必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): None

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
IP 类型 评论内容 时间
104.168.14.36 attackspambots
Found on   Blocklist de     / proto=6  .  srcport=42398  .  dstport=22 SSH  .     (991)
2020-10-07 02:37:31
104.168.14.36 attackbots
Found on   Blocklist de     / proto=6  .  srcport=42398  .  dstport=22 SSH  .     (991)
2020-10-06 18:34:54
104.168.14.122 attack
 TCP (SYN) 104.168.14.122:41260 -> port 22, len 44
2020-08-31 08:30:32
104.168.141.181 attack
Email spam message
2020-06-24 21:18:29
104.168.142.194 attackbotsspam
port 23
2020-06-20 04:42:22
104.168.141.201 attackbots
TCP Port: 25      invalid blocked  abuseat-org also barracuda and zen-spamhaus           (282)
2020-06-02 08:12:47
104.168.145.99 attackspam
$f2bV_matches
2020-05-26 05:07:13
104.168.142.227 attackbots
lfd: (smtpauth) Failed SMTP AUTH login from 104.168.142.227 (hwsrv-273223.hostwindsdns.com): 5 in the last 3600 secs - Fri Jun 22 19:11:59 2018
2020-04-30 13:06:04
104.168.148.42 attackspambots
Lines containing failures of 104.168.148.42
Apr 19 08:13:27 UTC__SANYALnet-Labs__cac12 sshd[19340]: Connection from 104.168.148.42 port 48714 on 45.62.253.138 port 22
Apr 19 08:13:28 UTC__SANYALnet-Labs__cac12 sshd[19340]: Invalid user ch from 104.168.148.42 port 48714
Apr 19 08:13:30 UTC__SANYALnet-Labs__cac12 sshd[19340]: Failed password for invalid user ch from 104.168.148.42 port 48714 ssh2
Apr 19 08:13:30 UTC__SANYALnet-Labs__cac12 sshd[19340]: Received disconnect from 104.168.148.42 port 48714:11: Bye Bye [preauth]
Apr 19 08:13:30 UTC__SANYALnet-Labs__cac12 sshd[19340]: Disconnected from 104.168.148.42 port 48714 [preauth]
Apr 19 08:24:40 UTC__SANYALnet-Labs__cac12 sshd[19617]: Connection from 104.168.148.42 port 49250 on 45.62.253.138 port 22
Apr 19 08:24:44 UTC__SANYALnet-Labs__cac12 sshd[19617]: Failed password for invalid user r.r from 104.168.148.42 port 49250 ssh2
Apr 19 08:24:44 UTC__SANYALnet-Labs__cac12 sshd[19617]: Received disconnect from 104.168.148.42 ........
------------------------------
2020-04-19 20:48:20
104.168.148.189 attackbots
Fail2Ban Ban Triggered
2020-03-05 15:39:20
104.168.142.227 attackbotsspam
lfd: (smtpauth) Failed SMTP AUTH login from 104.168.142.227 (hwsrv-273223.hostwindsdns.com): 5 in the last 3600 secs - Fri Jun 22 19:11:59 2018
2020-02-23 23:48:05
104.168.144.77 attackbotsspam
lfd: (smtpauth) Failed SMTP AUTH login from 104.168.144.77 (US/United States/hwsrv-238723.hostwindsdns.com): 5 in the last 3600 secs - Thu May  3 12:14:48 2018
2020-02-07 06:46:19
104.168.142.229 attack
2020-01-19T23:42:11.3404711495-001 sshd[29566]: Invalid user lena from 104.168.142.229 port 55354
2020-01-19T23:42:11.3496611495-001 sshd[29566]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=hwsrv-656802.hostwindsdns.com
2020-01-19T23:42:11.3404711495-001 sshd[29566]: Invalid user lena from 104.168.142.229 port 55354
2020-01-19T23:42:13.0808461495-001 sshd[29566]: Failed password for invalid user lena from 104.168.142.229 port 55354 ssh2
2020-01-19T23:44:41.3200111495-001 sshd[29648]: Invalid user admin from 104.168.142.229 port 50442
2020-01-19T23:44:41.3232021495-001 sshd[29648]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=hwsrv-656802.hostwindsdns.com
2020-01-19T23:44:41.3200111495-001 sshd[29648]: Invalid user admin from 104.168.142.229 port 50442
2020-01-19T23:44:42.9783291495-001 sshd[29648]: Failed password for invalid user admin from 104.168.142.229 port 50442 ssh2
2020-01-19T23:47:09.1872401
...
2020-01-20 13:09:22
104.168.142.229 attackspambots
Jan 17 14:51:45 dedicated sshd[8525]: Invalid user vnc from 104.168.142.229 port 39966
2020-01-17 23:38:18
104.168.142.229 attackbots
Unauthorized connection attempt detected from IP address 104.168.142.229 to port 2220 [J]
2020-01-17 04:56:59
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.168.14.74
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 36079
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.168.14.74.			IN	A

;; AUTHORITY SECTION:
.			345	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022500 1800 900 604800 86400

