103.140.2.42 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): India

运营商(isp): Angel Air Network Solutions Pvt. Ltd.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Port scan detected on ports: 8291[TCP], 8291[TCP], 8728[TCP]	2020-05-15 14:39:49

相同子网IP讨论:

IP	类型	评论内容	时间
103.140.250.156	attack	Oct 3 20:14:50 ssh2 sshd[79198]: Failed password for invalid user admin from 103.140.250.156 port 62073 ssh2 Oct 3 20:14:51 ssh2 sshd[79198]: error: Received disconnect from 103.140.250.156 port 62073:3: com.jcraft.jsch.JSchException: Auth fail [preauth] Oct 3 20:14:51 ssh2 sshd[79198]: Disconnected from invalid user admin 103.140.250.156 port 62073 [preauth] ...	2020-10-04 05:43:36
103.140.250.156	attackbots	Invalid user admin from 103.140.250.156 port 50499	2020-10-03 13:25:41
103.140.250.154	attack	s1.hscode.pl - SSH Attack	2020-09-22 01:08:46
103.140.250.154	attackspambots	Scanned 15 times in the last 24 hours on port 22	2020-09-21 16:49:27
103.140.231.252	attackspambots	Attempted connection to port 445.	2020-09-02 23:59:52
103.140.231.252	attackspambots	Attempted connection to port 445.	2020-09-02 15:31:20
103.140.231.252	attackbotsspam	Attempted connection to port 445.	2020-09-02 08:36:22
103.140.227.104	attackbotsspam	Port Scan ...	2020-08-14 07:20:55
103.140.250.211	attackspam	Excessive crawling : exceed crawl-delay defined in robots.txt	2020-07-28 13:51:58
103.140.250.133	attackspam	TCP src-port=55858 dst-port=25 Listed on abuseat-org barracuda zen-spamhaus (Project Honey Pot rated Suspicious) (91)	2020-07-15 01:21:10
103.140.251.190	attackbots	Jun 5 11:47:01 debian kernel: [249383.292222] [UFW BLOCK] IN=eth0 OUT= MAC=52:54:00:be:e4:65:08:e8:4f:6e:48:0c:08:00 SRC=103.140.251.190 DST=89.252.131.35 LEN=40 TOS=0x00 PREC=0x00 TTL=236 ID=14268 PROTO=TCP SPT=57471 DPT=331 WINDOW=1024 RES=0x00 SYN URGP=0	2020-06-05 17:16:44
103.140.229.40	attackspam	20/5/25@00:12:15: FAIL: Alarm-Network address from=103.140.229.40 ...	2020-05-25 15:33:41
103.140.250.161	attack	VN Vietnam - Failures: 5 smtpauth	2020-04-07 19:05:32
103.140.250.247	attackspambots	Unauthorized connection attempt from IP address 103.140.250.247 on Port 25(SMTP)	2020-04-01 07:12:39
103.140.238.187	attack	Automatic report BANNED IP	2020-03-17 15:34:57

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 103.140.2.42
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 44278
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;103.140.2.42.			IN	A

;; AUTHORITY SECTION:
.			460	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020051401 1800 900 604800 86400

;; Query time: 93 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri May 15 14:39:46 CST 2020
;; MSG SIZE  rcvd: 116

HOST信息:

