必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
IP 类型 评论内容 时间
104.248.57.44 attack
123
2023-03-21 07:11:39
104.248.57.44 attack
$f2bV_matches
2020-10-04 03:25:15
104.248.57.44 attackbotsspam
(sshd) Failed SSH login from 104.248.57.44 (US/United States/-): 5 in the last 3600 secs
2020-10-03 19:19:48
104.248.57.44 attack
Sep 26 17:17:10 ns392434 sshd[31440]: Invalid user teacher from 104.248.57.44 port 45812
Sep 26 17:17:10 ns392434 sshd[31440]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.57.44
Sep 26 17:17:10 ns392434 sshd[31440]: Invalid user teacher from 104.248.57.44 port 45812
Sep 26 17:17:12 ns392434 sshd[31440]: Failed password for invalid user teacher from 104.248.57.44 port 45812 ssh2
Sep 26 17:24:42 ns392434 sshd[31569]: Invalid user cloud from 104.248.57.44 port 58364
Sep 26 17:24:42 ns392434 sshd[31569]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.57.44
Sep 26 17:24:42 ns392434 sshd[31569]: Invalid user cloud from 104.248.57.44 port 58364
Sep 26 17:24:44 ns392434 sshd[31569]: Failed password for invalid user cloud from 104.248.57.44 port 58364 ssh2
Sep 26 17:27:22 ns392434 sshd[31652]: Invalid user test1 from 104.248.57.44 port 45422
2020-09-27 01:36:49
104.248.57.44 attackspambots
k+ssh-bruteforce
2020-09-26 17:29:46
104.248.57.44 attack
SSH invalid-user multiple login try
2020-09-16 01:59:00
104.248.57.44 attackbots
$f2bV_matches
2020-09-15 17:52:21
104.248.57.44 attackspam
Invalid user elias from 104.248.57.44 port 44796
2020-09-14 21:16:02
104.248.57.44 attackspam
Invalid user elias from 104.248.57.44 port 44796
2020-09-14 13:09:14
104.248.57.44 attackbotsspam
B: Abusive ssh attack
2020-09-14 05:10:11
104.248.57.44 attackspam
Sep  9 08:48:05 root sshd[24202]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.57.44 
Sep  9 08:48:07 root sshd[24202]: Failed password for invalid user confluence1 from 104.248.57.44 port 57582 ssh2
...
2020-09-09 22:17:48
104.248.57.44 attack
Sep  9 08:48:05 root sshd[24202]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.57.44 
Sep  9 08:48:07 root sshd[24202]: Failed password for invalid user confluence1 from 104.248.57.44 port 57582 ssh2
...
2020-09-09 16:02:50
104.248.57.44 attackbotsspam
Bruteforce detected by fail2ban
2020-09-09 08:12:25
104.248.57.44 attackbots
Sep  3 01:47:11 h2646465 sshd[15143]: Invalid user idb from 104.248.57.44
Sep  3 01:47:11 h2646465 sshd[15143]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.57.44
Sep  3 01:47:11 h2646465 sshd[15143]: Invalid user idb from 104.248.57.44
Sep  3 01:47:13 h2646465 sshd[15143]: Failed password for invalid user idb from 104.248.57.44 port 41380 ssh2
Sep  3 01:53:10 h2646465 sshd[15827]: Invalid user hbm from 104.248.57.44
Sep  3 01:53:10 h2646465 sshd[15827]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.57.44
Sep  3 01:53:10 h2646465 sshd[15827]: Invalid user hbm from 104.248.57.44
Sep  3 01:53:11 h2646465 sshd[15827]: Failed password for invalid user hbm from 104.248.57.44 port 50398 ssh2
Sep  3 01:56:29 h2646465 sshd[16383]: Invalid user admin from 104.248.57.44
...
