必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Viet Nam

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
IP 类型 评论内容 时间
103.130.213.150 attackbotsspam
detected by Fail2Ban
2020-10-13 00:10:54
103.130.213.150 attackspambots
Oct 12 06:00:23 124388 sshd[24848]: Failed password for root from 103.130.213.150 port 34166 ssh2
Oct 12 06:04:10 124388 sshd[24993]: Invalid user laurentiu from 103.130.213.150 port 42334
Oct 12 06:04:10 124388 sshd[24993]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.130.213.150
Oct 12 06:04:10 124388 sshd[24993]: Invalid user laurentiu from 103.130.213.150 port 42334
Oct 12 06:04:12 124388 sshd[24993]: Failed password for invalid user laurentiu from 103.130.213.150 port 42334 ssh2
2020-10-12 15:33:29
103.130.213.21 attackspam
web-1 [ssh_2] SSH Attack
2020-10-10 03:02:10
103.130.213.21 attackbots
2020-10-08T05:39:52.241855morrigan.ad5gb.com sshd[2728965]: Disconnected from authenticating user root 103.130.213.21 port 42496 [preauth]
2020-10-09 18:50:45
103.130.213.150 attackspam
Oct  8 17:55:38 vpn01 sshd[15006]: Failed password for root from 103.130.213.150 port 42258 ssh2
...
2020-10-09 00:50:25
103.130.213.150 attack
Oct  8 10:41:28 host1 sshd[1548160]: Failed password for root from 103.130.213.150 port 33216 ssh2
Oct  8 10:47:07 host1 sshd[1548728]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.130.213.150  user=root
Oct  8 10:47:09 host1 sshd[1548728]: Failed password for root from 103.130.213.150 port 57926 ssh2
Oct  8 10:47:07 host1 sshd[1548728]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.130.213.150  user=root
Oct  8 10:47:09 host1 sshd[1548728]: Failed password for root from 103.130.213.150 port 57926 ssh2
...
2020-10-08 16:47:25
103.130.213.20 attack
Sep 23 14:24:41 piServer sshd[21909]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.130.213.20 
Sep 23 14:24:43 piServer sshd[21909]: Failed password for invalid user test1 from 103.130.213.20 port 55474 ssh2
Sep 23 14:30:41 piServer sshd[22516]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.130.213.20 
...
2020-09-24 00:09:31
103.130.213.20 attack
Sep 23 01:40:42 PorscheCustomer sshd[19782]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.130.213.20
Sep 23 01:40:44 PorscheCustomer sshd[19782]: Failed password for invalid user test1 from 103.130.213.20 port 50356 ssh2
Sep 23 01:45:42 PorscheCustomer sshd[19914]: Failed password for ubuntu from 103.130.213.20 port 33840 ssh2
...
2020-09-23 08:13:56
103.130.213.150 attackspambots
Invalid user teamspeak from 103.130.213.150 port 54556
2020-09-22 21:50:55
103.130.213.150 attackbots
Cowrie Honeypot: 2 unauthorised SSH/Telnet login attempts between 2020-09-22T03:03:35Z and 2020-09-22T03:10:12Z
2020-09-22 13:56:03
103.130.213.150 attackspambots
malicious Brute-Force reported by https://www.patrick-binder.de
...
2020-09-22 05:58:57
103.130.213.150 attackspambots
Invalid user oracle from 103.130.213.150 port 39838
2020-09-20 01:58:33
103.130.213.150 attack
Sep 19 05:40:21 ny01 sshd[23960]: Failed password for root from 103.130.213.150 port 43674 ssh2
Sep 19 05:43:00 ny01 sshd[24293]: Failed password for root from 103.130.213.150 port 36574 ssh2
2020-09-19 17:50:11
103.130.213.154 attackspam
Port Scan
...
2020-08-06 19:11:48
103.130.213.191 attackspambots
Apr  3 14:44:46 cumulus sshd[22632]: Invalid user yy from 103.130.213.191 port 40750
Apr  3 14:44:46 cumulus sshd[22632]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.130.213.191
Apr  3 14:44:49 cumulus sshd[22632]: Failed password for invalid user yy from 103.130.213.191 port 40750 ssh2
Apr  3 14:44:49 cumulus sshd[22632]: Received disconnect from 103.130.213.191 port 40750:11: Bye Bye [preauth]
Apr  3 14:44:49 cumulus sshd[22632]: Disconnected from 103.130.213.191 port 40750 [preauth]
Apr  3 14:51:55 cumulus sshd[23333]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.130.213.191  user=r.r
Apr  3 14:51:56 cumulus sshd[23333]: Failed password for r.r from 103.130.213.191 port 52662 ssh2
Apr  3 14:51:57 cumulus sshd[23333]: Received disconnect from 103.130.213.191 port 52662:11: Bye Bye [preauth]
Apr  3 14:51:57 cumulus sshd[23333]: Disconnected from 103.130.213.191 port 52662 [pr........
-------------------------------
2020-04-05 03:38:07
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 103.130.213.57
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 43743
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;103.130.213.57.			IN	A

