必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States

运营商(isp): AAA Enterprises

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attackspambots
 UDP 104.206.128.74:57326 -> port 161, len 71
2020-10-06 04:12:44
attackspambots
 TCP (SYN) 104.206.128.74:55896 -> port 3389, len 44
2020-10-05 20:11:31
attackbots
 TCP (SYN) 104.206.128.74:55896 -> port 3389, len 44
2020-10-05 12:03:44
attackspambots
 TCP (SYN) 104.206.128.74:56014 -> port 3389, len 44
2020-10-01 07:39:03
attackspam
 TCP (SYN) 104.206.128.74:57743 -> port 21, len 44
2020-10-01 00:07:38
attackspambots
Telnet/23 MH Probe, Scan, BF, Hack -
2020-09-30 16:30:19
attack
Unauthorized connection attempt from IP address 104.206.128.74 on Port 3389(RDP)
2020-09-25 11:14:49
attack
Telnet/23 MH Probe, Scan, BF, Hack -
2020-09-22 17:58:15
attackspam
 TCP (SYN) 104.206.128.74:52670 -> port 3389, len 44
2020-09-20 22:19:09
attackbotsspam
 TCP (SYN) 104.206.128.74:52670 -> port 3389, len 44
2020-09-20 14:11:32
attack
Found on   Binary Defense     / proto=6  .  srcport=57585  .  dstport=5432  .     (3363)
2020-09-20 06:10:54
attackspambots
 TCP (SYN) 104.206.128.74:51576 -> port 21, len 44
2020-09-04 13:18:27
attack
 TCP (SYN) 104.206.128.74:51576 -> port 21, len 44
2020-09-04 05:47:21
attackspambots
 UDP 104.206.128.74:60305 -> port 161, len 71
2020-09-03 03:28:51
attackbots
TCP port : 23
2020-09-02 19:04:55
attack
5432/tcp 3389/tcp 1433/tcp...
[2020-06-11/08-11]23pkt,15pt.(tcp),1pt.(udp)
2020-08-12 07:02:48
attack
 TCP (SYN) 104.206.128.74:60254 -> port 21, len 44
2020-05-17 08:40:44
attack
scan z
2020-03-24 04:49:56
attack
Unauthorized connection attempt detected from IP address 104.206.128.74 to port 8444
2020-03-17 18:45:16
attackspam
unauthorized connection attempt
2020-02-26 19:20:28
attack
5432/tcp 88/tcp 8444/tcp...
[2019-12-23/2020-02-22]47pkt,13pt.(tcp),1pt.(udp)
2020-02-23 07:21:49
attackspambots
MultiHost/MultiPort Probe, Scan, Hack -
2020-02-19 22:37:37
attack
MultiHost/MultiPort Probe, Scan, Hack -
2020-02-14 21:23:27
attackbotsspam
Unauthorized connection attempt detected from IP address 104.206.128.74 to port 3306 [J]
2020-01-29 23:20:33
attackbots
Unauthorized connection attempt detected from IP address 104.206.128.74 to port 5900 [J]
2020-01-24 03:12:32
attack
ET SCAN Suspicious inbound to mySQL port 3306 - port: 3306 proto: TCP cat: Potentially Bad Traffic
2019-12-28 04:39:08
attackspambots
12/09/2019-12:06:01.184815 104.206.128.74 Protocol: 6 ET SCAN NMAP -sS window 1024
2019-12-10 03:44:40
attack
Port scan: Attack repeated for 24 hours
2019-11-28 00:09:39
attack
MultiHost/MultiPort Probe, Scan, Hack -
2019-11-19 19:15:15
attackspambots
104.206.128.74 was recorded 5 times by 5 hosts attempting to connect to the following ports: 3389,5060,3306,23,1433. Incident counter (4h, 24h, all-time): 5, 7, 40
2019-11-10 07:38:58
相同子网IP讨论:
IP 类型 评论内容 时间
104.206.128.6 attackspambots
Automatic report - Banned IP Access
2020-10-09 02:32:26
104.206.128.6 attackbots
bruteforce, ssh, scan port
2020-10-08 18:31:18
104.206.128.34 attackbots
 TCP (SYN) 104.206.128.34:62942 -> port 3389, len 44
2020-10-06 04:52:48
104.206.128.2 attackspambots
 TCP (SYN) 104.206.128.2:60162 -> port 1433, len 44
2020-10-06 04:10:28
104.206.128.42 attackbots
 TCP (SYN) 104.206.128.42:50739 -> port 23, len 44
2020-10-06 02:55:43
104.206.128.66 attackbotsspam
 TCP (SYN) 104.206.128.66:63773 -> port 3306, len 44
2020-10-06 00:59:51
104.206.128.34 attack
MultiHost/MultiPort Probe, Scan, Hack -
2020-10-05 20:55:21
104.206.128.2 attackspambots
MultiHost/MultiPort Probe, Scan, Hack -
2020-10-05 20:09:04
104.206.128.42 attackbots
Icarus honeypot on github
2020-10-05 18:46:02
104.206.128.34 attackbotsspam
Found on   Alienvault    / proto=6  .  srcport=64630  .  dstport=5900  .     (3726)
2020-10-05 12:44:44
104.206.128.2 attackspambots
Found on   Binary Defense     / proto=6  .  srcport=52605  .  dstport=21 FTP  .     (3566)
2020-10-05 12:01:30
104.206.128.6 attackbots
Telnet/23 MH Probe, Scan, BF, Hack -
2020-10-03 04:43:15
104.206.128.6 attack
Telnet/23 MH Probe, Scan, BF, Hack -
2020-10-03 00:05:15
104.206.128.6 attackbotsspam
Telnet/23 MH Probe, Scan, BF, Hack -
2020-10-02 20:36:03
104.206.128.6 attackspam
Telnet/23 MH Probe, Scan, BF, Hack -
2020-10-02 17:08:30
WHOIS信息:
b
DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.206.128.74
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 24300
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;104.206.128.74.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019061400 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Fri Jun 14 14:29:52 CST 2019
;; MSG SIZE  rcvd: 118

