159.203.201.145

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States

运营商(isp): DigitalOcean LLC

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	SIP Server BruteForce Attack	2020-01-30 10:21:30
attack	Portscan or hack attempt detected by psad/fwsnort	2020-01-15 16:42:34
attackbotsspam	Unauthorized connection attempt detected from IP address 159.203.201.145 to port 1527	2020-01-02 17:05:02
attack	" "	2019-12-19 03:38:59
attack	11/22/2019-07:28:43.038391 159.203.201.145 Protocol: 6 ET DROP Dshield Block Listed Source group 1	2019-11-22 15:33:47
attack	scan z	2019-11-22 14:26:42
attackbots	159.203.201.145 was recorded 5 times by 5 hosts attempting to connect to the following ports: 9990. Incident counter (4h, 24h, all-time): 5, 6, 73	2019-11-12 18:00:14
attackbots	MultiHost/MultiPort Probe, Scan, Hack -	2019-11-06 23:11:55

相同子网IP讨论:

IP	类型	评论内容	时间
159.203.201.6	attackspambots	Unauthorized connection attempt from IP address 159.203.201.6 on Port 587(SMTP-MSA)	2020-01-31 16:47:30
159.203.201.23	attack	01/31/2020-00:56:46.614661 159.203.201.23 Protocol: 6 ET DROP Dshield Block Listed Source group 1	2020-01-31 14:16:05
159.203.201.194	attackbots	Port 56662 scan denied	2020-01-31 13:56:44
159.203.201.44	attack	01/30/2020-16:34:41.797165 159.203.201.44 Protocol: 17 GPL SNMP public access udp	2020-01-31 10:04:52
159.203.201.47	attackbotsspam	Unauthorized connection attempt detected from IP address 159.203.201.47 to port 8091 [T]	2020-01-30 17:22:53
159.203.201.6	attack	Automatic report - Banned IP Access	2020-01-30 09:48:14
159.203.201.249	attackspambots	46830/tcp 45188/tcp 49154/tcp... [2019-11-30/2020-01-29]53pkt,40pt.(tcp),3pt.(udp)	2020-01-30 00:23:30
159.203.201.8	attackspam	28587/tcp 55735/tcp 27107/tcp... [2019-12-01/2020-01-29]35pkt,30pt.(tcp),3pt.(udp)	2020-01-30 00:21:48
159.203.201.218	attack	Port Scan detected from 159.203.201.218 (US/United States/zg-0911a-7.stretchoid.com). 4 hits in the last 230 seconds	2020-01-29 20:03:27
159.203.201.15	attackspam	unauthorized connection attempt	2020-01-29 17:59:15
159.203.201.179	attack	Port 10643 scan denied	2020-01-29 15:27:25
159.203.201.22	attackspambots	firewall-block, port(s): 4848/tcp	2020-01-29 13:58:47
159.203.201.213	attackspambots	Unauthorized connection attempt detected from IP address 159.203.201.213 to port 465 [J]	2020-01-29 08:31:22
159.203.201.38	attackspambots	unauthorized connection attempt	2020-01-28 17:35:45
159.203.201.201	attack	unauthorized access on port 443 [https] FO	2020-01-28 15:27:19

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 159.203.201.145
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 20254
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;159.203.201.145.		IN	A

;; AUTHORITY SECTION:
.			370	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019102001 1800 900 604800 86400

;; Query time: 97 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Oct 21 09:10:17 CST 2019
;; MSG SIZE  rcvd: 119

HOST信息:

145.201.203.159.in-addr.arpa domain name pointer zg-0911a-185.stretchoid.com.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
145.201.203.159.in-addr.arpa	name = zg-0911a-185.stretchoid.com.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
111.229.211.78	attackbots	$f2bV_matches	2020-06-10 13:32:33
222.186.52.39	attack	Jun 10 05:09:19 hcbbdb sshd\[25458\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.52.39 user=root Jun 10 05:09:21 hcbbdb sshd\[25458\]: Failed password for root from 222.186.52.39 port 34994 ssh2 Jun 10 05:09:23 hcbbdb sshd\[25458\]: Failed password for root from 222.186.52.39 port 34994 ssh2 Jun 10 05:09:25 hcbbdb sshd\[25458\]: Failed password for root from 222.186.52.39 port 34994 ssh2 Jun 10 05:09:28 hcbbdb sshd\[25475\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.52.39 user=root	2020-06-10 13:12:01
85.238.102.238	attackspambots	port scan and connect, tcp 8080 (http-proxy)	2020-06-10 13:39:25
176.65.241.26	attack	Jun 10 05:21:41 gestao sshd[22149]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.65.241.26 Jun 10 05:21:43 gestao sshd[22149]: Failed password for invalid user user from 176.65.241.26 port 42844 ssh2 Jun 10 05:25:55 gestao sshd[22268]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.65.241.26 ...	2020-06-10 13:14:50
92.118.160.5	attack	Port scan denied	2020-06-10 13:33:46
65.49.20.69	attack	Unauthorized connection attempt detected from IP address 65.49.20.69 to port 22	2020-06-10 13:11:31
221.202.122.253	attack	2020-06-10T08:24:59.373158mail.standpoint.com.ua sshd[9088]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.202.122.253 2020-06-10T08:24:59.370472mail.standpoint.com.ua sshd[9088]: Invalid user admin from 221.202.122.253 port 49380 2020-06-10T08:25:01.871466mail.standpoint.com.ua sshd[9088]: Failed password for invalid user admin from 221.202.122.253 port 49380 ssh2 2020-06-10T08:28:12.150284mail.standpoint.com.ua sshd[9519]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.202.122.253 user=root 2020-06-10T08:28:14.140986mail.standpoint.com.ua sshd[9519]: Failed password for root from 221.202.122.253 port 7689 ssh2 ...	2020-06-10 13:41:05
95.216.38.186	attack	20 attempts against mh-misbehave-ban on mist	2020-06-10 13:42:22
180.166.114.14	attack	Jun 10 06:50:29 journals sshd\[125808\]: Invalid user vmware from 180.166.114.14 Jun 10 06:50:29 journals sshd\[125808\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.166.114.14 Jun 10 06:50:31 journals sshd\[125808\]: Failed password for invalid user vmware from 180.166.114.14 port 48896 ssh2 Jun 10 06:53:41 journals sshd\[126254\]: Invalid user xmlrpc from 180.166.114.14 Jun 10 06:53:41 journals sshd\[126254\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.166.114.14 ...	2020-06-10 13:48:34
113.130.212.4	attackspam	Port probing on unauthorized port 8080	2020-06-10 13:19:34
217.112.142.81	attackbots	Jun 10 05:46:27 web01.agentur-b-2.de postfix/smtpd[532681]: NOQUEUE: reject: RCPT from unknown[217.112.142.81]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo= Jun 10 05:46:30 web01.agentur-b-2.de postfix/smtpd[537481]: NOQUEUE: reject: RCPT from unknown[217.112.142.81]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo= Jun 10 05:52:47 web01.agentur-b-2.de postfix/smtpd[537451]: NOQUEUE: reject: RCPT from unknown[217.112.142.81]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo= Jun 10 05:53:42 web01.agentur-b-2.de postfix/smtpd[537481]: NOQUEUE: reject: RCPT from unknown[217.112.142.81]: 450 4.7.1 : Helo command rejec	2020-06-10 13:16:59
139.186.73.162	attack	fail2ban/Jun 10 05:49:33 h1962932 sshd[18952]: Invalid user jira from 139.186.73.162 port 60138 Jun 10 05:49:33 h1962932 sshd[18952]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.186.73.162 Jun 10 05:49:33 h1962932 sshd[18952]: Invalid user jira from 139.186.73.162 port 60138 Jun 10 05:49:36 h1962932 sshd[18952]: Failed password for invalid user jira from 139.186.73.162 port 60138 ssh2 Jun 10 05:53:59 h1962932 sshd[20022]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.186.73.162 user=root Jun 10 05:54:00 h1962932 sshd[20022]: Failed password for root from 139.186.73.162 port 49718 ssh2	2020-06-10 13:32:02
158.69.192.35	attackbotsspam	Jun 10 10:45:44 dhoomketu sshd[621728]: Invalid user ftpuser from 158.69.192.35 port 34834 Jun 10 10:45:46 dhoomketu sshd[621728]: Failed password for invalid user ftpuser from 158.69.192.35 port 34834 ssh2 Jun 10 10:48:43 dhoomketu sshd[621798]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=158.69.192.35 user=root Jun 10 10:48:45 dhoomketu sshd[621798]: Failed password for root from 158.69.192.35 port 53948 ssh2 Jun 10 10:51:39 dhoomketu sshd[621843]: Invalid user loba from 158.69.192.35 port 44796 ...	2020-06-10 13:46:31
114.38.86.19	attackspam	20/6/9@23:53:49: FAIL: Alarm-Network address from=114.38.86.19 ...	2020-06-10 13:42:05
42.103.52.101	attack	Jun 10 06:27:36 vps639187 sshd\[5796\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.103.52.101 user=root Jun 10 06:27:39 vps639187 sshd\[5796\]: Failed password for root from 42.103.52.101 port 57420 ssh2 Jun 10 06:32:40 vps639187 sshd\[5822\]: Invalid user di from 42.103.52.101 port 47916 Jun 10 06:32:40 vps639187 sshd\[5822\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.103.52.101 ...	2020-06-10 13:15:50

最近上报的IP列表

41.206.34.205	114.46.82.62	115.77.155.227	208.93.153.177
188.131.144.30	91.200.114.243	189.209.248.103	46.1.154.108
183.253.20.170	108.21.206.169	121.69.53.246	134.73.76.92
122.117.253.20	177.185.208.5	14.251.159.197	79.116.130.221
117.196.35.139	79.46.237.88	203.35.12.61	60.191.111.68