必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States

运营商(isp): Microsoft Corporation

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attackbotsspam
Nov 29 04:26:12 wbs sshd\[21913\]: Invalid user kromer from 104.42.158.117
Nov 29 04:26:12 wbs sshd\[21913\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.42.158.117
Nov 29 04:26:15 wbs sshd\[21913\]: Failed password for invalid user kromer from 104.42.158.117 port 13312 ssh2
Nov 29 04:29:38 wbs sshd\[22227\]: Invalid user lab from 104.42.158.117
Nov 29 04:29:38 wbs sshd\[22227\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.42.158.117
2019-11-29 22:34:03
attack
Automatic report - Banned IP Access
2019-11-18 23:00:36
attack
Nov  9 20:01:36 legacy sshd[25616]: Failed password for root from 104.42.158.117 port 18368 ssh2
Nov  9 20:05:53 legacy sshd[25687]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.42.158.117
Nov  9 20:05:55 legacy sshd[25687]: Failed password for invalid user wpyan from 104.42.158.117 port 18368 ssh2
...
2019-11-10 03:26:22
attackbots
Nov  9 16:57:09 server sshd\[1863\]: Invalid user mntner from 104.42.158.117 port 23488
Nov  9 16:57:09 server sshd\[1863\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.42.158.117
Nov  9 16:57:11 server sshd\[1863\]: Failed password for invalid user mntner from 104.42.158.117 port 23488 ssh2
Nov  9 17:00:42 server sshd\[2990\]: Invalid user cladmin from 104.42.158.117 port 23488
Nov  9 17:00:42 server sshd\[2990\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.42.158.117
2019-11-09 23:05:44
attackspambots
ssh failed login
2019-11-09 06:36:57
attackbotsspam
Nov  7 06:20:13 dedicated sshd[10345]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.42.158.117  user=root
Nov  7 06:20:15 dedicated sshd[10345]: Failed password for root from 104.42.158.117 port 18368 ssh2
2019-11-07 13:43:46
attackspambots
Nov  2 22:37:22 php1 sshd\[4725\]: Invalid user vx from 104.42.158.117
Nov  2 22:37:22 php1 sshd\[4725\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.42.158.117
Nov  2 22:37:24 php1 sshd\[4725\]: Failed password for invalid user vx from 104.42.158.117 port 18368 ssh2
Nov  2 22:41:49 php1 sshd\[5347\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.42.158.117  user=root
Nov  2 22:41:51 php1 sshd\[5347\]: Failed password for root from 104.42.158.117 port 18368 ssh2
2019-11-03 20:43:52
attackspam
2019-11-02T11:51:11.532316hub.schaetter.us sshd\[24299\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.42.158.117  user=root
2019-11-02T11:51:13.247598hub.schaetter.us sshd\[24299\]: Failed password for root from 104.42.158.117 port 50976 ssh2
2019-11-02T11:55:53.967212hub.schaetter.us sshd\[24332\]: Invalid user centos from 104.42.158.117 port 50976
2019-11-02T11:55:53.979984hub.schaetter.us sshd\[24332\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.42.158.117
2019-11-02T11:55:56.076211hub.schaetter.us sshd\[24332\]: Failed password for invalid user centos from 104.42.158.117 port 50976 ssh2
...
2019-11-02 22:51:02
attackspam
(sshd) Failed SSH login from 104.42.158.117 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Nov  1 12:21:33 server2 sshd[12482]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.42.158.117  user=root
Nov  1 12:21:34 server2 sshd[12482]: Failed password for root from 104.42.158.117 port 45824 ssh2
Nov  1 12:43:40 server2 sshd[13004]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.42.158.117  user=root
Nov  1 12:43:42 server2 sshd[13004]: Failed password for root from 104.42.158.117 port 45824 ssh2
Nov  1 12:47:15 server2 sshd[13095]: Invalid user craig from 104.42.158.117 port 45824
2019-11-02 01:30:26
attack
Oct 26 06:45:39 eventyay sshd[29410]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.42.158.117
Oct 26 06:45:42 eventyay sshd[29410]: Failed password for invalid user q1w2e3r4 from 104.42.158.117 port 45056 ssh2
Oct 26 06:49:59 eventyay sshd[29449]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.42.158.117
...
