必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Indonesia

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
IP 类型 评论内容 时间
103.141.234.34 attack
SSH Brute-Force reported by Fail2Ban
2020-09-27 06:25:25
103.141.234.34 attackbotsspam
SSH Brute-Force reported by Fail2Ban
2020-09-26 14:35:15
103.141.234.41 attack
 TCP (SYN) 103.141.234.41:58465 -> port 445, len 48
2020-06-10 14:45:22
103.141.234.3 attack
Jan 23 13:38:55 MK-Soft-VM8 sshd[5647]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.141.234.3 
Jan 23 13:38:57 MK-Soft-VM8 sshd[5647]: Failed password for invalid user acs from 103.141.234.3 port 48110 ssh2
...
2020-01-23 21:31:18
103.141.234.38 attackbots
spam
2020-01-22 18:10:01
103.141.234.3 attackspambots
Unauthorized connection attempt detected from IP address 103.141.234.3 to port 2220 [J]
2020-01-15 05:53:50
103.141.234.19 attack
C1,WP GET /suche/wp-login.php
2020-01-11 22:09:46
103.141.234.3 attackbotsspam
Jan  9 22:17:41 hgb10502 sshd[5011]: Invalid user jimstock from 103.141.234.3 port 55942
Jan  9 22:17:44 hgb10502 sshd[5011]: Failed password for invalid user jimstock from 103.141.234.3 port 55942 ssh2
Jan  9 22:17:44 hgb10502 sshd[5011]: Received disconnect from 103.141.234.3 port 55942:11: Bye Bye [preauth]
Jan  9 22:17:44 hgb10502 sshd[5011]: Disconnected from 103.141.234.3 port 55942 [preauth]
Jan  9 22:21:19 hgb10502 sshd[5635]: Invalid user infra from 103.141.234.3 port 53328
Jan  9 22:21:21 hgb10502 sshd[5635]: Failed password for invalid user infra from 103.141.234.3 port 53328 ssh2
Jan  9 22:21:21 hgb10502 sshd[5635]: Received disconnect from 103.141.234.3 port 53328:11: Bye Bye [preauth]
Jan  9 22:21:21 hgb10502 sshd[5635]: Disconnected from 103.141.234.3 port 53328 [preauth]
Jan  9 22:23:41 hgb10502 sshd[5929]: User r.r from 103.141.234.3 not allowed because not listed in AllowUsers
Jan  9 22:23:41 hgb10502 sshd[5929]: pam_unix(sshd:auth): authentication fai........
-------------------------------
2020-01-11 19:10:23
103.141.234.19 attack
103.141.234.19 - - \[18/Dec/2019:07:59:06 +0100\] "POST /wp-login.php HTTP/1.0" 200 6640 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
103.141.234.19 - - \[18/Dec/2019:07:59:09 +0100\] "POST /wp-login.php HTTP/1.0" 200 6453 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
103.141.234.19 - - \[18/Dec/2019:07:59:12 +0100\] "POST /wp-login.php HTTP/1.0" 200 6453 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
2019-12-18 22:11:51
103.141.234.19 attackbots
WordPress login Brute force / Web App Attack on client site.
2019-11-30 13:10:58
103.141.234.19 attack
www.villaromeo.de 103.141.234.19 \[29/Oct/2019:04:59:07 +0100\] "POST /wp-login.php HTTP/1.1" 200 2068 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
www.villaromeo.de 103.141.234.19 \[29/Oct/2019:04:59:09 +0100\] "POST /wp-login.php HTTP/1.1" 200 2031 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
2019-10-29 12:04:23
103.141.234.19 attackbotsspam
WordPress login Brute force / Web App Attack on client site.
2019-10-20 00:39:20
103.141.234.19 attackspam
Wordpress bruteforce
2019-10-08 07:06:09
WHOIS信息:
% [whois.apnic.net]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

% Information related to '103.141.234.0 - 103.141.234.255'

% Abuse contact for '103.141.234.0 - 103.141.234.255' is 'abuse@gunungkidulkab.go.id'

inetnum:        103.141.234.0 - 103.141.234.255
netname:        IDNIC-KOMINFOGUNUNGKIDUL-ID
descr:          Pemerintah Kabupaten Gunungkidul
descr:          Government / Direct Member IDNIC
descr:          Jl. Brigjend Katamsi No.1
descr:          Wonosari Gunungkidul
admin-c:        YRP2-AP
tech-c:         YRP2-AP
country:        ID
mnt-by:         MNT-APJII-ID
mnt-irt:        IRT-KOMINFO-GK-ID
mnt-routes:     MAINT-ID-KOMINFO-GK
status:         ASSIGNED PORTABLE
last-modified:  2019-08-07T09:15:13Z
source:         APNIC

