Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Moscow

Region: Moscow (City)

Country: Russia

Internet Service Provider: CSL Limited

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
% [whois.apnic.net]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

% Information related to '103.103.244.0 - 103.103.244.255'

% Abuse contact for '103.103.244.0 - 103.103.244.255' is 'abuse@worldbackbone.com'

inetnum:        103.103.244.0 - 103.103.244.255
netname:        SHATIN-HK
descr:          RM 1607E 16/F HANG PONT COMM,BLDG 31 TONKIN STCHEUNG SHA
country:        HK
admin-c:        AA2388-AP
tech-c:         AA2388-AP
abuse-c:        AB1454-AP
status:         ALLOCATED NON-PORTABLE
mnt-by:         MAINT-BACKBONE-HK
mnt-irt:        IRT-BACKBONE-HK
last-modified:  2023-02-04T03:49:18Z
source:         APNIC

irt:            IRT-BACKBONE-HK
address:        Hong Kong 6/F, 1 Wang Wo Tsai Street, Tseuen Wan, N.T.
e-mail:         abuse@worldbackbone.com
abuse-mailbox:  abuse@worldbackbone.com
admin-c:        AA2388-AP
tech-c:         AA2388-AP
auth:           # Filtered
remarks:        abuse@worldbackbone.com was validated on 2025-11-29
mnt-by:         MAINT-BACKBONE-HK
last-modified:  2025-11-29T03:57:46Z
source:         APNIC

role:           APNIC administrator
address:        Hong Kong 6/F, 1 Wang Wo Tsai Street, Tseuen Wan, N.T.
country:        HK
phone:          +852-52310655
e-mail:         abuse@worldbackbone.com
admin-c:        AA2388-AP
tech-c:         AA2388-AP
nic-hdl:        AA2388-AP
mnt-by:         MAINT-BACKBONE-HK
last-modified:  2024-08-08T09:38:49Z
source:         APNIC

role:           ABUSE BACKBONEHK
country:        ZZ
address:        Hong Kong 6/F, 1 Wang Wo Tsai Street, Tseuen Wan, N.T.
phone:          +000000000
e-mail:         abuse@worldbackbone.com
admin-c:        AA2388-AP
tech-c:         AA2388-AP
nic-hdl:        AB1454-AP
remarks:        Generated from irt object IRT-BACKBONE-HK
remarks:        abuse@worldbackbone.com was validated on 2025-11-29
abuse-mailbox:  abuse@worldbackbone.com
mnt-by:         APNIC-ABUSE
last-modified:  2025-11-29T03:57:55Z
source:         APNIC

% Information related to '103.103.244.0/24AS151373'

route:          103.103.244.0/24
origin:         AS151373
descr:          41, Korovinskoye Shosse Region, 125412
mnt-by:         MAINT-PRINTER-RU
last-modified:  2025-05-09T09:10:58Z
source:         APNIC

% This query was served by the APNIC Whois Service version 1.88.36-SNAPSHOT (WHOIS-AU5)
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 103.103.244.5
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 20240
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;103.103.244.5.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026031100 1800 900 604800 86400

