必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): Semarang

省份(region): Central Java

国家(country): Indonesia

运营商(isp): Diskominfo Prov. Jawa Tengah

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Commercial

用户上报:
类型 评论内容 时间
attack
445/tcp 1433/tcp...
[2020-06-10/07-19]8pkt,2pt.(tcp)
2020-07-20 05:44:16
attackspam
firewall-block, port(s): 1433/tcp
2020-03-10 23:16:24
attackbotsspam
firewall-block, port(s): 445/tcp
2020-01-25 03:50:25
相同子网IP讨论:
IP 类型 评论内容 时间
103.107.245.122 attack
May 14 05:05:41 new sshd[24360]: Failed password for invalid user admin1 from 103.107.245.122 port 62012 ssh2
May 14 05:05:42 new sshd[24362]: Failed password for invalid user admin1 from 103.107.245.122 port 62014 ssh2
May 14 05:05:42 new sshd[24364]: Failed password for invalid user admin1 from 103.107.245.122 port 62026 ssh2
May 14 05:05:42 new sshd[24360]: Connection closed by 103.107.245.122 [preauth]
May 14 05:05:42 new sshd[24362]: Connection closed by 103.107.245.122 [preauth]
May 14 05:05:42 new sshd[24364]: Connection closed by 103.107.245.122 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=103.107.245.122
2020-05-14 18:16:56
103.107.245.150 attack
Honeypot attack, port: 445, PTR: PTR record not found
2020-03-30 19:22:21
103.107.245.3 attackbots
Honeypot attack, port: 445, PTR: PTR record not found
2020-01-13 18:51:04
103.107.245.3 attackspambots
445/tcp 445/tcp 445/tcp...
[2019-06-06/08-06]13pkt,1pt.(tcp)
2019-08-07 09:17:11
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 103.107.245.45
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 3176
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;103.107.245.45.			IN	A

;; AUTHORITY SECTION:
.			600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020012401 1800 900 604800 86400

;; Query time: 106 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jan 25 03:50:22 CST 2020
;; MSG SIZE  rcvd: 118
HOST信息:
Host 45.245.107.103.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 45.245.107.103.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
49.235.196.250 attackspam
(sshd) Failed SSH login from 49.235.196.250 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jun 30 05:37:09 grace sshd[17370]: Invalid user flame from 49.235.196.250 port 30713
Jun 30 05:37:11 grace sshd[17370]: Failed password for invalid user flame from 49.235.196.250 port 30713 ssh2
Jun 30 05:53:13 grace sshd[19870]: Invalid user postgres from 49.235.196.250 port 13321
Jun 30 05:53:15 grace sshd[19870]: Failed password for invalid user postgres from 49.235.196.250 port 13321 ssh2
Jun 30 05:56:43 grace sshd[20587]: Invalid user gb from 49.235.196.250 port 50839
2020-06-30 12:05:20
116.102.19.72 attackbots
20/6/29@23:56:45: FAIL: IoT-Telnet address from=116.102.19.72
...
2020-06-30 12:04:06
112.78.183.21 attack
Jun 30 06:26:03 abendstille sshd\[31913\]: Invalid user deploy from 112.78.183.21
Jun 30 06:26:03 abendstille sshd\[31913\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.78.183.21
Jun 30 06:26:04 abendstille sshd\[31913\]: Failed password for invalid user deploy from 112.78.183.21 port 44812 ssh2
Jun 30 06:29:36 abendstille sshd\[3458\]: Invalid user oliver from 112.78.183.21
Jun 30 06:29:36 abendstille sshd\[3458\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.78.183.21
...
2020-06-30 12:39:22
90.151.87.117 attackbotsspam
" "
2020-06-30 12:34:39
185.143.72.16 attack
Jun 30 06:05:29 relay postfix/smtpd\[19981\]: warning: unknown\[185.143.72.16\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 30 06:05:35 relay postfix/smtpd\[16673\]: warning: unknown\[185.143.72.16\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 30 06:06:55 relay postfix/smtpd\[19143\]: warning: unknown\[185.143.72.16\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 30 06:07:03 relay postfix/smtpd\[14058\]: warning: unknown\[185.143.72.16\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 30 06:08:25 relay postfix/smtpd\[20335\]: warning: unknown\[185.143.72.16\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...
2020-06-30 12:10:34
167.99.67.209 attackbots
leo_www
2020-06-30 09:32:14
49.145.226.184 proxy
IP of a possible hacker, possible VPN for a hacker, I am truly certain a hacker used this IP to hack steam accounts.
2020-06-30 11:44:23
195.54.160.180 attack
Fail2Ban Ban Triggered (2)
2020-06-30 09:28:46
188.166.38.40 attack
Automatic report - XMLRPC Attack
2020-06-30 12:32:55
183.82.253.222 attackbotsspam
C1,WP GET /wp-login.php
2020-06-30 12:03:32
36.82.96.188 attackspam
1593489404 - 06/30/2020 05:56:44 Host: 36.82.96.188/36.82.96.188 Port: 445 TCP Blocked
2020-06-30 12:06:31
132.232.11.218 attackspam
2020-06-30T04:03:24+0000 Failed SSH Authentication/Brute Force Attack. (Server 6)
2020-06-30 12:19:07
150.101.108.160 attack
2020-06-30T06:15:21.005063vps773228.ovh.net sshd[4888]: Failed password for root from 150.101.108.160 port 43452 ssh2
2020-06-30T06:21:38.909257vps773228.ovh.net sshd[4958]: Invalid user postgres from 150.101.108.160 port 36588
2020-06-30T06:21:38.919198vps773228.ovh.net sshd[4958]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ppp108-160.static.internode.on.net
2020-06-30T06:21:38.909257vps773228.ovh.net sshd[4958]: Invalid user postgres from 150.101.108.160 port 36588
2020-06-30T06:21:40.584653vps773228.ovh.net sshd[4958]: Failed password for invalid user postgres from 150.101.108.160 port 36588 ssh2
...
2020-06-30 12:24:54
115.159.124.199 attackbots
Jun 30 00:08:31 ny01 sshd[25920]: Failed password for root from 115.159.124.199 port 48162 ssh2
Jun 30 00:13:40 ny01 sshd[27036]: Failed password for root from 115.159.124.199 port 43358 ssh2
2020-06-30 12:36:09
139.198.177.151 attack
2020-06-29T21:56:41.813219linuxbox-skyline sshd[377345]: Invalid user tests from 139.198.177.151 port 38316
...
2020-06-30 12:07:53

最近上报的IP列表

1.243.230.33 210.165.169.21 91.12.99.179 245.219.110.59
79.182.80.244 134.22.77.210 209.48.64.36 101.186.188.231
109.193.99.168 131.36.127.74 133.234.40.129 126.221.29.10
16.141.134.245 212.174.206.235 237.196.197.18 104.189.34.144
41.142.162.115 21.51.2.98 164.227.212.1 130.41.92.169