必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): India

运营商(isp): Simsys Infotech Pvt. Ltd.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Commercial

用户上报:
类型 评论内容 时间
attackbotsspam
2020-07-31T06:48:18.298520abusebot-7.cloudsearch.cf sshd[598]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.80.55.19  user=root
2020-07-31T06:48:19.710072abusebot-7.cloudsearch.cf sshd[598]: Failed password for root from 103.80.55.19 port 53576 ssh2
2020-07-31T06:50:47.730690abusebot-7.cloudsearch.cf sshd[610]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.80.55.19  user=root
2020-07-31T06:50:49.598536abusebot-7.cloudsearch.cf sshd[610]: Failed password for root from 103.80.55.19 port 33280 ssh2
2020-07-31T06:53:18.181105abusebot-7.cloudsearch.cf sshd[627]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.80.55.19  user=root
2020-07-31T06:53:20.781359abusebot-7.cloudsearch.cf sshd[627]: Failed password for root from 103.80.55.19 port 41226 ssh2
2020-07-31T06:55:43.097929abusebot-7.cloudsearch.cf sshd[635]: pam_unix(sshd:auth): authentication failure; l
...
2020-07-31 16:15:05
attackbotsspam
2020-07-20T06:59:41.263485randservbullet-proofcloud-66.localdomain sshd[10031]: Invalid user deploy from 103.80.55.19 port 51616
2020-07-20T06:59:41.269072randservbullet-proofcloud-66.localdomain sshd[10031]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.80.55.19
2020-07-20T06:59:41.263485randservbullet-proofcloud-66.localdomain sshd[10031]: Invalid user deploy from 103.80.55.19 port 51616
2020-07-20T06:59:43.077995randservbullet-proofcloud-66.localdomain sshd[10031]: Failed password for invalid user deploy from 103.80.55.19 port 51616 ssh2
...
2020-07-20 15:47:55
attack
Jul 17 10:50:16 ns41 sshd[1209]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.80.55.19
2020-07-17 16:52:55
attackspambots
Icarus honeypot on github
2020-07-12 02:06:45
attackbots
Jul  8 08:18:23 ns382633 sshd\[31321\]: Invalid user zhanglin from 103.80.55.19 port 51852
Jul  8 08:18:23 ns382633 sshd\[31321\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.80.55.19
Jul  8 08:18:24 ns382633 sshd\[31321\]: Failed password for invalid user zhanglin from 103.80.55.19 port 51852 ssh2
Jul  8 08:34:13 ns382633 sshd\[2013\]: Invalid user k12linux from 103.80.55.19 port 48322
Jul  8 08:34:13 ns382633 sshd\[2013\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.80.55.19
2020-07-08 15:02:03
attackbotsspam
$f2bV_matches
2020-07-04 01:12:44
attack
DATE:2020-06-30 10:33:20, IP:103.80.55.19, PORT:ssh SSH brute force auth (docker-dc)
2020-06-30 19:05:19
attackbotsspam
SSH invalid-user multiple login try
2020-06-25 01:10:51
attackbotsspam
2020-06-16T23:59:46.822815mail.standpoint.com.ua sshd[30559]: Failed password for root from 103.80.55.19 port 50638 ssh2
2020-06-17T00:03:14.729303mail.standpoint.com.ua sshd[31110]: Invalid user admin from 103.80.55.19 port 50006
2020-06-17T00:03:14.732386mail.standpoint.com.ua sshd[31110]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.80.55.19
2020-06-17T00:03:14.729303mail.standpoint.com.ua sshd[31110]: Invalid user admin from 103.80.55.19 port 50006
2020-06-17T00:03:16.844439mail.standpoint.com.ua sshd[31110]: Failed password for invalid user admin from 103.80.55.19 port 50006 ssh2
...