2019-10-26 12:56:45
attack
Excessive Port-Scanning
2019-10-13 18:35:02
attackspam
Oct  1 09:35:11 ny01 sshd[7601]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.42.158.117
Oct  1 09:35:13 ny01 sshd[7601]: Failed password for invalid user zou from 104.42.158.117 port 54592 ssh2
Oct  1 09:39:14 ny01 sshd[8330]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.42.158.117
2019-10-01 21:53:00
attackbots
Oct  1 02:36:14 xtremcommunity sshd\[57090\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.42.158.117  user=root
Oct  1 02:36:16 xtremcommunity sshd\[57090\]: Failed password for root from 104.42.158.117 port 54592 ssh2
Oct  1 02:40:29 xtremcommunity sshd\[57272\]: Invalid user attack from 104.42.158.117 port 54592
Oct  1 02:40:29 xtremcommunity sshd\[57272\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.42.158.117
Oct  1 02:40:31 xtremcommunity sshd\[57272\]: Failed password for invalid user attack from 104.42.158.117 port 54592 ssh2
...
2019-10-01 14:49:13
attackbotsspam
Sep 28 14:31:18 ns41 sshd[23419]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.42.158.117
2019-09-29 00:45:38
attackspam
Sep 24 13:46:58 MK-Soft-VM7 sshd[8740]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.42.158.117 
Sep 24 13:47:00 MK-Soft-VM7 sshd[8740]: Failed password for invalid user miko from 104.42.158.117 port 54592 ssh2
...
2019-09-24 20:33:33
attackbotsspam
Sep 19 04:49:08 lcdev sshd\[10429\]: Invalid user ray from 104.42.158.117
Sep 19 04:49:08 lcdev sshd\[10429\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.42.158.117
Sep 19 04:49:11 lcdev sshd\[10429\]: Failed password for invalid user ray from 104.42.158.117 port 19072 ssh2
Sep 19 04:54:29 lcdev sshd\[10884\]: Invalid user ts3user from 104.42.158.117
Sep 19 04:54:29 lcdev sshd\[10884\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.42.158.117
2019-09-19 22:58:57
attack
Sep 13 21:00:22 MK-Soft-Root2 sshd\[7264\]: Invalid user abc123 from 104.42.158.117 port 54720
Sep 13 21:00:22 MK-Soft-Root2 sshd\[7264\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.42.158.117
Sep 13 21:00:24 MK-Soft-Root2 sshd\[7264\]: Failed password for invalid user abc123 from 104.42.158.117 port 54720 ssh2
...
2019-09-14 03:47:24
attack
Brute force attempt
2019-09-05 22:49:36
attackbotsspam
Honeypot attack, port: 23, PTR: PTR record not found
2019-08-26 16:20:41
attackspam
Aug 10 08:45:40 MK-Soft-VM6 sshd\[8791\]: Invalid user tli from 104.42.158.117 port 25408
Aug 10 08:45:40 MK-Soft-VM6 sshd\[8791\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.42.158.117
Aug 10 08:45:43 MK-Soft-VM6 sshd\[8791\]: Failed password for invalid user tli from 104.42.158.117 port 25408 ssh2
...
