必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States

运营商(isp): Microsoft Corporation

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attackbotsspam
Nov 29 04:26:12 wbs sshd\[21913\]: Invalid user kromer from 104.42.158.117
Nov 29 04:26:12 wbs sshd\[21913\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.42.158.117
Nov 29 04:26:15 wbs sshd\[21913\]: Failed password for invalid user kromer from 104.42.158.117 port 13312 ssh2
Nov 29 04:29:38 wbs sshd\[22227\]: Invalid user lab from 104.42.158.117
Nov 29 04:29:38 wbs sshd\[22227\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.42.158.117
2019-11-29 22:34:03
attack
Automatic report - Banned IP Access
2019-11-18 23:00:36
attack
Nov  9 20:01:36 legacy sshd[25616]: Failed password for root from 104.42.158.117 port 18368 ssh2
Nov  9 20:05:53 legacy sshd[25687]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.42.158.117
Nov  9 20:05:55 legacy sshd[25687]: Failed password for invalid user wpyan from 104.42.158.117 port 18368 ssh2
...
2019-11-10 03:26:22
attackbots
Nov  9 16:57:09 server sshd\[1863\]: Invalid user mntner from 104.42.158.117 port 23488
Nov  9 16:57:09 server sshd\[1863\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.42.158.117
Nov  9 16:57:11 server sshd\[1863\]: Failed password for invalid user mntner from 104.42.158.117 port 23488 ssh2
Nov  9 17:00:42 server sshd\[2990\]: Invalid user cladmin from 104.42.158.117 port 23488
Nov  9 17:00:42 server sshd\[2990\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.42.158.117
2019-11-09 23:05:44
attackspambots
ssh failed login
2019-11-09 06:36:57
attackbotsspam
Nov  7 06:20:13 dedicated sshd[10345]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.42.158.117  user=root
Nov  7 06:20:15 dedicated sshd[10345]: Failed password for root from 104.42.158.117 port 18368 ssh2
2019-11-07 13:43:46
attackspambots
Nov  2 22:37:22 php1 sshd\[4725\]: Invalid user vx from 104.42.158.117
Nov  2 22:37:22 php1 sshd\[4725\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.42.158.117
Nov  2 22:37:24 php1 sshd\[4725\]: Failed password for invalid user vx from 104.42.158.117 port 18368 ssh2
Nov  2 22:41:49 php1 sshd\[5347\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.42.158.117  user=root
Nov  2 22:41:51 php1 sshd\[5347\]: Failed password for root from 104.42.158.117 port 18368 ssh2
2019-11-03 20:43:52
attackspam
2019-11-02T11:51:11.532316hub.schaetter.us sshd\[24299\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.42.158.117  user=root
2019-11-02T11:51:13.247598hub.schaetter.us sshd\[24299\]: Failed password for root from 104.42.158.117 port 50976 ssh2
2019-11-02T11:55:53.967212hub.schaetter.us sshd\[24332\]: Invalid user centos from 104.42.158.117 port 50976
2019-11-02T11:55:53.979984hub.schaetter.us sshd\[24332\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.42.158.117
2019-11-02T11:55:56.076211hub.schaetter.us sshd\[24332\]: Failed password for invalid user centos from 104.42.158.117 port 50976 ssh2
...
2019-11-02 22:51:02
attackspam
(sshd) Failed SSH login from 104.42.158.117 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Nov  1 12:21:33 server2 sshd[12482]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.42.158.117  user=root
Nov  1 12:21:34 server2 sshd[12482]: Failed password for root from 104.42.158.117 port 45824 ssh2
Nov  1 12:43:40 server2 sshd[13004]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.42.158.117  user=root
Nov  1 12:43:42 server2 sshd[13004]: Failed password for root from 104.42.158.117 port 45824 ssh2
Nov  1 12:47:15 server2 sshd[13095]: Invalid user craig from 104.42.158.117 port 45824
2019-11-02 01:30:26
attack
Oct 26 06:45:39 eventyay sshd[29410]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.42.158.117
Oct 26 06:45:42 eventyay sshd[29410]: Failed password for invalid user q1w2e3r4 from 104.42.158.117 port 45056 ssh2
Oct 26 06:49:59 eventyay sshd[29449]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.42.158.117
...
2019-10-26 12:56:45
attack
Excessive Port-Scanning
2019-10-13 18:35:02
attackspam
Oct  1 09:35:11 ny01 sshd[7601]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.42.158.117
Oct  1 09:35:13 ny01 sshd[7601]: Failed password for invalid user zou from 104.42.158.117 port 54592 ssh2
Oct  1 09:39:14 ny01 sshd[8330]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.42.158.117
