必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
IP 类型 评论内容 时间
104.131.138.126 attackbotsspam
Jun  6 23:44:45 minden010 sshd[8759]: Failed password for root from 104.131.138.126 port 32770 ssh2
Jun  6 23:46:38 minden010 sshd[10423]: Failed password for root from 104.131.138.126 port 36856 ssh2
...
2020-06-07 07:53:51
104.131.138.126 attack
Jun  2 22:05:37 game-panel sshd[7599]: Failed password for root from 104.131.138.126 port 40660 ssh2
Jun  2 22:09:08 game-panel sshd[7859]: Failed password for root from 104.131.138.126 port 45942 ssh2
2020-06-03 06:37:39
104.131.138.126 attackspambots
Jun  2 06:45:22 ip-172-31-61-156 sshd[29713]: Failed password for root from 104.131.138.126 port 52244 ssh2
Jun  2 06:47:29 ip-172-31-61-156 sshd[29783]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.138.126  user=root
Jun  2 06:47:31 ip-172-31-61-156 sshd[29783]: Failed password for root from 104.131.138.126 port 58134 ssh2
Jun  2 06:47:29 ip-172-31-61-156 sshd[29783]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.138.126  user=root
Jun  2 06:47:31 ip-172-31-61-156 sshd[29783]: Failed password for root from 104.131.138.126 port 58134 ssh2
...
2020-06-02 16:18:32
104.131.138.126 attackspambots
(sshd) Failed SSH login from 104.131.138.126 (US/United States/-): 5 in the last 3600 secs
2020-05-09 17:55:43
104.131.138.126 attackspam
$f2bV_matches
2020-05-06 13:44:00
104.131.138.126 attack
May  3 06:34:16 srv-ubuntu-dev3 sshd[99368]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.138.126  user=root
May  3 06:34:18 srv-ubuntu-dev3 sshd[99368]: Failed password for root from 104.131.138.126 port 37690 ssh2
May  3 06:37:56 srv-ubuntu-dev3 sshd[100388]: Invalid user admin from 104.131.138.126
May  3 06:37:56 srv-ubuntu-dev3 sshd[100388]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.138.126
May  3 06:37:56 srv-ubuntu-dev3 sshd[100388]: Invalid user admin from 104.131.138.126
May  3 06:37:59 srv-ubuntu-dev3 sshd[100388]: Failed password for invalid user admin from 104.131.138.126 port 49142 ssh2
May  3 06:41:42 srv-ubuntu-dev3 sshd[100934]: Invalid user admin from 104.131.138.126
May  3 06:41:42 srv-ubuntu-dev3 sshd[100934]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.138.126
May  3 06:41:42 srv-ubuntu-dev3 sshd[100934]: Invalid
...
2020-05-03 14:46:01
104.131.138.126 attack
*Port Scan* detected from 104.131.138.126 (US/United States/California/San Francisco/-). 4 hits in the last 105 seconds
2020-04-23 04:11:49
104.131.138.126 attackspam
2020-04-17T20:00:36.378530abusebot-6.cloudsearch.cf sshd[12419]: Invalid user r from 104.131.138.126 port 45948
2020-04-17T20:00:36.384250abusebot-6.cloudsearch.cf sshd[12419]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.138.126
2020-04-17T20:00:36.378530abusebot-6.cloudsearch.cf sshd[12419]: Invalid user r from 104.131.138.126 port 45948
2020-04-17T20:00:38.339500abusebot-6.cloudsearch.cf sshd[12419]: Failed password for invalid user r from 104.131.138.126 port 45948 ssh2
2020-04-17T20:04:10.882939abusebot-6.cloudsearch.cf sshd[12631]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.138.126  user=root
2020-04-17T20:04:13.219500abusebot-6.cloudsearch.cf sshd[12631]: Failed password for root from 104.131.138.126 port 52874 ssh2
2020-04-17T20:07:41.771598abusebot-6.cloudsearch.cf sshd[12849]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.13
...
2020-04-18 04:15:33
104.131.138.126 attack
Apr 11 22:53:04 vpn01 sshd[19431]: Failed password for root from 104.131.138.126 port 55416 ssh2
...
2020-04-12 05:37:52
104.131.138.126 attackbots
Apr  7 10:57:26 santamaria sshd\[21921\]: Invalid user test from 104.131.138.126
Apr  7 10:57:26 santamaria sshd\[21921\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.138.126
Apr  7 10:57:29 santamaria sshd\[21921\]: Failed password for invalid user test from 104.131.138.126 port 35216 ssh2
...
2020-04-07 17:51:59
104.131.138.126 attack
$f2bV_matches
2020-04-04 14:07:13
104.131.138.126 attack
ssh brute force
2020-03-26 14:05:54
104.131.138.126 attackspam
SSH Invalid Login
2020-03-25 07:39:08
104.131.138.126 attackspambots
invalid user
2020-03-23 20:19:35
104.131.138.126 attackspam
(sshd) Failed SSH login from 104.131.138.126 (US/United States/-): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Mar 19 14:01:53 ubnt-55d23 sshd[10604]: Invalid user wrchang from 104.131.138.126 port 54684
Mar 19 14:01:55 ubnt-55d23 sshd[10604]: Failed password for invalid user wrchang from 104.131.138.126 port 54684 ssh2
2020-03-19 23:35:56
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.131.138.176
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 35806
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.131.138.176.		IN	A