2020-06-17 07:38:16
attackspam
2020-06-14T21:22:49.316653abusebot-6.cloudsearch.cf sshd[4675]: Invalid user dxq from 103.80.55.19 port 60558
2020-06-14T21:22:49.323067abusebot-6.cloudsearch.cf sshd[4675]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.80.55.19
2020-06-14T21:22:49.316653abusebot-6.cloudsearch.cf sshd[4675]: Invalid user dxq from 103.80.55.19 port 60558
2020-06-14T21:22:51.311035abusebot-6.cloudsearch.cf sshd[4675]: Failed password for invalid user dxq from 103.80.55.19 port 60558 ssh2
2020-06-14T21:25:55.633488abusebot-6.cloudsearch.cf sshd[4914]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.80.55.19  user=root
2020-06-14T21:25:57.486249abusebot-6.cloudsearch.cf sshd[4914]: Failed password for root from 103.80.55.19 port 54358 ssh2
2020-06-14T21:29:04.965730abusebot-6.cloudsearch.cf sshd[5068]: Invalid user yhy from 103.80.55.19 port 48152
...
2020-06-15 09:29:22
attackspambots
Jun 14 16:09:53 server sshd[1462]: Failed password for root from 103.80.55.19 port 44524 ssh2
Jun 14 16:13:58 server sshd[1755]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.80.55.19
Jun 14 16:14:00 server sshd[1755]: Failed password for invalid user monitor from 103.80.55.19 port 46480 ssh2
...
2020-06-14 22:29:11
attackspambots
Tried sshing with brute force.
2020-06-09 13:11:14
attackbots
SSH Brute-Force reported by Fail2Ban
2020-05-30 05:33:11
attackbotsspam
2020-05-13T13:33:53.398353vivaldi2.tree2.info sshd[26768]: Invalid user bent from 103.80.55.19
2020-05-13T13:33:53.416088vivaldi2.tree2.info sshd[26768]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.80.55.19
2020-05-13T13:33:53.398353vivaldi2.tree2.info sshd[26768]: Invalid user bent from 103.80.55.19
2020-05-13T13:33:54.978204vivaldi2.tree2.info sshd[26768]: Failed password for invalid user bent from 103.80.55.19 port 50052 ssh2
2020-05-13T13:37:01.212176vivaldi2.tree2.info sshd[26863]: Invalid user uuidd from 103.80.55.19
...
2020-05-13 12:48:09
attack
May  5 03:17:41 itv-usvr-02 sshd[27470]: Invalid user tim from 103.80.55.19 port 51528
May  5 03:17:41 itv-usvr-02 sshd[27470]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.80.55.19
May  5 03:17:41 itv-usvr-02 sshd[27470]: Invalid user tim from 103.80.55.19 port 51528
May  5 03:17:42 itv-usvr-02 sshd[27470]: Failed password for invalid user tim from 103.80.55.19 port 51528 ssh2
May  5 03:25:20 itv-usvr-02 sshd[27780]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.80.55.19  user=root
May  5 03:25:22 itv-usvr-02 sshd[27780]: Failed password for root from 103.80.55.19 port 33616 ssh2
2020-05-05 06:29:46
attackspambots
Fail2Ban - SSH Bruteforce Attempt
2020-05-01 21:47:54
attackspambots
Apr 30 07:58:24 mout sshd[9742]: Invalid user ftpuser from 103.80.55.19 port 51702
2020-04-30 15:02:20
attackbotsspam
Invalid user testadmin from 103.80.55.19 port 55004
2020-04-21 21:03:48
attack
Invalid user oracle from 103.80.55.19 port 37486
2020-04-18 08:27:25
attackspam
Invalid user fedoracore from 103.80.55.19 port 50330
2020-04-16 06:38:52
attackspambots
Apr  8 02:45:44 XXX sshd[20612]: Invalid user user2 from 103.80.55.19 port 41440
2020-04-08 09:19:21
attack
Mar 31 19:21:57 minden010 sshd[433]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.80.55.19
Mar 31 19:22:00 minden010 sshd[433]: Failed password for invalid user server from 103.80.55.19 port 39428 ssh2
Mar 31 19:30:34 minden010 sshd[2702]: Failed password for root from 103.80.55.19 port 41516 ssh2
...
