必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): None

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
IP 类型 评论内容 时间
104.248.56.150 attack
Failed password for invalid user software from 104.248.56.150 port 58464 ssh2
2020-08-30 07:47:39
104.248.56.150 attackbotsspam
Invalid user rajesh from 104.248.56.150 port 54064
2020-08-28 08:05:30
104.248.56.150 attack
Aug 25 01:05:46 santamaria sshd\[29374\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.56.150  user=root
Aug 25 01:05:48 santamaria sshd\[29374\]: Failed password for root from 104.248.56.150 port 45940 ssh2
Aug 25 01:09:40 santamaria sshd\[29543\]: Invalid user test from 104.248.56.150
Aug 25 01:09:40 santamaria sshd\[29543\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.56.150
...
2020-08-25 07:14:46
104.248.56.150 attack
Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-08-21T03:56:56Z and 2020-08-21T04:03:49Z
2020-08-21 12:19:41
104.248.56.150 attackbotsspam
Aug 16 16:16:16 abendstille sshd\[2784\]: Invalid user jordan from 104.248.56.150
Aug 16 16:16:16 abendstille sshd\[2784\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.56.150
Aug 16 16:16:18 abendstille sshd\[2784\]: Failed password for invalid user jordan from 104.248.56.150 port 54382 ssh2
Aug 16 16:20:29 abendstille sshd\[7355\]: Invalid user user from 104.248.56.150
Aug 16 16:20:29 abendstille sshd\[7355\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.56.150
...
2020-08-17 00:18:28
104.248.56.150 attackspam
Aug 15 16:57:08 NPSTNNYC01T sshd[16215]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.56.150
Aug 15 16:57:11 NPSTNNYC01T sshd[16215]: Failed password for invalid user cnlinkIDC@2016 from 104.248.56.150 port 41130 ssh2
Aug 15 17:00:52 NPSTNNYC01T sshd[16554]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.56.150
...
2020-08-16 05:14:35
104.248.56.150 attackbotsspam
Aug 11 21:38:34 ns381471 sshd[9858]: Failed password for root from 104.248.56.150 port 52296 ssh2
2020-08-12 04:02:48
104.248.56.150 attackspambots
Aug 11 05:46:02 ns382633 sshd\[18432\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.56.150  user=root
Aug 11 05:46:04 ns382633 sshd\[18432\]: Failed password for root from 104.248.56.150 port 35774 ssh2
Aug 11 05:51:50 ns382633 sshd\[19408\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.56.150  user=root
Aug 11 05:51:52 ns382633 sshd\[19408\]: Failed password for root from 104.248.56.150 port 42986 ssh2
Aug 11 05:55:28 ns382633 sshd\[20342\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.56.150  user=root
2020-08-11 14:00:20
104.248.56.150 attackbots
Repeated brute force against a port
2020-08-11 01:12:35
104.248.56.150 attackspam
" "
2020-08-07 04:16:46
104.248.56.150 attack
$f2bV_matches
2020-07-28 12:54:05
104.248.56.150 attackspambots
Jul 19 22:42:21 dhoomketu sshd[1666478]: Invalid user ftpuser from 104.248.56.150 port 43464
Jul 19 22:42:21 dhoomketu sshd[1666478]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.56.150 
Jul 19 22:42:21 dhoomketu sshd[1666478]: Invalid user ftpuser from 104.248.56.150 port 43464
Jul 19 22:42:23 dhoomketu sshd[1666478]: Failed password for invalid user ftpuser from 104.248.56.150 port 43464 ssh2
Jul 19 22:46:28 dhoomketu sshd[1666561]: Invalid user webuser from 104.248.56.150 port 59318
...
2020-07-20 06:41:13
104.248.56.150 attack
Jul 16 00:32:46 inter-technics sshd[17792]: Invalid user homekit from 104.248.56.150 port 54050
Jul 16 00:32:46 inter-technics sshd[17792]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.56.150
Jul 16 00:32:46 inter-technics sshd[17792]: Invalid user homekit from 104.248.56.150 port 54050
Jul 16 00:32:48 inter-technics sshd[17792]: Failed password for invalid user homekit from 104.248.56.150 port 54050 ssh2
Jul 16 00:36:29 inter-technics sshd[18159]: Invalid user jiale from 104.248.56.150 port 40130
...
2020-07-16 07:31:19
104.248.56.150 attack
Jul  9 09:44:23 rancher-0 sshd[207788]: Invalid user taoli from 104.248.56.150 port 59638
Jul  9 09:44:26 rancher-0 sshd[207788]: Failed password for invalid user taoli from 104.248.56.150 port 59638 ssh2
...
2020-07-09 16:12:33
104.248.56.150 attackspambots
Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-07-08T05:55:36Z and 2020-07-08T06:04:47Z
2020-07-08 17:33:54
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.248.56.239
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 23611
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.248.56.239.			IN	A

