103.140.30.172

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Pakistan

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

类型

评论内容

时间

103.140.30.173

attack

This IP tried to hack my protonmail account.. 
Login failure (password) 	103.140.30.173 	May 15, 2021 3:39:04 PM

This year’s failed hack attempts to my protonmail account..  I think it's all China cyber-warfare...
	209.234.253.61        Jan 14, 2021 9:03:05 AM
        69.241.4.90              Jan 17, 2021 9:12:18 PM 
	83.171.114.92 	Jan 21, 2021 1:37:10 PM
 	45.164.248.46 	Jan 24, 2021 2:41:05 PM
	116.58.247.37 	Jan 26, 2021 7:20:20 PM
	187.180.249.117 	Jan 28, 2021 9:59:15 AM
	  186.219.3.5 	        Feb 8, 2021 9:50:14 PM
	177.200.70.81 	Feb 9, 2021 9:45:53 PM
	105.163.1.34 	        Feb 12, 2021 11:16:33 AM
       102.166.14.32           Feb 24, 2021 11:10:36 AM
 	27.54.182.124 	Mar 4, 2021 2:49:34 PM
        14.171.48.181          Mar 8, 2021 2:31:06 AM
	187.20.68.165 	Mar 10, 2021 3:36:32 PM
	177.128.198.125 	Mar 18, 2021 2:36:09 AM
        118.174.135.2          Mar 22, 2021 9:17:41 AM
 	78.27.74.67 	        Mar 23, 2021 7:44:05 
 	49.228.146.66 	Mar 26, 2021 11:47:21 PM
	117.55.243.82 	Mar 27, 2021 3:22:47 AM
	95.31.5.29 	        Mar 28, 2021 10:38:35 PM
	202.129.54.101 	Apr 1, 2021 4:20:02 AM
 	203.158.222.31 	Apr 2, 2021 7:32:56 PM
	201.63.126.161 	Apr 3, 2021 1:37:32 AM
 	112.133.243.109 	Apr 8, 2021 3:17:08 PM
 	212.58.103.232 	Apr 7, 2021 12:02:09 PM
 	123.252.135.82 	Apr 7, 2021 11:58:51 PM
	91.246.238.72 	Apr 12, 2021 3:19:15 AM
 	123.49.62.165 	Apr 13, 2021 6:32:20 PM
	123.25.207.15 	Apr 16, 2021 9:19:28 AM
        36.89.51.169 	        Apr 19, 2021 5:02:12 AM
 	103.140.30.173 	May 15, 2021 3:39:04 PM

2021-05-16 12:18:26

103.140.30.173

attackbotsspam

Dec 19 15:39:30 grey postfix/smtpd\[23251\]: NOQUEUE: reject: RCPT from unknown\[103.140.30.173\]: 554 5.7.1 Service unavailable\; Client host \[103.140.30.173\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[103.140.30.173\]\; from=\ to=\ proto=ESMTP helo=\<\[103.140.30.173\]\>
...

2019-12-19 22:58:04

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 103.140.30.172
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 42194
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;103.140.30.172.			IN	A

;; AUTHORITY SECTION:
.			552	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022011000 1800 900 604800 86400

;; Query time: 19 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jan 11 00:30:39 CST 2022
;; MSG SIZE  rcvd: 107

HOST信息:

Host 172.30.140.103.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 172.30.140.103.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
2001:bc8:6005:131:208:a2ff:fe0c:5dac	attack	2001:bc8:6005:131:208:a2ff:fe0c:5dac - - [09/Jul/2020:04:52:30 +0100] "POST /wp-login.php HTTP/1.1" 200 2433 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 2001:bc8:6005:131:208:a2ff:fe0c:5dac - - [09/Jul/2020:04:52:30 +0100] "POST /wp-login.php HTTP/1.1" 200 2390 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 2001:bc8:6005:131:208:a2ff:fe0c:5dac - - [09/Jul/2020:04:52:31 +0100] "POST /wp-login.php HTTP/1.1" 200 2438 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-07-09 17:44:09
78.187.157.154	attack	Honeypot attack, port: 445, PTR: 78.187.157.154.dynamic.ttnet.com.tr.	2020-07-09 18:05:21
194.26.29.25	attack	Jul 9 08:55:15 debian-2gb-nbg1-2 kernel: \[16536310.677597\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=194.26.29.25 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=8128 PROTO=TCP SPT=51622 DPT=877 WINDOW=1024 RES=0x00 SYN URGP=0	2020-07-09 17:58:16
192.241.128.214	attackbots	prod11 ...	2020-07-09 17:42:58
34.218.50.149	attackbotsspam	Unauthorized connection attempt detected from IP address 34.218.50.149 to port 443	2020-07-09 18:00:16
27.79.132.141	attackbots	Honeypot attack, port: 445, PTR: localhost.	2020-07-09 17:58:00
123.27.255.143	attack	Unauthorized connection attempt from IP address 123.27.255.143 on Port 445(SMB)	2020-07-09 18:02:11
150.129.8.16	attackspam	php WP PHPmyadamin ABUSE blocked for 12h	2020-07-09 18:06:47
165.227.140.245	attackbotsspam	Jul 9 09:20:10 scw-6657dc sshd[1716]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.140.245 Jul 9 09:20:10 scw-6657dc sshd[1716]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.140.245 Jul 9 09:20:13 scw-6657dc sshd[1716]: Failed password for invalid user hitosuga from 165.227.140.245 port 58095 ssh2 ...	2020-07-09 18:00:59
175.202.196.145	attack	Automatic report - Port Scan Attack	2020-07-09 17:56:05
91.134.248.230	attackspam	Automatic report - XMLRPC Attack	2020-07-09 17:45:17
5.135.143.224	attack	"Restricted File Access Attempt - Matched Data: /webpack.config.js found within REQUEST_FILENAME: /wp-content/plugins/angwp/webpack.config.js"	2020-07-09 17:37:48
171.220.243.128	attack	TCP ports : 4555 / 28757	2020-07-09 18:12:16
199.249.230.107	attackspambots	php WP PHPmyadamin ABUSE blocked for 12h	2020-07-09 18:00:29
129.204.245.6	attack	Unauthorized access to SSH at 9/Jul/2020:09:40:16 +0000.	2020-07-09 17:58:44

最近上报的IP列表

141.1.79.65	182.253.99.170	140.218.82.146	104.145.3.230
109.19.193.77	140.29.46.126	1.195.131.162	109.79.120.33
140.90.173.68	15.203.235.130	105.68.175.41	0.209.99.122
235.96.39.18	100.249.195.120	119.90.163.251	24.43.222.14
139.105.196.170	123.103.239.202	117.236.250.225	234.113.92.7