必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): None

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
IP 类型 评论内容 时间
104.168.14.36 attackspambots
Found on   Blocklist de     / proto=6  .  srcport=42398  .  dstport=22 SSH  .     (991)
2020-10-07 02:37:31
104.168.14.36 attackbots
Found on   Blocklist de     / proto=6  .  srcport=42398  .  dstport=22 SSH  .     (991)
2020-10-06 18:34:54
104.168.14.122 attack
 TCP (SYN) 104.168.14.122:41260 -> port 22, len 44
2020-08-31 08:30:32
104.168.141.181 attack
Email spam message
2020-06-24 21:18:29
104.168.142.194 attackbotsspam
port 23
2020-06-20 04:42:22
104.168.141.201 attackbots
TCP Port: 25      invalid blocked  abuseat-org also barracuda and zen-spamhaus           (282)
2020-06-02 08:12:47
104.168.145.99 attackspam
$f2bV_matches
2020-05-26 05:07:13
104.168.142.227 attackbots
lfd: (smtpauth) Failed SMTP AUTH login from 104.168.142.227 (hwsrv-273223.hostwindsdns.com): 5 in the last 3600 secs - Fri Jun 22 19:11:59 2018
2020-04-30 13:06:04
104.168.148.42 attackspambots
Lines containing failures of 104.168.148.42
Apr 19 08:13:27 UTC__SANYALnet-Labs__cac12 sshd[19340]: Connection from 104.168.148.42 port 48714 on 45.62.253.138 port 22
Apr 19 08:13:28 UTC__SANYALnet-Labs__cac12 sshd[19340]: Invalid user ch from 104.168.148.42 port 48714
Apr 19 08:13:30 UTC__SANYALnet-Labs__cac12 sshd[19340]: Failed password for invalid user ch from 104.168.148.42 port 48714 ssh2
Apr 19 08:13:30 UTC__SANYALnet-Labs__cac12 sshd[19340]: Received disconnect from 104.168.148.42 port 48714:11: Bye Bye [preauth]
Apr 19 08:13:30 UTC__SANYALnet-Labs__cac12 sshd[19340]: Disconnected from 104.168.148.42 port 48714 [preauth]
Apr 19 08:24:40 UTC__SANYALnet-Labs__cac12 sshd[19617]: Connection from 104.168.148.42 port 49250 on 45.62.253.138 port 22
Apr 19 08:24:44 UTC__SANYALnet-Labs__cac12 sshd[19617]: Failed password for invalid user r.r from 104.168.148.42 port 49250 ssh2
Apr 19 08:24:44 UTC__SANYALnet-Labs__cac12 sshd[19617]: Received disconnect from 104.168.148.42 ........
------------------------------
2020-04-19 20:48:20
104.168.148.189 attackbots
Fail2Ban Ban Triggered
2020-03-05 15:39:20
104.168.142.227 attackbotsspam
lfd: (smtpauth) Failed SMTP AUTH login from 104.168.142.227 (hwsrv-273223.hostwindsdns.com): 5 in the last 3600 secs - Fri Jun 22 19:11:59 2018
2020-02-23 23:48:05
104.168.144.77 attackbotsspam
lfd: (smtpauth) Failed SMTP AUTH login from 104.168.144.77 (US/United States/hwsrv-238723.hostwindsdns.com): 5 in the last 3600 secs - Thu May  3 12:14:48 2018
2020-02-07 06:46:19
104.168.142.229 attack
2020-01-19T23:42:11.3404711495-001 sshd[29566]: Invalid user lena from 104.168.142.229 port 55354
2020-01-19T23:42:11.3496611495-001 sshd[29566]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=hwsrv-656802.hostwindsdns.com
2020-01-19T23:42:11.3404711495-001 sshd[29566]: Invalid user lena from 104.168.142.229 port 55354
2020-01-19T23:42:13.0808461495-001 sshd[29566]: Failed password for invalid user lena from 104.168.142.229 port 55354 ssh2
2020-01-19T23:44:41.3200111495-001 sshd[29648]: Invalid user admin from 104.168.142.229 port 50442
2020-01-19T23:44:41.3232021495-001 sshd[29648]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=hwsrv-656802.hostwindsdns.com
2020-01-19T23:44:41.3200111495-001 sshd[29648]: Invalid user admin from 104.168.142.229 port 50442
2020-01-19T23:44:42.9783291495-001 sshd[29648]: Failed password for invalid user admin from 104.168.142.229 port 50442 ssh2
2020-01-19T23:47:09.1872401
...
2020-01-20 13:09:22
104.168.142.229 attackspambots
Jan 17 14:51:45 dedicated sshd[8525]: Invalid user vnc from 104.168.142.229 port 39966
2020-01-17 23:38:18
104.168.142.229 attackbots
Unauthorized connection attempt detected from IP address 104.168.142.229 to port 2220 [J]
2020-01-17 04:56:59
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.168.14.85
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 62106
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.168.14.85.			IN	A