;; AUTHORITY SECTION:
.			392	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030501 1800 900 604800 86400

;; Query time: 99 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Mar 06 07:47:21 CST 2022
;; MSG SIZE  rcvd: 107
HOST信息:
Host 239.56.248.104.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 239.56.248.104.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
168.128.70.151 attack
2020-07-19T16:56:29.478160shield sshd\[12142\]: Invalid user testuser from 168.128.70.151 port 53456
2020-07-19T16:56:29.488234shield sshd\[12142\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=www.mspacemail.com
2020-07-19T16:56:31.570891shield sshd\[12142\]: Failed password for invalid user testuser from 168.128.70.151 port 53456 ssh2
2020-07-19T17:00:44.464639shield sshd\[12703\]: Invalid user git from 168.128.70.151 port 42368
2020-07-19T17:00:44.473284shield sshd\[12703\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=www.mspacemail.com
2020-07-20 01:13:25
218.92.0.251 attack
Jul 19 19:05:06 vps333114 sshd[10208]: Failed password for root from 218.92.0.251 port 51030 ssh2
Jul 19 19:05:10 vps333114 sshd[10208]: Failed password for root from 218.92.0.251 port 51030 ssh2
...
2020-07-20 01:00:51
118.101.51.111 attack
Jul 19 18:51:36 home sshd[9351]: Failed password for mysql from 118.101.51.111 port 38104 ssh2
Jul 19 18:57:00 home sshd[9918]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.101.51.111
Jul 19 18:57:02 home sshd[9918]: Failed password for invalid user didi from 118.101.51.111 port 48944 ssh2
...
2020-07-20 01:09:47
78.188.11.246 attackbots
Jul 19 18:08:26 mellenthin postfix/smtpd[27931]: NOQUEUE: reject: RCPT from unknown[78.188.11.246]: 554 5.7.1 Service unavailable; Client host [78.188.11.246] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/78.188.11.246; from= to= proto=ESMTP helo=<78.188.11.246.static.ttnet.com.tr>
2020-07-20 01:16:50
106.12.184.218 attackspambots
Jul 19 23:08:26 webhost01 sshd[18368]: Failed password for root from 106.12.184.218 port 44514 ssh2
...
2020-07-20 01:15:48
104.145.220.178 attackspam
Jul 19 18:02:05 www sshd[8959]: Invalid user admin from 104.145.220.178
Jul 19 18:02:05 www sshd[8959]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.145.220.178 
Jul 19 18:02:07 www sshd[8959]: Failed password for invalid user admin from 104.145.220.178 port 50366 ssh2
Jul 19 18:02:07 www sshd[8959]: Received disconnect from 104.145.220.178: 11: Bye Bye [preauth]
Jul 19 18:02:08 www sshd[8961]: Invalid user admin from 104.145.220.178
Jul 19 18:02:08 www sshd[8961]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.145.220.178 


