必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Indonesia

运营商(isp): CV. Tunas Dua Serangkai

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Commercial

用户上报:
类型 评论内容 时间
attackspam
Automatic report - Banned IP Access
2020-01-03 19:48:49
attack
Dec 24 10:54:41 vibhu-HP-Z238-Microtower-Workstation sshd\[6355\]: Invalid user schatz from 103.94.5.42
Dec 24 10:54:41 vibhu-HP-Z238-Microtower-Workstation sshd\[6355\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.94.5.42
Dec 24 10:54:43 vibhu-HP-Z238-Microtower-Workstation sshd\[6355\]: Failed password for invalid user schatz from 103.94.5.42 port 48688 ssh2
Dec 24 10:57:59 vibhu-HP-Z238-Microtower-Workstation sshd\[6519\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.94.5.42  user=root
Dec 24 10:58:02 vibhu-HP-Z238-Microtower-Workstation sshd\[6519\]: Failed password for root from 103.94.5.42 port 47844 ssh2
...
2019-12-24 13:33:51
attack
Dec 17 18:05:04 loxhost sshd\[12817\]: Invalid user truche from 103.94.5.42 port 37134
Dec 17 18:05:04 loxhost sshd\[12817\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.94.5.42
Dec 17 18:05:06 loxhost sshd\[12817\]: Failed password for invalid user truche from 103.94.5.42 port 37134 ssh2
Dec 17 18:11:19 loxhost sshd\[13070\]: Invalid user shynique from 103.94.5.42 port 45938
Dec 17 18:11:19 loxhost sshd\[13070\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.94.5.42
...
2019-12-18 01:30:35
attack
Dec 14 17:22:43 eventyay sshd[7307]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.94.5.42
Dec 14 17:22:45 eventyay sshd[7307]: Failed password for invalid user lisa from 103.94.5.42 port 32808 ssh2
Dec 14 17:29:36 eventyay sshd[7571]: Failed password for backup from 103.94.5.42 port 43002 ssh2
...
2019-12-15 00:38:39
attackspambots
Dec  7 00:49:26 ny01 sshd[26791]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.94.5.42
Dec  7 00:49:28 ny01 sshd[26791]: Failed password for invalid user mosse from 103.94.5.42 port 51398 ssh2
Dec  7 00:56:16 ny01 sshd[27950]: Failed password for root from 103.94.5.42 port 60226 ssh2
2019-12-07 14:08:13
attackbotsspam
$f2bV_matches
2019-12-07 07:27:00
attackspambots
Dec  6 17:24:33 OPSO sshd\[30818\]: Invalid user blough from 103.94.5.42 port 34434
Dec  6 17:24:33 OPSO sshd\[30818\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.94.5.42
Dec  6 17:24:36 OPSO sshd\[30818\]: Failed password for invalid user blough from 103.94.5.42 port 34434 ssh2
Dec  6 17:31:22 OPSO sshd\[32153\]: Invalid user mpiuser from 103.94.5.42 port 44378
Dec  6 17:31:22 OPSO sshd\[32153\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.94.5.42
2019-12-07 00:31:52
attackspam
$f2bV_matches
2019-12-02 17:17:18
attackspambots
Nov 30 09:37:09 vps647732 sshd[27655]: Failed password for root from 103.94.5.42 port 44832 ssh2
...
2019-11-30 16:52:51
attackbots
Nov 30 11:25:20 areeb-Workstation sshd[16322]: Failed password for root from 103.94.5.42 port 55286 ssh2
...
2019-11-30 14:12:09
attackspambots
SSH invalid-user multiple login try
2019-11-26 21:29:41
attack
2019-11-11T23:16:17.406222abusebot-6.cloudsearch.cf sshd\[19832\]: Invalid user guest from 103.94.5.42 port 51732
2019-11-12 07:46:15
attackspam
$f2bV_matches
2019-11-09 01:19:56
attackbots
$f2bV_matches
2019-11-07 21:56:38
attackbotsspam
$f2bV_matches
2019-11-05 02:09:41
attackbots
Automatic report - Banned IP Access
2019-11-02 07:50:33
attackspambots
Oct 28 17:27:15 server sshd\[26955\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.94.5.42  user=root
Oct 28 17:27:17 server sshd\[26955\]: Failed password for root from 103.94.5.42 port 35570 ssh2
Oct 28 17:32:17 server sshd\[28096\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.94.5.42  user=root
Oct 28 17:32:19 server sshd\[28096\]: Failed password for root from 103.94.5.42 port 50272 ssh2