2020-09-04 02:14:35
104.248.57.44 attack
Sep  3 01:47:11 h2646465 sshd[15143]: Invalid user idb from 104.248.57.44
Sep  3 01:47:11 h2646465 sshd[15143]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.57.44
Sep  3 01:47:11 h2646465 sshd[15143]: Invalid user idb from 104.248.57.44
Sep  3 01:47:13 h2646465 sshd[15143]: Failed password for invalid user idb from 104.248.57.44 port 41380 ssh2
Sep  3 01:53:10 h2646465 sshd[15827]: Invalid user hbm from 104.248.57.44
Sep  3 01:53:10 h2646465 sshd[15827]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.57.44
Sep  3 01:53:10 h2646465 sshd[15827]: Invalid user hbm from 104.248.57.44
Sep  3 01:53:11 h2646465 sshd[15827]: Failed password for invalid user hbm from 104.248.57.44 port 50398 ssh2
Sep  3 01:56:29 h2646465 sshd[16383]: Invalid user admin from 104.248.57.44
...
2020-09-03 17:40:59
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.248.57.206
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11798
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.248.57.206.			IN	A

;; AUTHORITY SECTION:
.			598	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022800 1800 900 604800 86400

;; Query time: 71 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 28 16:12:32 CST 2022
;; MSG SIZE  rcvd: 107
HOST信息:
Host 206.57.248.104.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 206.57.248.104.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
128.199.169.90 attack
Invalid user student5 from 128.199.169.90 port 59142
2020-08-21 02:00:44
121.229.26.104 attack
Aug 20 15:07:42 sip sshd[1368921]: Invalid user ftpuser from 121.229.26.104 port 37044
Aug 20 15:07:44 sip sshd[1368921]: Failed password for invalid user ftpuser from 121.229.26.104 port 37044 ssh2
Aug 20 15:14:12 sip sshd[1368967]: Invalid user user03 from 121.229.26.104 port 39742
...
2020-08-21 01:52:52
114.35.44.253 attack
Aug 20 16:22:58  sshd\[24868\]: Invalid user mila from 114.35.44.253Aug 20 16:23:00  sshd\[24868\]: Failed password for invalid user mila from 114.35.44.253 port 34122 ssh2
...
2020-08-21 01:42:49
118.25.91.168 attack
Aug 20 16:54:31 abendstille sshd\[588\]: Invalid user eon from 118.25.91.168
Aug 20 16:54:31 abendstille sshd\[588\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.91.168
Aug 20 16:54:33 abendstille sshd\[588\]: Failed password for invalid user eon from 118.25.91.168 port 53220 ssh2
Aug 20 16:55:58 abendstille sshd\[1971\]: Invalid user maxim from 118.25.91.168
Aug 20 16:55:58 abendstille sshd\[1971\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.91.168
...
2020-08-21 01:32:59
61.94.63.110 attack
Automatic report - Port Scan Attack
2020-08-21 01:48:44
190.192.40.18 attackspambots
Aug 20 16:50:48 rush sshd[30856]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.192.40.18
Aug 20 16:50:50 rush sshd[30856]: Failed password for invalid user user from 190.192.40.18 port 57444 ssh2
Aug 20 16:53:27 rush sshd[30972]: Failed password for root from 190.192.40.18 port 59268 ssh2
...
