City: unknown
Region: unknown
Country: Indonesia
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 103.107.245.45 | attack | 445/tcp 1433/tcp... [2020-06-10/07-19]8pkt,2pt.(tcp) |
2020-07-20 05:44:16 |
| 103.107.245.122 | attack | May 14 05:05:41 new sshd[24360]: Failed password for invalid user admin1 from 103.107.245.122 port 62012 ssh2 May 14 05:05:42 new sshd[24362]: Failed password for invalid user admin1 from 103.107.245.122 port 62014 ssh2 May 14 05:05:42 new sshd[24364]: Failed password for invalid user admin1 from 103.107.245.122 port 62026 ssh2 May 14 05:05:42 new sshd[24360]: Connection closed by 103.107.245.122 [preauth] May 14 05:05:42 new sshd[24362]: Connection closed by 103.107.245.122 [preauth] May 14 05:05:42 new sshd[24364]: Connection closed by 103.107.245.122 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=103.107.245.122 |
2020-05-14 18:16:56 |
| 103.107.245.150 | attack | Honeypot attack, port: 445, PTR: PTR record not found |
2020-03-30 19:22:21 |
| 103.107.245.45 | attackspam | firewall-block, port(s): 1433/tcp |
2020-03-10 23:16:24 |
| 103.107.245.45 | attackbotsspam | firewall-block, port(s): 445/tcp |
2020-01-25 03:50:25 |
| 103.107.245.3 | attackbots | Honeypot attack, port: 445, PTR: PTR record not found |
2020-01-13 18:51:04 |
| 103.107.245.3 | attackspambots | 445/tcp 445/tcp 445/tcp... [2019-06-06/08-06]13pkt,1pt.(tcp) |
2019-08-07 09:17:11 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 103.107.245.110
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 7215
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;103.107.245.110. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025121400 1800 900 604800 86400
;; Query time: 13 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Dec 14 16:26:24 CST 2025
;; MSG SIZE rcvd: 108b'110.245.107.103.in-addr.arpa domain name pointer sijoli-110-245-107.jatengprov.go.id.
'b'110.245.107.103.in-addr.arpa name = sijoli-110-245-107.jatengprov.go.id.
Authoritative answers can be found from:
'| IP | Type | Details | Datetime |
|---|---|---|---|
| 51.75.247.13 | attackspambots | Aug 7 22:43:31 plusreed sshd[17136]: Invalid user donatas from 51.75.247.13 Aug 7 22:43:31 plusreed sshd[17136]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.247.13 Aug 7 22:43:31 plusreed sshd[17136]: Invalid user donatas from 51.75.247.13 Aug 7 22:43:33 plusreed sshd[17136]: Failed password for invalid user donatas from 51.75.247.13 port 45446 ssh2 ... |
2019-08-08 11:07:04 |
| 122.199.152.114 | attackbots | Aug 8 04:06:09 debian sshd\[16708\]: Invalid user pl from 122.199.152.114 port 23482 Aug 8 04:06:09 debian sshd\[16708\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.199.152.114 ... |
2019-08-08 11:10:40 |
| 5.9.70.113 | attackbotsspam | 20 attempts against mh-misbehave-ban on ice.magehost.pro |
2019-08-08 10:40:54 |
| 118.24.38.53 | attackbots | Aug 8 04:28:50 nextcloud sshd\[13957\]: Invalid user insurgency from 118.24.38.53 Aug 8 04:28:50 nextcloud sshd\[13957\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.38.53 Aug 8 04:28:52 nextcloud sshd\[13957\]: Failed password for invalid user insurgency from 118.24.38.53 port 51202 ssh2 ... |
2019-08-08 10:41:25 |
| 69.30.202.138 | attack | 20 attempts against mh-misbehave-ban on hill.magehost.pro |
2019-08-08 10:55:57 |
| 52.172.178.54 | attack | 20 attempts against mh-ssh on sky.magehost.pro |
2019-08-08 11:03:21 |
| 212.64.56.177 | attack | Aug 8 07:53:09 vibhu-HP-Z238-Microtower-Workstation sshd\[13325\]: Invalid user mcm from 212.64.56.177 Aug 8 07:53:09 vibhu-HP-Z238-Microtower-Workstation sshd\[13325\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.56.177 Aug 8 07:53:11 vibhu-HP-Z238-Microtower-Workstation sshd\[13325\]: Failed password for invalid user mcm from 212.64.56.177 port 35842 ssh2 Aug 8 07:58:29 vibhu-HP-Z238-Microtower-Workstation sshd\[13496\]: Invalid user djtony from 212.64.56.177 Aug 8 07:58:29 vibhu-HP-Z238-Microtower-Workstation sshd\[13496\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.56.177 ... |
2019-08-08 10:51:16 |
| 106.13.2.226 | attackbotsspam | Aug 8 02:24:37 MK-Soft-VM5 sshd\[3296\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.2.226 user=backup Aug 8 02:24:39 MK-Soft-VM5 sshd\[3296\]: Failed password for backup from 106.13.2.226 port 50188 ssh2 Aug 8 02:27:13 MK-Soft-VM5 sshd\[3319\]: Invalid user krissu from 106.13.2.226 port 45900 ... |
2019-08-08 11:23:00 |
| 178.32.141.39 | attackbotsspam | Aug 8 04:27:13 mail sshd\[32204\]: Invalid user amp from 178.32.141.39 Aug 8 04:27:13 mail sshd\[32204\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.32.141.39 Aug 8 04:27:15 mail sshd\[32204\]: Failed password for invalid user amp from 178.32.141.39 port 61485 ssh2 ... |
2019-08-08 11:21:19 |
| 138.197.65.185 | attackbotsspam | www.handydirektreparatur.de 138.197.65.185 \[08/Aug/2019:04:28:04 +0200\] "POST /wp-login.php HTTP/1.1" 200 5668 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" www.handydirektreparatur.de 138.197.65.185 \[08/Aug/2019:04:28:05 +0200\] "POST /xmlrpc.php HTTP/1.1" 200 4117 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" |
2019-08-08 10:58:06 |
| 103.133.104.133 | attackbots | Aug 8 04:29:17 localhost postfix/smtpd\[24666\]: warning: unknown\[103.133.104.133\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 8 04:29:25 localhost postfix/smtpd\[24666\]: warning: unknown\[103.133.104.133\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 8 04:29:37 localhost postfix/smtpd\[24666\]: warning: unknown\[103.133.104.133\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 8 04:30:03 localhost postfix/smtpd\[24666\]: warning: unknown\[103.133.104.133\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 8 04:30:11 localhost postfix/smtpd\[24691\]: warning: unknown\[103.133.104.133\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2019-08-08 10:47:05 |
| 83.118.197.36 | attackspam | Invalid user fujita from 83.118.197.36 port 10400 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=83.118.197.36 Failed password for invalid user fujita from 83.118.197.36 port 10400 ssh2 Invalid user ivan from 83.118.197.36 port 10400 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=83.118.197.36 |
2019-08-08 11:02:40 |
| 144.217.255.89 | attackspam | $f2bV_matches_ltvn |
2019-08-08 11:06:42 |
| 103.25.21.151 | attackbotsspam | DATE:2019-08-08 04:27:31, IP:103.25.21.151, PORT:ssh SSH brute force auth (ermes) |
2019-08-08 11:12:39 |
| 2.53.59.131 | attack | Chat Spam |
2019-08-08 10:47:34 |