;; AUTHORITY SECTION:
.			419	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022801 1800 900 604800 86400

;; Query time: 66 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Mar 01 03:03:57 CST 2022
;; MSG SIZE  rcvd: 107
HOST信息:
57.213.130.103.in-addr.arpa domain name pointer ip.bkhost.vn.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
57.213.130.103.in-addr.arpa	name = ip.bkhost.vn.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
106.51.141.20 attackspam
Automatic report - Banned IP Access
2019-08-07 03:35:12
212.34.228.170 attack
Aug  6 12:57:09 Ubuntu-1404-trusty-64-minimal sshd\[9580\]: Invalid user informix from 212.34.228.170
Aug  6 12:57:09 Ubuntu-1404-trusty-64-minimal sshd\[9580\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.34.228.170
Aug  6 12:57:12 Ubuntu-1404-trusty-64-minimal sshd\[9580\]: Failed password for invalid user informix from 212.34.228.170 port 39523 ssh2
Aug  6 13:13:18 Ubuntu-1404-trusty-64-minimal sshd\[20634\]: Invalid user developer from 212.34.228.170
Aug  6 13:13:18 Ubuntu-1404-trusty-64-minimal sshd\[20634\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.34.228.170
2019-08-07 03:45:20
31.193.122.18 attackspambots
[portscan] Port scan
2019-08-07 03:33:57
209.97.162.146 attack
Aug  6 19:46:23 ns41 sshd[11606]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.97.162.146
2019-08-07 04:17:59
139.162.110.42 attack
MultiHost/MultiPort Probe, Scan, Hack -
2019-08-07 04:06:29
209.97.186.6 attackbotsspam
Aug  6 09:50:10 xtremcommunity sshd\[6815\]: Invalid user bot1 from 209.97.186.6 port 37032
Aug  6 09:50:10 xtremcommunity sshd\[6815\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.97.186.6
Aug  6 09:50:12 xtremcommunity sshd\[6815\]: Failed password for invalid user bot1 from 209.97.186.6 port 37032 ssh2
Aug  6 09:57:10 xtremcommunity sshd\[6981\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.97.186.6  user=root
Aug  6 09:57:12 xtremcommunity sshd\[6981\]: Failed password for root from 209.97.186.6 port 38462 ssh2
...
2019-08-07 04:05:41
122.4.51.29 attackbotsspam
2019-08-06 x@x
2019-08-06 x@x
2019-08-06 x@x
2019-08-06 x@x
2019-08-06 x@x
2019-08-06 x@x
2019-08-06 x@x
2019-08-06 x@x
2019-08-06 x@x
2019-08-06 x@x
2019-08-06 x@x
2019-08-06 x@x
2019-08-06 x@x
2019-08-06 x@x
2019-08-06 x@x
2019-08-06 x@x
2019-08-06 x@x
2019-08-06 x@x
2019-08-06 x@x
2019-08-06 x@x