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=104.145.220.178
2020-07-20 00:56:34
150.109.151.206 attackbotsspam
Jul 19 19:04:51 vps sshd[330935]: Failed password for invalid user otrs from 150.109.151.206 port 48306 ssh2
Jul 19 19:09:15 vps sshd[355022]: Invalid user newuser from 150.109.151.206 port 35212
Jul 19 19:09:15 vps sshd[355022]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.109.151.206
Jul 19 19:09:16 vps sshd[355022]: Failed password for invalid user newuser from 150.109.151.206 port 35212 ssh2
Jul 19 19:13:45 vps sshd[379245]: Invalid user gh from 150.109.151.206 port 50350
...
2020-07-20 01:20:41
61.177.172.54 attackspambots
$f2bV_matches
2020-07-20 01:30:41
107.182.17.175 attack
Connection to SSH Honeypot - Detected by HoneypotDB
2020-07-20 00:55:17
220.130.108.212 attack
220.130.108.212 - - [19/Jul/2020:18:18:25 +0100] "POST /xmlrpc.php HTTP/1.1" 503 18211 "-" "Mozilla/5.0 (X11; Linux i686; rv:2.0.1) Gecko/20100101 Firefox/4.0.1"
220.130.108.212 - - [19/Jul/2020:18:18:27 +0100] "POST /wp-login.php HTTP/1.1" 503 18036 "-" "Mozilla/5.0 (X11; Linux i686; rv:2.0.1) Gecko/20100101 Firefox/4.0.1"
220.130.108.212 - - [19/Jul/2020:18:32:09 +0100] "POST /xmlrpc.php HTTP/1.1" 503 18270 "-" "Mozilla/5.0 (X11; Linux i686; rv:2.0.1) Gecko/20100101 Firefox/4.0.1"
...
2020-07-20 01:37:10
222.73.246.141 attack
Jul 19 18:43:59 srv-ubuntu-dev3 sshd[88664]: Invalid user rohit from 222.73.246.141
Jul 19 18:43:59 srv-ubuntu-dev3 sshd[88664]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.73.246.141
Jul 19 18:43:59 srv-ubuntu-dev3 sshd[88664]: Invalid user rohit from 222.73.246.141
Jul 19 18:44:00 srv-ubuntu-dev3 sshd[88664]: Failed password for invalid user rohit from 222.73.246.141 port 43843 ssh2
Jul 19 18:48:20 srv-ubuntu-dev3 sshd[89333]: Invalid user text from 222.73.246.141
Jul 19 18:48:20 srv-ubuntu-dev3 sshd[89333]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.73.246.141
Jul 19 18:48:20 srv-ubuntu-dev3 sshd[89333]: Invalid user text from 222.73.246.141
Jul 19 18:48:21 srv-ubuntu-dev3 sshd[89333]: Failed password for invalid user text from 222.73.246.141 port 42192 ssh2
Jul 19 18:52:13 srv-ubuntu-dev3 sshd[89802]: Invalid user charlotte from 222.73.246.141
...
2020-07-20 01:11:28
196.27.127.61 attack
2020-07-19T19:06:03.111298lavrinenko.info sshd[17772]: Invalid user webmaster from 196.27.127.61 port 50284
2020-07-19T19:06:03.116974lavrinenko.info sshd[17772]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.27.127.61
2020-07-19T19:06:03.111298lavrinenko.info sshd[17772]: Invalid user webmaster from 196.27.127.61 port 50284
2020-07-19T19:06:04.776159lavrinenko.info sshd[17772]: Failed password for invalid user webmaster from 196.27.127.61 port 50284 ssh2
2020-07-19T19:08:29.363807lavrinenko.info sshd[17918]: Invalid user adam from 196.27.127.61 port 49666
...
2020-07-20 01:12:27
115.146.126.209 attackspam
Jul 19 12:40:29 NPSTNNYC01T sshd[3181]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.146.126.209
Jul 19 12:40:31 NPSTNNYC01T sshd[3181]: Failed password for invalid user aman from 115.146.126.209 port 43602 ssh2
Jul 19 12:46:59 NPSTNNYC01T sshd[3861]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.146.126.209
...
2020-07-20 00:59:59
218.92.0.133 attackbotsspam
Jul 20 03:26:11 localhost sshd[2716122]: Unable to negotiate with 218.92.0.133 port 27119: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 [preauth]
...
2020-07-20 01:30:02
2.38.186.191 attackspam
Automatic report - Banned IP Access
2020-07-20 01:07:56

最近上报的IP列表

104.248.52.222 104.248.61.253 104.248.63.85 104.248.64.77
104.248.7.97 233.182.61.160 104.248.71.122 54.60.79.126
104.248.74.76 104.248.82.114 104.248.9.134 104.248.94.78
104.248.97.12 104.248.98.225 52.214.200.246 104.25.101.63
104.25.102.11 104.25.102.63 104.25.103.11 104.25.106.20