103.48.82.69 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Vietnam

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
103.48.82.242	attackspam	Port scan on 8 port(s): 1010 2020 2222 3380 3399 3893 8888 9999	2020-05-21 05:06:31
103.48.82.20	attackbotsspam	May 8 11:52:10 home sshd[11094]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.48.82.20 May 8 11:52:12 home sshd[11094]: Failed password for invalid user gas from 103.48.82.20 port 41256 ssh2 May 8 11:56:05 home sshd[11574]: Failed password for root from 103.48.82.20 port 40792 ssh2 ...	2020-05-08 18:06:49
103.48.82.41	attackspam	POST /xmlrpc.php. Part of botnet attack -- 34 POST requests from 19 different IP addresses.	2019-12-27 00:31:42

类型

评论内容

时间

103.48.82.242

attackspam

Port scan on 8 port(s): 1010 2020 2222 3380 3399 3893 8888 9999

2020-05-21 05:06:31

103.48.82.20

attackbotsspam

May  8 11:52:10 home sshd[11094]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.48.82.20
May  8 11:52:12 home sshd[11094]: Failed password for invalid user gas from 103.48.82.20 port 41256 ssh2
May  8 11:56:05 home sshd[11574]: Failed password for root from 103.48.82.20 port 40792 ssh2
...

2020-05-08 18:06:49

103.48.82.41

attackspam

POST /xmlrpc.php.  Part of botnet attack -- 34 POST requests from 19 different IP addresses.

2019-12-27 00:31:42

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 103.48.82.69
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 3596
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;103.48.82.69.			IN	A

;; AUTHORITY SECTION:
.			432	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030800 1800 900 604800 86400

;; Query time: 73 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Mar 08 13:57:55 CST 2022
;; MSG SIZE  rcvd: 105

HOST信息:

69.82.48.103.in-addr.arpa domain name pointer sv-82069.bkns.vn.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
69.82.48.103.in-addr.arpa	name = sv-82069.bkns.vn.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
92.118.160.29	attack	92.118.160.29 was recorded 6 times by 6 hosts attempting to connect to the following ports: 593,143,5909,2483,8082,3000. Incident counter (4h, 24h, all-time): 6, 31, 250	2019-11-20 16:48:15
171.249.79.132	attackbotsspam	2019-11-20 06:24:16 H=([171.249.79.132]) [171.249.79.132]:46414 I=[10.100.18.20]:25 F=: Host/domain is listed in RBL cbl.abuseat.org (Blocked - see hxxp://www.abuseat.org/lookup.cgi?ip=171.249.79.132) 2019-11-20 06:24:17 unexpected disconnection while reading SMTP command from ([171.249.79.132]) [171.249.79.132]:46414 I=[10.100.18.20]:25 (error: Connection reset by peer) 2019-11-20 07:03:31 H=([171.249.79.132]) [171.249.79.132]:15444 I=[10.100.18.20]:25 F=: Host/domain is listed in RBL cbl.abuseat.org (Blocked - see hxxp://www.abuseat.org/lookup.cgi?ip=171.249.79.132) ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=171.249.79.132	2019-11-20 17:09:00
5.35.213.20	attack	MultiHost/MultiPort Probe, Scan, Hack -	2019-11-20 16:59:14
80.178.227.173	attack	Automatic report - Port Scan Attack	2019-11-20 17:22:23
185.143.223.146	attack	Scanning random ports - tries to find possible vulnerable services	2019-11-20 17:03:09
213.251.41.52	attack	Nov 20 10:19:04 MK-Soft-VM3 sshd[7826]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.251.41.52 Nov 20 10:19:07 MK-Soft-VM3 sshd[7826]: Failed password for invalid user rafael from 213.251.41.52 port 44450 ssh2 ...	2019-11-20 17:20:31
73.24.87.203	attackbotsspam	Nov 20 07:26:59 host3 dovecot: imap-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=73.24.87.203, lip=207.180.241.50, TLS, session=<7E+ARMGXyf5JGFfL> Nov 20 07:27:06 host3 dovecot: imap-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=73.24.87.203, lip=207.180.241.50, TLS, session= Nov 20 07:27:06 host3 dovecot: imap-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=73.24.87.203, lip=207.180.241.50, TLS, session= Nov 20 07:27:18 host3 dovecot: imap-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=73.24.87.203, lip=207.180.241.50, TLS, session=<6zFiRcGX9v5JGFfL> Nov 20 07:27:20 host3 dovecot: imap-login: Aborted login (auth failed, 1 attempts in 2 secs): user=	2019-11-20 17:20:11
186.159.222.241	attack	Automatic report - Port Scan Attack	2019-11-20 17:17:51
185.151.6.252	attackspam	(sshd) Failed SSH login from 185.151.6.252 (AE/United Arab Emirates/-/-/-/[AS202670 Cloudzme Fze]): 1 in the last 3600 secs	2019-11-20 17:05:36
72.139.96.214	attack	RDP Bruteforce	2019-11-20 17:05:52
86.202.197.191	attackbotsspam	Brute force attempt	2019-11-20 16:46:47
51.91.249.178	attack	Nov 20 09:35:13 vps691689 sshd[28098]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.91.249.178 Nov 20 09:35:15 vps691689 sshd[28098]: Failed password for invalid user probench from 51.91.249.178 port 36228 ssh2 ...	2019-11-20 17:00:00
106.12.9.49	attackbots	web-1 [ssh_2] SSH Attack	2019-11-20 16:47:43
14.248.28.31	attack	Nov 20 07:28:07 srv01 sshd[30417]: Invalid user admin from 14.248.28.31 port 35436 Nov 20 07:28:07 srv01 sshd[30417]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.248.28.31 Nov 20 07:28:07 srv01 sshd[30417]: Invalid user admin from 14.248.28.31 port 35436 Nov 20 07:28:09 srv01 sshd[30417]: Failed password for invalid user admin from 14.248.28.31 port 35436 ssh2 Nov 20 07:28:07 srv01 sshd[30417]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.248.28.31 Nov 20 07:28:07 srv01 sshd[30417]: Invalid user admin from 14.248.28.31 port 35436 Nov 20 07:28:09 srv01 sshd[30417]: Failed password for invalid user admin from 14.248.28.31 port 35436 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=14.248.28.31	2019-11-20 16:48:40
178.128.90.9	attackspambots	php WP PHPmyadamin ABUSE blocked for 12h	2019-11-20 16:55:10

最近上报的IP列表

103.48.82.227	103.48.83.206	103.64.148.80	103.65.193.185
103.66.208.134	103.66.208.137	103.66.208.140	103.66.208.154
103.66.208.178	103.66.208.193	103.66.208.241	103.66.208.247
103.66.208.83	103.66.208.97	103.66.217.62	103.66.218.35
103.66.50.69	103.66.8.189	102.81.252.161	103.66.86.229