必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): None

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
IP 类型 评论内容 时间
104.168.136.218 attackspam
Aug  4 14:22:58 datentool sshd[7487]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.168.136.218  user=r.r
Aug  4 14:23:00 datentool sshd[7487]: Failed password for r.r from 104.168.136.218 port 59136 ssh2
Aug  4 14:25:07 datentool sshd[7515]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.168.136.218  user=r.r
Aug  4 14:25:09 datentool sshd[7515]: Failed password for r.r from 104.168.136.218 port 46482 ssh2
Aug  4 14:26:31 datentool sshd[7594]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.168.136.218  user=r.r
Aug  4 14:26:33 datentool sshd[7594]: Failed password for r.r from 104.168.136.218 port 59192 ssh2
Aug  4 14:27:46 datentool sshd[7613]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.168.136.218  user=r.r
Aug  4 14:27:48 datentool sshd[7613]: Failed password for r.r from 104.168.136.........
-------------------------------
2020-08-05 01:55:19
104.168.138.77 attackbotsspam
Attempted connection to port 5501.
2020-08-01 14:06:09
104.168.136.233 attack
Spam
2020-05-28 04:33:37
104.168.136.225 attack
...
2020-05-15 22:10:37
104.168.136.225 attackspam
May 13 05:58:49 legacy sshd[13973]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.168.136.225
May 13 05:58:50 legacy sshd[13973]: Failed password for invalid user ubstep from 104.168.136.225 port 38074 ssh2
May 13 06:04:12 legacy sshd[14103]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.168.136.225
...
2020-05-13 12:10:45
104.168.133.166 attackbots
Nov 20 05:37:34 vpn01 sshd[9462]: Failed password for root from 104.168.133.166 port 41664 ssh2
...
2019-11-20 13:17:39
104.168.133.166 attackbots
Nov 19 11:42:27 wbs sshd\[19490\]: Invalid user th from 104.168.133.166
Nov 19 11:42:27 wbs sshd\[19490\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=hwsrv-605185.hostwindsdns.com
Nov 19 11:42:29 wbs sshd\[19490\]: Failed password for invalid user th from 104.168.133.166 port 35494 ssh2
Nov 19 11:48:17 wbs sshd\[20024\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=hwsrv-605185.hostwindsdns.com  user=root
Nov 19 11:48:19 wbs sshd\[20024\]: Failed password for root from 104.168.133.166 port 44380 ssh2
2019-11-20 05:53:10
104.168.134.59 attackbotsspam
SSH bruteforce (Triggered fail2ban)
2019-11-19 13:37:13
104.168.134.59 attackbotsspam
Nov 18 18:42:04 marvibiene sshd[4024]: Invalid user server from 104.168.134.59 port 52410
Nov 18 18:42:04 marvibiene sshd[4024]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.168.134.59
Nov 18 18:42:04 marvibiene sshd[4024]: Invalid user server from 104.168.134.59 port 52410
Nov 18 18:42:06 marvibiene sshd[4024]: Failed password for invalid user server from 104.168.134.59 port 52410 ssh2
...
2019-11-19 02:53:23
104.168.133.166 attackbots
Nov 17 08:42:23 lnxweb62 sshd[21188]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.168.133.166
2019-11-17 20:21:18
104.168.133.166 attackbots
Automatic report - SSH Brute-Force Attack
2019-11-13 05:53:46
104.168.133.166 attackspam
Nov  8 12:55:57 www6-3 sshd[32638]: Invalid user ik from 104.168.133.166 port 33990
Nov  8 12:55:57 www6-3 sshd[32638]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.168.133.166
Nov  8 12:55:59 www6-3 sshd[32638]: Failed password for invalid user ik from 104.168.133.166 port 33990 ssh2
Nov  8 12:55:59 www6-3 sshd[32638]: Received disconnect from 104.168.133.166 port 33990:11: Bye Bye [preauth]
Nov  8 12:55:59 www6-3 sshd[32638]: Disconnected from 104.168.133.166 port 33990 [preauth]
Nov  8 13:18:38 www6-3 sshd[1808]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.168.133.166  user=r.r
Nov  8 13:18:41 www6-3 sshd[1808]: Failed password for r.r from 104.168.133.166 port 38420 ssh2
Nov  8 13:18:41 www6-3 sshd[1808]: Received disconnect from 104.168.133.166 port 38420:11: Bye Bye [preauth]
Nov  8 13:18:41 www6-3 sshd[1808]: Disconnected from 104.168.133.166 port 38420 [preauth]
Nov  8........
-------------------------------
2019-11-09 06:27:43
104.168.134.59 attackspambots
Oct 27 11:20:47 server sshd\[12138\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=hwsrv-536529.hostwindsdns.com  user=root
Oct 27 11:20:49 server sshd\[12138\]: Failed password for root from 104.168.134.59 port 56154 ssh2
Oct 27 11:35:12 server sshd\[15951\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=hwsrv-536529.hostwindsdns.com  user=root
Oct 27 11:35:14 server sshd\[15951\]: Failed password for root from 104.168.134.59 port 47198 ssh2
Oct 27 11:44:13 server sshd\[18150\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=hwsrv-536529.hostwindsdns.com  user=root
...
2019-10-27 19:02:55
104.168.134.59 attackspambots
2019-10-22T12:59:11.701316abusebot-5.cloudsearch.cf sshd\[20301\]: Invalid user letmein123 from 104.168.134.59 port 41806
2019-10-22 21:23:00
104.168.134.59 attack
Oct 18 13:31:35 php1 sshd\[30800\]: Invalid user !@123456qwa from 104.168.134.59
Oct 18 13:31:35 php1 sshd\[30800\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.168.134.59
Oct 18 13:31:37 php1 sshd\[30800\]: Failed password for invalid user !@123456qwa from 104.168.134.59 port 59342 ssh2
Oct 18 13:40:13 php1 sshd\[31635\]: Invalid user opensayzme from 104.168.134.59
Oct 18 13:40:13 php1 sshd\[31635\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.168.134.59
2019-10-19 07:48:30
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.168.13.42
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49227
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.168.13.42.			IN	A

