147.102.42.2 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Greece

运营商(isp): National Technical University of Athens

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): University/College/School

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspambots	Nov 12 08:19:04 mailrelay sshd[20076]: Invalid user heinzman from 147.102.42.2 port 45368 Nov 12 08:19:04 mailrelay sshd[20076]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=147.102.42.2 Nov 12 08:19:07 mailrelay sshd[20076]: Failed password for invalid user heinzman from 147.102.42.2 port 45368 ssh2 Nov 12 08:19:07 mailrelay sshd[20076]: Received disconnect from 147.102.42.2 port 45368:11: Bye Bye [preauth] Nov 12 08:19:07 mailrelay sshd[20076]: Disconnected from 147.102.42.2 port 45368 [preauth] Nov 12 08:46:14 mailrelay sshd[20447]: Invalid user drahozal from 147.102.42.2 port 38784 Nov 12 08:46:14 mailrelay sshd[20447]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=147.102.42.2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=147.102.42.2	2019-11-15 18:17:20
attackspambots	Nov 12 23:17:32 ip-172-31-62-245 sshd\[7404\]: Failed password for root from 147.102.42.2 port 55518 ssh2\ Nov 12 23:21:50 ip-172-31-62-245 sshd\[7416\]: Invalid user smbuser from 147.102.42.2\ Nov 12 23:21:53 ip-172-31-62-245 sshd\[7416\]: Failed password for invalid user smbuser from 147.102.42.2 port 60076 ssh2\ Nov 12 23:26:09 ip-172-31-62-245 sshd\[7427\]: Invalid user infosect from 147.102.42.2\ Nov 12 23:26:12 ip-172-31-62-245 sshd\[7427\]: Failed password for invalid user infosect from 147.102.42.2 port 36402 ssh2\	2019-11-13 07:31:13

类型

评论内容

时间

attackspambots

Nov 12 08:19:04 mailrelay sshd[20076]: Invalid user heinzman from 147.102.42.2 port 45368
Nov 12 08:19:04 mailrelay sshd[20076]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=147.102.42.2
Nov 12 08:19:07 mailrelay sshd[20076]: Failed password for invalid user heinzman from 147.102.42.2 port 45368 ssh2
Nov 12 08:19:07 mailrelay sshd[20076]: Received disconnect from 147.102.42.2 port 45368:11: Bye Bye [preauth]
Nov 12 08:19:07 mailrelay sshd[20076]: Disconnected from 147.102.42.2 port 45368 [preauth]
Nov 12 08:46:14 mailrelay sshd[20447]: Invalid user drahozal from 147.102.42.2 port 38784
Nov 12 08:46:14 mailrelay sshd[20447]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=147.102.42.2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=147.102.42.2

2019-11-15 18:17:20

attackspambots

Nov 12 23:17:32 ip-172-31-62-245 sshd\[7404\]: Failed password for root from 147.102.42.2 port 55518 ssh2\
Nov 12 23:21:50 ip-172-31-62-245 sshd\[7416\]: Invalid user smbuser from 147.102.42.2\
Nov 12 23:21:53 ip-172-31-62-245 sshd\[7416\]: Failed password for invalid user smbuser from 147.102.42.2 port 60076 ssh2\
Nov 12 23:26:09 ip-172-31-62-245 sshd\[7427\]: Invalid user infosect from 147.102.42.2\
Nov 12 23:26:12 ip-172-31-62-245 sshd\[7427\]: Failed password for invalid user infosect from 147.102.42.2 port 36402 ssh2\

2019-11-13 07:31:13

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 147.102.42.2
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 43689
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;147.102.42.2.			IN	A

;; AUTHORITY SECTION:
.			518	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019111201 1800 900 604800 86400

;; Query time: 118 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Nov 13 07:31:08 CST 2019
;; MSG SIZE  rcvd: 116

HOST信息:

Host 2.42.102.147.in-addr.arpa not found: 2(SERVFAIL)

NSLOOKUP信息:

;; Got SERVFAIL reply from 100.100.2.136, trying next server
** server can't find 2.42.102.147.in-addr.arpa: SERVFAIL

最新评论:

IP	类型	评论内容	时间
197.221.251.13	attack	2019-03-11 19:32:32 1h3Piw-0004gQ-C0 SMTP connection from \(16.13.telone.co.zw\) \[197.221.251.13\]:5977 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-03-11 19:33:18 1h3Pjh-0004hC-2o SMTP connection from \(16.13.telone.co.zw\) \[197.221.251.13\]:5978 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-03-11 19:33:50 1h3Pk7-0004hl-2K SMTP connection from \(16.13.telone.co.zw\) \[197.221.251.13\]:5979 I=\[193.107.88.166\]:25 closed by DROP in ACL ...	2020-01-30 04:47:41
177.137.196.189	attack	Unauthorized connection attempt from IP address 177.137.196.189 on Port 445(SMB)	2020-01-30 04:41:47
195.231.4.32	attackbots	Unauthorized connection attempt detected from IP address 195.231.4.32 to port 81 [J]	2020-01-30 04:59:31
222.186.31.135	attack	Jan 29 21:46:53 dcd-gentoo sshd[16686]: User root from 222.186.31.135 not allowed because none of user's groups are listed in AllowGroups Jan 29 21:46:56 dcd-gentoo sshd[16686]: error: PAM: Authentication failure for illegal user root from 222.186.31.135 Jan 29 21:46:53 dcd-gentoo sshd[16686]: User root from 222.186.31.135 not allowed because none of user's groups are listed in AllowGroups Jan 29 21:46:56 dcd-gentoo sshd[16686]: error: PAM: Authentication failure for illegal user root from 222.186.31.135 Jan 29 21:46:53 dcd-gentoo sshd[16686]: User root from 222.186.31.135 not allowed because none of user's groups are listed in AllowGroups Jan 29 21:46:56 dcd-gentoo sshd[16686]: error: PAM: Authentication failure for illegal user root from 222.186.31.135 Jan 29 21:46:56 dcd-gentoo sshd[16686]: Failed keyboard-interactive/pam for invalid user root from 222.186.31.135 port 22631 ssh2 ...	2020-01-30 04:50:21
197.188.187.208	attackspambots	2019-10-23 23:27:14 1iNO9x-0001YH-HH SMTP connection from \(\[197.188.187.208\]\) \[197.188.187.208\]:32989 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-10-23 23:27:20 1iNOA3-0001YM-Rn SMTP connection from \(\[197.188.187.208\]\) \[197.188.187.208\]:33038 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-10-23 23:27:24 1iNOA7-0001YS-Ko SMTP connection from \(\[197.188.187.208\]\) \[197.188.187.208\]:33068 I=\[193.107.88.166\]:25 closed by DROP in ACL ...	2020-01-30 05:06:47
182.253.119.75	attackbotsspam	20/1/29@08:30:56: FAIL: Alarm-Network address from=182.253.119.75 ...	2020-01-30 05:04:36
197.2.0.94	attack	2019-07-08 10:39:22 1hkPBB-0001S3-Dc SMTP connection from \(\[197.2.0.94\]\) \[197.2.0.94\]:13992 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-07-08 10:39:31 1hkPBL-0001SJ-CF SMTP connection from \(\[197.2.0.94\]\) \[197.2.0.94\]:14110 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-07-08 10:39:39 1hkPBS-0001Sd-9T SMTP connection from \(\[197.2.0.94\]\) \[197.2.0.94\]:14207 I=\[193.107.88.166\]:25 closed by DROP in ACL ...	2020-01-30 05:03:48
180.76.171.53	attackspam	Jan 29 13:58:17 game-panel sshd[30115]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.171.53 Jan 29 13:58:19 game-panel sshd[30115]: Failed password for invalid user arstisena from 180.76.171.53 port 33586 ssh2 Jan 29 14:01:45 game-panel sshd[30287]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.171.53	2020-01-30 04:57:42
