103.140.2.42 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): India

运营商(isp): Angel Air Network Solutions Pvt. Ltd.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Port scan detected on ports: 8291[TCP], 8291[TCP], 8728[TCP]	2020-05-15 14:39:49

相同子网IP讨论:

IP	类型	评论内容	时间
103.140.250.156	attack	Oct 3 20:14:50 ssh2 sshd[79198]: Failed password for invalid user admin from 103.140.250.156 port 62073 ssh2 Oct 3 20:14:51 ssh2 sshd[79198]: error: Received disconnect from 103.140.250.156 port 62073:3: com.jcraft.jsch.JSchException: Auth fail [preauth] Oct 3 20:14:51 ssh2 sshd[79198]: Disconnected from invalid user admin 103.140.250.156 port 62073 [preauth] ...	2020-10-04 05:43:36
103.140.250.156	attackbots	Invalid user admin from 103.140.250.156 port 50499	2020-10-03 13:25:41
103.140.250.154	attack	s1.hscode.pl - SSH Attack	2020-09-22 01:08:46
103.140.250.154	attackspambots	Scanned 15 times in the last 24 hours on port 22	2020-09-21 16:49:27
103.140.231.252	attackspambots	Attempted connection to port 445.	2020-09-02 23:59:52
103.140.231.252	attackspambots	Attempted connection to port 445.	2020-09-02 15:31:20
103.140.231.252	attackbotsspam	Attempted connection to port 445.	2020-09-02 08:36:22
103.140.227.104	attackbotsspam	Port Scan ...	2020-08-14 07:20:55
103.140.250.211	attackspam	Excessive crawling : exceed crawl-delay defined in robots.txt	2020-07-28 13:51:58
103.140.250.133	attackspam	TCP src-port=55858 dst-port=25 Listed on abuseat-org barracuda zen-spamhaus (Project Honey Pot rated Suspicious) (91)	2020-07-15 01:21:10
103.140.251.190	attackbots	Jun 5 11:47:01 debian kernel: [249383.292222] [UFW BLOCK] IN=eth0 OUT= MAC=52:54:00:be:e4:65:08:e8:4f:6e:48:0c:08:00 SRC=103.140.251.190 DST=89.252.131.35 LEN=40 TOS=0x00 PREC=0x00 TTL=236 ID=14268 PROTO=TCP SPT=57471 DPT=331 WINDOW=1024 RES=0x00 SYN URGP=0	2020-06-05 17:16:44
103.140.229.40	attackspam	20/5/25@00:12:15: FAIL: Alarm-Network address from=103.140.229.40 ...	2020-05-25 15:33:41
103.140.250.161	attack	VN Vietnam - Failures: 5 smtpauth	2020-04-07 19:05:32
103.140.250.247	attackspambots	Unauthorized connection attempt from IP address 103.140.250.247 on Port 25(SMTP)	2020-04-01 07:12:39
103.140.238.187	attack	Automatic report BANNED IP	2020-03-17 15:34:57

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 103.140.2.42
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 44278
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;103.140.2.42.			IN	A

;; AUTHORITY SECTION:
.			460	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020051401 1800 900 604800 86400

;; Query time: 93 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri May 15 14:39:46 CST 2020
;; MSG SIZE  rcvd: 116

HOST信息:

Host 42.2.140.103.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 42.2.140.103.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
45.95.168.148	attackbots	TCP (SYN) 45.95.168.148:37649 -> port 1883, len 44	2020-10-01 07:23:59
139.217.218.93	attackspambots	2020-10-01T00:02:02.085155mail.broermann.family sshd[18923]: Failed password for invalid user user from 139.217.218.93 port 48044 ssh2 2020-10-01T00:05:20.813676mail.broermann.family sshd[19219]: Invalid user john from 139.217.218.93 port 46360 2020-10-01T00:05:20.817254mail.broermann.family sshd[19219]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.217.218.93 2020-10-01T00:05:20.813676mail.broermann.family sshd[19219]: Invalid user john from 139.217.218.93 port 46360 2020-10-01T00:05:22.920725mail.broermann.family sshd[19219]: Failed password for invalid user john from 139.217.218.93 port 46360 ssh2 ...	2020-10-01 07:34:40
5.189.130.92	attackspambots	firewall-block, port(s): 5038/tcp	2020-10-01 07:25:14
192.241.153.102	attackbotsspam	SSH Invalid Login	2020-10-01 07:28:48
104.206.128.26	attackbotsspam	5060/tcp 1433/tcp 23/tcp... [2020-07-31/09-30]27pkt,8pt.(tcp),1pt.(udp)	2020-10-01 07:08:14
200.89.159.190	attack	Sep 30 22:34:44 pornomens sshd\[6901\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.89.159.190 user=root Sep 30 22:34:45 pornomens sshd\[6901\]: Failed password for root from 200.89.159.190 port 33374 ssh2 Sep 30 22:47:00 pornomens sshd\[7034\]: Invalid user dm from 200.89.159.190 port 42378 Sep 30 22:47:00 pornomens sshd\[7034\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.89.159.190 ...	2020-10-01 07:28:25
104.206.128.62	attackbotsspam	TCP (SYN) 104.206.128.62:53473 -> port 23, len 44	2020-10-01 07:39:25
103.219.112.31	attackbotsspam	ET CINS Active Threat Intelligence Poor Reputation IP group 90 - port: 229 proto: tcp cat: Misc Attackbytes: 60	2020-10-01 07:08:45
82.202.197.233	attackbots	ET CINS Active Threat Intelligence Poor Reputation IP group 70 - port: 50066 proto: tcp cat: Misc Attackbytes: 60	2020-10-01 07:15:14
92.63.197.74	attackbots	ET CINS Active Threat Intelligence Poor Reputation IP group 80 - port: 54000 proto: tcp cat: Misc Attackbytes: 60	2020-10-01 07:11:56
157.230.163.6	attackspam	Invalid user user from 157.230.163.6 port 36752	2020-10-01 07:33:33
45.129.33.9	attackbotsspam	TCP (SYN) 45.129.33.9:49123 -> port 13740, len 44	2020-10-01 07:23:33
180.76.181.47	attackbotsspam	Invalid user temp from 180.76.181.47 port 33976	2020-10-01 07:31:10
167.248.133.66	attackspambots	[N3.H3.VM3] Port Scanner Detected Blocked by UFW	2020-10-01 07:32:51
45.129.33.15	attackspam	[MK-Root1] Blocked by UFW	2020-10-01 07:22:56

最近上报的IP列表

196.54.242.92	243.65.207.188	24.206.39.166	27.76.153.100
212.129.250.84	111.241.235.109	119.204.100.197	20.33.174.241
165.66.148.183	200.159.238.43	219.182.184.119	102.166.136.198
11.12.16.217	142.93.152.19	32.152.90.230	61.18.57.224
121.80.78.42	177.138.149.19	183.81.85.70	111.79.76.106