2019-08-10 17:27:38
attackspambots
Honeypot attack, port: 23, PTR: PTR record not found
2019-08-08 06:10:34
attackbots
Honeypot attack, port: 23, PTR: PTR record not found
2019-07-30 02:40:10
attackbots
Honeypot attack, port: 23, PTR: PTR record not found
2019-07-15 23:16:57
attackspam
Invalid user admin from 104.42.158.117 port 30208
2019-06-25 02:46:32
相同子网IP讨论:
IP 类型 评论内容 时间
104.42.158.134 attackspambots
Nov 11 23:21:51 tdfoods sshd\[13017\]: Invalid user howard123 from 104.42.158.134
Nov 11 23:21:51 tdfoods sshd\[13017\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.42.158.134
Nov 11 23:21:53 tdfoods sshd\[13017\]: Failed password for invalid user howard123 from 104.42.158.134 port 14272 ssh2
Nov 11 23:26:18 tdfoods sshd\[13408\]: Invalid user itext from 104.42.158.134
Nov 11 23:26:18 tdfoods sshd\[13408\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.42.158.134
2019-11-12 17:27:15
104.42.158.134 attackbotsspam
ssh failed login
2019-11-01 04:14:17
104.42.158.134 attackbotsspam
" "
2019-10-31 15:19:39
104.42.158.134 attack
web-1 [ssh] SSH Attack
2019-10-27 15:49:42
104.42.158.134 attackbots
Sep 10 10:06:33 webhost01 sshd[12235]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.42.158.134
Sep 10 10:06:34 webhost01 sshd[12235]: Failed password for invalid user vbox from 104.42.158.134 port 52032 ssh2
...
2019-09-10 11:06:25
104.42.158.134 attack
ssh failed login
2019-09-08 10:15:05
104.42.158.134 attackbotsspam
2019-08-25 03:41:11,763 fail2ban.actions        [878]: NOTICE  [sshd] Ban 104.42.158.134
2019-08-25 06:46:42,341 fail2ban.actions        [878]: NOTICE  [sshd] Ban 104.42.158.134
2019-08-25 09:57:48,528 fail2ban.actions        [878]: NOTICE  [sshd] Ban 104.42.158.134
...
2019-08-25 22:37:27
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.42.158.117
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 60227
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;104.42.158.117.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019062401 1800 900 604800 86400

;; Query time: 88 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Tue Jun 25 02:46:26 CST 2019
;; MSG SIZE  rcvd: 118
HOST信息:
Host 117.158.42.104.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 117.158.42.104.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
197.45.155.12 attackspambots
Nov 22 04:23:17 Tower sshd[12856]: Connection from 197.45.155.12 port 27587 on 192.168.10.220 port 22
Nov 22 04:23:19 Tower sshd[12856]: Invalid user ching from 197.45.155.12 port 27587
Nov 22 04:23:19 Tower sshd[12856]: error: Could not get shadow information for NOUSER
Nov 22 04:23:19 Tower sshd[12856]: Failed password for invalid user ching from 197.45.155.12 port 27587 ssh2
Nov 22 04:23:19 Tower sshd[12856]: Received disconnect from 197.45.155.12 port 27587:11: Bye Bye [preauth]
Nov 22 04:23:19 Tower sshd[12856]: Disconnected from invalid user ching 197.45.155.12 port 27587 [preauth]
2019-11-22 17:30:45
187.178.146.122 attack
MultiHost/MultiPort Probe, Scan, Hack -
2019-11-22 17:21:03
114.223.174.120 attack
badbot
2019-11-22 17:22:41
183.56.199.94 attackspam
Nov 22 10:26:53 cp sshd[18219]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.56.199.94
2019-11-22 17:50:02
125.124.143.182 attackspam
Nov 22 08:43:39 serwer sshd\[31574\]: Invalid user release from 125.124.143.182 port 54638
Nov 22 08:43:39 serwer sshd\[31574\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.124.143.182
Nov 22 08:43:40 serwer sshd\[31574\]: Failed password for invalid user release from 125.124.143.182 port 54638 ssh2
...
2019-11-22 17:15:30
37.110.36.196 attackspam
Fail2Ban Ban Triggered
2019-11-22 17:37:53
181.49.157.10 attackspambots
Nov 22 14:44:08 areeb-Workstation sshd[22031]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.49.157.10
Nov 22 14:44:09 areeb-Workstation sshd[22031]: Failed password for invalid user cusadmin from 181.49.157.10 port 43480 ssh2
...