;; AUTHORITY SECTION:
.			480	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022500 1800 900 604800 86400

;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 25 19:37:26 CST 2022
;; MSG SIZE  rcvd: 106
HOST信息:
85.14.168.104.in-addr.arpa domain name pointer 104-168-14-85-host.colocrossing.com.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
85.14.168.104.in-addr.arpa	name = 104-168-14-85-host.colocrossing.com.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
74.124.199.170 attackspambots
\[2019-09-02 04:08:41\] SECURITY\[1837\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-09-02T04:08:41.209-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="9441519470375",SessionID="0x7f7b3054fcb8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/74.124.199.170/58307",ACLName="no_extension_match"
\[2019-09-02 04:09:18\] SECURITY\[1837\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-09-02T04:09:18.919-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="00441519470375",SessionID="0x7f7b30470148",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/74.124.199.170/54567",ACLName="no_extension_match"
\[2019-09-02 04:09:58\] SECURITY\[1837\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-09-02T04:09:58.163-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="011441519470375",SessionID="0x7f7b30060858",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/74.124.199.170/62776",ACLName="no_ext
2019-09-02 16:26:36
211.252.85.11 attackspambots
Sep  2 10:19:17 SilenceServices sshd[31063]: Failed password for root from 211.252.85.11 port 48428 ssh2
Sep  2 10:25:26 SilenceServices sshd[973]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.252.85.11
Sep  2 10:25:28 SilenceServices sshd[973]: Failed password for invalid user roxana from 211.252.85.11 port 42352 ssh2
2019-09-02 16:38:29
122.246.147.212 attack
2019-09-02T08:11:28.893539abusebot-5.cloudsearch.cf sshd\[27325\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.246.147.212  user=root
2019-09-02 16:14:31
138.68.4.8 attackbotsspam
Sep  1 19:06:43 lcdev sshd\[7831\]: Invalid user wc from 138.68.4.8
Sep  1 19:06:43 lcdev sshd\[7831\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.4.8
Sep  1 19:06:45 lcdev sshd\[7831\]: Failed password for invalid user wc from 138.68.4.8 port 46698 ssh2
Sep  1 19:10:50 lcdev sshd\[8283\]: Invalid user hxeadm from 138.68.4.8
Sep  1 19:10:50 lcdev sshd\[8283\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.4.8
2019-09-02 16:10:54
125.161.137.111 attack
Sep  2 09:37:07 debian sshd\[6129\]: Invalid user magento from 125.161.137.111 port 36710
Sep  2 09:37:07 debian sshd\[6129\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.161.137.111
...
2019-09-02 16:51:56
86.102.84.126 attackbotsspam
Wordpress Admin Login attack
2019-09-02 16:36:59
137.63.246.39 attackspam
Sep  2 09:48:08 tux-35-217 sshd\[23853\]: Invalid user sensivity from 137.63.246.39 port 50994
Sep  2 09:48:08 tux-35-217 sshd\[23853\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.63.246.39
Sep  2 09:48:10 tux-35-217 sshd\[23853\]: Failed password for invalid user sensivity from 137.63.246.39 port 50994 ssh2