2020-04-01 02:59:11
attack
Automatic report BANNED IP
2020-03-30 02:25:23
attack
$f2bV_matches
2020-03-21 02:23:31
attack
Invalid user ftpuser from 103.80.55.19 port 38600
2020-03-20 05:03:24
attack
$f2bV_matches
2020-02-21 18:37:27
attackspam
Feb 20 18:22:15 localhost sshd\[15813\]: Invalid user cpaneleximfilter from 103.80.55.19 port 59996
Feb 20 18:22:15 localhost sshd\[15813\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.80.55.19
Feb 20 18:22:16 localhost sshd\[15813\]: Failed password for invalid user cpaneleximfilter from 103.80.55.19 port 59996 ssh2
2020-02-21 05:07:33
attackspambots
Feb 19 12:53:26 wbs sshd\[32726\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.80.55.19  user=root
Feb 19 12:53:27 wbs sshd\[32726\]: Failed password for root from 103.80.55.19 port 35044 ssh2
Feb 19 12:59:18 wbs sshd\[924\]: Invalid user ubuntu from 103.80.55.19
Feb 19 12:59:18 wbs sshd\[924\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.80.55.19
Feb 19 12:59:20 wbs sshd\[924\]: Failed password for invalid user ubuntu from 103.80.55.19 port 60558 ssh2
2020-02-20 07:13:49
相同子网IP讨论:
IP 类型 评论内容 时间
103.80.55.2 attackspambots
Unauthorized connection attempt detected from IP address 103.80.55.2 to port 80 [J]
2020-01-18 16:54:31
103.80.55.34 attack
Jul  8 02:02:01 srv-4 sshd\[9887\]: Invalid user admin from 103.80.55.34
Jul  8 02:02:01 srv-4 sshd\[9887\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.80.55.34
Jul  8 02:02:04 srv-4 sshd\[9887\]: Failed password for invalid user admin from 103.80.55.34 port 57074 ssh2
...
2019-07-08 11:57:32
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 103.80.55.19
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 26589
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;103.80.55.19.			IN	A

;; AUTHORITY SECTION:
.			521	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020021901 1800 900 604800 86400

;; Query time: 106 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 20 07:13:46 CST 2020
;; MSG SIZE  rcvd: 116
HOST信息:
Host 19.55.80.103.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 19.55.80.103.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
2.45.23.199 attackspambots
13.05.2020 14:33:18 - SMTP Spam without Auth on hMailserver 
Detected by ELinOX-hMail-A2F
2020-05-14 02:57:59
80.48.133.22 attackspambots
May 13 14:06:37 mail.srvfarm.net postfix/smtpd[552888]: warning: unknown[80.48.133.22]: SASL PLAIN authentication failed: 
May 13 14:06:37 mail.srvfarm.net postfix/smtpd[552888]: lost connection after AUTH from unknown[80.48.133.22]
May 13 14:07:16 mail.srvfarm.net postfix/smtps/smtpd[553680]: warning: unknown[80.48.133.22]: SASL PLAIN authentication failed: 
May 13 14:07:16 mail.srvfarm.net postfix/smtps/smtpd[553680]: lost connection after AUTH from unknown[80.48.133.22]
May 13 14:08:02 mail.srvfarm.net postfix/smtps/smtpd[553714]: warning: unknown[80.48.133.22]: SASL PLAIN authentication failed:
2020-05-14 02:53:39
152.136.39.46 attackbotsspam
2020-05-13T16:44:51.825071vps751288.ovh.net sshd\[22846\]: Invalid user admin from 152.136.39.46 port 35254