Oct 28 17:36:51 server sshd\[29162\]: Invalid user rosaleen from 103.94.5.42
Oct 28 17:36:51 server sshd\[29162\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.94.5.42 
...
2019-10-29 00:23:37
attackbots
(sshd) Failed SSH login from 103.94.5.42 (ID/Indonesia/West Java/Sukabumi/-/[AS9341 PT INDONESIA COMNETS PLUS]): 1 in the last 3600 secs
2019-09-23 07:03:14
attackspambots
Aug 25 15:10:17 web9 sshd\[8571\]: Invalid user db2fenc1 from 103.94.5.42
Aug 25 15:10:17 web9 sshd\[8571\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.94.5.42
Aug 25 15:10:19 web9 sshd\[8571\]: Failed password for invalid user db2fenc1 from 103.94.5.42 port 54166 ssh2
Aug 25 15:15:40 web9 sshd\[10134\]: Invalid user sip from 103.94.5.42
Aug 25 15:15:40 web9 sshd\[10134\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.94.5.42
2019-08-26 09:29:29
attackbots
$f2bV_matches
2019-08-22 19:31:17
attack
Aug 15 15:45:04 web9 sshd\[3399\]: Invalid user teamspeak from 103.94.5.42
Aug 15 15:45:04 web9 sshd\[3399\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.94.5.42
Aug 15 15:45:07 web9 sshd\[3399\]: Failed password for invalid user teamspeak from 103.94.5.42 port 42852 ssh2
Aug 15 15:51:41 web9 sshd\[4888\]: Invalid user serv_fun from 103.94.5.42
Aug 15 15:51:41 web9 sshd\[4888\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.94.5.42
2019-08-16 09:57:55
相同子网IP讨论:
IP 类型 评论内容 时间
103.94.5.250 attack
Unauthorized connection attempt from IP address 103.94.5.250 on Port 445(SMB)
2020-01-14 05:12:19
103.94.56.152 attack
Automatic report - Port Scan Attack
2019-12-12 22:13:55
103.94.5.18 attackspambots
"Account brute force using dictionary attack against Exchange Online"
2019-08-06 06:56:42
103.94.5.210 attackspambots
[SMB remote code execution attempt: port tcp/445]
*(RWIN=8192)(08050931)
2019-08-05 17:08:59
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 103.94.5.42
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 65497
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;103.94.5.42.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019081503 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Fri Aug 16 09:57:50 CST 2019
;; MSG SIZE  rcvd: 115
HOST信息:
Host 42.5.94.103.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 42.5.94.103.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
120.201.125.204 attackbotsspam
2020-05-04T08:12:34.409862vps751288.ovh.net sshd\[6890\]: Invalid user admin from 120.201.125.204 port 59376
2020-05-04T08:12:34.421619vps751288.ovh.net sshd\[6890\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.201.125.204
2020-05-04T08:12:36.564281vps751288.ovh.net sshd\[6890\]: Failed password for invalid user admin from 120.201.125.204 port 59376 ssh2
2020-05-04T08:17:25.386095vps751288.ovh.net sshd\[6899\]: Invalid user upload from 120.201.125.204 port 54681
2020-05-04T08:17:25.392921vps751288.ovh.net sshd\[6899\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.201.125.204
2020-05-04 16:42:06
222.186.175.150 attackbotsspam
May  4 10:14:21 minden010 sshd[22183]: Failed password for root from 222.186.175.150 port 26082 ssh2
May  4 10:14:31 minden010 sshd[22183]: Failed password for root from 222.186.175.150 port 26082 ssh2
May  4 10:14:33 minden010 sshd[22183]: Failed password for root from 222.186.175.150 port 26082 ssh2
May  4 10:14:33 minden010 sshd[22183]: error: maximum authentication attempts exceeded for root from 222.186.175.150 port 26082 ssh2 [preauth]
...
2020-05-04 17:02:14
222.186.175.148 attackbotsspam
May  4 09:59:30 minden010 sshd[16540]: Failed password for root from 222.186.175.148 port 59856 ssh2
May  4 09:59:33 minden010 sshd[16540]: Failed password for root from 222.186.175.148 port 59856 ssh2
