103.140.30.208

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Pakistan

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

类型

评论内容

时间

103.140.30.173

attack

This IP tried to hack my protonmail account.. 
Login failure (password) 	103.140.30.173 	May 15, 2021 3:39:04 PM

This year’s failed hack attempts to my protonmail account..  I think it's all China cyber-warfare...
	209.234.253.61        Jan 14, 2021 9:03:05 AM
        69.241.4.90              Jan 17, 2021 9:12:18 PM 
	83.171.114.92 	Jan 21, 2021 1:37:10 PM
 	45.164.248.46 	Jan 24, 2021 2:41:05 PM
	116.58.247.37 	Jan 26, 2021 7:20:20 PM
	187.180.249.117 	Jan 28, 2021 9:59:15 AM
	  186.219.3.5 	        Feb 8, 2021 9:50:14 PM
	177.200.70.81 	Feb 9, 2021 9:45:53 PM
	105.163.1.34 	        Feb 12, 2021 11:16:33 AM
       102.166.14.32           Feb 24, 2021 11:10:36 AM
 	27.54.182.124 	Mar 4, 2021 2:49:34 PM
        14.171.48.181          Mar 8, 2021 2:31:06 AM
	187.20.68.165 	Mar 10, 2021 3:36:32 PM
	177.128.198.125 	Mar 18, 2021 2:36:09 AM
        118.174.135.2          Mar 22, 2021 9:17:41 AM
 	78.27.74.67 	        Mar 23, 2021 7:44:05 
 	49.228.146.66 	Mar 26, 2021 11:47:21 PM
	117.55.243.82 	Mar 27, 2021 3:22:47 AM
	95.31.5.29 	        Mar 28, 2021 10:38:35 PM
	202.129.54.101 	Apr 1, 2021 4:20:02 AM
 	203.158.222.31 	Apr 2, 2021 7:32:56 PM
	201.63.126.161 	Apr 3, 2021 1:37:32 AM
 	112.133.243.109 	Apr 8, 2021 3:17:08 PM
 	212.58.103.232 	Apr 7, 2021 12:02:09 PM
 	123.252.135.82 	Apr 7, 2021 11:58:51 PM
	91.246.238.72 	Apr 12, 2021 3:19:15 AM
 	123.49.62.165 	Apr 13, 2021 6:32:20 PM
	123.25.207.15 	Apr 16, 2021 9:19:28 AM
        36.89.51.169 	        Apr 19, 2021 5:02:12 AM
 	103.140.30.173 	May 15, 2021 3:39:04 PM

2021-05-16 12:18:26

103.140.30.173

attackbotsspam

Dec 19 15:39:30 grey postfix/smtpd\[23251\]: NOQUEUE: reject: RCPT from unknown\[103.140.30.173\]: 554 5.7.1 Service unavailable\; Client host \[103.140.30.173\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[103.140.30.173\]\; from=\ to=\ proto=ESMTP helo=\<\[103.140.30.173\]\>
...

2019-12-19 22:58:04

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 103.140.30.208
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 56932
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;103.140.30.208.			IN	A

;; AUTHORITY SECTION:
.			179	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022400 1800 900 604800 86400

;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 25 01:21:54 CST 2022
;; MSG SIZE  rcvd: 107

HOST信息:

Host 208.30.140.103.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 208.30.140.103.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
187.72.119.177	attackspam	Honeypot attack, port: 445, PTR: correio.hsadv.com.br.	2020-02-10 07:07:07
179.127.193.166	attack	firewall-block, port(s): 445/tcp	2020-02-10 07:35:03
222.186.30.248	attackbotsspam	09.02.2020 23:11:58 SSH access blocked by firewall	2020-02-10 07:14:27
51.79.87.90	attackbotsspam	Automatic report - Banned IP Access	2020-02-10 07:04:17
113.53.93.198	attackbots	DATE:2020-02-09 23:07:24, IP:113.53.93.198, PORT:telnet Telnet brute force auth on honeypot server (epe-honey1-hq)	2020-02-10 07:00:36
218.92.0.191	attack	Feb 10 00:25:53 dcd-gentoo sshd[24098]: User root from 218.92.0.191 not allowed because none of user's groups are listed in AllowGroups Feb 10 00:25:55 dcd-gentoo sshd[24098]: error: PAM: Authentication failure for illegal user root from 218.92.0.191 Feb 10 00:25:53 dcd-gentoo sshd[24098]: User root from 218.92.0.191 not allowed because none of user's groups are listed in AllowGroups Feb 10 00:25:55 dcd-gentoo sshd[24098]: error: PAM: Authentication failure for illegal user root from 218.92.0.191 Feb 10 00:25:53 dcd-gentoo sshd[24098]: User root from 218.92.0.191 not allowed because none of user's groups are listed in AllowGroups Feb 10 00:25:55 dcd-gentoo sshd[24098]: error: PAM: Authentication failure for illegal user root from 218.92.0.191 Feb 10 00:25:55 dcd-gentoo sshd[24098]: Failed keyboard-interactive/pam for invalid user root from 218.92.0.191 port 49209 ssh2 ...	2020-02-10 07:38:54
170.231.198.27	attackbots	Honeypot attack, port: 81, PTR: 27.198.231.170.qualitynet.net.br.	2020-02-10 07:08:28
134.175.226.151	attack	Feb 9 13:16:23 web9 sshd\[23572\]: Invalid user aso from 134.175.226.151 Feb 9 13:16:23 web9 sshd\[23572\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.226.151 Feb 9 13:16:24 web9 sshd\[23572\]: Failed password for invalid user aso from 134.175.226.151 port 47168 ssh2 Feb 9 13:19:50 web9 sshd\[24156\]: Invalid user hux from 134.175.226.151 Feb 9 13:19:50 web9 sshd\[24156\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.226.151	2020-02-10 07:23:16
191.47.10.134	attackspambots	Feb 5 01:26:46 neweola sshd[25517]: Invalid user makarucheva from 191.47.10.134 port 51033 Feb 5 01:26:46 neweola sshd[25517]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.47.10.134 Feb 5 01:26:49 neweola sshd[25517]: Failed password for invalid user makarucheva from 191.47.10.134 port 51033 ssh2 Feb 5 01:26:49 neweola sshd[25517]: Received disconnect from 191.47.10.134 port 51033:11: Bye Bye [preauth] Feb 5 01:26:49 neweola sshd[25517]: Disconnected from invalid user makarucheva 191.47.10.134 port 51033 [preauth] Feb 5 01:49:24 neweola sshd[26652]: Invalid user ftpuser from 191.47.10.134 port 52190 Feb 5 01:49:24 neweola sshd[26652]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.47.10.134 Feb 5 01:49:26 neweola sshd[26652]: Failed password for invalid user ftpuser from 191.47.10.134 port 52190 ssh2 Feb 5 01:49:27 neweola sshd[26652]: Received disconnect from 191.47.1........ -------------------------------	2020-02-10 07:18:46
36.67.149.5	attackspam	Honeypot attack, port: 445, PTR: PTR record not found	2020-02-10 07:19:58
185.253.180.96	attackspambots	[portscan] Port scan	2020-02-10 07:27:13
61.35.152.114	attackbotsspam	Feb 9 22:58:01 web8 sshd\[16884\]: Invalid user sfp from 61.35.152.114 Feb 9 22:58:01 web8 sshd\[16884\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.35.152.114 Feb 9 22:58:03 web8 sshd\[16884\]: Failed password for invalid user sfp from 61.35.152.114 port 44110 ssh2 Feb 9 23:01:53 web8 sshd\[19036\]: Invalid user oiw from 61.35.152.114 Feb 9 23:01:53 web8 sshd\[19036\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.35.152.114	2020-02-10 07:17:12
141.98.80.173	attackspambots	Failed password for admin from 141.98.80.173 port 22929 ssh2	2020-02-10 06:59:14
140.143.241.251	attackspam	Automatic report - Banned IP Access	2020-02-10 07:07:59
139.198.190.182	attackbots	Feb 4 22:53:11 archiv sshd[29278]: Invalid user aaa from 139.198.190.182 port 54830 Feb 4 22:53:11 archiv sshd[29278]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.198.190.182 Feb 4 22:53:13 archiv sshd[29278]: Failed password for invalid user aaa from 139.198.190.182 port 54830 ssh2 Feb 4 22:53:13 archiv sshd[29278]: Received disconnect from 139.198.190.182 port 54830:11: Bye Bye [preauth] Feb 4 22:53:13 archiv sshd[29278]: Disconnected from 139.198.190.182 port 54830 [preauth] Feb 4 22:58:41 archiv sshd[29354]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.198.190.182 user=r.r Feb 4 22:58:43 archiv sshd[29354]: Failed password for r.r from 139.198.190.182 port 44118 ssh2 Feb 4 22:58:44 archiv sshd[29354]: Received disconnect from 139.198.190.182 port 44118:11: Bye Bye [preauth] Feb 4 22:58:44 archiv sshd[29354]: Disconnected from 139.198.190.182 port 44118 [preauth] ........ -------------------------------	2020-02-10 07:08:49

最近上报的IP列表

103.140.248.48	103.140.38.108	103.140.86.0	103.141.136.107
103.141.136.99	103.141.238.34	103.141.60.54	103.141.96.10
103.141.96.102	103.141.96.103	103.141.96.105	103.141.96.115
103.141.96.121	103.141.96.153	103.141.96.155	103.235.182.36
103.141.96.156	103.141.96.161	103.141.96.17	103.141.96.19