irt:            IRT-KOMINFO-GK-ID
address:        Pemerintah Kabupaten Gunungkidul
address:        Jl. Brigjend Katamsi No.1
address:        Wonosari Gunungkidul
e-mail:         kominfo@gunungkidulkab.go.id
abuse-mailbox:  abuse@gunungkidulkab.go.id
admin-c:        YRP2-AP
tech-c:         YRP2-AP
auth:           # Filtered
mnt-by:         MAINT-ID-KOMINFO-GK
last-modified:  2026-03-09T15:38:49Z
source:         APNIC

person:         Yuyun Retna Pramuji
address:        Patuk 04/01, Patuk, Patuk, Gunungkidul
address:        Yogyakarta, Indonesia
country:        ID
phone:          +62-818-466433
e-mail:         yuyun@gunungkidulkab.go.id
nic-hdl:        YRP2-AP
mnt-by:         MNT-APJII-ID
fax-no:         +62-274-321797
last-modified:  2019-07-10T13:21:40Z
source:         APNIC

% Information related to '103.141.234.0 - 103.141.234.255'

inetnum:        103.141.234.0 - 103.141.234.255
netname:        IDNIC-KOMINFOGUNUNGKIDUL-ID
descr:          Pemerintah Kabupaten Gunungkidul
descr:          Government / Direct Member IDNIC
descr:          Jl. Brigjend Katamsi No.1
descr:          Wonosari Gunungkidul
admin-c:        YRP2-AP
tech-c:         YRP2-AP
country:        ID
mnt-by:         MNT-APJII-ID
mnt-irt:        IRT-KOMINFO-GK-ID
mnt-routes:     MAINT-ID-KOMINFO-GK
status:         ASSIGNED PORTABLE
last-modified:  2024-09-13T08:17:05Z
source:         IDNIC

irt:            IRT-KOMINFO-GK-ID
address:        Pemerintah Kabupaten Gunungkidul
address:        Jl. Brigjend Katamsi No.1
address:        Wonosari Gunungkidul
e-mail:         kominfo@gunungkidulkab.go.id
abuse-mailbox:  abuse@gunungkidulkab.go.id
admin-c:        YRP2-AP
tech-c:         YRP2-AP
auth:           # Filtered
mnt-by:         MAINT-ID-KOMINFO-GK
last-modified:  2024-09-13T08:17:05Z
source:         IDNIC

person:         Yuyun Retna Pramuji
address:        Patuk 04/01, Patuk, Patuk, Gunungkidul
address:        Yogyakarta, Indonesia
country:        ID
phone:          +62-818-466433
e-mail:         yuyun@gunungkidulkab.go.id
nic-hdl:        YRP2-AP
mnt-by:         MAINT-ID-KOMINFO-GK
fax-no:         +62-274-321797
last-modified:  2024-09-13T08:17:15Z
source:         IDNIC

% This query was served by the APNIC Whois Service version 1.88.47 (WHOIS-AU4)
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 103.141.234.67
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 21755
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;103.141.234.67.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026040703 1800 900 604800 86400