197.185.102.94	attackspam	2019-07-09 17:23:49 1hkry7-0006Sv-NC SMTP connection from \(\[197.185.102.94\]\) \[197.185.102.94\]:59722 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-07-09 17:24:04 1hkryN-0006TG-KA SMTP connection from \(\[197.185.102.94\]\) \[197.185.102.94\]:59723 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-07-09 17:24:12 1hkryV-0006TP-Op SMTP connection from \(\[197.185.102.94\]\) \[197.185.102.94\]:59724 I=\[193.107.88.166\]:25 closed by DROP in ACL ...	2020-01-30 05:14:31
197.185.99.121	attackbotsspam	2019-12-19 06:03:08 SMTP protocol error in "AUTH LOGIN" H=\(bKOXj8MfsM\) \[197.185.99.121\]:60524 I=\[193.107.88.166\]:25 AUTH command used when not advertised 2019-12-19 06:03:09 SMTP protocol error in "AUTH LOGIN" H=\(IdkZrbofg\) \[197.185.99.121\]:60525 I=\[193.107.88.166\]:25 AUTH command used when not advertised 2019-12-19 06:03:10 SMTP protocol error in "AUTH LOGIN" H=\(51zYHIp\) \[197.185.99.121\]:40471 I=\[193.107.88.166\]:25 AUTH command used when not advertised 2019-12-19 06:04:18 SMTP protocol error in "AUTH LOGIN" H=\(vOKugC\) \[197.185.99.121\]:27535 I=\[193.107.88.166\]:587 AUTH command used when not advertised 2019-12-19 06:04:19 SMTP protocol error in "AUTH LOGIN" H=\(KJNHL4kBBQ\) \[197.185.99.121\]:51647 I=\[193.107.88.166\]:587 AUTH command used when not advertised 2019-12-19 06:04:21 SMTP protocol error in "AUTH LOGIN" H=\(Qe60oIX\) \[197.185.99.121\]:27536 I=\[193.107.88.166\]:587 AUTH command used when not advertised 2019-12-19 06:04:21 SMTP protocol error in "AUTH ...	2020-01-30 05:08:01
184.75.211.154	attack	0,77-00/01 [bc01/m41] PostRequest-Spammer scoring: oslo	2020-01-30 05:11:05
197.185.144.234	attackbots	2019-10-24 03:57:04 1iNSN6-00010y-07 SMTP connection from \(reverse.rain.network\) \[197.185.144.234\]:42170 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-10-24 03:57:15 1iNSNH-000118-4C SMTP connection from \(reverse.rain.network\) \[197.185.144.234\]:42293 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-10-24 03:57:23 1iNSNO-00011R-Bf SMTP connection from \(reverse.rain.network\) \[197.185.144.234\]:42373 I=\[193.107.88.166\]:25 closed by DROP in ACL ...	2020-01-30 05:13:20
124.239.191.101	attack	ssh failed login	2020-01-30 04:52:31
197.20.160.166	attackbots	2019-01-31 23:16:50 H=\(\[197.20.160.166\]\) \[197.20.160.166\]:21330 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed 2019-01-31 23:17:37 H=\(\[197.20.160.166\]\) \[197.20.160.166\]:21596 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed 2019-01-31 23:17:59 H=\(\[197.20.160.166\]\) \[197.20.160.166\]:21734 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed ...	2020-01-30 04:59:15
197.2.33.10	attackbotsspam	2019-03-11 14:11:05 1h3Khq-00020F-SW SMTP connection from \(\[197.2.33.10\]\) \[197.2.33.10\]:28184 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-03-11 14:11:15 1h3Ki0-00020d-9V SMTP connection from \(\[197.2.33.10\]\) \[197.2.33.10\]:28257 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-03-11 14:11:21 1h3Ki8-00020y-9t SMTP connection from \(\[197.2.33.10\]\) \[197.2.33.10\]:28299 I=\[193.107.88.166\]:25 closed by DROP in ACL ...	2020-01-30 05:01:38

最近上报的IP列表

118.69.55.61	96.42.135.85	106.135.109.150	144.180.222.124
33.161.156.123	133.71.10.10	103.120.178.37	170.30.228.67
214.112.154.18	220.39.45.92	187.73.239.96	39.98.160.133
92.46.84.233	37.37.47.204	151.66.51.66	180.68.177.15
171.112.230.27	183.247.214.197	110.40.188.153	180.170.173.170