必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): Kabul

省份(region): Kabul

国家(country): Afghanistan

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
IP 类型 评论内容 时间
103.42.162.30 attackbots
Sep  1 13:27:22 shivevps sshd[27916]: Bad protocol version identification '\024' from 103.42.162.30 port 50060
...
2020-09-02 03:57:47
103.42.124.205 attackspam
Honeypot attack, port: 81, PTR: PTR record not found
2020-06-22 01:05:47
103.42.172.167 attackspambots
firewall-block, port(s): 445/tcp
2020-05-04 00:46:12
103.42.172.167 attackspam
Unauthorized connection attempt from IP address 103.42.172.167 on Port 445(SMB)
2020-04-24 22:14:10
103.42.115.118 attack
Wed, 25 Mar 2020 02:48:26 -0400 Received: from traffic-manage.photon-5.eth01.trafficpollutioncontrol.online ([103.42.115.118]:2625) From: "Tech Smart Card"  India Multi-function Universal Smart Adapter Card box spam
2020-03-26 14:36:58
103.42.158.73 attack
Mar  1 14:16:53 debian-2gb-nbg1-2 kernel: \[5327800.230257\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=103.42.158.73 DST=195.201.40.59 LEN=44 TOS=0x00 PREC=0x20 TTL=44 ID=42309 PROTO=TCP SPT=52104 DPT=23 WINDOW=53392 RES=0x00 SYN URGP=0
2020-03-02 05:07:17
103.42.172.167 attack
20/2/21@23:45:21: FAIL: Alarm-Intrusion address from=103.42.172.167
...
2020-02-22 19:11:22
103.42.16.254 attack
Host Scan
2019-12-26 17:28:24
103.42.173.80 attackspam
Attempt to attack host OS, exploiting network vulnerabilities, on 19-12-2019 15:05:15.
2019-12-20 02:36:48
103.42.127.35 attackspam
1576252666 - 12/13/2019 16:57:46 Host: 103.42.127.35/103.42.127.35 Port: 445 TCP Blocked
2019-12-14 01:44:07
103.42.127.223 attackbots
2019-12-04T07:28:34.5313711240 sshd\[29848\]: Invalid user avanthi from 103.42.127.223 port 61951
2019-12-04T07:28:40.5487051240 sshd\[29848\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.42.127.223
2019-12-04T07:28:42.2632631240 sshd\[29848\]: Failed password for invalid user avanthi from 103.42.127.223 port 61951 ssh2
...
2019-12-04 16:39:18
103.42.126.254 attack
Automatic report - Banned IP Access
2019-10-25 21:31:40
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 103.42.1.121
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 38868
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;103.42.1.121.			IN	A

;; AUTHORITY SECTION:
.			599	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030800 1800 900 604800 86400

;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Mar 08 13:54:47 CST 2022
;; MSG SIZE  rcvd: 105
HOST信息:
121.1.42.103.in-addr.arpa domain name pointer 103-42-1-121-awcc-mobility-customer.as38742.net.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
121.1.42.103.in-addr.arpa	name = 103-42-1-121-awcc-mobility-customer.as38742.net.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
102.89.2.186 attack
1588507600 - 05/03/2020 14:06:40 Host: 102.89.2.186/102.89.2.186 Port: 445 TCP Blocked
2020-05-04 03:08:15
138.197.5.191 attackspam
$f2bV_matches
2020-05-04 02:41:09
89.134.126.89 attack
Fail2Ban Ban Triggered
2020-05-04 02:43:32
106.52.200.132 attack
May  2 22:58:37 our-server-hostname sshd[4296]: Invalid user down from 106.52.200.132
May  2 22:58:37 our-server-hostname sshd[4296]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.200.132 
May  2 22:58:39 our-server-hostname sshd[4296]: Failed password for invalid user down from 106.52.200.132 port 54892 ssh2
May  2 23:15:08 our-server-hostname sshd[7033]: Invalid user alusero from 106.52.200.132
May  2 23:15:08 our-server-hostname sshd[7033]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.200.132 
May  2 23:15:09 our-server-hostname sshd[7033]: Failed password for invalid user alusero from 106.52.200.132 port 54842 ssh2
May  2 23:18:34 our-server-hostname sshd[7595]: Invalid user unhostnameek from 106.52.200.132
May  2 23:18:34 our-server-hostname sshd[7595]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.200.132 


