159.203.203.114

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States

运营商(isp): DigitalOcean LLC

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	1433/tcp 1521/tcp [2019-09-06/08]2pkt	2019-09-08 20:55:50

相同子网IP讨论:

IP	类型	评论内容	时间
159.203.203.37	attackspambots	Port scan	2019-09-12 00:15:31
159.203.203.93	attack	" "	2019-09-11 16:22:56
159.203.203.115	attack	firewall-block, port(s): 992/tcp	2019-09-10 20:41:36
159.203.203.234	attackspambots	Sep 6 11:26:47 mercury kernel: [UFW ALLOW] IN=eth0 OUT= MAC=f2:3c:91:bc:4d:f8:84:78:ac:5a:1a:41:08:00 SRC=159.203.203.234 DST=109.74.200.221 LEN=76 TOS=0x00 PREC=0x00 TTL=245 ID=54321 PROTO=UDP SPT=41818 DPT=123 LEN=56 ...	2019-09-10 20:20:44
159.203.203.123	attackbotsspam	...	2019-09-10 14:10:44
159.203.203.51	attackbotsspam	Hits on port : 8834	2019-09-10 14:00:06
159.203.203.241	attack	MultiHost/MultiPort Probe, Scan, Hack -	2019-09-09 14:12:36
159.203.203.101	attackbotsspam	26/tcp [2019-09-08]1pkt	2019-09-09 12:29:52
159.203.203.244	attackspam	9042/tcp 990/tcp 4848/tcp... [2019-09-06/08]6pkt,6pt.(tcp)	2019-09-09 11:59:21
159.203.203.34	attackbots	Lines containing failures of 159.203.203.34 2019-09-08 20:56:15 SMTP protocol synchronization error (input sent whostnamehout wahostnameing for greeting): rejected connection from H=[159.203.203.34] input="EHLO zg-0905b-159 " ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=159.203.203.34	2019-09-09 04:08:34
159.203.203.36	attack	NAME : "" "" CIDR : SYN Flood DDoS Attack - block certain countries :) IP: 159.203.203.36 Denial-of-Service Attack (DoS) Detected and Blocked by ADMIN - data recovery https://help-dysk.pl	2019-09-08 21:01:51
159.203.203.33	attack	1521/tcp 1433/tcp [2019-09-06/08]2pkt	2019-09-08 20:54:09
159.203.203.112	attackbots	953/tcp 24189/tcp 8080/tcp... [2019-09-06/07]5pkt,5pt.(tcp)	2019-09-08 20:44:11
159.203.203.254	attackspambots	50589/tcp 70/tcp [2019-09-06/07]2pkt	2019-09-08 20:33:35
159.203.203.33	attackspam	SNMP Scan	2019-09-08 04:24:06

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 159.203.203.114
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 33149
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;159.203.203.114.		IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019090800 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sun Sep 08 20:55:16 CST 2019
;; MSG SIZE  rcvd: 119

HOST信息:

114.203.203.159.in-addr.arpa domain name pointer zg-0905b-243.stretchoid.com.

NSLOOKUP信息:

Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
114.203.203.159.in-addr.arpa	name = zg-0905b-243.stretchoid.com.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
213.183.51.134	attackbots	Brute forcing RDP port 3389	2019-07-25 08:18:34
178.148.12.229	attackspambots	Attack : GET /TP/public/index.php	2019-07-25 07:38:31
221.12.40.33	attack	Unauthorized connection attempt from IP address 221.12.40.33 on Port 3389(RDP)	2019-07-25 07:42:14
187.32.117.241	attackspambots	Unauthorized connection attempt from IP address 187.32.117.241 on Port 445(SMB)	2019-07-25 07:40:24
186.249.83.86	attackspam	2019-07-24 18:51:13 H=(ludus.it) [186.249.83.86]:42136 I=[192.147.25.65]:25 sender verify fail for : Unrouteable address 2019-07-24 18:51:13 H=(ludus.it) [186.249.83.86]:42136 I=[192.147.25.65]:25 F= rejected RCPT : Sender verify failed 2019-07-24 18:51:13 H=(ludus.it) [186.249.83.86]:42136 I=[192.147.25.65]:25 F= rejected RCPT : Sender verify failed ...	2019-07-25 08:25:21
49.69.127.114	attackbots	20 attempts against mh-ssh on space.magehost.pro	2019-07-25 08:10:45
175.211.116.230	attackbots	Jul 24 21:59:44 Ubuntu-1404-trusty-64-minimal sshd\[31553\]: Invalid user user from 175.211.116.230 Jul 24 21:59:44 Ubuntu-1404-trusty-64-minimal sshd\[31553\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.211.116.230 Jul 24 21:59:46 Ubuntu-1404-trusty-64-minimal sshd\[31553\]: Failed password for invalid user user from 175.211.116.230 port 49666 ssh2 Jul 24 23:14:23 Ubuntu-1404-trusty-64-minimal sshd\[10436\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.211.116.230 user=root Jul 24 23:14:25 Ubuntu-1404-trusty-64-minimal sshd\[10436\]: Failed password for root from 175.211.116.230 port 47474 ssh2	2019-07-25 08:19:06
110.138.127.76	attackspam	Unauthorized connection attempt from IP address 110.138.127.76 on Port 445(SMB)	2019-07-25 07:54:33
95.69.137.131	attackbotsspam	Honeypot hit.	2019-07-25 07:50:33
14.241.75.17	attackbots	Unauthorized connection attempt from IP address 14.241.75.17 on Port 445(SMB)	2019-07-25 08:06:29
150.242.213.189	attack	Jul 25 00:55:02 MainVPS sshd[29623]: Invalid user sales1 from 150.242.213.189 port 42152 Jul 25 00:55:02 MainVPS sshd[29623]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.242.213.189 Jul 25 00:55:02 MainVPS sshd[29623]: Invalid user sales1 from 150.242.213.189 port 42152 Jul 25 00:55:05 MainVPS sshd[29623]: Failed password for invalid user sales1 from 150.242.213.189 port 42152 ssh2 Jul 25 01:00:13 MainVPS sshd[30134]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.242.213.189 user=root Jul 25 01:00:15 MainVPS sshd[30134]: Failed password for root from 150.242.213.189 port 39374 ssh2 ...	2019-07-25 07:44:34
218.92.0.131	attackbotsspam	scan r	2019-07-25 08:02:54
104.237.228.135	attack	Unauthorized connection attempt from IP address 104.237.228.135 on Port 445(SMB)	2019-07-25 07:52:45
67.43.15.7	attackspambots	firewall-block, port(s): 445/tcp	2019-07-25 07:47:36
83.48.4.77	attackspam	Caught in portsentry honeypot	2019-07-25 08:05:36

最近上报的IP列表

109.213.212.112	174.141.125.54	71.6.233.169	105.235.116.59
191.232.163.126	105.224.235.91	164.68.120.248	159.203.199.198
158.225.162.14	213.157.226.236	201.93.209.33	46.69.235.74
220.173.186.233	60.38.242.65	63.234.46.60	75.210.37.179
14.18.141.31	45.79.205.67	212.91.190.81	187.122.140.187