........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=122.4.51.29
2019-08-07 03:37:37
47.8.150.227 attackspam
Unauthorised access (Aug  6) SRC=47.8.150.227 LEN=48 TTL=110 ID=14969 DF TCP DPT=445 WINDOW=8192 SYN
2019-08-07 03:28:46
62.193.130.43 attack
Aug  6 14:28:19 site2 sshd\[17644\]: Address 62.193.130.43 maps to ns11018.ztomy.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!Aug  6 14:28:21 site2 sshd\[17644\]: Failed password for man from 62.193.130.43 port 33036 ssh2Aug  6 14:29:07 site2 sshd\[17685\]: Address 62.193.130.43 maps to ns11018.ztomy.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!Aug  6 14:29:07 site2 sshd\[17685\]: Invalid user monique from 62.193.130.43Aug  6 14:29:09 site2 sshd\[17685\]: Failed password for invalid user monique from 62.193.130.43 port 34540 ssh2
...
2019-08-07 04:15:35
190.161.159.162 attackbotsspam
Automatic report - Port Scan Attack
2019-08-07 03:32:59
119.4.164.71 attackspam
119.4.164.71 - - [06/Aug/2019:19:28:23 +0200] "POST /App.php?_=15626d968bb25 HTTP/1.1" 403 447 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
119.4.164.71 - - [06/Aug/2019:19:28:24 +0200] "GET /webdav/ HTTP/1.1" 404 399 "-" "Mozilla/5.0"
119.4.164.71 - - [06/Aug/2019:19:28:25 +0200] "GET /help.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
119.4.164.71 - - [06/Aug/2019:19:28:25 +0200] "GET /java.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
119.4.164.71 - - [06/Aug/2019:19:28:26 +0200] "GET /_query.php HTTP/1.1" 404 439 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
...
2019-08-07 03:47:15
213.195.102.72 attackbots
Automatic report - Port Scan Attack
2019-08-07 03:39:05
189.241.101.127 attackbots
Aug  6 21:16:46 v22018076622670303 sshd\[11125\]: Invalid user zch from 189.241.101.127 port 50892
Aug  6 21:16:46 v22018076622670303 sshd\[11125\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.241.101.127
Aug  6 21:16:48 v22018076622670303 sshd\[11125\]: Failed password for invalid user zch from 189.241.101.127 port 50892 ssh2
...
2019-08-07 03:34:45
203.220.28.109 attackbots
Lines containing failures of 203.220.28.109
Aug  6 12:29:34 server01 postfix/smtpd[24105]: warning: hostname iwx-109.interworx.com.au does not resolve to address 203.220.28.109: Name or service not known
Aug  6 12:29:34 server01 postfix/smtpd[24105]: connect from unknown[203.220.28.109]
Aug x@x
Aug x@x
Aug  6 12:29:36 server01 postfix/policy-spf[24153]: : Policy action=PREPEND Received-SPF: none (eos-ksi.cz: No applicable sender policy available) receiver=x@x
Aug x@x
Aug  6 12:29:37 server01 postfix/smtpd[24105]: lost connection after DATA from unknown[203.220.28.109]
Aug  6 12:29:37 server01 postfix/smtpd[24105]: disconnect from unknown[203.220.28.109]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=203.220.28.109
2019-08-07 03:40:16
39.48.151.64 attackbots
Automatic report - Port Scan Attack
2019-08-07 03:44:51

最近上报的IP列表

103.131.71.223 103.127.21.117 103.130.140.195 103.131.71.33
103.131.71.233 103.131.71.40 103.131.71.60 103.132.197.240
103.133.122.53 103.134.112.181 103.134.112.203 103.134.132.113
103.134.132.86 103.134.132.118 103.134.132.66 103.134.132.95
103.134.2.195 103.134.2.196 103.134.204.151 103.134.250.19