2019-11-22 17:25:33
218.92.0.181 attackbotsspam
Nov 22 15:30:00 itv-usvr-01 sshd[10948]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.181  user=root
Nov 22 15:30:03 itv-usvr-01 sshd[10948]: Failed password for root from 218.92.0.181 port 31998 ssh2
2019-11-22 17:16:38
182.240.53.179 attackspam
badbot
2019-11-22 17:50:34
61.141.73.229 attackbots
Lines containing failures of 61.141.73.229
Nov 21 23:13:08 icinga sshd[2989]: Invalid user mysql from 61.141.73.229 port 9310
Nov 21 23:13:08 icinga sshd[2989]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.141.73.229
Nov 21 23:13:09 icinga sshd[2989]: Failed password for invalid user mysql from 61.141.73.229 port 9310 ssh2
Nov 21 23:13:10 icinga sshd[2989]: Received disconnect from 61.141.73.229 port 9310:11: Bye Bye [preauth]
Nov 21 23:13:10 icinga sshd[2989]: Disconnected from invalid user mysql 61.141.73.229 port 9310 [preauth]
Nov 21 23:38:05 icinga sshd[9604]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.141.73.229  user=daemon
Nov 21 23:38:07 icinga sshd[9604]: Failed password for daemon from 61.141.73.229 port 11141 ssh2
Nov 21 23:38:07 icinga sshd[9604]: Received disconnect from 61.141.73.229 port 11141:11: Bye Bye [preauth]
Nov 21 23:38:07 icinga sshd[9604]: Disconnected ........
------------------------------
2019-11-22 17:26:05
79.127.120.180 attackbots
Lines containing failures of 79.127.120.180
Nov 22 04:56:46 nxxxxxxx sshd[24158]: Invalid user tom from 79.127.120.180 port 49276
Nov 22 04:56:46 nxxxxxxx sshd[24158]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.127.120.180
Nov 22 04:56:48 nxxxxxxx sshd[24158]: Failed password for invalid user tom from 79.127.120.180 port 49276 ssh2
Nov 22 04:56:48 nxxxxxxx sshd[24158]: Received disconnect from 79.127.120.180 port 49276:11: Bye Bye [preauth]
Nov 22 04:56:48 nxxxxxxx sshd[24158]: Disconnected from invalid user tom 79.127.120.180 port 49276 [preauth]
Nov 22 05:10:37 nxxxxxxx sshd[25814]: Invalid user rijk from 79.127.120.180 port 41254
Nov 22 05:10:37 nxxxxxxx sshd[25814]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.127.120.180
Nov 22 05:10:40 nxxxxxxx sshd[25814]: Failed password for invalid user rijk from 79.127.120.180 port 41254 ssh2
Nov 22 05:10:40 nxxxxxxx sshd[25814]: Recei........
------------------------------
2019-11-22 17:48:40
121.15.2.178 attackbots
Nov 21 23:23:15 hpm sshd\[1704\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.15.2.178  user=root
Nov 21 23:23:17 hpm sshd\[1704\]: Failed password for root from 121.15.2.178 port 43538 ssh2
Nov 21 23:27:10 hpm sshd\[2018\]: Invalid user zebediah from 121.15.2.178
Nov 21 23:27:10 hpm sshd\[2018\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.15.2.178
Nov 21 23:27:12 hpm sshd\[2018\]: Failed password for invalid user zebediah from 121.15.2.178 port 48234 ssh2
2019-11-22 17:40:10
50.116.99.88 attackspambots
Invalid user ts from 50.116.99.88 port 51218
2019-11-22 17:24:09
220.186.125.82 attack
badbot
2019-11-22 17:24:38
121.7.24.166 attackspam
MultiHost/MultiPort Probe, Scan, Hack -
2019-11-22 17:34:09

最近上报的IP列表

167.71.0.96 116.2.141.86 51.16.84.40 23.227.63.230
95.4.25.62 63.141.56.20 204.93.2.7 204.93.2.8
38.100.130.241 165.22.50.106 177.129.204.249 1.161.193.10
137.74.255.231 20.118.104.152 181.119.112.21 93.32.74.41
89.216.105.45 223.237.22.178 223.205.250.246 218.20.201.240