;; Query time: 59 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 25 19:37:22 CST 2022
;; MSG SIZE  rcvd: 106
HOST信息:
74.14.168.104.in-addr.arpa domain name pointer 104-168-14-74-host.colocrossing.com.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
74.14.168.104.in-addr.arpa	name = 104-168-14-74-host.colocrossing.com.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
123.13.210.89 attackbots
Sep 11 18:10:24 sshgateway sshd\[21849\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.13.210.89  user=root
Sep 11 18:10:26 sshgateway sshd\[21849\]: Failed password for root from 123.13.210.89 port 13867 ssh2
Sep 11 18:14:25 sshgateway sshd\[22316\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.13.210.89  user=root
2020-09-12 01:32:39
45.142.120.78 attack
Sep  9 04:13:11 nlmail01.srvfarm.net postfix/smtpd[3554871]: warning: unknown[45.142.120.78]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep  9 04:13:50 nlmail01.srvfarm.net postfix/smtpd[3554871]: warning: unknown[45.142.120.78]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep  9 04:14:28 nlmail01.srvfarm.net postfix/smtpd[3553995]: warning: unknown[45.142.120.78]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep  9 04:15:07 nlmail01.srvfarm.net postfix/smtpd[3554871]: warning: unknown[45.142.120.78]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep  9 04:15:44 nlmail01.srvfarm.net postfix/smtpd[3553995]: warning: unknown[45.142.120.78]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
2020-09-12 01:28:44
192.241.185.120 attackbotsspam
Sep 11 18:21:48 host2 sshd[945144]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.241.185.120  user=root
Sep 11 18:21:50 host2 sshd[945144]: Failed password for root from 192.241.185.120 port 58088 ssh2
Sep 11 18:29:54 host2 sshd[948002]: Invalid user admin from 192.241.185.120 port 36886
Sep 11 18:29:54 host2 sshd[948002]: Invalid user admin from 192.241.185.120 port 36886
...
2020-09-12 01:37:13
209.85.208.67 attack
Trying to spoof execs
2020-09-12 01:46:03
211.159.189.39 attackspam
Sep 11 05:10:04 mail sshd\[16872\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.159.189.39  user=root
Sep 11 05:10:06 mail sshd\[16872\]: Failed password for root from 211.159.189.39 port 58786 ssh2
Sep 11 05:15:45 mail sshd\[16972\]: Invalid user admin from 211.159.189.39
Sep 11 05:15:45 mail sshd\[16972\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.159.189.39
Sep 11 05:15:48 mail sshd\[16972\]: Failed password for invalid user admin from 211.159.189.39 port 33130 ssh2
...
2020-09-12 01:41:14
112.211.241.15 attackbotsspam
Attempts against non-existent wp-login
2020-09-12 02:03:59
125.64.94.133 attackbotsspam
Telnet Server BruteForce Attack
2020-09-12 01:42:52
194.225.228.98 attackbots
3389BruteforceStormFW23
2020-09-12 01:52:09
178.44.156.177 attackbotsspam
Sep 10 18:52:20 * sshd[14239]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.44.156.177
Sep 10 18:52:22 * sshd[14239]: Failed password for invalid user pi from 178.44.156.177 port 33916 ssh2
2020-09-12 01:57:28
1.11.233.190 attack
Honeypot attack, port: 81, PTR: PTR record not found
2020-09-12 01:40:45
41.79.19.106 attackbotsspam
Sep  7 13:11:26 mail.srvfarm.net postfix/smtpd[1072426]: warning: unknown[41.79.19.106]: SASL PLAIN authentication failed: 
Sep  7 13:11:26 mail.srvfarm.net postfix/smtpd[1072426]: lost connection after AUTH from unknown[41.79.19.106]
Sep  7 13:14:43 mail.srvfarm.net postfix/smtps/smtpd[1073013]: warning: unknown[41.79.19.106]: SASL PLAIN authentication failed: 
Sep  7 13:14:43 mail.srvfarm.net postfix/smtps/smtpd[1073013]: lost connection after AUTH from unknown[41.79.19.106]
Sep  7 13:16:41 mail.srvfarm.net postfix/smtpd[1072426]: warning: unknown[41.79.19.106]: SASL PLAIN authentication failed:
2020-09-12 01:29:22
111.229.4.247 attack
Sep 11 15:17:26 ns382633 sshd\[9967\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.4.247  user=root
Sep 11 15:17:27 ns382633 sshd\[9967\]: Failed password for root from 111.229.4.247 port 26739 ssh2
Sep 11 15:30:48 ns382633 sshd\[12580\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.4.247  user=root
Sep 11 15:30:49 ns382633 sshd\[12580\]: Failed password for root from 111.229.4.247 port 63316 ssh2
Sep 11 15:33:31 ns382633 sshd\[12890\]: Invalid user admin from 111.229.4.247 port 37961
Sep 11 15:33:31 ns382633 sshd\[12890\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.4.247
2020-09-12 02:04:15
137.226.113.10 attack
[N10.H2.VM2] Port Scanner Detected Blocked by UFW
2020-09-12 01:59:28
41.226.255.216 attack
Icarus honeypot on github
2020-09-12 01:55:46
120.132.117.254 attackbots
Sep 11 14:52:37 h2865660 sshd[15087]: Invalid user sinusbot from 120.132.117.254 port 57742
Sep 11 14:52:37 h2865660 sshd[15087]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.132.117.254
Sep 11 14:52:37 h2865660 sshd[15087]: Invalid user sinusbot from 120.132.117.254 port 57742
Sep 11 14:52:39 h2865660 sshd[15087]: Failed password for invalid user sinusbot from 120.132.117.254 port 57742 ssh2
Sep 11 14:55:43 h2865660 sshd[15185]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.132.117.254  user=root
Sep 11 14:55:45 h2865660 sshd[15185]: Failed password for root from 120.132.117.254 port 43513 ssh2
...
2020-09-12 01:47:59

最近上报的IP列表

104.168.14.56 104.168.14.48 104.168.14.39 104.168.14.85
104.168.14.72 104.168.14.91 104.168.14.64 104.168.14.80
101.109.191.178 104.168.14.98 104.168.141.178 104.168.143.247
104.168.141.251 104.168.144.174 104.168.143.117 104.168.141.85
104.168.145.71 104.168.140.80 101.109.191.18 104.168.144.183