;; Query time: 6 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 11 17:41:16 CST 2026
;; MSG SIZE  rcvd: 106
Host info
Host 5.244.103.103.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 5.244.103.103.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
107.150.112.25 attack
Dec 16 09:22:37 foo sshd[17836]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.150.112.25  user=r.r
Dec 16 09:22:39 foo sshd[17836]: Failed password for r.r from 107.150.112.25 port 58908 ssh2
Dec 16 09:22:39 foo sshd[17836]: Connection closed by 107.150.112.25 [preauth]
Dec 16 09:22:42 foo sshd[17840]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.150.112.25  user=r.r
Dec 16 09:22:44 foo sshd[17840]: Failed password for r.r from 107.150.112.25 port 59056 ssh2
Dec 16 09:22:45 foo sshd[17840]: Connection closed by 107.150.112.25 [preauth]
Dec 16 09:22:53 foo sshd[17844]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.150.112.25  user=r.r
Dec 16 09:22:56 foo sshd[17844]: Failed password for r.r from 107.150.112.25 port 59206 ssh2
Dec 16 09:22:58 foo sshd[17844]: Connection closed by 107.150.112.25 [preauth]
Dec 16 09:23:05 foo sshd[17858........
-------------------------------
2019-12-17 03:09:32
54.38.184.235 attackbotsspam
Dec 16 08:41:16 web9 sshd\[27607\]: Invalid user tasung from 54.38.184.235
Dec 16 08:41:16 web9 sshd\[27607\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.184.235
Dec 16 08:41:18 web9 sshd\[27607\]: Failed password for invalid user tasung from 54.38.184.235 port 53684 ssh2
Dec 16 08:46:17 web9 sshd\[28444\]: Invalid user tausheck from 54.38.184.235
Dec 16 08:46:17 web9 sshd\[28444\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.184.235
2019-12-17 02:50:15
176.221.1.246 attackbotsspam
port 23
2019-12-17 02:59:14
83.174.197.243 attackbotsspam
1576507350 - 12/16/2019 15:42:30 Host: 83.174.197.243/83.174.197.243 Port: 445 TCP Blocked
2019-12-17 03:01:43
171.244.18.14 attack
Dec 16 15:21:35 firewall sshd[11518]: Failed password for invalid user taxi from 171.244.18.14 port 51720 ssh2
Dec 16 15:28:31 firewall sshd[11643]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.244.18.14  user=root
Dec 16 15:28:33 firewall sshd[11643]: Failed password for root from 171.244.18.14 port 59412 ssh2
...
2019-12-17 02:53:37
40.92.70.66 attack
Dec 16 19:36:04 debian-2gb-vpn-nbg1-1 kernel: [892533.859493] [UFW BLOCK] IN=eth0 OUT= MAC=96:00:00:38:96:44:d2:74:7f:6e:37:e3:08:00 SRC=40.92.70.66 DST=78.46.192.101 LEN=40 TOS=0x00 PREC=0x00 TTL=238 ID=23231 DF PROTO=TCP SPT=48941 DPT=25 WINDOW=0 RES=0x00 ACK RST URGP=0
2019-12-17 03:03:25
106.54.95.232 attack
SSH Brute-Forcing (server2)
2019-12-17 02:52:21
116.228.53.227 attack
2019-12-16T14:28:17.757372Z 159ff8a832ab New connection: 116.228.53.227:54906 (172.17.0.5:2222) [session: 159ff8a832ab]
2019-12-16T14:42:15.580028Z 75fd5f09b2f9 New connection: 116.228.53.227:47256 (172.17.0.5:2222) [session: 75fd5f09b2f9]
2019-12-17 03:18:18
52.17.115.194 attack
Dec 16 09:11:12 newdogma sshd[25174]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.17.115.194  user=r.r
Dec 16 09:11:14 newdogma sshd[25174]: Failed password for r.r from 52.17.115.194 port 57652 ssh2
Dec 16 09:11:14 newdogma sshd[25174]: Received disconnect from 52.17.115.194 port 57652:11: Bye Bye [preauth]
Dec 16 09:11:14 newdogma sshd[25174]: Disconnected from 52.17.115.194 port 57652 [preauth]
Dec 16 09:21:31 newdogma sshd[25369]: Invalid user fp from 52.17.115.194 port 40662
Dec 16 09:21:31 newdogma sshd[25369]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.17.115.194
Dec 16 09:21:34 newdogma sshd[25369]: Failed password for invalid user fp from 52.17.115.194 port 40662 ssh2
Dec 16 09:21:34 newdogma sshd[25369]: Received disconnect from 52.17.115.194 port 40662:11: Bye Bye [preauth]
Dec 16 09:21:34 newdogma sshd[25369]: Disconnected from 52.17.115.194 port 40662 [preauth]
De........
-------------------------------
2019-12-17 03:13:32
138.68.165.102 attack
SSH bruteforce (Triggered fail2ban)
2019-12-17 02:48:25
106.13.125.84 attack
Dec 16 19:14:17 lnxweb62 sshd[3194]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.125.84
Dec 16 19:14:17 lnxweb62 sshd[3194]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.125.84
2019-12-17 02:43:46
125.124.152.59 attack
Dec 16 18:43:08 localhost sshd\[28986\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.124.152.59  user=root
Dec 16 18:43:10 localhost sshd\[28986\]: Failed password for root from 125.124.152.59 port 46494 ssh2
Dec 16 18:49:47 localhost sshd\[29240\]: Invalid user ident from 125.124.152.59 port 47356
Dec 16 18:49:47 localhost sshd\[29240\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.124.152.59
Dec 16 18:49:49 localhost sshd\[29240\]: Failed password for invalid user ident from 125.124.152.59 port 47356 ssh2
...
2019-12-17 03:12:47
51.75.17.122 attackspam
Dec 14 02:18:12 microserver sshd[21116]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.17.122
Dec 14 02:18:14 microserver sshd[21116]: Failed password for invalid user http from 51.75.17.122 port 57092 ssh2
Dec 14 02:23:22 microserver sshd[21892]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.17.122  user=nobody
Dec 14 02:23:24 microserver sshd[21892]: Failed password for nobody from 51.75.17.122 port 37774 ssh2
Dec 14 02:33:35 microserver sshd[23547]: Invalid user lorence from 51.75.17.122 port 55100
Dec 14 02:33:35 microserver sshd[23547]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.17.122
Dec 14 02:33:37 microserver sshd[23547]: Failed password for invalid user lorence from 51.75.17.122 port 55100 ssh2
Dec 14 02:38:51 microserver sshd[24306]: Invalid user katsuo from 51.75.17.122 port 35712
Dec 14 02:38:51 microserver sshd[24306]: pam_unix(sshd:auth): authenticat
2019-12-17 02:58:38
114.226.233.0 attackspam
port 23
2019-12-17 03:17:35
94.23.218.74 attack
$f2bV_matches
2019-12-17 03:04:24

Recently Reported IPs

193.112.190.192 183.36.34.69 121.231.113.168 203.25.78.220
43.230.8.77 45.88.91.106 155.102.247.63 155.212.209.222
64.81.158.110 47.87.140.88 110.87.72.99 10.192.41.193
51.159.87.17 34.53.162.177 156.174.65.72 117.161.15.80
111.62.187.84 198.235.24.39 121.41.166.225 178.128.30.185