Sep 10 08:24:40 hidden sshd[49027]: Failed password for hidden from 139.198.18.230 port 52577 ssh2	2020-09-10 16:58:47
89.248.167.141	attackspambots	TCP (SYN) 89.248.167.141:8080 -> port 5615, len 44	2020-09-10 17:11:27
94.191.88.34	attackspambots	Sep 10 10:31:52 root sshd[22053]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.88.34 ...	2020-09-10 16:54:59
106.52.115.36	attackbotsspam	Sep 9 15:56:20 vps46666688 sshd[17336]: Failed password for root from 106.52.115.36 port 58514 ssh2 ...	2020-09-10 16:58:03

最近上报的IP列表

81.25.49.113	79.166.82.191	78.187.255.180	78.151.217.222
77.42.87.205	74.222.119.13	72.235.131.35	58.187.97.184
58.181.61.45	46.62.190.6	42.2.255.137	41.234.57.115
2.125.175.186	227.223.186.4	2.50.33.230	1.53.172.117
222.85.110.46	16.17.132.213	203.191.150.32	33.129.223.26