必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): Singapore

省份(region): Central Singapore Community Development Council

国家(country): Singapore

运营商(isp): DigitalOcean LLC

主机名(hostname): unknown

机构(organization): DigitalOcean, LLC

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attackspambots
Jun 19 23:31:47 ubuntu sshd[30337]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.157.6
Jun 19 23:31:49 ubuntu sshd[30337]: Failed password for invalid user ge from 104.248.157.6 port 59917 ssh2
Jun 19 23:34:09 ubuntu sshd[30398]: Failed password for uucp from 104.248.157.6 port 38080 ssh2
Jun 19 23:36:24 ubuntu sshd[30466]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.157.6
2019-07-31 20:34:47
attackspam
Invalid user vd from 104.248.157.6 port 50169
2019-06-23 07:09:12
相同子网IP讨论:
IP 类型 评论内容 时间
104.248.157.92 attack
Unauthorized connection attempt from IP address 104.248.157.92 on port 3389
2020-08-27 07:17:24
104.248.157.207 attackbotsspam
Invalid user test from 104.248.157.207 port 59114
2020-08-26 15:48:30
104.248.157.207 attackbots
Aug 25 06:59:17 PorscheCustomer sshd[16742]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.157.207
Aug 25 06:59:19 PorscheCustomer sshd[16742]: Failed password for invalid user andi from 104.248.157.207 port 48074 ssh2
Aug 25 07:03:48 PorscheCustomer sshd[16804]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.157.207
...
2020-08-25 15:57:21
104.248.157.207 attack
20 attempts against mh-ssh on cloud
2020-08-23 06:36:53
104.248.157.118 attackbots
Aug  6 15:25:08 debian-2gb-nbg1-2 kernel: \[18978763.950285\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=104.248.157.118 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x40 TTL=242 ID=18267 PROTO=TCP SPT=58985 DPT=2693 WINDOW=1024 RES=0x00 SYN URGP=0
2020-08-06 23:14:03
104.248.157.118 attackbots
scans once in preceeding hours on the ports (in chronological order) 30651 resulting in total of 6 scans from 104.248.0.0/16 block.
2020-08-05 22:32:48
104.248.157.118 attack
Fail2Ban Ban Triggered
2020-07-17 12:41:52
104.248.157.118 attackspambots
TCP port : 9081
2020-06-26 21:24:59
104.248.157.118 attack
21580/tcp 25256/tcp 31693/tcp...
[2020-04-22/06-22]182pkt,63pt.(tcp)
2020-06-23 18:38:13
104.248.157.118 attackspam
 TCP (SYN) 104.248.157.118:56517 -> port 21580, len 44
2020-06-23 04:30:13
104.248.157.60 attack
2020-06-14T02:08:34.483278hz01.yumiweb.com sshd\[15483\]: Invalid user oracle from 104.248.157.60 port 56164
2020-06-14T02:08:54.774017hz01.yumiweb.com sshd\[15485\]: Invalid user hadoop from 104.248.157.60 port 58424
2020-06-14T02:09:14.577470hz01.yumiweb.com sshd\[15487\]: Invalid user hadoop from 104.248.157.60 port 60684
...
2020-06-14 08:11:43
104.248.157.118 attack
firewall-block, port(s): 29533/tcp
2020-06-13 01:42:08
104.248.157.60 attack
[MK-Root1] SSH login failed
2020-06-04 06:15:03
104.248.157.118 attackbotsspam
May 23 22:14:25 debian-2gb-nbg1-2 kernel: \[12523676.581759\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=104.248.157.118 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x40 TTL=242 ID=38554 PROTO=TCP SPT=44296 DPT=24925 WINDOW=1024 RES=0x00 SYN URGP=0
2020-05-24 05:54:13
104.248.157.118 attack
May  8 14:12:48 debian-2gb-nbg1-2 kernel: \[11198849.577578\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=104.248.157.118 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x40 TTL=242 ID=18259 PROTO=TCP SPT=46298 DPT=30522 WINDOW=1024 RES=0x00 SYN URGP=0
2020-05-08 23:59:53
WHOIS信息:
b
DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.248.157.6
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 24844
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;104.248.157.6.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019040300 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Wed Apr 03 18:00:59 +08 2019
;; MSG SIZE  rcvd: 117

HOST信息:
Host 6.157.248.104.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		67.207.67.3
Address:	67.207.67.3#53

