54.161.42.103 - IPInfo

基本信息:

城市(city): Ashburn

省份(region): Virginia

国家(country): United States

运营商(isp): Amazon Technologies Inc.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Unauthorized connection attempt detected from IP address 54.161.42.103 to port 9200	2020-06-22 08:14:16

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 54.161.42.103
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 16902
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;54.161.42.103.			IN	A

;; AUTHORITY SECTION:
.			235	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020062101 1800 900 604800 86400

;; Query time: 103 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jun 22 08:14:12 CST 2020
;; MSG SIZE  rcvd: 117

HOST信息:

103.42.161.54.in-addr.arpa domain name pointer ec2-54-161-42-103.compute-1.amazonaws.com.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
103.42.161.54.in-addr.arpa	name = ec2-54-161-42-103.compute-1.amazonaws.com.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
46.53.188.154	attackbots	Unauthorized connection attempt from IP address 46.53.188.154 on Port 445(SMB)	2020-09-17 06:17:24
69.160.4.155	attackspambots	RDP Bruteforce	2020-09-17 06:43:33
152.136.116.24	attackspam	RDP Bruteforce	2020-09-17 06:37:14
37.120.153.210	attackbots	[2020-09-16 17:25:01] NOTICE[1239] chan_sip.c: Registration from '"171"' failed for '37.120.153.210:22977' - Wrong password [2020-09-16 17:25:01] SECURITY[1264] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-16T17:25:01.866-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="171",SessionID="0x7f4d480d6c18",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/37.120.153.210/22977",Challenge="7ab7eb6e",ReceivedChallenge="7ab7eb6e",ReceivedHash="a23281c4ab54b8f5e3daf95335e418f1" [2020-09-16 17:25:09] NOTICE[1239] chan_sip.c: Registration from '"173"' failed for '37.120.153.210:51970' - Wrong password [2020-09-16 17:25:09] SECURITY[1264] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-16T17:25:09.883-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="173",SessionID="0x7f4d481972d8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/37.1 ...	2020-09-17 06:17:53
193.112.100.37	attack	RDP Bruteforce	2020-09-17 06:34:42
120.31.237.136	attackbotsspam	RDP Bruteforce	2020-09-17 06:39:50
222.186.175.163	attack	2020-09-17T01:46:22.441174lavrinenko.info sshd[5236]: Failed password for root from 222.186.175.163 port 27794 ssh2 2020-09-17T01:46:26.179291lavrinenko.info sshd[5236]: Failed password for root from 222.186.175.163 port 27794 ssh2 2020-09-17T01:46:31.336657lavrinenko.info sshd[5236]: Failed password for root from 222.186.175.163 port 27794 ssh2 2020-09-17T01:46:36.355748lavrinenko.info sshd[5236]: Failed password for root from 222.186.175.163 port 27794 ssh2 2020-09-17T01:46:40.431815lavrinenko.info sshd[5236]: Failed password for root from 222.186.175.163 port 27794 ssh2 ...	2020-09-17 06:48:00
46.101.146.6	attack	46.101.146.6 - - [16/Sep/2020:20:26:05 +0100] "POST /wp-login.php HTTP/1.1" 200 4424 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 46.101.146.6 - - [16/Sep/2020:20:26:06 +0100] "POST /wp-login.php HTTP/1.1" 200 4424 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 46.101.146.6 - - [16/Sep/2020:20:26:06 +0100] "POST /wp-login.php HTTP/1.1" 200 4424 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-09-17 06:24:33
170.130.187.50	attack	161/udp 23/tcp 5060/tcp... [2020-07-16/09-16]28pkt,8pt.(tcp),2pt.(udp)	2020-09-17 06:19:11
24.178.76.242	attack	Honeypot attack, port: 81, PTR: 024-178-076-242.res.spectrum.com.	2020-09-17 06:19:52
218.92.0.249	attack	Sep 16 23:56:15 santamaria sshd\[8497\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.249 user=root Sep 16 23:56:16 santamaria sshd\[8497\]: Failed password for root from 218.92.0.249 port 64246 ssh2 Sep 16 23:56:19 santamaria sshd\[8497\]: Failed password for root from 218.92.0.249 port 64246 ssh2 Sep 16 23:56:32 santamaria sshd\[8505\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.249 user=root Sep 16 23:56:34 santamaria sshd\[8505\]: Failed password for root from 218.92.0.249 port 16572 ssh2 Sep 16 23:56:52 santamaria sshd\[8507\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.249 user=root Sep 16 23:56:54 santamaria sshd\[8507\]: Failed password for root from 218.92.0.249 port 37355 ssh2 ...	2020-09-17 06:29:03
195.239.66.228	attackspambots	RDP Bruteforce	2020-09-17 06:49:40
178.209.71.119	attackspambots	Unauthorized connection attempt from IP address 178.209.71.119 on Port 445(SMB)	2020-09-17 06:27:40
46.46.85.97	attack	RDP Bruteforce	2020-09-17 06:44:53
125.22.56.125	attack	Unauthorized connection attempt from IP address 125.22.56.125 on Port 445(SMB)	2020-09-17 06:25:49

最近上报的IP列表

70.40.230.189	2.226.152.75	47.12.44.122	161.202.160.6
205.247.212.116	2.190.252.166	1.170.62.169	79.237.172.248
1.254.88.13	159.0.114.47	175.0.105.39	128.204.161.149
181.141.136.246	220.153.166.215	211.106.11.199	99.119.230.120
175.62.165.26	190.218.77.2	44.144.173.38	60.45.4.133