2019-10-01 21:53:00
attackbots
Oct  1 02:36:14 xtremcommunity sshd\[57090\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.42.158.117  user=root
Oct  1 02:36:16 xtremcommunity sshd\[57090\]: Failed password for root from 104.42.158.117 port 54592 ssh2
Oct  1 02:40:29 xtremcommunity sshd\[57272\]: Invalid user attack from 104.42.158.117 port 54592
Oct  1 02:40:29 xtremcommunity sshd\[57272\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.42.158.117
Oct  1 02:40:31 xtremcommunity sshd\[57272\]: Failed password for invalid user attack from 104.42.158.117 port 54592 ssh2
...
2019-10-01 14:49:13
attackbotsspam
Sep 28 14:31:18 ns41 sshd[23419]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.42.158.117
2019-09-29 00:45:38
attackspam
Sep 24 13:46:58 MK-Soft-VM7 sshd[8740]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.42.158.117 
Sep 24 13:47:00 MK-Soft-VM7 sshd[8740]: Failed password for invalid user miko from 104.42.158.117 port 54592 ssh2
...
2019-09-24 20:33:33
attackbotsspam
Sep 19 04:49:08 lcdev sshd\[10429\]: Invalid user ray from 104.42.158.117
Sep 19 04:49:08 lcdev sshd\[10429\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.42.158.117
Sep 19 04:49:11 lcdev sshd\[10429\]: Failed password for invalid user ray from 104.42.158.117 port 19072 ssh2
Sep 19 04:54:29 lcdev sshd\[10884\]: Invalid user ts3user from 104.42.158.117
Sep 19 04:54:29 lcdev sshd\[10884\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.42.158.117
2019-09-19 22:58:57
attack
Sep 13 21:00:22 MK-Soft-Root2 sshd\[7264\]: Invalid user abc123 from 104.42.158.117 port 54720
Sep 13 21:00:22 MK-Soft-Root2 sshd\[7264\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.42.158.117
Sep 13 21:00:24 MK-Soft-Root2 sshd\[7264\]: Failed password for invalid user abc123 from 104.42.158.117 port 54720 ssh2
...
2019-09-14 03:47:24
attack
Brute force attempt
2019-09-05 22:49:36
attackbotsspam
Honeypot attack, port: 23, PTR: PTR record not found
2019-08-26 16:20:41
attackspam
Aug 10 08:45:40 MK-Soft-VM6 sshd\[8791\]: Invalid user tli from 104.42.158.117 port 25408
Aug 10 08:45:40 MK-Soft-VM6 sshd\[8791\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.42.158.117
Aug 10 08:45:43 MK-Soft-VM6 sshd\[8791\]: Failed password for invalid user tli from 104.42.158.117 port 25408 ssh2
...
2019-08-10 17:27:38
attackspambots
Honeypot attack, port: 23, PTR: PTR record not found
2019-08-08 06:10:34
attackbots
Honeypot attack, port: 23, PTR: PTR record not found
2019-07-30 02:40:10
attackbots
Honeypot attack, port: 23, PTR: PTR record not found
2019-07-15 23:16:57
attackspam
Invalid user admin from 104.42.158.117 port 30208
2019-06-25 02:46:32
相同子网IP讨论:
IP 类型 评论内容 时间
104.42.158.134 attackspambots
Nov 11 23:21:51 tdfoods sshd\[13017\]: Invalid user howard123 from 104.42.158.134
Nov 11 23:21:51 tdfoods sshd\[13017\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.42.158.134
Nov 11 23:21:53 tdfoods sshd\[13017\]: Failed password for invalid user howard123 from 104.42.158.134 port 14272 ssh2
Nov 11 23:26:18 tdfoods sshd\[13408\]: Invalid user itext from 104.42.158.134
Nov 11 23:26:18 tdfoods sshd\[13408\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.42.158.134
2019-11-12 17:27:15
104.42.158.134 attackbotsspam
ssh failed login
2019-11-01 04:14:17
104.42.158.134 attackbotsspam
" "
2019-10-31 15:19:39
104.42.158.134 attack
web-1 [ssh] SSH Attack
2019-10-27 15:49:42
104.42.158.134 attackbots
Sep 10 10:06:33 webhost01 sshd[12235]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.42.158.134
Sep 10 10:06:34 webhost01 sshd[12235]: Failed password for invalid user vbox from 104.42.158.134 port 52032 ssh2
...
2019-09-10 11:06:25
104.42.158.134 attack
ssh failed login
2019-09-08 10:15:05
104.42.158.134 attackbotsspam
2019-08-25 03:41:11,763 fail2ban.actions        [878]: NOTICE  [sshd] Ban 104.42.158.134
2019-08-25 06:46:42,341 fail2ban.actions        [878]: NOTICE  [sshd] Ban 104.42.158.134
2019-08-25 09:57:48,528 fail2ban.actions        [878]: NOTICE  [sshd] Ban 104.42.158.134
...
2019-08-25 22:37:27
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.42.158.117
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 60227
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;104.42.158.117.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019062401 1800 900 604800 86400

