必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Philippines

运营商(isp): Philippine Long Distance Telephone Company

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
类型 评论内容 时间
attack
20/9/24@08:30:49: FAIL: Alarm-Network address from=124.104.4.67
...
2020-09-25 03:04:51
attackbots
Unauthorized connection attempt from IP address 124.104.4.67 on Port 445(SMB)
2020-09-24 18:47:22
相同子网IP讨论:
IP 类型 评论内容 时间
124.104.43.143 attackspambots
Attempted connection to port 445.
2020-07-23 05:55:20
124.104.47.209 attack
Automatic report - Port Scan Attack
2020-03-07 05:38:49
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 124.104.4.67
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 20586
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;124.104.4.67.			IN	A

;; AUTHORITY SECTION:
.			316	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020092400 1800 900 604800 86400

;; Query time: 41 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Sep 24 18:47:19 CST 2020
;; MSG SIZE  rcvd: 116
HOST信息:
67.4.104.124.in-addr.arpa domain name pointer 124.104.4.67.pldt.net.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
67.4.104.124.in-addr.arpa	name = 124.104.4.67.pldt.net.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
222.186.175.182 attack
Dec  7 07:21:15 work-partkepr sshd\[23609\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.182  user=root
Dec  7 07:21:16 work-partkepr sshd\[23609\]: Failed password for root from 222.186.175.182 port 1414 ssh2
...
2019-12-07 15:39:44
31.193.136.163 attackbots
Attempted to connect 3 times to port 5060 UDP
2019-12-07 15:17:53
39.110.250.69 attackspambots
Dec  7 07:29:48 v22018086721571380 sshd[10587]: Failed password for invalid user matteau from 39.110.250.69 port 54794 ssh2
2019-12-07 15:45:47
72.52.128.192 attack
SSH bruteforce
2019-12-07 15:43:14
222.186.175.215 attackspam
Dec  7 02:34:43 linuxvps sshd\[26966\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.215  user=root
Dec  7 02:34:45 linuxvps sshd\[26966\]: Failed password for root from 222.186.175.215 port 6322 ssh2
Dec  7 02:35:03 linuxvps sshd\[27127\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.215  user=root
Dec  7 02:35:05 linuxvps sshd\[27127\]: Failed password for root from 222.186.175.215 port 19030 ssh2
Dec  7 02:35:08 linuxvps sshd\[27127\]: Failed password for root from 222.186.175.215 port 19030 ssh2
2019-12-07 15:44:38
142.93.47.125 attack
Dec  6 21:14:10 hpm sshd\[5468\]: Invalid user admin from 142.93.47.125
Dec  6 21:14:10 hpm sshd\[5468\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.47.125
Dec  6 21:14:12 hpm sshd\[5468\]: Failed password for invalid user admin from 142.93.47.125 port 49468 ssh2
Dec  6 21:19:40 hpm sshd\[5949\]: Invalid user gerda from 142.93.47.125
Dec  6 21:19:40 hpm sshd\[5949\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.47.125
2019-12-07 15:32:04
71.6.142.81 attackbotsspam
UTC: 2019-12-06 port: 53/tcp
2019-12-07 15:24:35
69.244.198.97 attackspambots
Dec  7 06:30:15 *** sshd[21564]: Invalid user lc from 69.244.198.97
2019-12-07 15:15:22
120.29.118.14 attackbots
Port Scan
2019-12-07 15:35:28
24.224.216.187 attack
IMAP
2019-12-07 15:18:47
27.34.114.243 attack
Dec  7 07:50:05 lvps87-230-18-106 sshd[4843]: Invalid user guest from 27.34.114.243
Dec  7 07:50:05 lvps87-230-18-106 sshd[4843]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.34.114.243 
Dec  7 07:50:07 lvps87-230-18-106 sshd[4843]: Failed password for invalid user guest from 27.34.114.243 port 27039 ssh2
Dec  7 07:50:07 lvps87-230-18-106 sshd[4843]: Connection closed by 27.34.114.243 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=27.34.114.243
2019-12-07 15:18:25
190.25.232.2 attackspambots
$f2bV_matches
2019-12-07 15:30:09
210.177.54.141 attack
Dec  7 06:29:09 localhost sshd\[102311\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.177.54.141  user=root
Dec  7 06:29:11 localhost sshd\[102311\]: Failed password for root from 210.177.54.141 port 44850 ssh2
Dec  7 06:44:55 localhost sshd\[102791\]: Invalid user abigail from 210.177.54.141 port 51956
Dec  7 06:44:55 localhost sshd\[102791\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.177.54.141
Dec  7 06:44:57 localhost sshd\[102791\]: Failed password for invalid user abigail from 210.177.54.141 port 51956 ssh2
...
2019-12-07 15:22:22
185.176.27.118 attackbots
Dec  7 08:38:23 mc1 kernel: \[6990497.489347\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=185.176.27.118 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=4207 PROTO=TCP SPT=49179 DPT=9289 WINDOW=1024 RES=0x00 SYN URGP=0 
Dec  7 08:39:06 mc1 kernel: \[6990540.369478\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=185.176.27.118 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=64017 PROTO=TCP SPT=49179 DPT=13131 WINDOW=1024 RES=0x00 SYN URGP=0 
Dec  7 08:47:22 mc1 kernel: \[6991036.739424\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=185.176.27.118 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=32639 PROTO=TCP SPT=49179 DPT=3301 WINDOW=1024 RES=0x00 SYN URGP=0 
...
2019-12-07 15:47:52
119.147.210.4 attack
SSH invalid-user multiple login attempts
2019-12-07 15:48:36

最近上报的IP列表

177.106.229.95 113.252.119.144 45.226.121.32 45.89.173.204
116.206.245.141 104.46.5.23 149.124.166.29 52.251.124.34
219.78.143.20 103.250.146.226 109.87.82.211 222.25.79.196
90.164.145.221 69.46.51.187 207.131.112.203 114.143.158.186
167.130.240.53 5.161.58.181 27.3.43.54 195.218.255.70