Sep  2 09:53:32 tux-35-217 sshd\[23885\]: Invalid user taiga from 137.63.246.39 port 39242
Sep  2 09:53:32 tux-35-217 sshd\[23885\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.63.246.39
...
2019-09-02 16:40:52
49.235.198.166 attackbots
Web App Attack
2019-09-02 16:42:05
157.255.51.50 attackbots
SSH Brute-Force reported by Fail2Ban
2019-09-02 16:55:43
191.17.139.235 attackbots
Sep  2 06:38:46 Ubuntu-1404-trusty-64-minimal sshd\[7366\]: Invalid user wellendorff from 191.17.139.235
Sep  2 06:38:46 Ubuntu-1404-trusty-64-minimal sshd\[7366\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.17.139.235
Sep  2 06:38:47 Ubuntu-1404-trusty-64-minimal sshd\[7366\]: Failed password for invalid user wellendorff from 191.17.139.235 port 54280 ssh2
Sep  2 06:55:10 Ubuntu-1404-trusty-64-minimal sshd\[21828\]: Invalid user santo from 191.17.139.235
Sep  2 06:55:10 Ubuntu-1404-trusty-64-minimal sshd\[21828\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.17.139.235
2019-09-02 16:45:45
68.183.37.247 attackspambots
2019-08-27 21:13:02,264 fail2ban.actions        \[1817\]: NOTICE  \[ssh\] Ban 68.183.37.247
2019-08-27 21:28:26,612 fail2ban.actions        \[1817\]: NOTICE  \[ssh\] Ban 68.183.37.247
2019-08-27 21:44:15,200 fail2ban.actions        \[1817\]: NOTICE  \[ssh\] Ban 68.183.37.247
2019-08-27 21:59:55,906 fail2ban.actions        \[1817\]: NOTICE  \[ssh\] Ban 68.183.37.247
2019-08-27 22:16:22,257 fail2ban.actions        \[1817\]: NOTICE  \[ssh\] Ban 68.183.37.247
...
2019-09-02 16:24:30
124.193.199.202 attackspambots
[munged]::443 124.193.199.202 - - [02/Sep/2019:10:24:06 +0200] "POST /[munged]: HTTP/1.1" 200 8189 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0"
[munged]::443 124.193.199.202 - - [02/Sep/2019:10:24:08 +0200] "POST /[munged]: HTTP/1.1" 200 4340 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0"
[munged]::443 124.193.199.202 - - [02/Sep/2019:10:24:09 +0200] "POST /[munged]: HTTP/1.1" 200 4340 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0"
[munged]::443 124.193.199.202 - - [02/Sep/2019:10:24:10 +0200] "POST /[munged]: HTTP/1.1" 200 4340 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0"
[munged]::443 124.193.199.202 - - [02/Sep/2019:10:24:11 +0200] "POST /[munged]: HTTP/1.1" 200 4340 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0"
[munged]::443 124.193.199.202 - - [02/Sep/20
2019-09-02 16:29:43
112.237.143.137 attack
52869/tcp 52869/tcp
[2019-08-30/09-01]2pkt
2019-09-02 16:33:00
45.70.3.2 attackbotsspam
Sep  2 07:06:24 taivassalofi sshd[72830]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.70.3.2
Sep  2 07:06:26 taivassalofi sshd[72830]: Failed password for invalid user csserver from 45.70.3.2 port 48628 ssh2
...
2019-09-02 16:42:35
175.165.207.71 attack
8080/tcp 8080/tcp
[2019-08-30/09-02]2pkt
2019-09-02 16:22:42

最近上报的IP列表

104.168.14.39 104.168.14.72 104.168.14.91 104.168.14.64
104.168.14.80 101.109.191.178 104.168.14.98 104.168.141.178
104.168.143.247 104.168.141.251 104.168.144.174 104.168.143.117
104.168.141.85 104.168.145.71 104.168.140.80 101.109.191.18
104.168.144.183 104.168.146.125 104.168.146.104 104.168.144.243