;; AUTHORITY SECTION:
.			156	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030302 1800 900 604800 86400

;; Query time: 69 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Mar 04 11:45:31 CST 2022
;; MSG SIZE  rcvd: 108
HOST信息:
Host 176.138.131.104.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 176.138.131.104.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
187.74.66.16 attack
Sep  7 18:37:21 ovpn sshd[12392]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.74.66.16  user=r.r
Sep  7 18:37:23 ovpn sshd[12392]: Failed password for r.r from 187.74.66.16 port 48892 ssh2
Sep  7 18:37:23 ovpn sshd[12392]: Received disconnect from 187.74.66.16 port 48892:11: Bye Bye [preauth]
Sep  7 18:37:23 ovpn sshd[12392]: Disconnected from 187.74.66.16 port 48892 [preauth]
Sep  7 18:44:07 ovpn sshd[14034]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.74.66.16  user=r.r
Sep  7 18:44:09 ovpn sshd[14034]: Failed password for r.r from 187.74.66.16 port 58917 ssh2
Sep  7 18:44:09 ovpn sshd[14034]: Received disconnect from 187.74.66.16 port 58917:11: Bye Bye [preauth]
Sep  7 18:44:09 ovpn sshd[14034]: Disconnected from 187.74.66.16 port 58917 [preauth]
Sep  7 18:46:39 ovpn sshd[14697]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.74.........
------------------------------
2020-09-09 00:57:46
124.204.65.82 attackspam
Sep  8 08:31:01 game-panel sshd[19431]: Failed password for root from 124.204.65.82 port 17973 ssh2
Sep  8 08:33:56 game-panel sshd[20404]: Failed password for root from 124.204.65.82 port 58377 ssh2
2020-09-09 00:47:09
179.113.169.216 attackbots
Lines containing failures of 179.113.169.216
Sep  7 01:43:04 dns-3 sshd[27300]: User r.r from 179.113.169.216 not allowed because not listed in AllowUsers
Sep  7 01:43:04 dns-3 sshd[27300]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.113.169.216  user=r.r
Sep  7 01:43:06 dns-3 sshd[27300]: Failed password for invalid user r.r from 179.113.169.216 port 48338 ssh2
Sep  7 01:43:08 dns-3 sshd[27300]: Received disconnect from 179.113.169.216 port 48338:11: Bye Bye [preauth]
Sep  7 01:43:08 dns-3 sshd[27300]: Disconnected from invalid user r.r 179.113.169.216 port 48338 [preauth]
Sep  7 01:47:58 dns-3 sshd[27380]: User r.r from 179.113.169.216 not allowed because not listed in AllowUsers
Sep  7 01:47:58 dns-3 sshd[27380]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.113.169.216  user=r.r
Sep  7 01:48:00 dns-3 sshd[27380]: Failed password for invalid user r.r from 179.113.169.216 port........
------------------------------
2020-09-09 00:33:32
2604:a880:400:d1::b24:b001 attackbots
Sep  7 18:50:45 lavrea wordpress(yvoictra.com)[100647]: Authentication attempt for unknown user admin from 2604:a880:400:d1::b24:b001
...
2020-09-09 00:32:44
162.142.125.25 attackbots
 TCP (SYN) 162.142.125.25:22945 -> port 23, len 44
2020-09-09 01:02:20
59.126.224.103 attack
Honeypot attack, port: 81, PTR: 59-126-224-103.HINET-IP.hinet.net.
2020-09-09 01:14:52
162.243.130.79 attackbotsspam
Port scan denied
2020-09-09 00:33:57
80.4.110.71 attackspambots
Sep  7 18:19:15 mx sshd[11941]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.4.110.71
Sep  7 18:19:17 mx sshd[11941]: Failed password for invalid user pi from 80.4.110.71 port 52002 ssh2
2020-09-09 01:05:09
93.107.187.162 attackspam
Sep  8 00:09:33 h1745522 sshd[5552]: Invalid user ubuntu from 93.107.187.162 port 35200
Sep  8 00:09:33 h1745522 sshd[5552]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.107.187.162
Sep  8 00:09:33 h1745522 sshd[5552]: Invalid user ubuntu from 93.107.187.162 port 35200
Sep  8 00:09:35 h1745522 sshd[5552]: Failed password for invalid user ubuntu from 93.107.187.162 port 35200 ssh2
Sep  8 00:12:57 h1745522 sshd[6777]: Invalid user nologin from 93.107.187.162 port 39828
Sep  8 00:12:57 h1745522 sshd[6777]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.107.187.162
Sep  8 00:12:57 h1745522 sshd[6777]: Invalid user nologin from 93.107.187.162 port 39828
Sep  8 00:12:58 h1745522 sshd[6777]: Failed password for invalid user nologin from 93.107.187.162 port 39828 ssh2
Sep  8 00:16:23 h1745522 sshd[9883]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.107.187.162
...
2020-09-09 01:17:32
147.135.203.181 attackbotsspam
Sep  8 06:06:43 web9 sshd\[12902\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=147.135.203.181  user=root
Sep  8 06:06:45 web9 sshd\[12902\]: Failed password for root from 147.135.203.181 port 54630 ssh2
Sep  8 06:10:15 web9 sshd\[13341\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=147.135.203.181  user=root
Sep  8 06:10:17 web9 sshd\[13341\]: Failed password for root from 147.135.203.181 port 58876 ssh2
Sep  8 06:13:49 web9 sshd\[13722\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=147.135.203.181  user=root
2020-09-09 00:53:56
182.61.49.64 attack
$f2bV_matches
2020-09-09 00:31:25
74.64.243.192 attackspambots
Brute-force attempt banned
2020-09-09 00:51:58
171.232.251.204 attack
SSH-BruteForce
2020-09-09 01:01:03
193.27.228.242 attack
Here more information about 193.27.228.242 
info: [Russia] 49505 OOO Network of data-centers Selectel 
Connected: 5 servere(s) 
Reason: ssh 
Portscan/portflood
Ports: 21,22,23,81,993 
Services: hosts2-ns,imaps,ssh,ftp,telnet 
servere: Europe/Moscow (UTC+3) 
Found at blocklist: spfbl.net, abuseIPDB.com
myIP:* 
 
