18.212.103.140

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
18.212.103.222	attack	18.212.103.222 was recorded 7 times by 1 hosts attempting to connect to the following ports: 87,7000,53,5000,86,5002. Incident counter (4h, 24h, all-time): 7, 22, 24	2019-12-26 08:59:53
18.212.103.222	attackspam	Unauthorized connection attempt detected from IP address 18.212.103.222 to port 8001	2019-12-23 06:43:50

类型

评论内容

时间

18.212.103.222

attack

18.212.103.222 was recorded 7 times by 1 hosts attempting to connect to the following ports: 87,7000,53,5000,86,5002. Incident counter (4h, 24h, all-time): 7, 22, 24

2019-12-26 08:59:53

18.212.103.222

attackspam

Unauthorized connection attempt detected from IP address 18.212.103.222 to port 8001

2019-12-23 06:43:50

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 18.212.103.140
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 8304
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;18.212.103.140.			IN	A

;; AUTHORITY SECTION:
.			210	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022020700 1800 900 604800 86400

;; Query time: 19 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 07 20:07:02 CST 2022
;; MSG SIZE  rcvd: 107

HOST信息:

140.103.212.18.in-addr.arpa domain name pointer ec2-18-212-103-140.compute-1.amazonaws.com.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
140.103.212.18.in-addr.arpa	name = ec2-18-212-103-140.compute-1.amazonaws.com.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
165.22.62.234	attackbotsspam	Unauthorized connection attempt detected from IP address 165.22.62.234 to port 2220 [J]	2020-02-23 15:38:52
185.176.27.2	attack	Feb 23 08:34:55 MK-Root1 kernel: [27376.342867] [UFW BLOCK] IN=enp35s0 OUT=vmbr1 MAC=a8:a1:59:0e:9e:7d:80:7f:f8:79:1c:25:08:00 SRC=185.176.27.2 DST=116.202.171.26 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=28226 PROTO=TCP SPT=8080 DPT=4789 WINDOW=1024 RES=0x00 SYN URGP=0 Feb 23 08:35:46 MK-Root1 kernel: [27427.943227] [UFW BLOCK] IN=enp35s0 OUT= MAC=a8:a1:59:0e:9e:7d:80:7f:f8:79:1c:25:08:00 SRC=185.176.27.2 DST=116.202.171.21 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=47842 PROTO=TCP SPT=8080 DPT=4789 WINDOW=1024 RES=0x00 SYN URGP=0 Feb 23 08:42:10 MK-Root1 kernel: [27811.289170] [UFW BLOCK] IN=enp35s0 OUT= MAC=a8:a1:59:0e:9e:7d:80:7f:f8:79:1c:25:08:00 SRC=185.176.27.2 DST=116.202.171.21 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=60688 PROTO=TCP SPT=8080 DPT=4772 WINDOW=1024 RES=0x00 SYN URGP=0	2020-02-23 15:44:09
123.194.80.148	attackspam	Invalid user nginx from 123.194.80.148 port 51782	2020-02-23 15:30:02
178.46.213.206	attack	Port probing on unauthorized port 23	2020-02-23 15:53:08
222.186.30.218	attackbots	Feb 23 14:39:19 webhost01 sshd[12189]: Failed password for root from 222.186.30.218 port 45737 ssh2 ...	2020-02-23 15:50:37
124.40.244.199	attackbots	Unauthorized connection attempt detected from IP address 124.40.244.199 to port 2220 [J]	2020-02-23 15:42:10
185.165.35.50	attackspam	Feb 23 02:00:34 plusreed sshd[25869]: Invalid user deploy from 185.165.35.50 ...	2020-02-23 15:26:30
98.189.134.115	attackbotsspam	Feb 22 20:53:23 mockhub sshd[28861]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=98.189.134.115 Feb 22 20:53:25 mockhub sshd[28861]: Failed password for invalid user gzuser from 98.189.134.115 port 52666 ssh2 ...	2020-02-23 16:05:59
190.12.74.162	attackspam	02/23/2020-05:53:47.947868 190.12.74.162 Protocol: 6 ET POLICY Cleartext WordPress Login	2020-02-23 15:54:52
222.186.31.83	attack	2020-02-23T08:31:39.565677scmdmz1 sshd[21219]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.31.83 user=root 2020-02-23T08:31:42.167235scmdmz1 sshd[21219]: Failed password for root from 222.186.31.83 port 22619 ssh2 2020-02-23T08:31:44.760591scmdmz1 sshd[21219]: Failed password for root from 222.186.31.83 port 22619 ssh2 2020-02-23T08:31:39.565677scmdmz1 sshd[21219]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.31.83 user=root 2020-02-23T08:31:42.167235scmdmz1 sshd[21219]: Failed password for root from 222.186.31.83 port 22619 ssh2 2020-02-23T08:31:44.760591scmdmz1 sshd[21219]: Failed password for root from 222.186.31.83 port 22619 ssh2 2020-02-23T08:31:39.565677scmdmz1 sshd[21219]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.31.83 user=root 2020-02-23T08:31:42.167235scmdmz1 sshd[21219]: Failed password for root from 222.186.31.83 port 22619 ssh2 2020-02-2	2020-02-23 15:49:12
85.172.13.206	attackspam	Unauthorized connection attempt detected from IP address 85.172.13.206 to port 2220 [J]	2020-02-23 15:53:23
116.102.217.245	attackbotsspam	Feb 23 08:15:17 * sshd[6120]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.102.217.245 Feb 23 08:15:19 * sshd[6120]: Failed password for invalid user austin from 116.102.217.245 port 41296 ssh2	2020-02-23 15:23:37
94.102.49.190	attackspambots	Feb 23 05:54:29 debian-2gb-nbg1-2 kernel: \[4692873.241332\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=94.102.49.190 DST=195.201.40.59 LEN=44 TOS=0x10 PREC=0x00 TTL=120 ID=37656 PROTO=TCP SPT=29011 DPT=37215 WINDOW=17493 RES=0x00 SYN URGP=0	2020-02-23 15:26:47
115.74.227.4	attackspam	Port probing on unauthorized port 23	2020-02-23 16:05:06
185.143.223.171	attack	Feb 23 08:34:53 grey postfix/smtpd\[5020\]: NOQUEUE: reject: RCPT from unknown\[185.143.223.171\]: 554 5.7.1 Service unavailable\; Client host \[185.143.223.171\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[185.143.223.171\]\; from=\ to=\ proto=ESMTP helo=\<\[185.143.223.163\]\>Feb 23 08:34:53 grey postfix/smtpd\[5020\]: NOQUEUE: reject: RCPT from unknown\[185.143.223.171\]: 554 5.7.1 Service unavailable\; Client host \[185.143.223.171\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[185.143.223.171\]\; from=\ to=\ proto=ESMTP helo=\<\[185.143.223.163\]\>Feb 23 08:34:53 grey postfix/smtpd\[5020\]: NOQUEUE: reject: RCPT from unknown\[185.143.223.171\]: 554 5.7.1 Service unavailable\; Client host \[185.143.223.171\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[185.143.223.171\]\; from=\ to=\	2020-02-23 15:38:15

最近上报的IP列表

113.128.168.208	49.146.41.229	72.197.32.80	103.28.84.59
178.72.68.85	185.118.189.32	213.232.123.167	182.54.239.221
58.248.116.86	200.52.43.28	156.216.149.90	45.21.175.220
78.159.79.248	69.49.228.92	125.47.234.223	39.189.56.103
69.57.238.103	186.222.19.111	85.53.35.168	110.172.154.75