必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Indonesia

运营商(isp): Diskominfo Prov. Jawa Tengah

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Commercial

用户上报:
类型 评论内容 时间
attackbots
Honeypot attack, port: 445, PTR: PTR record not found
2020-01-13 18:51:04
attackspambots
445/tcp 445/tcp 445/tcp...
[2019-06-06/08-06]13pkt,1pt.(tcp)
2019-08-07 09:17:11
相同子网IP讨论:
IP 类型 评论内容 时间
103.107.245.45 attack
445/tcp 1433/tcp...
[2020-06-10/07-19]8pkt,2pt.(tcp)
2020-07-20 05:44:16
103.107.245.122 attack
May 14 05:05:41 new sshd[24360]: Failed password for invalid user admin1 from 103.107.245.122 port 62012 ssh2
May 14 05:05:42 new sshd[24362]: Failed password for invalid user admin1 from 103.107.245.122 port 62014 ssh2
May 14 05:05:42 new sshd[24364]: Failed password for invalid user admin1 from 103.107.245.122 port 62026 ssh2
May 14 05:05:42 new sshd[24360]: Connection closed by 103.107.245.122 [preauth]
May 14 05:05:42 new sshd[24362]: Connection closed by 103.107.245.122 [preauth]
May 14 05:05:42 new sshd[24364]: Connection closed by 103.107.245.122 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=103.107.245.122
2020-05-14 18:16:56
103.107.245.150 attack
Honeypot attack, port: 445, PTR: PTR record not found
2020-03-30 19:22:21
103.107.245.45 attackspam
firewall-block, port(s): 1433/tcp
2020-03-10 23:16:24
103.107.245.45 attackbotsspam
firewall-block, port(s): 445/tcp
2020-01-25 03:50:25
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 103.107.245.3
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 33919
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;103.107.245.3.			IN	A

;; AUTHORITY SECTION:
.			1929	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019080602 1800 900 604800 86400

;; Query time: 0 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Wed Aug 07 09:17:06 CST 2019
;; MSG SIZE  rcvd: 117
HOST信息:
Host 3.245.107.103.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 3.245.107.103.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
37.193.61.38 attackspam
SSH auth scanning - multiple failed logins
2020-07-21 02:29:41
123.241.176.252 attack
 TCP (SYN) 123.241.176.252:29629 -> port 23, len 40
2020-07-21 02:12:05
162.243.130.27 attackbotsspam
 TCP (SYN) 162.243.130.27:52528 -> port 3351, len 44
2020-07-21 02:23:21
118.193.31.180 attackspam
2362/udp 10001/udp 37810/udp...
[2020-05-19/07-20]34pkt,3pt.(udp)
2020-07-21 02:12:50
120.53.119.213 attackbots
Event 'Ataque de red detectado' has occurred on device SRV-EXPLOTACION in Windows domain KAURKI on Wednesday, July 15, 2020 9:17:43 AM (GMT+00:00)
Tipo de evento:     Ataque de red detectado
Aplicación:     Kaspersky Endpoint Security para Windows
Aplicación\Ruta:     C:\Program Files (x86)\Kaspersky Lab\Kaspersky Endpoint Security for Windows\
Usuario:     SRV-EXPLOTACION\Administrador (Usuario activo)
Componente:     Protección frente a amenazas en la red
Resultado\Descripción:     Bloqueado
Resultado\Nombre:     Intrusion.Generic.CVE-2018-1273.exploit
Objeto:     TCP de 120.53.119.213 at 192.168.0.80:8080
2020-07-21 02:05:42
103.145.12.195 attackbotsspam
UDP port scan
2020-07-21 01:58:49
103.200.22.126 attack
Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-07-20T15:35:36Z and 2020-07-20T15:42:43Z
2020-07-21 02:06:10
47.75.146.7 attack
21452/tcp 32379/tcp 18266/tcp
[2020-06-27/07-20]3pkt
2020-07-21 02:11:19
180.76.169.198 attack
Invalid user nagios from 180.76.169.198 port 55642
2020-07-21 01:53:36
151.80.67.240 attackbots
Jul 20 17:04:13 [host] sshd[10297]: Invalid user a
Jul 20 17:04:13 [host] sshd[10297]: pam_unix(sshd:
Jul 20 17:04:16 [host] sshd[10297]: Failed passwor
2020-07-21 02:18:32
115.111.228.134 attackspambots
445/tcp 445/tcp 445/tcp...
[2020-07-04/20]6pkt,1pt.(tcp)
2020-07-21 01:56:29
14.161.43.154 attack
"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:
2020-07-21 01:53:14
190.223.26.38 attackspambots
2020-07-19 19:31:42 server sshd[83751]: Failed password for invalid user toshi from 190.223.26.38 port 24510 ssh2
2020-07-21 02:22:43
61.218.122.198 attackbots
Jul 20 15:44:21 XXX sshd[55195]: Invalid user gramm from 61.218.122.198 port 34616
2020-07-21 02:07:24
92.51.114.110 attack
445/tcp 1433/tcp...
[2020-07-06/20]5pkt,2pt.(tcp)
2020-07-21 02:04:22

最近上报的IP列表

254.82.9.204 63.64.60.216 60.40.128.33 77.40.2.19
117.239.58.27 49.156.54.163 62.97.242.146 42.179.90.189
115.24.115.53 223.71.87.228 160.119.102.104 97.71.110.162
59.42.255.159 183.82.124.233 46.118.42.58 117.93.195.74
64.38.249.68 177.21.198.150 139.217.87.235 41.139.12.151