HOST信息:
74.128.206.104.in-addr.arpa domain name pointer 74-128.206.104.serverhubrdns.in-addr.arpa.
NSLOOKUP信息:
Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
74.128.206.104.in-addr.arpa	name = 74-128.206.104.serverhubrdns.in-addr.arpa.

Authoritative answers can be found from:

相关IP信息:
最新评论:
IP 类型 评论内容 时间
202.29.70.42 attackspambots
Sep 22 04:03:27 lcprod sshd\[3452\]: Invalid user admin from 202.29.70.42
Sep 22 04:03:27 lcprod sshd\[3452\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=mgt.pnu.ac.th
Sep 22 04:03:30 lcprod sshd\[3452\]: Failed password for invalid user admin from 202.29.70.42 port 40614 ssh2
Sep 22 04:07:52 lcprod sshd\[3918\]: Invalid user user3 from 202.29.70.42
Sep 22 04:07:52 lcprod sshd\[3918\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=mgt.pnu.ac.th
2019-09-23 03:21:58
109.195.251.208 attackspambots
Sep 22 19:52:47 lnxweb61 sshd[23359]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.195.251.208
2019-09-23 02:55:13
83.30.120.234 attackbotsspam
IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/83.30.120.234/ 
 PL - 1H : (65)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : PL 
 NAME ASN : ASN5617 
 
