必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Bangladesh

运营商(isp): University of Chittagong

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): University/College/School

用户上报:
类型 评论内容 时间
attackbots
FTP Brute-Force reported by Fail2Ban
2019-10-03 08:14:41
attackspam
Sep 11 04:51:40 www4 sshd\[11368\]: Invalid user cisco from 103.94.130.4
Sep 11 04:51:40 www4 sshd\[11368\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.94.130.4
Sep 11 04:51:42 www4 sshd\[11368\]: Failed password for invalid user cisco from 103.94.130.4 port 33640 ssh2
...
2019-09-11 11:54:05
attack
Sep  8 10:09:45 root sshd[10120]: Failed password for root from 103.94.130.4 port 59833 ssh2
Sep  8 10:26:38 root sshd[10243]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.94.130.4 
Sep  8 10:26:40 root sshd[10243]: Failed password for invalid user test from 103.94.130.4 port 53390 ssh2
...
2019-09-08 18:13:58
attack
Sep  3 02:27:23 vps sshd[16922]: Failed password for root from 103.94.130.4 port 53026 ssh2
Sep  3 02:42:03 vps sshd[17716]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.94.130.4 
Sep  3 02:42:05 vps sshd[17716]: Failed password for invalid user test from 103.94.130.4 port 46563 ssh2
...
2019-09-03 10:47:08
attackspambots
Aug 30 10:48:12 vps sshd\[30422\]: Invalid user test from 103.94.130.4
Aug 30 10:51:10 vps sshd\[30467\]: Invalid user site01 from 103.94.130.4
...
2019-08-30 19:11:49
attackspam
Jul 23 19:55:58 vps65 sshd\[29912\]: Invalid user postgres from 103.94.130.4 port 52390
Jul 23 19:55:58 vps65 sshd\[29912\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.94.130.4
...
2019-08-04 19:50:34
attack
Jul 28 04:29:51 ncomp sshd[14181]: Invalid user zimbra from 103.94.130.4
Jul 28 04:29:51 ncomp sshd[14181]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.94.130.4
Jul 28 04:29:51 ncomp sshd[14181]: Invalid user zimbra from 103.94.130.4
Jul 28 04:29:53 ncomp sshd[14181]: Failed password for invalid user zimbra from 103.94.130.4 port 51348 ssh2
2019-07-28 12:43:11
attack
Jul 27 21:20:19 ubuntu-2gb-nbg1-dc3-1 sshd[32518]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.94.130.4
Jul 27 21:20:21 ubuntu-2gb-nbg1-dc3-1 sshd[32518]: Failed password for invalid user ftpuser from 103.94.130.4 port 54098 ssh2
...
2019-07-28 03:54:52
attackbots
Invalid user ubuntu from 103.94.130.4 port 54142
2019-07-27 12:17:35
attackbotsspam
Jul 25 21:19:22 MK-Soft-VM3 sshd\[2017\]: Invalid user tomcat from 103.94.130.4 port 42373
Jul 25 21:19:22 MK-Soft-VM3 sshd\[2017\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.94.130.4
Jul 25 21:19:24 MK-Soft-VM3 sshd\[2017\]: Failed password for invalid user tomcat from 103.94.130.4 port 42373 ssh2
...
2019-07-26 05:35:20
attack
2019-07-23T22:54:17.847222abusebot-4.cloudsearch.cf sshd\[1304\]: Invalid user test from 103.94.130.4 port 57256
2019-07-24 10:25:37
attackbotsspam
Jul  8 03:57:27 srv206 sshd[18400]: Invalid user us from 103.94.130.4
Jul  8 03:57:27 srv206 sshd[18400]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.94.130.4
Jul  8 03:57:27 srv206 sshd[18400]: Invalid user us from 103.94.130.4
Jul  8 03:57:30 srv206 sshd[18400]: Failed password for invalid user us from 103.94.130.4 port 37666 ssh2
...
2019-07-08 10:24:11
attackbotsspam
Jun 30 21:41:55 ncomp sshd[22829]: Invalid user user from 103.94.130.4
Jun 30 21:41:55 ncomp sshd[22829]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.94.130.4
Jun 30 21:41:55 ncomp sshd[22829]: Invalid user user from 103.94.130.4
Jun 30 21:41:58 ncomp sshd[22829]: Failed password for invalid user user from 103.94.130.4 port 42573 ssh2
2019-07-01 04:53:00
attack
Jun 28 19:33:27 debian sshd[23940]: Unable to negotiate with 103.94.130.4 port 48838: no matching key exchange method found. Their offer: diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 [preauth]
Jun 29 15:05:16 debian sshd[19572]: Unable to negotiate with 103.94.130.4 port 37855: no matching key exchange method found. Their offer: diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 [preauth]
...
2019-06-30 03:23:48
attackbotsspam
<6 unauthorized SSH connections
2019-06-25 16:32:44
attackbots
SSH-BRUTEFORCE
2019-06-25 14:20:56
attackbots
vps1:sshd-InvalidUser
2019-06-24 08:45:48
attackbots
Jun 23 13:45:57 srv-4 sshd\[30065\]: Invalid user tanis from 103.94.130.4
Jun 23 13:45:57 srv-4 sshd\[30065\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.94.130.4
Jun 23 13:45:58 srv-4 sshd\[30067\]: Invalid user tanis from 103.94.130.4
Jun 23 13:45:58 srv-4 sshd\[30067\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.94.130.4
...
2019-06-23 19:51:03
attackspambots
Invalid user cube from 103.94.130.4 port 41059
2019-06-22 18:05:33
attackbots
Invalid user t7adm from 103.94.130.4 port 34617
2019-06-22 08:28:53
attack
Invalid user cube from 103.94.130.4 port 41059
2019-06-21 23:45:29
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 103.94.130.4
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 62756
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;103.94.130.4.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019040200 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Tue Apr 02 15:01:12 +08 2019
;; MSG SIZE  rcvd: 116