2020-08-21 01:35:16
54.37.232.108 attackspambots
Aug 20 12:50:53 onepixel sshd[1466669]: Failed password for root from 54.37.232.108 port 58274 ssh2
Aug 20 12:53:08 onepixel sshd[1467944]: Invalid user se from 54.37.232.108 port 38668
Aug 20 12:53:08 onepixel sshd[1467944]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.232.108 
Aug 20 12:53:08 onepixel sshd[1467944]: Invalid user se from 54.37.232.108 port 38668
Aug 20 12:53:10 onepixel sshd[1467944]: Failed password for invalid user se from 54.37.232.108 port 38668 ssh2
2020-08-21 01:55:16
103.210.21.57 attack
2020-08-20T14:22:55.399391shield sshd\[4462\]: Invalid user marcus from 103.210.21.57 port 37472
2020-08-20T14:22:55.408758shield sshd\[4462\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.210.21.57
2020-08-20T14:22:57.117818shield sshd\[4462\]: Failed password for invalid user marcus from 103.210.21.57 port 37472 ssh2
2020-08-20T14:27:15.552134shield sshd\[4788\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.210.21.57  user=root
2020-08-20T14:27:17.621519shield sshd\[4788\]: Failed password for root from 103.210.21.57 port 54106 ssh2
2020-08-21 01:33:14
5.12.8.41 attackspam
Automatic report - Port Scan Attack
2020-08-21 01:24:04
139.99.192.189 attackbotsspam
[2020-08-20 13:04:00] NOTICE[1185] chan_sip.c: Registration from '"433"' failed for '139.99.192.189:24345' - Wrong password
[2020-08-20 13:04:00] SECURITY[1203] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-08-20T13:04:00.923-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="433",SessionID="0x7f10c4242e18",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/139.99.192.189/24345",Challenge="30913389",ReceivedChallenge="30913389",ReceivedHash="9fb9071820225e43def5d486887d2635"
[2020-08-20 13:12:33] NOTICE[1185] chan_sip.c: Registration from '"435"' failed for '139.99.192.189:44577' - Wrong password
[2020-08-20 13:12:33] SECURITY[1203] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-08-20T13:12:33.025-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="435",SessionID="0x7f10c41b0fe8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/139.
...
2020-08-21 01:46:29
52.231.157.255 attackspam
Aug 20 20:05:23 pkdns2 sshd\[31017\]: Invalid user testuser from 52.231.157.255Aug 20 20:05:25 pkdns2 sshd\[31017\]: Failed password for invalid user testuser from 52.231.157.255 port 55858 ssh2Aug 20 20:10:14 pkdns2 sshd\[31218\]: Invalid user ld from 52.231.157.255Aug 20 20:10:16 pkdns2 sshd\[31218\]: Failed password for invalid user ld from 52.231.157.255 port 37152 ssh2Aug 20 20:15:01 pkdns2 sshd\[31401\]: Invalid user test1 from 52.231.157.255Aug 20 20:15:03 pkdns2 sshd\[31401\]: Failed password for invalid user test1 from 52.231.157.255 port 46682 ssh2
...
2020-08-21 01:27:06
200.6.251.100 attack
2020-08-20T14:22:43.236467shield sshd\[4430\]: Invalid user jimmy from 200.6.251.100 port 52840
2020-08-20T14:22:43.248509shield sshd\[4430\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.6.251.100
2020-08-20T14:22:44.976743shield sshd\[4430\]: Failed password for invalid user jimmy from 200.6.251.100 port 52840 ssh2
2020-08-20T14:27:18.294707shield sshd\[4790\]: Invalid user owner from 200.6.251.100 port 45186
2020-08-20T14:27:18.302832shield sshd\[4790\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.6.251.100
2020-08-21 01:34:16
196.194.205.51 attackbotsspam
Unauthorized connection attempt from IP address 196.194.205.51 on Port 445(SMB)
2020-08-21 01:41:30
81.4.122.27 attack
Invalid user ans from 81.4.122.27 port 40600
2020-08-21 01:36:06
54.38.36.210 attackspambots
SSH Brute-Forcing (server2)
2020-08-21 02:01:30

最近上报的IP列表

104.248.53.96 104.248.57.133 104.248.57.254 104.248.57.156
104.248.57.49 104.248.57.95 104.248.58.106 104.248.58.100
104.248.58.156 104.248.58.122 104.248.58.230 104.248.58.201
104.248.57.223 104.248.58.238 104.248.58.251 104.248.58.45
104.248.59.207 104.248.59.28 104.248.59.37 104.248.59.49