必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): Clifton

省份(region): New Jersey

国家(country): United States

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
IP 类型 评论内容 时间
104.131.108.5 attackspam
Time:     Sat Sep 26 16:02:04 2020 +0000
IP:       104.131.108.5 (US/United States/-)
Failures: 5 (sshd)
Interval: 3600 seconds
Blocked:  Permanent Block [LF_SSHD]

Log entries:

Sep 26 15:48:49 activeserver sshd[25017]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.108.5  user=root
Sep 26 15:48:51 activeserver sshd[25017]: Failed password for root from 104.131.108.5 port 52168 ssh2
Sep 26 15:59:35 activeserver sshd[14763]: Invalid user oracle from 104.131.108.5 port 46546
Sep 26 15:59:37 activeserver sshd[14763]: Failed password for invalid user oracle from 104.131.108.5 port 46546 ssh2
Sep 26 16:02:01 activeserver sshd[19862]: Invalid user joe from 104.131.108.5 port 59976
2020-09-29 06:34:47
104.131.108.5 attackspam
Time:     Sat Sep 26 16:02:04 2020 +0000
IP:       104.131.108.5 (US/United States/-)
Failures: 5 (sshd)
Interval: 3600 seconds
Blocked:  Permanent Block [LF_SSHD]

Log entries:

Sep 26 15:48:49 activeserver sshd[25017]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.108.5  user=root
Sep 26 15:48:51 activeserver sshd[25017]: Failed password for root from 104.131.108.5 port 52168 ssh2
Sep 26 15:59:35 activeserver sshd[14763]: Invalid user oracle from 104.131.108.5 port 46546
Sep 26 15:59:37 activeserver sshd[14763]: Failed password for invalid user oracle from 104.131.108.5 port 46546 ssh2
Sep 26 16:02:01 activeserver sshd[19862]: Invalid user joe from 104.131.108.5 port 59976
2020-09-28 23:01:39
104.131.108.5 attack
Invalid user admin from 104.131.108.5 port 40142
2020-09-28 15:05:47
104.131.108.5 attackbots
$f2bV_matches
2020-09-20 03:52:35
104.131.108.5 attackbotsspam
SSH Brute-Force attacks
2020-09-19 19:58:01
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.131.108.172
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 48990
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.131.108.172.		IN	A

;; AUTHORITY SECTION:
.			174	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022031901 1800 900 604800 86400