;; Query time: 88 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Tue Jun 25 02:46:26 CST 2019
;; MSG SIZE  rcvd: 118
HOST信息:
Host 117.158.42.104.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 117.158.42.104.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
182.73.123.118 attack
Aug 30 08:23:48 lcdev sshd\[15385\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.73.123.118  user=root
Aug 30 08:23:50 lcdev sshd\[15385\]: Failed password for root from 182.73.123.118 port 48912 ssh2
Aug 30 08:29:47 lcdev sshd\[15897\]: Invalid user mythtv from 182.73.123.118
Aug 30 08:29:48 lcdev sshd\[15897\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.73.123.118
Aug 30 08:29:50 lcdev sshd\[15897\]: Failed password for invalid user mythtv from 182.73.123.118 port 37382 ssh2
2019-08-31 08:15:19
189.112.102.89 attackspambots
19/8/30@12:18:14: FAIL: Alarm-Intrusion address from=189.112.102.89
...
2019-08-31 08:36:02
122.15.65.70 attackspambots
$f2bV_matches
2019-08-31 08:36:59
118.187.6.24 attack
fraudulent SSH attempt
2019-08-31 08:34:57
23.129.64.186 attack
v+ssh-bruteforce
2019-08-31 08:05:56
79.127.55.189 attackspambots
$f2bV_matches_ltvn
2019-08-31 08:24:36
1.6.114.75 attack
2019-08-31T01:22:06.021932  sshd[23643]: Invalid user PS from 1.6.114.75 port 57770
2019-08-31T01:22:06.036706  sshd[23643]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.6.114.75
2019-08-31T01:22:06.021932  sshd[23643]: Invalid user PS from 1.6.114.75 port 57770
2019-08-31T01:22:07.697016  sshd[23643]: Failed password for invalid user PS from 1.6.114.75 port 57770 ssh2
2019-08-31T01:27:15.571467  sshd[23691]: Invalid user exsoldie from 1.6.114.75 port 46608
...
2019-08-31 08:07:20
176.31.253.204 attackbots
Invalid user ftpuser from 176.31.253.204 port 40047
2019-08-31 08:17:11
218.92.0.145 attackbotsspam
Aug 31 00:01:35 hb sshd\[17905\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.145  user=root
Aug 31 00:01:37 hb sshd\[17905\]: Failed password for root from 218.92.0.145 port 39598 ssh2
Aug 31 00:01:39 hb sshd\[17905\]: Failed password for root from 218.92.0.145 port 39598 ssh2
Aug 31 00:01:42 hb sshd\[17905\]: Failed password for root from 218.92.0.145 port 39598 ssh2
Aug 31 00:01:52 hb sshd\[17931\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.145  user=root
2019-08-31 08:26:55
121.134.159.21 attackbots
SSH Brute-Force attacks
2019-08-31 08:04:50
177.131.121.50 attack
Aug 30 19:52:32 TORMINT sshd\[12726\]: Invalid user element from 177.131.121.50
Aug 30 19:52:32 TORMINT sshd\[12726\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.131.121.50
Aug 30 19:52:34 TORMINT sshd\[12726\]: Failed password for invalid user element from 177.131.121.50 port 43368 ssh2
...
2019-08-31 08:09:16
201.20.82.102 attackspam
proto=tcp  .  spt=54943  .  dpt=25  .     (listed on Blocklist de  Aug 29)     (706)
2019-08-31 08:08:42
134.175.1.247 attackspambots
[Fri Aug 30 23:18:03.716745 2019] [:error] [pid 17144:tid 139870275426048] [client 134.175.1.247:45822] [client 134.175.1.247] ModSecurity: Access denied with code 403 (phase 2). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/owasp-modsecurity-crs-3.1.1/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "792"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197"] [severity "WARNING"] [ver "OWASP_CRS/3.1.1"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/IP_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "103.27.207.197"] [uri "/TP/public/index.php"] [unique_id "XWlMO-NHSrxYlcjcnyLJRgAAAEM"]
...
2019-08-31 08:42:04
1.186.45.250 attackspambots
Aug 30 20:18:13 * sshd[13596]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.186.45.250
Aug 30 20:18:15 * sshd[13596]: Failed password for invalid user simon from 1.186.45.250 port 60145 ssh2
2019-08-31 08:47:14
73.29.192.106 attackbots
SSH/22 MH Probe, BF, Hack -
2019-08-31 08:40:33

最近上报的IP列表

167.71.0.96 116.2.141.86 51.16.84.40 23.227.63.230
95.4.25.62 63.141.56.20 204.93.2.7 204.93.2.8
38.100.130.241 165.22.50.106 177.129.204.249 1.161.193.10
137.74.255.231 20.118.104.152 181.119.112.21 93.32.74.41
89.216.105.45 223.237.22.178 223.205.250.246 218.20.201.240