[2020-09-06 15:54:49] (tcp) myIP:81 <- 193.27.228.242:54580
[2020-09-06 16:25:40] (tcp) myIP:993 <- 193.27.228.242:54580
[2020-09-06 17:45:53] (tcp) myIP:22 <- 193.27.228.242:54580
[2020-09-06 17:49:19] (tcp) myIP:21 <- 193.27.228.242:54580
[2020-09-06 21:27:39] (tcp) myIP:23 <- 193.27.228.242:54580


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=193.27.228.242
2020-09-09 01:15:13
165.22.76.96 attackspam
(sshd) Failed SSH login from 165.22.76.96 (DE/Germany/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep  8 11:59:24 server sshd[26600]: Invalid user admin from 165.22.76.96 port 57214
Sep  8 11:59:27 server sshd[26600]: Failed password for invalid user admin from 165.22.76.96 port 57214 ssh2
Sep  8 12:15:56 server sshd[31383]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.76.96  user=root
Sep  8 12:15:58 server sshd[31383]: Failed password for root from 165.22.76.96 port 59458 ssh2
Sep  8 12:19:27 server sshd[32121]: Invalid user jboss from 165.22.76.96 port 36960
2020-09-09 00:55:40

最近上报的IP列表

104.131.156.181 104.130.255.189 104.131.169.83 112.66.108.159
104.131.172.198 104.131.171.78 104.131.178.20 104.131.241.208
104.131.186.81 104.131.241.32 104.131.22.155 104.131.3.86
104.131.171.219 104.131.181.175 104.131.30.24 112.66.108.171
104.131.4.140 104.131.36.57 104.131.35.213 104.131.38.99