162.243.140.138

基本信息:

城市(city): San Francisco

省份(region): California

国家(country): United States

运营商(isp): DigitalOcean LLC

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbots	TCP (SYN) 162.243.140.138:48941 -> port 25, len 40	2020-05-25 07:02:15

相同子网IP讨论:

IP	类型	评论内容	时间
162.243.140.31	proxy	VPN fraud	2023-03-06 14:00:29
162.243.140.36	attack	[Wed Jun 10 08:33:18 2020] - DDoS Attack From IP: 162.243.140.36 Port: 41644	2020-07-16 21:44:24
162.243.140.74	attackspam	[Mon Jun 15 13:36:05 2020] - DDoS Attack From IP: 162.243.140.74 Port: 60847	2020-07-16 20:42:02
162.243.140.36	attackbotsspam	[Wed Jun 10 08:33:20 2020] - DDoS Attack From IP: 162.243.140.36 Port: 41644	2020-07-13 03:47:13
162.243.140.74	attackspam	[Mon Jun 15 13:36:07 2020] - DDoS Attack From IP: 162.243.140.74 Port: 60847	2020-07-13 03:08:26
162.243.140.140	attackspam	[Fri May 29 21:25:53 2020] - DDoS Attack From IP: 162.243.140.140 Port: 33267	2020-07-09 02:41:33
162.243.140.36	attackbots	[Wed Jun 10 08:33:23 2020] - DDoS Attack From IP: 162.243.140.36 Port: 41644	2020-07-08 23:33:28
162.243.140.74	attack	[Mon Jun 15 13:36:10 2020] - DDoS Attack From IP: 162.243.140.74 Port: 60847	2020-07-08 22:44:31
162.243.140.51	attackbots	trying to access non-authorized port	2020-06-22 18:51:24
162.243.140.90	attack	7474/tcp 143/tcp 9002/tcp... [2020-05-02/06-22]44pkt,39pt.(tcp),1pt.(udp)	2020-06-22 18:48:50
162.243.140.36	attackbots	scans once in preceeding hours on the ports (in chronological order) 6379 resulting in total of 51 scans from 162.243.0.0/16 block.	2020-06-21 20:49:19
162.243.140.118	attack	scans once in preceeding hours on the ports (in chronological order) 26446 resulting in total of 51 scans from 162.243.0.0/16 block.	2020-06-21 20:48:47
162.243.140.216	attack	Port scan: Attack repeated for 24 hours	2020-06-21 20:48:26
162.243.140.84	attackspam	Port scan: Attack repeated for 24 hours	2020-06-17 03:18:37
162.243.140.87	attack	firewall-block, port(s): 5986/tcp	2020-06-14 21:43:47

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 162.243.140.138
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 4897
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;162.243.140.138.		IN	A

;; AUTHORITY SECTION:
.			522	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020052401 1800 900 604800 86400

;; Query time: 63 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon May 25 07:02:11 CST 2020
;; MSG SIZE  rcvd: 119

HOST信息:

138.140.243.162.in-addr.arpa domain name pointer zg-0428c-428.stretchoid.com.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
138.140.243.162.in-addr.arpa	name = zg-0428c-428.stretchoid.com.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
191.112.7.120	attackspambots	2019-10-21 x@x 2019-10-21 11:58:36 unexpected disconnection while reading SMTP command from (191-112-7-120.baf.movistar.cl) [191.112.7.120]:23456 I=[10.100.18.21]:25 (error: Connection reset by peer) 2019-10-21 x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=191.112.7.120	2019-10-21 21:15:42
51.89.157.7	attackbotsspam	Oct 21 11:44:55 nopemail postfix/smtpd[8674]: NOQUEUE: reject: RCPT from ip7.ip-51-89-157.eu[51.89.157.7]: 554 5.7.1 : Relay access denied; from= to= proto=ESMTP helo= ...	2019-10-21 20:56:09
51.15.71.134	attackbots	[portscan] Port scan	2019-10-21 21:02:22
190.131.88.7	attackbots	2019-10-21 x@x 2019-10-21 11:45:23 unexpected disconnection while reading SMTP command from (host-190-131-88-7.ecutel.net.ec) [190.131.88.7]:20245 I=[10.100.18.21]:25 (error: Connection reset by peer) 2019-10-21 x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=190.131.88.7	2019-10-21 21:00:24
41.214.20.60	attackbotsspam	2019-10-21T15:05:24.255997scmdmz1 sshd\[12894\]: Invalid user lisa from 41.214.20.60 port 33923 2019-10-21T15:05:24.258599scmdmz1 sshd\[12894\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.214.20.60 2019-10-21T15:05:25.713293scmdmz1 sshd\[12894\]: Failed password for invalid user lisa from 41.214.20.60 port 33923 ssh2 ...	2019-10-21 21:18:13
85.234.24.0	attackbots	Automatic report - Port Scan Attack	2019-10-21 21:07:25
157.230.215.106	attackspam	Oct 21 12:15:27 work-partkepr sshd\[8424\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.215.106 user=root Oct 21 12:15:29 work-partkepr sshd\[8424\]: Failed password for root from 157.230.215.106 port 38740 ssh2 ...	2019-10-21 21:19:53
213.149.62.59	attackbots	2019-10-21 x@x 2019-10-21 12:48:29 unexpected disconnection while reading SMTP command from cm-2058.cable.globalnet.hr [213.149.62.59]:29022 I=[10.100.18.21]:25 (error: Connection reset by peer) 2019-10-21 x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=213.149.62.59	2019-10-21 21:22:10
51.68.126.45	attackbotsspam	Oct 21 03:00:02 hanapaa sshd\[29864\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.ip-51-68-126.eu user=root Oct 21 03:00:04 hanapaa sshd\[29864\]: Failed password for root from 51.68.126.45 port 8800 ssh2 Oct 21 03:04:29 hanapaa sshd\[30261\]: Invalid user ubnt from 51.68.126.45 Oct 21 03:04:30 hanapaa sshd\[30261\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.ip-51-68-126.eu Oct 21 03:04:32 hanapaa sshd\[30261\]: Failed password for invalid user ubnt from 51.68.126.45 port 28659 ssh2	2019-10-21 21:23:20
86.56.81.242	attackbotsspam	SSH bruteforce (Triggered fail2ban)	2019-10-21 21:26:13
211.251.237.70	attackspambots	ssh brute force	2019-10-21 21:00:52
195.123.226.173	attackspambots	RDP_Brute_Force	2019-10-21 21:03:06
222.186.175.220	attack	Oct 21 14:53:59 amit sshd\[6059\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.220 user=root Oct 21 14:54:00 amit sshd\[6059\]: Failed password for root from 222.186.175.220 port 6526 ssh2 Oct 21 14:54:05 amit sshd\[6059\]: Failed password for root from 222.186.175.220 port 6526 ssh2 ...	2019-10-21 20:55:50
114.25.35.18	attackspambots	" "	2019-10-21 21:14:59
193.31.24.113	attackbots	10/21/2019-15:12:57.497685 193.31.24.113 Protocol: 6 SURICATA SMTP tls rejected	2019-10-21 21:28:44

最近上报的IP列表

166.122.54.66	223.53.117.213	155.7.209.252	37.238.136.74
188.27.211.240	72.141.154.2	81.195.1.195	220.3.134.111
194.127.178.52	201.1.161.98	101.149.127.197	63.80.131.228
191.138.233.143	77.247.108.42	73.161.157.96	87.67.149.215
213.142.156.21	109.85.217.106	193.23.3.19	89.66.70.35