;; Query time: 9 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Apr 08 10:47:40 CST 2026
;; MSG SIZE  rcvd: 107
HOST信息:
Host 67.234.141.103.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 67.234.141.103.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
163.172.119.155 attack
[2020-02-06 09:49:47] NOTICE[1148] chan_sip.c: Registration from '"733"' failed for '163.172.119.155:8736' - Wrong password
[2020-02-06 09:49:47] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-02-06T09:49:47.747-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="733",SessionID="0x7fd82c590bc8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/163.172.119.155/8736",Challenge="1ae19a4b",ReceivedChallenge="1ae19a4b",ReceivedHash="b41dbd5c537f12f616d296025909c5ec"
[2020-02-06 09:51:04] NOTICE[1148] chan_sip.c: Registration from '"734"' failed for '163.172.119.155:8782' - Wrong password
[2020-02-06 09:51:04] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-02-06T09:51:04.027-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="734",SessionID="0x7fd82c590bc8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/163.
...
2020-02-07 01:41:42
46.218.7.227 attackspam
Feb  6 05:49:46 web1 sshd\[25988\]: Invalid user ubl from 46.218.7.227
Feb  6 05:49:46 web1 sshd\[25988\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.218.7.227
Feb  6 05:49:47 web1 sshd\[25988\]: Failed password for invalid user ubl from 46.218.7.227 port 55849 ssh2
Feb  6 05:51:23 web1 sshd\[26136\]: Invalid user fyf from 46.218.7.227
Feb  6 05:51:23 web1 sshd\[26136\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.218.7.227
2020-02-07 01:37:18
102.112.38.121 attackspam
Feb  6 14:42:40 cvbnet sshd[13077]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.112.38.121 
Feb  6 14:42:42 cvbnet sshd[13077]: Failed password for invalid user admin from 102.112.38.121 port 56785 ssh2
...
2020-02-07 01:46:22
154.125.112.155 attackspam
Automatic report - SSH Brute-Force Attack
2020-02-07 01:17:38
134.73.51.205 attack
2020-02-06 1izhGm-0005WB-Uc H=common.impitsol.com \(common.arabigram.co\) \[134.73.51.205\] rejected **REMOVED** : REJECTED - You seem to be a spammer!
2020-02-06 1izhJb-0005We-Pv H=common.impitsol.com \(common.arabigram.co\) \[134.73.51.205\] rejected **REMOVED** : REJECTED - You seem to be a spammer!
2020-02-06 H=common.impitsol.com \(common.arabigram.co\) \[134.73.51.205\] F=\ rejected RCPT \: Mail not accepted. 134.73.51.205 is listed at a DNSBL.
2020-02-07 01:42:07
173.236.149.184 attack
[munged]::443 173.236.149.184 - - [06/Feb/2020:17:21:09 +0100] "POST /[munged]: HTTP/1.1" 200 9158 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 173.236.149.184 - - [06/Feb/2020:17:21:11 +0100] "POST /[munged]: HTTP/1.1" 200 9158 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 173.236.149.184 - - [06/Feb/2020:17:21:11 +0100] "POST /[munged]: HTTP/1.1" 200 9158 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 173.236.149.184 - - [06/Feb/2020:17:21:14 +0100] "POST /[munged]: HTTP/1.1" 200 9157 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 173.236.149.184 - - [06/Feb/2020:17:21:14 +0100] "POST /[munged]: HTTP/1.1" 200 9157 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 173.236.149.184 - - [06/Feb/2020:17:21:17 +0100] "POST /[munged]: HTTP/1.1" 200 9157 "-" "Mozilla/5.
2020-02-07 01:25:18
178.150.147.5 attack
Feb  6 14:42:37 vmd26974 sshd[20689]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.150.147.5
Feb  6 14:42:39 vmd26974 sshd[20689]: Failed password for invalid user admin from 178.150.147.5 port 52901 ssh2
...
2020-02-07 01:50:48
101.51.60.67 attack
Brute-force attempt banned
2020-02-07 01:45:22
89.248.160.150 attackspam
89.248.160.150 was recorded 24 times by 12 hosts attempting to connect to the following ports: 41127,41115,41108. Incident counter (4h, 24h, all-time): 24, 146, 2692
2020-02-07 01:49:58
59.36.139.145 attackbots
Feb  6 11:43:03 firewall sshd[21463]: Invalid user xcr from 59.36.139.145
Feb  6 11:43:05 firewall sshd[21463]: Failed password for invalid user xcr from 59.36.139.145 port 33625 ssh2
Feb  6 11:48:11 firewall sshd[21651]: Invalid user ieu from 59.36.139.145
...
2020-02-07 01:28:24
171.229.197.156 attackbots
Feb  6 18:04:33 srv206 sshd[12485]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.229.197.156  user=root
Feb  6 18:04:35 srv206 sshd[12485]: Failed password for root from 171.229.197.156 port 55351 ssh2
...
2020-02-07 01:26:58
163.44.194.42 attack
163.44.194.42 - - [06/Feb/2020:18:52:19 +0300] "POST /wp-login.php HTTP/1.1" 200 2568 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-02-07 01:14:51
212.220.105.31 attackbotsspam
[05/Feb/2020:21:29:26 -0500] "GET / HTTP/1.1" Blank UA
2020-02-07 01:17:19
31.14.142.162 attack
Failed password for invalid user bzn from 31.14.142.162 port 56569 ssh2
Invalid user cdj from 31.14.142.162 port 41421
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.14.142.162
Failed password for invalid user cdj from 31.14.142.162 port 41421 ssh2
Invalid user gen from 31.14.142.162 port 54507
2020-02-07 01:10:27
103.224.36.226 attackbotsspam
Feb  6 14:43:35 vps670341 sshd[5801]: Invalid user xbv from 103.224.36.226 port 60530
2020-02-07 01:07:37

最近上报的IP列表

112.10.184.62 36.142.172.194 222.178.170.122 170.247.84.224
2606:4700:10::6814:9557 2606:4700:10::ac43:1472 2606:4700:10::6814:5267 2606:4700:10::ac43:1812
2606:4700:10::ac43:1239 2606:4700:10::6814:6187 2606:4700:10::6814:8258 2606:4700:10::ac43:1501
196.224.49.181 83.246.166.36 122.193.247.169 2606:4700:10::6816:4890
2606:4700:10::6814:9481 2606:4700:10::6814:7961 14.207.194.147 2606:4700:10::6814:6013