HOST信息:
Host 4.130.94.103.in-addr.arpa not found: 2(SERVFAIL)
NSLOOKUP信息:
;; Got SERVFAIL reply from 67.207.67.3, trying next server
Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 4.130.94.103.in-addr.arpa: SERVFAIL

相关IP信息:
最新评论:
IP 类型 评论内容 时间
51.68.189.69 attackspam
Oct 14 13:40:34 SilenceServices sshd[29820]: Failed password for root from 51.68.189.69 port 55565 ssh2
Oct 14 13:44:38 SilenceServices sshd[30902]: Failed password for root from 51.68.189.69 port 47649 ssh2
2019-10-15 00:00:31
110.80.17.26 attack
Oct 14 16:10:03 vmd17057 sshd\[31709\]: Invalid user cmd from 110.80.17.26 port 44366
Oct 14 16:10:03 vmd17057 sshd\[31709\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.80.17.26
Oct 14 16:10:05 vmd17057 sshd\[31709\]: Failed password for invalid user cmd from 110.80.17.26 port 44366 ssh2
...
2019-10-14 23:41:13
45.55.47.149 attackspam
Oct 14 01:59:26 auw2 sshd\[3793\]: Invalid user Reset@2017 from 45.55.47.149
Oct 14 01:59:26 auw2 sshd\[3793\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.47.149
Oct 14 01:59:28 auw2 sshd\[3793\]: Failed password for invalid user Reset@2017 from 45.55.47.149 port 47776 ssh2
Oct 14 02:04:52 auw2 sshd\[4275\]: Invalid user P@ssw0rt1! from 45.55.47.149
Oct 14 02:04:52 auw2 sshd\[4275\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.47.149
2019-10-14 23:57:06
139.199.20.202 attack
2019-10-14T11:49:14.431850abusebot.cloudsearch.cf sshd\[16302\]: Invalid user Story123 from 139.199.20.202 port 39404
2019-10-14T11:49:14.439728abusebot.cloudsearch.cf sshd\[16302\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.20.202
2019-10-14 23:45:49
192.241.169.184 attack
Oct 14 17:56:03 sso sshd[7117]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.241.169.184
Oct 14 17:56:06 sso sshd[7117]: Failed password for invalid user cooperacy from 192.241.169.184 port 44620 ssh2
...
2019-10-15 00:10:04
121.134.174.236 attackbots
postfix (unknown user, SPF fail or relay access denied)
2019-10-15 00:01:43
128.199.55.13 attackbots
Oct 14 06:25:57 fv15 sshd[13398]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.55.13  user=r.r
Oct 14 06:25:59 fv15 sshd[13398]: Failed password for r.r from 128.199.55.13 port 37028 ssh2
Oct 14 06:25:59 fv15 sshd[13398]: Received disconnect from 128.199.55.13: 11: Bye Bye [preauth]
Oct 14 06:30:10 fv15 sshd[8352]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.55.13  user=r.r
Oct 14 06:30:12 fv15 sshd[8352]: Failed password for r.r from 128.199.55.13 port 56858 ssh2
Oct 14 06:30:12 fv15 sshd[8352]: Received disconnect from 128.199.55.13: 11: Bye Bye [preauth]
Oct 14 06:34:19 fv15 sshd[3165]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.55.13  user=r.r
Oct 14 06:34:22 fv15 sshd[3165]:
.... truncated .... 