Host 42.2.140.103.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 42.2.140.103.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
196.216.73.90	attackspambots	Sep 11 13:23:10 router sshd[26586]: Failed password for root from 196.216.73.90 port 17566 ssh2 Sep 11 13:33:00 router sshd[26655]: Failed password for root from 196.216.73.90 port 12481 ssh2 ...	2020-09-11 20:23:18
79.167.243.114	attackbots	Icarus honeypot on github	2020-09-11 20:20:22
211.199.95.106	attackspam	Sep 10 18:56:42 dev sshd\[24557\]: Invalid user guest from 211.199.95.106 port 33675 Sep 10 18:56:42 dev sshd\[24557\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.199.95.106 Sep 10 18:56:44 dev sshd\[24557\]: Failed password for invalid user guest from 211.199.95.106 port 33675 ssh2	2020-09-11 20:37:46
84.52.131.229	attackspam	Sep 10 18:58:32 * sshd[15179]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=84.52.131.229 Sep 10 18:58:34 * sshd[15179]: Failed password for invalid user admin from 84.52.131.229 port 52966 ssh2	2020-09-11 20:44:32
223.215.160.131	attackbots	TCP (SYN) 223.215.160.131:34930 -> port 23, len 40	2020-09-11 20:38:03
14.225.238.227	attack	Automatic report - Banned IP Access	2020-09-11 20:32:51
183.82.107.226	attackspam	20/9/10@12:58:35: FAIL: Alarm-Network address from=183.82.107.226 ...	2020-09-11 20:44:15
223.17.12.61	attack	Sep 10 18:58:30 * sshd[15134]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.17.12.61 Sep 10 18:58:32 * sshd[15134]: Failed password for invalid user admin from 223.17.12.61 port 57118 ssh2	2020-09-11 20:46:40
139.198.190.125	attackbotsspam	...	2020-09-11 20:30:05
193.35.51.21	attack	Sep 11 13:44:37 ns308116 postfix/smtpd[30383]: warning: unknown[193.35.51.21]: SASL LOGIN authentication failed: authentication failure Sep 11 13:44:37 ns308116 postfix/smtpd[30383]: warning: unknown[193.35.51.21]: SASL LOGIN authentication failed: authentication failure Sep 11 13:44:39 ns308116 postfix/smtpd[30383]: warning: unknown[193.35.51.21]: SASL LOGIN authentication failed: authentication failure Sep 11 13:44:39 ns308116 postfix/smtpd[30383]: warning: unknown[193.35.51.21]: SASL LOGIN authentication failed: authentication failure Sep 11 13:48:30 ns308116 postfix/smtpd[3033]: warning: unknown[193.35.51.21]: SASL LOGIN authentication failed: authentication failure Sep 11 13:48:30 ns308116 postfix/smtpd[3033]: warning: unknown[193.35.51.21]: SASL LOGIN authentication failed: authentication failure ...	2020-09-11 20:49:41
109.70.100.33	attackspam	CMS (WordPress or Joomla) login attempt.	2020-09-11 20:16:49
118.25.23.208	attackspam	Sep 11 12:51:53 Ubuntu-1404-trusty-64-minimal sshd\[1403\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.23.208 user=root Sep 11 12:51:55 Ubuntu-1404-trusty-64-minimal sshd\[1403\]: Failed password for root from 118.25.23.208 port 48042 ssh2 Sep 11 13:07:50 Ubuntu-1404-trusty-64-minimal sshd\[12925\]: Invalid user devops from 118.25.23.208 Sep 11 13:07:50 Ubuntu-1404-trusty-64-minimal sshd\[12925\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.23.208 Sep 11 13:07:52 Ubuntu-1404-trusty-64-minimal sshd\[12925\]: Failed password for invalid user devops from 118.25.23.208 port 38958 ssh2	2020-09-11 20:46:20
151.80.140.166	attackbots	Brute-force attempt banned	2020-09-11 20:24:00
128.199.159.222	attackspambots	Sep 11 12:08:58 game-panel sshd[18093]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.159.222 Sep 11 12:09:00 game-panel sshd[18093]: Failed password for invalid user nagios from 128.199.159.222 port 37450 ssh2 Sep 11 12:13:27 game-panel sshd[18360]: Failed password for root from 128.199.159.222 port 41310 ssh2	2020-09-11 20:24:16
89.187.168.168	attackbots	Malicious Traffic/Form Submission	2020-09-11 20:27:54

最近上报的IP列表

196.54.242.92	243.65.207.188	24.206.39.166	27.76.153.100
212.129.250.84	111.241.235.109	119.204.100.197	20.33.174.241
165.66.148.183	200.159.238.43	219.182.184.119	102.166.136.198
11.12.16.217	142.93.152.19	32.152.90.230	61.18.57.224
121.80.78.42	177.138.149.19	183.81.85.70	111.79.76.106