103.199.2.200 - IPInfo

基本信息:

城市(city): Tangerang

省份(region): Banten

国家(country): Indonesia

运营商(isp): PT. Aristi Jasadata

主机名(hostname): unknown

机构(organization): PT. Aristi Jasadata

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspam	Automatic report - Banned IP Access	2019-08-01 02:16:15

相同子网IP讨论:

IP	类型	评论内容	时间
103.199.22.248	attackspambots	Unauthorized connection attempt from IP address 103.199.22.248 on Port 445(SMB)	2020-03-28 08:30:01
103.199.27.110	attackbotsspam	Dec 2 08:54:40 flomail dovecot: imap-login: Disconnected (auth failed, 1 attempts in 74 secs): user=, method=PLAIN, rip=103.199.27.110, lip=10.140.194.78, TLS: Disconnected, session= Dec 2 08:54:40 flomail dovecot: imap-login: Disconnected (auth failed, 1 attempts in 8 secs): user=, method=PLAIN, rip=103.199.27.110, lip=10.140.194.78, TLS: Disconnected, session=<8XhjurSYWQBnxxtu> Dec 2 08:54:40 flomail dovecot: imap-login: Disconnected (auth failed, 1 attempts in 39 secs): user=, method=PLAIN, rip=103.199.27.110, lip=10.140.194.78, TLS: Disconnected, session=	2019-12-02 18:00:06
103.199.232.105	attack	Telnetd brute force attack detected by fail2ban	2019-10-06 17:41:55
103.199.27.178	attackspam	Sun, 21 Jul 2019 07:35:37 +0000 likely compromised host or open proxy. ddos rate spidering	2019-07-22 00:34:28
103.199.27.30	attackbotsspam	@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-08 08:14:04,633 INFO [amun_request_handler] PortScan Detected on Port: 445 (103.199.27.30)	2019-07-08 21:43:49

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 103.199.2.200
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 14148
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;103.199.2.200.			IN	A

;; AUTHORITY SECTION:
.			3209	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019073101 1800 900 604800 86400

;; Query time: 1 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Thu Aug 01 02:16:08 CST 2019
;; MSG SIZE  rcvd: 117

HOST信息:

Host 200.2.199.103.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 200.2.199.103.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
51.91.212.80	attack	(eximsyntax) Exim syntax errors from 51.91.212.80 (FR/France/-/-/ns3156300.ip-51-91-212.eu/[AS16276 OVH SAS]): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-06-21 04:44:18 SMTP call from ns3156300.ip-51-91-212.eu [51.91.212.80]:46920 dropped: too many syntax or protocol errors (last command was "?\005?/?5\300\022?")	2020-06-21 12:48:40
106.12.183.6	attackspam	5x Failed Password	2020-06-21 12:53:08
133.130.113.207	attackbotsspam	Jun 21 07:17:45 pkdns2 sshd\[35973\]: Invalid user qswang from 133.130.113.207Jun 21 07:17:48 pkdns2 sshd\[35973\]: Failed password for invalid user qswang from 133.130.113.207 port 47606 ssh2Jun 21 07:21:30 pkdns2 sshd\[36137\]: Invalid user telegram from 133.130.113.207Jun 21 07:21:33 pkdns2 sshd\[36137\]: Failed password for invalid user telegram from 133.130.113.207 port 48846 ssh2Jun 21 07:25:12 pkdns2 sshd\[36296\]: Invalid user trainee from 133.130.113.207Jun 21 07:25:14 pkdns2 sshd\[36296\]: Failed password for invalid user trainee from 133.130.113.207 port 50088 ssh2 ...	2020-06-21 12:44:10
114.112.96.30	attackspambots	2020-06-21T05:58:16.063129+02:00 sshd[26970]: Failed password for invalid user deployer from 114.112.96.30 port 40647 ssh2	2020-06-21 12:39:16
116.203.25.19	attack	Jun 21 09:55:34 dhoomketu sshd[926092]: Invalid user ankesh from 116.203.25.19 port 52670 Jun 21 09:55:34 dhoomketu sshd[926092]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.203.25.19 Jun 21 09:55:34 dhoomketu sshd[926092]: Invalid user ankesh from 116.203.25.19 port 52670 Jun 21 09:55:36 dhoomketu sshd[926092]: Failed password for invalid user ankesh from 116.203.25.19 port 52670 ssh2 Jun 21 09:58:57 dhoomketu sshd[926141]: Invalid user docker from 116.203.25.19 port 55032 ...	2020-06-21 12:42:06
74.208.24.85	attack	Jun 21 05:55:57 meumeu sshd[1069619]: Invalid user ec2 from 74.208.24.85 port 37778 Jun 21 05:55:57 meumeu sshd[1069619]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=74.208.24.85 Jun 21 05:55:57 meumeu sshd[1069619]: Invalid user ec2 from 74.208.24.85 port 37778 Jun 21 05:55:59 meumeu sshd[1069619]: Failed password for invalid user ec2 from 74.208.24.85 port 37778 ssh2 Jun 21 05:57:24 meumeu sshd[1069680]: Invalid user discord from 74.208.24.85 port 33340 Jun 21 05:57:24 meumeu sshd[1069680]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=74.208.24.85 Jun 21 05:57:24 meumeu sshd[1069680]: Invalid user discord from 74.208.24.85 port 33340 Jun 21 05:57:25 meumeu sshd[1069680]: Failed password for invalid user discord from 74.208.24.85 port 33340 ssh2 Jun 21 05:58:49 meumeu sshd[1069749]: Invalid user kimhuang from 74.208.24.85 port 57132 ...	2020-06-21 12:55:15
222.186.175.169	attack	Jun 21 11:26:35 itv-usvr-02 sshd[3399]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.169 user=root Jun 21 11:26:38 itv-usvr-02 sshd[3399]: Failed password for root from 222.186.175.169 port 12688 ssh2 Jun 21 11:26:52 itv-usvr-02 sshd[3399]: error: maximum authentication attempts exceeded for root from 222.186.175.169 port 12688 ssh2 [preauth] Jun 21 11:26:35 itv-usvr-02 sshd[3399]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.169 user=root Jun 21 11:26:38 itv-usvr-02 sshd[3399]: Failed password for root from 222.186.175.169 port 12688 ssh2 Jun 21 11:26:52 itv-usvr-02 sshd[3399]: error: maximum authentication attempts exceeded for root from 222.186.175.169 port 12688 ssh2 [preauth]	2020-06-21 12:27:21
45.14.150.52	attackbotsspam	Jun 21 05:49:49 minden010 sshd[16053]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.150.52 Jun 21 05:49:51 minden010 sshd[16053]: Failed password for invalid user admin from 45.14.150.52 port 52266 ssh2 Jun 21 05:57:09 minden010 sshd[19236]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.150.52 ...	2020-06-21 12:53:37
159.203.17.176	attackspam	Invalid user ff from 159.203.17.176 port 55887	2020-06-21 12:29:24
114.232.109.50	attackspambots	05:48:19.218 1 SMTPI-011130([114.232.109.50]) failed to open 'reply'. Connection from [114.232.109.50]:1080. Error Code=unknown user account 05:48:44.227 1 SMTPI-011132([114.232.109.50]) failed to open 'reply'. Connection from [114.232.109.50]:1985. Error Code=unknown user account ...	2020-06-21 12:55:41
188.166.244.121	attackbots	2020-06-21T04:37:53.403320shield sshd\[30994\]: Invalid user satu from 188.166.244.121 port 52739 2020-06-21T04:37:53.406678shield sshd\[30994\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.244.121 2020-06-21T04:37:55.643763shield sshd\[30994\]: Failed password for invalid user satu from 188.166.244.121 port 52739 ssh2 2020-06-21T04:41:30.473474shield sshd\[31337\]: Invalid user admin from 188.166.244.121 port 44993 2020-06-21T04:41:30.477106shield sshd\[31337\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.244.121	2020-06-21 12:46:55
111.230.226.124	attack	Jun 21 05:58:28 OPSO sshd\[22606\]: Invalid user gmodserver1 from 111.230.226.124 port 37312 Jun 21 05:58:28 OPSO sshd\[22606\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.230.226.124 Jun 21 05:58:30 OPSO sshd\[22606\]: Failed password for invalid user gmodserver1 from 111.230.226.124 port 37312 ssh2 Jun 21 05:59:11 OPSO sshd\[22767\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.230.226.124 user=root Jun 21 05:59:13 OPSO sshd\[22767\]: Failed password for root from 111.230.226.124 port 44536 ssh2	2020-06-21 12:32:11
58.67.145.201	attackbots	Port probing on unauthorized port 1433	2020-06-21 13:01:15
167.71.201.107	attack	Jun 21 06:24:02 eventyay sshd[27310]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.201.107 Jun 21 06:24:03 eventyay sshd[27310]: Failed password for invalid user admin from 167.71.201.107 port 20815 ssh2 Jun 21 06:27:41 eventyay sshd[27565]: Failed password for root from 167.71.201.107 port 13118 ssh2 ...	2020-06-21 12:57:47
138.99.6.184	attackspam	Jun 21 06:51:41 srv-ubuntu-dev3 sshd[47158]: Invalid user sftptest from 138.99.6.184 Jun 21 06:51:41 srv-ubuntu-dev3 sshd[47158]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.99.6.184 Jun 21 06:51:41 srv-ubuntu-dev3 sshd[47158]: Invalid user sftptest from 138.99.6.184 Jun 21 06:51:43 srv-ubuntu-dev3 sshd[47158]: Failed password for invalid user sftptest from 138.99.6.184 port 34372 ssh2 Jun 21 06:55:42 srv-ubuntu-dev3 sshd[47864]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.99.6.184 user=root Jun 21 06:55:44 srv-ubuntu-dev3 sshd[47864]: Failed password for root from 138.99.6.184 port 34234 ssh2 Jun 21 06:59:39 srv-ubuntu-dev3 sshd[48460]: Invalid user cdr from 138.99.6.184 Jun 21 06:59:39 srv-ubuntu-dev3 sshd[48460]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.99.6.184 Jun 21 06:59:39 srv-ubuntu-dev3 sshd[48460]: Invalid user cdr from 138.99.6. ...	2020-06-21 13:11:00

最近上报的IP列表

111.144.119.239	76.183.147.225	12.143.199.170	36.82.99.86
14.76.119.147	44.186.152.217	4.203.17.102	112.178.14.211
67.201.76.64	131.57.55.7	210.231.202.120	173.49.9.175
43.211.252.232	52.85.165.48	92.41.205.189	181.40.88.114
125.198.53.12	163.185.221.18	183.153.116.85	129.52.107.6