May  4 09:59:36 minden010 sshd[16540]: Failed password for root from 222.186.175.148 port 59856 ssh2
May  4 09:59:39 minden010 sshd[16540]: Failed password for root from 222.186.175.148 port 59856 ssh2
...
2020-05-04 17:11:48
182.61.41.203 attackbotsspam
May  4 10:29:34 inter-technics sshd[9325]: Invalid user webdev from 182.61.41.203 port 60618
May  4 10:29:34 inter-technics sshd[9325]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.41.203
May  4 10:29:34 inter-technics sshd[9325]: Invalid user webdev from 182.61.41.203 port 60618
May  4 10:29:36 inter-technics sshd[9325]: Failed password for invalid user webdev from 182.61.41.203 port 60618 ssh2
May  4 10:33:01 inter-technics sshd[10229]: Invalid user msi from 182.61.41.203 port 45106
...
2020-05-04 16:37:44
111.93.4.174 attackbotsspam
2020-05-04T03:24:16.5436451495-001 sshd[8991]: Invalid user krx from 111.93.4.174 port 39912
2020-05-04T03:24:19.2825581495-001 sshd[8991]: Failed password for invalid user krx from 111.93.4.174 port 39912 ssh2
2020-05-04T03:28:37.0225301495-001 sshd[9123]: Invalid user ftpadmin from 111.93.4.174 port 49376
2020-05-04T03:28:37.0256401495-001 sshd[9123]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.93.4.174
2020-05-04T03:28:37.0225301495-001 sshd[9123]: Invalid user ftpadmin from 111.93.4.174 port 49376
2020-05-04T03:28:39.2576691495-001 sshd[9123]: Failed password for invalid user ftpadmin from 111.93.4.174 port 49376 ssh2
...
2020-05-04 16:31:10
196.46.192.73 attack
2020-05-04T03:52:23.436381shield sshd\[7181\]: Invalid user madison from 196.46.192.73 port 40016
2020-05-04T03:52:23.440742shield sshd\[7181\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.46.192.73
2020-05-04T03:52:25.233020shield sshd\[7181\]: Failed password for invalid user madison from 196.46.192.73 port 40016 ssh2
2020-05-04T03:53:34.765940shield sshd\[7387\]: Invalid user test4 from 196.46.192.73 port 45888
2020-05-04T03:53:34.770196shield sshd\[7387\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.46.192.73
2020-05-04 16:39:43
180.250.135.11 attack
May  4 08:00:25 ip-172-31-61-156 sshd[7899]: Failed password for invalid user dev from 180.250.135.11 port 58444 ssh2
May  4 08:00:23 ip-172-31-61-156 sshd[7899]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.250.135.11
May  4 08:00:23 ip-172-31-61-156 sshd[7899]: Invalid user dev from 180.250.135.11
May  4 08:00:25 ip-172-31-61-156 sshd[7899]: Failed password for invalid user dev from 180.250.135.11 port 58444 ssh2
May  4 08:04:52 ip-172-31-61-156 sshd[8101]: Invalid user penis from 180.250.135.11
...
2020-05-04 16:30:40
122.51.100.64 attackbots
" "
2020-05-04 16:34:00
182.123.206.221 attackspam
Port probing on unauthorized port 23
2020-05-04 16:59:51
79.124.62.86 attack
ET CINS Active Threat Intelligence Poor Reputation IP group 63 - port: 60 proto: TCP cat: Misc Attack
2020-05-04 16:53:37
210.97.40.34 attack
May  4 10:37:37 gw1 sshd[21815]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.97.40.34
May  4 10:37:39 gw1 sshd[21815]: Failed password for invalid user memo from 210.97.40.34 port 43882 ssh2
...
2020-05-04 16:42:38
130.162.64.72 attackbots
May  4 04:43:52 pi sshd[5001]: Failed password for root from 130.162.64.72 port 51609 ssh2
2020-05-04 16:55:07
122.51.188.20 attackspambots
prod3
...
2020-05-04 17:10:26
113.21.114.172 attackbots
24 packets to ports 465 587
2020-05-04 16:56:16
106.12.47.131 attackbots
05/03/2020-23:52:48.470882 106.12.47.131 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433
2020-05-04 17:14:50

最近上报的IP列表

190.117.63.132 4.94.208.186 145.15.104.190 100.145.129.117
109.230.73.50 1.7.215.245 249.35.101.127 104.210.43.219
103.188.114.198 139.69.136.144 159.192.96.253 67.159.160.155
50.53.74.35 166.175.92.12 192.207.75.44 46.2.162.36
67.136.191.114 209.126.127.208 186.146.67.15 0.13.136.14