94.53.199.106 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Romania

运营商(isp): SC Nextgen Communications SRL

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspam	Unauthorized connection attempt detected from IP address 94.53.199.106 to port 81 [J]	2020-01-29 05:18:30
attackspambots	Automatic report - Port Scan Attack	2020-01-19 16:59:30
attack	Unauthorized connection attempt detected from IP address 94.53.199.106 to port 8080 [J]	2020-01-19 06:03:39

类型

评论内容

时间

attackspam

Unauthorized connection attempt detected from IP address 94.53.199.106 to port 81 [J]

2020-01-29 05:18:30

attackspambots

Automatic report - Port Scan Attack

2020-01-19 16:59:30

attack

Unauthorized connection attempt detected from IP address 94.53.199.106 to port 8080 [J]

2020-01-19 06:03:39

相同子网IP讨论:

IP	类型	评论内容	时间
94.53.199.250	attackbotsspam	DATE:2020-03-20 14:01:22, IP:94.53.199.250, PORT:ssh SSH brute force auth on honeypot server (epe-honey1-hq)	2020-03-21 05:01:50

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 94.53.199.106
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 59212
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;94.53.199.106.			IN	A

;; AUTHORITY SECTION:
.			320	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020011800 1800 900 604800 86400

;; Query time: 119 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jan 19 06:03:36 CST 2020
;; MSG SIZE  rcvd: 117

HOST信息:

106.199.53.94.in-addr.arpa domain name pointer 94-53-199-106.next-gen.ro.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
106.199.53.94.in-addr.arpa	name = 94-53-199-106.next-gen.ro.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
36.236.10.112	attack	firewall-block, port(s): 23/tcp	2019-11-04 07:32:52
64.31.35.218	attackspam	\[2019-11-03 18:01:11\] NOTICE\[2601\] chan_sip.c: Registration from '"4001" \' failed for '64.31.35.218:5851' - Wrong password \[2019-11-03 18:01:11\] SECURITY\[2634\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-11-03T18:01:11.087-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="4001",SessionID="0x7fdf2c1d1728",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/64.31.35.218/5851",Challenge="03ffdc37",ReceivedChallenge="03ffdc37",ReceivedHash="5bd7bcbfd828fccd7b05aa227a7886c3" \[2019-11-03 18:01:11\] NOTICE\[2601\] chan_sip.c: Registration from '"4001" \' failed for '64.31.35.218:5851' - Wrong password \[2019-11-03 18:01:11\] SECURITY\[2634\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-11-03T18:01:11.174-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="4001",SessionID="0x7fdf2c3f5928",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/6	2019-11-04 07:10:18
222.186.173.142	attack	Nov 1 06:09:08 microserver sshd[589]: Failed none for root from 222.186.173.142 port 57076 ssh2 Nov 1 06:09:09 microserver sshd[589]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.142 user=root Nov 1 06:09:12 microserver sshd[589]: Failed password for root from 222.186.173.142 port 57076 ssh2 Nov 1 06:09:16 microserver sshd[589]: Failed password for root from 222.186.173.142 port 57076 ssh2 Nov 1 06:09:21 microserver sshd[589]: Failed password for root from 222.186.173.142 port 57076 ssh2 Nov 2 04:48:28 microserver sshd[47093]: Failed none for root from 222.186.173.142 port 36258 ssh2 Nov 2 04:48:29 microserver sshd[47093]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.142 user=root Nov 2 04:48:31 microserver sshd[47093]: Failed password for root from 222.186.173.142 port 36258 ssh2 Nov 2 04:48:36 microserver sshd[47093]: Failed password for root from 222.186.173.142 port 36258 ssh2 Nov 2 04	2019-11-04 07:15:46
222.186.175.167	attackspam	Nov 3 19:47:48 firewall sshd[21844]: Failed password for root from 222.186.175.167 port 8494 ssh2 Nov 3 19:47:52 firewall sshd[21844]: Failed password for root from 222.186.175.167 port 8494 ssh2 Nov 3 19:47:56 firewall sshd[21844]: Failed password for root from 222.186.175.167 port 8494 ssh2 ...	2019-11-04 07:10:40
163.172.251.80	attackbotsspam	Nov 3 20:33:50 firewall sshd[22849]: Invalid user adminabc123 from 163.172.251.80 Nov 3 20:33:52 firewall sshd[22849]: Failed password for invalid user adminabc123 from 163.172.251.80 port 34102 ssh2 Nov 3 20:37:12 firewall sshd[22913]: Invalid user cnp200@HW from 163.172.251.80 ...	2019-11-04 07:42:59
218.73.96.183	attack	Unauthorized connection attempt from IP address 218.73.96.183 on Port 445(SMB)	2019-11-04 07:23:27
180.249.200.210	attackbotsspam	Unauthorized connection attempt from IP address 180.249.200.210 on Port 445(SMB)	2019-11-04 07:32:32
178.62.37.78	attack	Nov 4 00:01:15 [host] sshd[21901]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.37.78 user=root Nov 4 00:01:16 [host] sshd[21901]: Failed password for root from 178.62.37.78 port 57552 ssh2 Nov 4 00:05:14 [host] sshd[21989]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.37.78 user=root	2019-11-04 07:26:54
92.46.220.6	attackbotsspam	Unauthorized connection attempt from IP address 92.46.220.6 on Port 445(SMB)	2019-11-04 07:23:58
187.13.217.172	attackspambots	Unauthorized connection attempt from IP address 187.13.217.172 on Port 445(SMB)	2019-11-04 07:12:48
82.102.173.73	attackbotsspam	firewall-block, port(s): 9200/tcp	2019-11-04 07:12:15
54.37.154.254	attackbots	2019-11-03T23:04:38.072973abusebot-2.cloudsearch.cf sshd\[19267\]: Invalid user public from 54.37.154.254 port 59884	2019-11-04 07:25:09
106.12.33.50	attackbots	SSH Brute-Force reported by Fail2Ban	2019-11-04 07:41:30
171.221.230.220	attack	Nov 3 23:44:45 srv01 sshd[16080]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.221.230.220 user=root Nov 3 23:44:47 srv01 sshd[16080]: Failed password for root from 171.221.230.220 port 6977 ssh2 Nov 3 23:48:57 srv01 sshd[16292]: Invalid user vmi from 171.221.230.220 Nov 3 23:48:57 srv01 sshd[16292]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.221.230.220 Nov 3 23:48:57 srv01 sshd[16292]: Invalid user vmi from 171.221.230.220 Nov 3 23:48:59 srv01 sshd[16292]: Failed password for invalid user vmi from 171.221.230.220 port 6978 ssh2 ...	2019-11-04 07:27:25
51.254.32.228	attackbotsspam	2019-11-03T23:36:18.074067abusebot-6.cloudsearch.cf sshd\[15489\]: Invalid user unwonted from 51.254.32.228 port 48470	2019-11-04 07:47:37

最近上报的IP列表

81.25.49.113	79.166.82.191	78.187.255.180	78.151.217.222
77.42.87.205	74.222.119.13	72.235.131.35	58.187.97.184
58.181.61.45	46.62.190.6	42.2.255.137	41.234.57.115
2.125.175.186	227.223.186.4	2.50.33.230	1.53.172.117
222.85.110.46	16.17.132.213	203.191.150.32	33.129.223.26