2020-05-13T16:44:51.835742vps751288.ovh.net sshd\[22846\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.39.46
2020-05-13T16:44:54.235737vps751288.ovh.net sshd\[22846\]: Failed password for invalid user admin from 152.136.39.46 port 35254 ssh2
2020-05-13T16:50:59.065578vps751288.ovh.net sshd\[22884\]: Invalid user viktor from 152.136.39.46 port 41826
2020-05-13T16:50:59.074444vps751288.ovh.net sshd\[22884\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.39.46
2020-05-14 03:09:11
185.234.216.178 attackspambots
2020-05-13T15:13:06.622161MailD postfix/smtpd[2105]: warning: unknown[185.234.216.178]: SASL LOGIN authentication failed: authentication failure
2020-05-13T15:26:25.902100MailD postfix/smtpd[3043]: warning: unknown[185.234.216.178]: SASL LOGIN authentication failed: authentication failure
2020-05-13T15:36:45.025398MailD postfix/smtpd[3615]: warning: unknown[185.234.216.178]: SASL LOGIN authentication failed: authentication failure
2020-05-14 02:44:32
2002:b9ea:db69::b9ea:db69 attackspam
May 13 17:53:44 web01.agentur-b-2.de postfix/smtpd[247624]: warning: unknown[2002:b9ea:db69::b9ea:db69]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
May 13 17:53:44 web01.agentur-b-2.de postfix/smtpd[247624]: lost connection after AUTH from unknown[2002:b9ea:db69::b9ea:db69]
May 13 17:56:32 web01.agentur-b-2.de postfix/smtpd[247624]: warning: unknown[2002:b9ea:db69::b9ea:db69]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
May 13 17:56:32 web01.agentur-b-2.de postfix/smtpd[247624]: lost connection after AUTH from unknown[2002:b9ea:db69::b9ea:db69]
May 13 17:56:39 web01.agentur-b-2.de postfix/smtpd[256113]: warning: unknown[2002:b9ea:db69::b9ea:db69]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
2020-05-14 03:00:00
159.65.155.229 attack
SSH brute-force: detected 33 distinct usernames within a 24-hour window.
2020-05-14 02:33:31
138.219.222.145 attackbotsspam
May 13 14:14:25 mail.srvfarm.net postfix/smtps/smtpd[553711]: warning: unknown[138.219.222.145]: SASL PLAIN authentication failed: 
May 13 14:14:25 mail.srvfarm.net postfix/smtps/smtpd[553711]: lost connection after AUTH from unknown[138.219.222.145]
May 13 14:20:50 mail.srvfarm.net postfix/smtpd[553606]: warning: unknown[138.219.222.145]: SASL PLAIN authentication failed: 
May 13 14:20:50 mail.srvfarm.net postfix/smtpd[553606]: lost connection after AUTH from unknown[138.219.222.145]
May 13 14:21:07 mail.srvfarm.net postfix/smtpd[553606]: warning: unknown[138.219.222.145]: SASL PLAIN authentication failed:
2020-05-14 02:48:08
139.255.6.58 attackbotsspam
Automatic report - SSH Brute-Force Attack
2020-05-14 02:56:13
91.236.5.6 attackspambots
May 13 14:22:57 mail.srvfarm.net postfix/smtps/smtpd[553718]: warning: unknown[91.236.5.6]: SASL PLAIN authentication failed: 
May 13 14:22:57 mail.srvfarm.net postfix/smtps/smtpd[553718]: lost connection after AUTH from unknown[91.236.5.6]
May 13 14:24:37 mail.srvfarm.net postfix/smtpd[556757]: warning: unknown[91.236.5.6]: SASL PLAIN authentication failed: 
May 13 14:24:37 mail.srvfarm.net postfix/smtpd[556757]: lost connection after AUTH from unknown[91.236.5.6]