........
-----------------------------------------
2020-05-04 03:06:10
144.217.19.8 attackbots
SSH/22 MH Probe, BF, Hack -
2020-05-04 02:48:25
203.66.168.81 attackbotsspam
SSH_attack
2020-05-04 03:05:29
54.89.247.215 attackspambots
May  2 06:13:10 cumulus sshd[7491]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.89.247.215  user=r.r
May  2 06:13:12 cumulus sshd[7491]: Failed password for r.r from 54.89.247.215 port 42488 ssh2
May  2 06:13:12 cumulus sshd[7491]: Received disconnect from 54.89.247.215 port 42488:11: Bye Bye [preauth]
May  2 06:13:12 cumulus sshd[7491]: Disconnected from 54.89.247.215 port 42488 [preauth]
May  2 06:21:49 cumulus sshd[7932]: Invalid user influxdb from 54.89.247.215 port 35458
May  2 06:21:49 cumulus sshd[7932]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.89.247.215
May  2 06:21:51 cumulus sshd[7932]: Failed password for invalid user influxdb from 54.89.247.215 port 35458 ssh2
May  2 06:21:51 cumulus sshd[7932]: Received disconnect from 54.89.247.215 port 35458:11: Bye Bye [preauth]
May  2 06:21:51 cumulus sshd[7932]: Disconnected from 54.89.247.215 port 35458 [preauth]


........
-------------------------------------
2020-05-04 03:02:02
122.114.31.35 attackspam
(smtpauth) Failed SMTP AUTH login from 122.114.31.35 (CN/China/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-05-03 16:36:23 login authenticator failed for (ADMIN) [122.114.31.35]: 535 Incorrect authentication data (set_id=sales@www.allasdairy.com)
2020-05-04 03:14:07
222.186.30.112 attackspam
May  3 21:10:44 vps sshd[850463]: Failed password for root from 222.186.30.112 port 32071 ssh2
May  3 21:10:46 vps sshd[850463]: Failed password for root from 222.186.30.112 port 32071 ssh2
May  3 21:10:47 vps sshd[851061]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.112  user=root
May  3 21:10:50 vps sshd[851061]: Failed password for root from 222.186.30.112 port 15465 ssh2
May  3 21:10:51 vps sshd[851061]: Failed password for root from 222.186.30.112 port 15465 ssh2
...
2020-05-04 03:13:40
5.39.88.60 attackspam
May  3 11:19:00 mockhub sshd[8656]: Failed password for root from 5.39.88.60 port 33212 ssh2
May  3 11:25:11 mockhub sshd[8927]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.39.88.60
...
2020-05-04 02:38:43
106.13.56.204 attack
May  2 05:12:26 cumulus sshd[3894]: Invalid user zym from 106.13.56.204 port 39782
May  2 05:12:26 cumulus sshd[3894]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.56.204
May  2 05:12:28 cumulus sshd[3894]: Failed password for invalid user zym from 106.13.56.204 port 39782 ssh2
May  2 05:12:28 cumulus sshd[3894]: Received disconnect from 106.13.56.204 port 39782:11: Bye Bye [preauth]
May  2 05:12:28 cumulus sshd[3894]: Disconnected from 106.13.56.204 port 39782 [preauth]
May  2 05:30:17 cumulus sshd[5008]: Invalid user bcs from 106.13.56.204 port 50808
May  2 05:30:17 cumulus sshd[5008]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.56.204
May  2 05:30:18 cumulus sshd[5008]: Failed password for invalid user bcs from 106.13.56.204 port 50808 ssh2
May  2 05:30:18 cumulus sshd[5008]: Received disconnect from 106.13.56.204 port 50808:11: Bye Bye [preauth]
May  2 05:30:18 cumul........
-------------------------------
2020-05-04 02:46:23
45.119.41.26 attackbots
1 attempts against mh-modsecurity-ban on float
2020-05-04 02:37:19
177.220.178.232 attackspambots
5x Failed Password
2020-05-04 02:58:11
201.0.24.85 attack
" "
2020-05-04 03:14:55
114.161.176.220 attackspam
20/5/3@08:06:47: FAIL: Alarm-Network address from=114.161.176.220
20/5/3@08:06:47: FAIL: Alarm-Network address from=114.161.176.220
...
2020-05-04 02:58:39

最近上报的IP列表

103.41.65.187 103.42.111.109 103.42.111.119 103.42.111.126
103.42.159.0 103.42.180.224 103.42.182.46 103.42.196.196
103.42.225.39 103.42.56.8 103.43.118.76 218.103.137.33
103.43.172.50 103.43.190.195 103.43.44.235 136.31.138.201
103.43.71.230 103.43.79.193 103.44.1.228 103.44.119.250