** server can't find 6.157.248.104.in-addr.arpa: NXDOMAIN

相关IP信息:
最新评论:
IP 类型 评论内容 时间
222.186.136.64 attackbotsspam
Jul  7 23:50:12 lnxded63 sshd[3667]: Failed password for root from 222.186.136.64 port 52020 ssh2
Jul  7 23:50:12 lnxded63 sshd[3667]: Failed password for root from 222.186.136.64 port 52020 ssh2
2019-07-08 06:40:58
220.141.69.42 attack
TCP port 23 (Telnet) attempt blocked by firewall. [2019-07-07 15:21:43]
2019-07-08 07:06:00
45.7.230.226 attackspam
Brute force attempt
2019-07-08 06:17:20
111.231.54.33 attackbotsspam
Jul  1 19:41:14 vayu sshd[898329]: Invalid user hadoop from 111.231.54.33
Jul  1 19:41:14 vayu sshd[898329]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.54.33 
Jul  1 19:41:16 vayu sshd[898329]: Failed password for invalid user hadoop from 111.231.54.33 port 46304 ssh2
Jul  1 19:41:16 vayu sshd[898329]: Received disconnect from 111.231.54.33: 11: Bye Bye [preauth]
Jul  1 19:45:04 vayu sshd[900122]: Invalid user gateway from 111.231.54.33
Jul  1 19:45:04 vayu sshd[900122]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.54.33 
Jul  1 19:45:07 vayu sshd[900122]: Failed password for invalid user gateway from 111.231.54.33 port 51150 ssh2
Jul  1 19:45:07 vayu sshd[900122]: Received disconnect from 111.231.54.33: 11: Bye Bye [preauth]
Jul  1 19:46:54 vayu sshd[901202]: Invalid user ghostname from 111.231.54.33
Jul  1 19:46:54 vayu sshd[901202]: pam_unix(sshd:auth): authenticat........
-------------------------------
2019-07-08 06:16:45
162.12.217.26 attackbotsspam
3389BruteforceFW22
2019-07-08 06:21:27
129.150.112.159 attack
SSH Brute Force, server-1 sshd[1388]: Failed password for invalid user copy from 129.150.112.159 port 58218 ssh2
2019-07-08 06:29:39
106.47.29.234 attackspam
400 BAD REQUEST
2019-07-08 06:27:59
103.216.59.75 attack
3389BruteforceIDS
2019-07-08 06:22:19
218.92.0.161 attackbots
Jul  7 23:07:39 ovpn sshd\[9031\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.161  user=root
Jul  7 23:07:41 ovpn sshd\[9031\]: Failed password for root from 218.92.0.161 port 15060 ssh2
Jul  7 23:07:51 ovpn sshd\[9031\]: Failed password for root from 218.92.0.161 port 15060 ssh2
Jul  7 23:07:54 ovpn sshd\[9031\]: Failed password for root from 218.92.0.161 port 15060 ssh2
Jul  7 23:07:57 ovpn sshd\[9070\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.161  user=root
2019-07-08 06:42:10
196.189.5.33 attackspambots
Autoban   196.189.5.33 AUTH/CONNECT
2019-07-08 06:30:26
190.65.220.94 attackbotsspam
Jul  7 20:45:24 **** sshd[10228]: Invalid user cathy from 190.65.220.94 port 55075
2019-07-08 06:19:01
216.244.66.227 attack
20 attempts against mh-misbehave-ban on tree.magehost.pro
2019-07-08 06:14:20
185.208.208.144 attackspambots
Scanning (more than 2 packets) random ports - tries to find possible vulnerable services
2019-07-08 06:22:03
51.68.195.214 attackspam
Jul  7 18:57:33 minden010 sshd[22422]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.195.214
Jul  7 18:57:36 minden010 sshd[22422]: Failed password for invalid user sms from 51.68.195.214 port 49954 ssh2
Jul  7 18:59:03 minden010 sshd[22916]: Failed password for mysql from 51.68.195.214 port 58431 ssh2
...
2019-07-08 06:15:38
147.135.163.102 attack
Jul  7 16:41:18 ks10 sshd[25595]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=147.135.163.102 
Jul  7 16:41:20 ks10 sshd[25595]: Failed password for invalid user udo from 147.135.163.102 port 50966 ssh2
...
2019-07-08 06:53:31

最近上报的IP列表

61.173.150.167 132.232.207.164 59.27.239.57 37.147.161.19
1.179.180.169 178.152.81.214 45.77.236.150 61.223.90.151
194.228.3.191 177.97.48.173 123.206.44.110 113.161.129.44
108.6.167.199 180.183.177.201 139.5.199.42 110.76.148.150
206.189.217.240 196.6.234.86 125.27.51.17 124.158.1.11