May 13 14:25:22 mail.srvfarm.net postfix/smtps/smtpd[553710]: warning: unknown[91.236.5.6]: SASL PLAIN authentication failed:
2020-05-14 02:51:33
187.17.166.155 attackspam
May 13 14:12:36 mail.srvfarm.net postfix/smtps/smtpd[553680]: warning: unknown[187.17.166.155]: SASL PLAIN authentication failed: 
May 13 14:12:36 mail.srvfarm.net postfix/smtps/smtpd[553680]: lost connection after AUTH from unknown[187.17.166.155]
May 13 14:13:10 mail.srvfarm.net postfix/smtps/smtpd[553589]: warning: unknown[187.17.166.155]: SASL PLAIN authentication failed: 
May 13 14:13:10 mail.srvfarm.net postfix/smtps/smtpd[553589]: lost connection after AUTH from unknown[187.17.166.155]
May 13 14:15:54 mail.srvfarm.net postfix/smtps/smtpd[553714]: warning: unknown[187.17.166.155]: SASL PLAIN authentication failed:
2020-05-14 02:43:28
114.5.194.57 attackbotsspam
May 13 14:17:15 mail.srvfarm.net postfix/smtpd[555886]: warning: unknown[114.5.194.57]: SASL PLAIN authentication failed: 
May 13 14:17:16 mail.srvfarm.net postfix/smtpd[555886]: lost connection after AUTH from unknown[114.5.194.57]
May 13 14:19:53 mail.srvfarm.net postfix/smtps/smtpd[553535]: warning: unknown[114.5.194.57]: SASL PLAIN authentication failed: 
May 13 14:19:53 mail.srvfarm.net postfix/smtps/smtpd[553535]: lost connection after AUTH from unknown[114.5.194.57]
May 13 14:22:18 mail.srvfarm.net postfix/smtps/smtpd[553710]: warning: unknown[114.5.194.57]: SASL PLAIN authentication failed:
2020-05-14 02:49:08
170.130.69.188 attackspam
Received: from mail.companiesmultiprocessing.com (170.130.69.188) - Liberty Mutual
2020-05-14 03:03:04
177.22.116.147 attackspam
May 13 14:22:01 mail.srvfarm.net postfix/smtpd[556979]: warning: unknown[177.22.116.147]: SASL PLAIN authentication failed: 
May 13 14:22:01 mail.srvfarm.net postfix/smtpd[556979]: lost connection after AUTH from unknown[177.22.116.147]
May 13 14:23:40 mail.srvfarm.net postfix/smtps/smtpd[553589]: warning: unknown[177.22.116.147]: SASL PLAIN authentication failed: 
May 13 14:23:40 mail.srvfarm.net postfix/smtps/smtpd[553589]: lost connection after AUTH from unknown[177.22.116.147]
May 13 14:28:10 mail.srvfarm.net postfix/smtpd[556767]: warning: unknown[177.22.116.147]: SASL PLAIN authentication failed:
2020-05-14 02:45:55
196.52.43.57 attackbotsspam
srv02 Mass scanning activity detected Target: 47808  ..
2020-05-14 03:02:11
222.186.175.182 attackspam
May 13 20:58:00 vps sshd[111007]: Failed password for root from 222.186.175.182 port 56418 ssh2
May 13 20:58:05 vps sshd[111007]: Failed password for root from 222.186.175.182 port 56418 ssh2
May 13 20:58:08 vps sshd[111007]: Failed password for root from 222.186.175.182 port 56418 ssh2
May 13 20:58:12 vps sshd[111007]: Failed password for root from 222.186.175.182 port 56418 ssh2
May 13 20:58:16 vps sshd[111007]: Failed password for root from 222.186.175.182 port 56418 ssh2
...
2020-05-14 02:58:31

最近上报的IP列表

177.205.130.29 176.32.103.205 143.204.219.71 191.240.46.24
76.11.0.18 113.108.255.182 110.138.158.136 194.26.29.11
34.83.180.241 162.243.135.126 234.184.68.120 138.197.223.160
204.114.98.7 110.77.196.2 80.121.102.100 13.115.102.230
8.185.110.145 123.122.179.148 45.10.232.44 37.44.68.2