Oct 14 06:25:57 fv15 sshd[13398]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= r........
-------------------------------
2019-10-14 23:57:33
115.238.236.74 attack
Oct 14 05:16:01 php1 sshd\[25685\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.238.236.74  user=root
Oct 14 05:16:04 php1 sshd\[25685\]: Failed password for root from 115.238.236.74 port 37370 ssh2
Oct 14 05:21:28 php1 sshd\[26380\]: Invalid user kafka from 115.238.236.74
Oct 14 05:21:28 php1 sshd\[26380\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.238.236.74
Oct 14 05:21:30 php1 sshd\[26380\]: Failed password for invalid user kafka from 115.238.236.74 port 39369 ssh2
2019-10-14 23:42:49
45.55.167.58 attackspam
Oct 14 14:23:10 vps691689 sshd[24138]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.167.58
Oct 14 14:23:10 vps691689 sshd[24140]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.167.58
...
2019-10-15 00:08:41
51.75.254.196 attackbots
Oct 14 11:54:56 firewall sshd[23147]: Invalid user klm from 51.75.254.196
Oct 14 11:54:57 firewall sshd[23147]: Failed password for invalid user klm from 51.75.254.196 port 28604 ssh2
Oct 14 11:58:42 firewall sshd[23307]: Invalid user vagrant from 51.75.254.196
...
2019-10-14 23:56:48
167.114.5.203 attack
Oct 14 13:44:45 SilenceServices sshd[30950]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.114.5.203
Oct 14 13:44:47 SilenceServices sshd[30950]: Failed password for invalid user 123Talent from 167.114.5.203 port 42568 ssh2
Oct 14 13:49:06 SilenceServices sshd[32129]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.114.5.203
2019-10-14 23:50:24
14.207.4.49 attack
Brute forcing RDP port 3389
2019-10-15 00:14:43
107.6.183.165 attackbotsspam
1 pkts, ports: TCP:82
2019-10-14 23:59:53
202.120.38.28 attack
Oct 14 17:10:35 vmanager6029 sshd\[15235\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.120.38.28  user=root
Oct 14 17:10:37 vmanager6029 sshd\[15235\]: Failed password for root from 202.120.38.28 port 10817 ssh2
Oct 14 17:16:58 vmanager6029 sshd\[15356\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.120.38.28  user=root
2019-10-15 00:12:22
92.243.126.25 attackbotsspam
2019-10-14T13:49:14.920755MailD postfix/smtpd[10175]: NOQUEUE: reject: RCPT from 92-243-126-025.mynts.ru[92.243.126.25]: 554 5.7.1 Service unavailable; Client host [92.243.126.25] blocked using bl.spamcop.net; Blocked - see https://www.spamcop.net/bl.shtml?92.243.126.25; from= to= proto=ESMTP helo=<92-243-126-025.mynts.ru>
2019-10-14T13:49:15.120635MailD postfix/smtpd[10175]: NOQUEUE: reject: RCPT from 92-243-126-025.mynts.ru[92.243.126.25]: 554 5.7.1 Service unavailable; Client host [92.243.126.25] blocked using bl.spamcop.net; Blocked - see https://www.spamcop.net/bl.shtml?92.243.126.25; from= to= proto=ESMTP helo=<92-243-126-025.mynts.ru>
2019-10-14T13:49:15.362377MailD postfix/smtpd[10175]: NOQUEUE: reject: RCPT from 92-243-126-025.mynts.ru[92.243.126.25]: 554 5.7.1 Service unavailable; Client host [92.243.126.25] blocked using bl.spamcop.net; Blocked - see https://www.spamcop.net/bl.shtml?92.243.126.25; f
2019-10-14 23:44:20

最近上报的IP列表

122.155.223.37 154.66.198.196 182.23.20.140 46.176.76.215
58.87.106.183 139.28.218.155 175.107.192.194 104.248.194.119
194.187.249.61 185.234.216.189 103.59.200.58 118.193.31.179
185.53.91.50 159.65.106.35 162.243.145.33 109.98.71.230
24.155.189.235 41.235.53.192 118.25.138.95 123.206.219.211