;; Query time: 363 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Mar 20 11:47:30 CST 2022
;; MSG SIZE  rcvd: 108
HOST信息:
172.108.131.104.in-addr.arpa domain name pointer redbrickpizza.tempurl.host.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
172.108.131.104.in-addr.arpa	name = redbrickpizza.tempurl.host.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
77.42.103.222 attackspambots
Automatic report - Port Scan Attack
2019-11-09 13:37:45
123.148.242.232 attack
miraklein.com 123.148.242.232 \[09/Nov/2019:05:54:47 +0100\] "POST /xmlrpc.php HTTP/1.1" 301 494 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/63.0.3239.132 Safari/537.36"
miraklein.com 123.148.242.232 \[09/Nov/2019:05:54:48 +0100\] "POST /xmlrpc.php HTTP/1.1" 301 494 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/63.0.3239.132 Safari/537.36"
2019-11-09 13:47:02
145.239.196.2 attack
Nov  9 05:54:35 bouncer sshd\[10498\]: Invalid user qwe1234%\^\&\* from 145.239.196.2 port 39894
Nov  9 05:54:35 bouncer sshd\[10498\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=145.239.196.2 
Nov  9 05:54:36 bouncer sshd\[10498\]: Failed password for invalid user qwe1234%\^\&\* from 145.239.196.2 port 39894 ssh2
...
2019-11-09 13:53:04
180.76.141.221 attack
2019-11-09T04:49:14.392798hub.schaetter.us sshd\[6934\]: Invalid user netzplatz from 180.76.141.221 port 58597
2019-11-09T04:49:14.408120hub.schaetter.us sshd\[6934\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.141.221
2019-11-09T04:49:16.714546hub.schaetter.us sshd\[6934\]: Failed password for invalid user netzplatz from 180.76.141.221 port 58597 ssh2
2019-11-09T04:54:19.112362hub.schaetter.us sshd\[6951\]: Invalid user Passw@rd from 180.76.141.221 port 48249
2019-11-09T04:54:19.125340hub.schaetter.us sshd\[6951\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.141.221
...
2019-11-09 14:00:34
94.191.78.128 attackbotsspam
Fail2Ban - SSH Bruteforce Attempt
2019-11-09 14:04:52
220.176.204.91 attack
Nov  9 05:48:59 v22018076622670303 sshd\[10440\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.176.204.91  user=root
Nov  9 05:49:00 v22018076622670303 sshd\[10440\]: Failed password for root from 220.176.204.91 port 31191 ssh2
Nov  9 05:55:02 v22018076622670303 sshd\[10490\]: Invalid user compnf from 220.176.204.91 port 50106
...
2019-11-09 13:39:16
111.85.191.131 attackbotsspam
Nov  9 06:27:47 meumeu sshd[14195]: Failed password for root from 111.85.191.131 port 47468 ssh2
Nov  9 06:32:36 meumeu sshd[14913]: Failed password for root from 111.85.191.131 port 53352 ssh2
...
2019-11-09 13:42:44
220.202.75.199 attackspambots
$f2bV_matches
2019-11-09 13:36:28
40.117.238.50 attackspam
[Aegis] @ 2019-11-09 07:06:05  0000 -> Attempted Administrator Privilege Gain: ET SCAN LibSSH Based Frequent SSH Connections Likely BruteForce Attack
2019-11-09 14:09:21
37.49.231.122 attackbots
" "
2019-11-09 13:58:15
118.174.11.149 attackspam
2019-11-09T04:53:51.794408shield sshd\[3729\]: Invalid user userftp from 118.174.11.149 port 49026
2019-11-09T04:53:51.798751shield sshd\[3729\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=node-ph.118-174.static.totidc.net
2019-11-09T04:53:53.802464shield sshd\[3729\]: Failed password for invalid user userftp from 118.174.11.149 port 49026 ssh2
2019-11-09T04:54:20.019575shield sshd\[3859\]: Invalid user information from 118.174.11.149 port 59050
2019-11-09T04:54:20.025545shield sshd\[3859\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=node-ph.118-174.static.totidc.net
2019-11-09 13:59:47
188.158.69.3 attackbots
IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/188.158.69.3/ 
 
 IR - 1H : (62)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : IR 
 NAME ASN : ASN39501 
 
 IP : 188.158.69.3 
 
 CIDR : 188.158.64.0/19 
 
 PREFIX COUNT : 91 
 
 UNIQUE IP COUNT : 203776 
 
 
 ATTACKS DETECTED ASN39501 :  
  1H - 1 
  3H - 1 
  6H - 2 
 12H - 3 
 24H - 4 
 
 DateTime : 2019-11-09 05:54:37 
 
 INFO : Port Scan TELNET Detected and Blocked by ADMIN  - data recovery
2019-11-09 13:51:49
45.93.247.54 attackbotsspam
from virtueobject.icu (Unknown [45.93.247.54]) by cauvin.org with ESMTP ; Fri, 8 Nov 2019 22:54:33 -0600
2019-11-09 13:52:39
108.162.219.22 attackbots
WEB SPAM: How to earn on investments in Cryptocurrency from $ 4893 per day: https://make-4-btc-per-day.blogspot.cz?c=12
2019-11-09 13:41:40
89.159.141.31 attackspam
Nov  9 05:54:28 v22018076622670303 sshd\[10479\]: Invalid user office from 89.159.141.31 port 52694
Nov  9 05:54:28 v22018076622670303 sshd\[10479\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.159.141.31
Nov  9 05:54:29 v22018076622670303 sshd\[10479\]: Failed password for invalid user office from 89.159.141.31 port 52694 ssh2
...
2019-11-09 13:57:31

最近上报的IP列表

104.131.106.23 104.131.113.239 104.131.113.74 104.131.12.61
104.131.127.132 104.131.127.199 104.131.130.231 104.131.131.168
104.131.132.133 104.131.132.148 172.221.218.249 104.131.133.124
104.131.136.214 104.131.137.177 104.131.139.80 104.131.143.147
104.131.15.247 168.253.202.212 104.131.158.169 104.131.159.190