;; AUTHORITY SECTION:
.			364	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022500 1800 900 604800 86400

;; Query time: 18 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 25 19:37:03 CST 2022
;; MSG SIZE  rcvd: 106
HOST信息:
42.13.168.104.in-addr.arpa domain name pointer 104-168-13-42-host.colocrossing.com.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
42.13.168.104.in-addr.arpa	name = 104-168-13-42-host.colocrossing.com.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
84.236.38.31 attackspambots
Attempt to attack host OS, exploiting network vulnerabilities, on 18-12-2019 14:30:19.
2019-12-19 06:16:07
190.36.241.64 attackspam
Attempt to attack host OS, exploiting network vulnerabilities, on 18-12-2019 14:30:17.
2019-12-19 06:17:19
189.112.132.17 attackspam
TCP Port: 25      invalid blocked  dnsbl-sorbs also spam-sorbs and truncate-gbudb           (739)
2019-12-19 06:17:42
37.49.230.63 attack
\[2019-12-18 16:56:21\] NOTICE\[2839\] chan_sip.c: Registration from '"1001" \' failed for '37.49.230.63:5589' - Wrong password
\[2019-12-18 16:56:21\] SECURITY\[2857\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-12-18T16:56:21.912-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="1001",SessionID="0x7f0fb4234468",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/37.49.230.63/5589",Challenge="111feeed",ReceivedChallenge="111feeed",ReceivedHash="5ba726f739328f596cefb72550668ea2"
\[2019-12-18 16:56:22\] NOTICE\[2839\] chan_sip.c: Registration from '"1001" \' failed for '37.49.230.63:5589' - Wrong password
\[2019-12-18 16:56:22\] SECURITY\[2857\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-12-18T16:56:22.059-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="1001",SessionID="0x7f0fb46c6168",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/3
2019-12-19 06:00:15
123.23.42.201 attack
$f2bV_matches
2019-12-19 06:01:31
85.67.147.238 attack
Dec 18 22:00:49 marvibiene sshd[56808]: Invalid user apache from 85.67.147.238 port 40696
Dec 18 22:00:49 marvibiene sshd[56808]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.67.147.238
Dec 18 22:00:49 marvibiene sshd[56808]: Invalid user apache from 85.67.147.238 port 40696
Dec 18 22:00:51 marvibiene sshd[56808]: Failed password for invalid user apache from 85.67.147.238 port 40696 ssh2
...
2019-12-19 06:06:02
194.44.39.126 attackspam
Unauthorized connection attempt from IP address 194.44.39.126 on Port 445(SMB)
2019-12-19 05:56:46
188.35.187.50 attackbotsspam
Dec 18 22:34:26 nextcloud sshd\[16298\]: Invalid user semanaz from 188.35.187.50
Dec 18 22:34:26 nextcloud sshd\[16298\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.35.187.50
Dec 18 22:34:27 nextcloud sshd\[16298\]: Failed password for invalid user semanaz from 188.35.187.50 port 54074 ssh2
...
2019-12-19 05:50:27
118.70.72.103 attackbotsspam
Dec 18 14:04:24 vtv3 sshd[30955]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.70.72.103 
Dec 18 14:04:26 vtv3 sshd[30955]: Failed password for invalid user scydayah from 118.70.72.103 port 48856 ssh2
Dec 18 14:11:05 vtv3 sshd[2133]: Failed password for backup from 118.70.72.103 port 59888 ssh2
Dec 18 15:18:24 vtv3 sshd[1486]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.70.72.103 
Dec 18 15:18:26 vtv3 sshd[1486]: Failed password for invalid user jacquie from 118.70.72.103 port 36378 ssh2
Dec 18 15:25:19 vtv3 sshd[5011]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.70.72.103 
Dec 18 15:39:09 vtv3 sshd[11752]: Failed password for root from 118.70.72.103 port 60534 ssh2
Dec 18 15:46:10 vtv3 sshd[15176]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.70.72.103 
Dec 18 15:46:12 vtv3 sshd[15176]: Failed password for invalid user ad
2019-12-19 05:53:34
105.112.97.174 attackspam
Unauthorized connection attempt detected from IP address 105.112.97.174 to port 445
2019-12-19 06:12:33
51.15.51.2 attack
$f2bV_matches
2019-12-19 06:00:01
150.223.21.177 attackspam
Invalid user regular from 150.223.21.177 port 49331
2019-12-19 05:47:44
190.98.210.83 attack
Unauthorized connection attempt from IP address 190.98.210.83 on Port 445(SMB)
2019-12-19 06:04:16
106.12.179.81 attackspambots
Dec 18 14:59:58 XXX sshd[63198]: Invalid user backup from 106.12.179.81 port 54584
2019-12-19 05:43:28
184.154.139.13 attack
This IP has been blocked 175 times in past 15 minutes by my website firewall.
2019-12-19 06:14:49

最近上报的IP列表

104.168.13.82 104.168.13.99 104.168.13.61 104.168.133.14
104.168.13.9 104.168.13.48 104.168.13.90 104.168.13.79
104.168.13.7 104.168.13.46 101.109.191.172 104.168.13.53
104.168.14.121 104.168.135.137 104.168.14.112 104.168.14.143
104.168.14.124 104.168.136.103 104.168.137.240 104.168.14.30