 IP : 83.30.120.234 
 
 CIDR : 83.24.0.0/13 
 
 PREFIX COUNT : 183 
 
 UNIQUE IP COUNT : 5363456 
 
 
 WYKRYTE ATAKI Z ASN5617 :  
  1H - 4 
  3H - 6 
  6H - 7 
 12H - 8 
 24H - 17 
 
 INFO : SYN Flood DDoS Attack Denial-of-Service Attack (DoS) Detected and Blocked by ADMIN  - data recovery
2019-09-23 03:24:10
79.187.192.249 attackspam
Invalid user nostale from 79.187.192.249 port 33020
2019-09-23 03:10:14
198.108.66.83 attackbotsspam
imap or smtp brute force
2019-09-23 03:16:37
31.41.59.148 attackspam
[portscan] Port scan
2019-09-23 03:01:56
200.104.14.49 attack
Attempted WordPress login: "GET /wp-login.php"
2019-09-23 02:50:41
157.245.68.199 attack
MultiHost/MultiPort Probe, Scan, Hack -
2019-09-23 02:54:50
202.70.80.27 attackbots
Sep 22 09:11:19 lcdev sshd\[7869\]: Invalid user jira from 202.70.80.27
Sep 22 09:11:19 lcdev sshd\[7869\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.70.80.27
Sep 22 09:11:21 lcdev sshd\[7869\]: Failed password for invalid user jira from 202.70.80.27 port 54586 ssh2
Sep 22 09:16:16 lcdev sshd\[8317\]: Invalid user target from 202.70.80.27
Sep 22 09:16:16 lcdev sshd\[8317\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.70.80.27
2019-09-23 03:18:31
181.188.168.155 attack
Automatic report - Port Scan Attack
2019-09-23 03:07:31
185.53.88.92 attackbotsspam
\[2019-09-22 14:50:54\] SECURITY\[2283\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-09-22T14:50:54.265-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="011441603976936",SessionID="0x7fcd8cb71de8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.53.88.92/49943",ACLName="no_extension_match"
\[2019-09-22 14:52:20\] SECURITY\[2283\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-09-22T14:52:20.896-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="9011441603976936",SessionID="0x7fcd8c4914c8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.53.88.92/62765",ACLName="no_extension_match"
\[2019-09-22 14:53:49\] SECURITY\[2283\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-09-22T14:53:49.392-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="011441603976936",SessionID="0x7fcd8c0b0788",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.53.88.92/62893",ACLName="no_exten
2019-09-23 03:11:01
61.37.82.220 attack
k+ssh-bruteforce
2019-09-23 03:16:25
142.112.87.158 attackspam
Sep 22 14:27:32 Ubuntu-1404-trusty-64-minimal sshd\[25062\]: Invalid user PlcmSpIp1 from 142.112.87.158
Sep 22 14:27:32 Ubuntu-1404-trusty-64-minimal sshd\[25062\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.112.87.158
Sep 22 14:27:34 Ubuntu-1404-trusty-64-minimal sshd\[25062\]: Failed password for invalid user PlcmSpIp1 from 142.112.87.158 port 56012 ssh2
Sep 22 14:40:01 Ubuntu-1404-trusty-64-minimal sshd\[1671\]: Invalid user ux from 142.112.87.158
Sep 22 14:40:01 Ubuntu-1404-trusty-64-minimal sshd\[1671\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.112.87.158
2019-09-23 03:05:52
80.254.127.43 attackbots
RDPBrutePLe24
2019-09-23 02:54:05
45.70.217.198 attackspambots
2019-09-22T20:40:43.225340enmeeting.mahidol.ac.th sshd\[20254\]: Invalid user admin from 45.70.217.198 port 47008
2019-09-22T20:40:43.244891enmeeting.mahidol.ac.th sshd\[20254\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.70.217.198
2019-09-22T20:40:45.027274enmeeting.mahidol.ac.th sshd\[20254\]: Failed password for invalid user admin from 45.70.217.198 port 47008 ssh2
...
2019-09-23 03:26:18

最近上报的IP列表

103.28.161.26 113.161.80.77 209.200.15.186 103.20.212.240
114.227.3.72 152.136.130.31 213.154.3.69 185.81.157.163
92.119.160.125 120.199.34.58 202.29.60.195 125.166.29.139
68.107.107.48 79.138.8.251 170.130.187.42 221.243.108.130
119.29.246.165 199.249.230.102 162.243.69.215 37.220.53.244