必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Nigeria

运营商(isp): 21st Century Technologies Limited

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:
类型 评论内容 时间
attack
Jul 31 00:14:06 web2 sshd[15711]: Failed password for mail from 80.248.6.139 port 38516 ssh2
Jul 31 00:41:48 web2 sshd[17309]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.248.6.139
2019-07-31 08:25:29
相同子网IP讨论:
IP 类型 评论内容 时间
80.248.6.131 attackspam
Dec  8 15:02:39 gw1 sshd[25179]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.248.6.131
Dec  8 15:02:42 gw1 sshd[25179]: Failed password for invalid user prsky from 80.248.6.131 port 34916 ssh2
...
2019-12-08 18:13:48
80.248.6.165 attack
Nov 16 21:30:11 server sshd\[11971\]: Invalid user morch from 80.248.6.165
Nov 16 21:30:11 server sshd\[11971\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.248.6.165 
Nov 16 21:30:13 server sshd\[11971\]: Failed password for invalid user morch from 80.248.6.165 port 49242 ssh2
Nov 16 21:49:13 server sshd\[16412\]: Invalid user gan from 80.248.6.165
Nov 16 21:49:13 server sshd\[16412\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.248.6.165 
...
2019-11-17 04:02:28
80.248.6.187 attackspambots
Sep  5 12:34:24 hanapaa sshd\[22556\]: Invalid user server from 80.248.6.187
Sep  5 12:34:24 hanapaa sshd\[22556\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.248.6.187
Sep  5 12:34:26 hanapaa sshd\[22556\]: Failed password for invalid user server from 80.248.6.187 port 47016 ssh2
Sep  5 12:39:43 hanapaa sshd\[23074\]: Invalid user postgres from 80.248.6.187
Sep  5 12:39:43 hanapaa sshd\[23074\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.248.6.187
2019-09-06 06:46:13
80.248.6.187 attackspambots
Sep  3 04:29:34 meumeu sshd[14673]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.248.6.187 
Sep  3 04:29:36 meumeu sshd[14673]: Failed password for invalid user install from 80.248.6.187 port 57464 ssh2
Sep  3 04:35:23 meumeu sshd[15356]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.248.6.187 
...
2019-09-03 10:44:03
80.248.6.153 attack
Aug 17 20:35:11 nextcloud sshd\[24710\]: Invalid user renee from 80.248.6.153
Aug 17 20:35:11 nextcloud sshd\[24710\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.248.6.153
Aug 17 20:35:13 nextcloud sshd\[24710\]: Failed password for invalid user renee from 80.248.6.153 port 59466 ssh2
...
2019-08-18 02:59:49
80.248.6.174 attackbots
Aug 11 17:45:41 MK-Soft-VM7 sshd\[14333\]: Invalid user ftpuser from 80.248.6.174 port 49094
Aug 11 17:45:41 MK-Soft-VM7 sshd\[14333\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.248.6.174
Aug 11 17:45:43 MK-Soft-VM7 sshd\[14333\]: Failed password for invalid user ftpuser from 80.248.6.174 port 49094 ssh2
...
2019-08-12 02:15:01
80.248.6.186 attackspambots
Jul 30 08:14:41 areeb-Workstation sshd\[26747\]: Invalid user lai from 80.248.6.186
Jul 30 08:14:41 areeb-Workstation sshd\[26747\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.248.6.186
Jul 30 08:14:43 areeb-Workstation sshd\[26747\]: Failed password for invalid user lai from 80.248.6.186 port 60440 ssh2
...
2019-07-30 11:55:59
80.248.6.146 attack
Jul 26 10:46:34 Ubuntu-1404-trusty-64-minimal sshd\[29974\]: Invalid user admin from 80.248.6.146
Jul 26 10:46:34 Ubuntu-1404-trusty-64-minimal sshd\[29974\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.248.6.146
Jul 26 10:46:36 Ubuntu-1404-trusty-64-minimal sshd\[29974\]: Failed password for invalid user admin from 80.248.6.146 port 47444 ssh2
Jul 26 10:55:59 Ubuntu-1404-trusty-64-minimal sshd\[6070\]: Invalid user contabil from 80.248.6.146
Jul 26 10:55:59 Ubuntu-1404-trusty-64-minimal sshd\[6070\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.248.6.146
2019-07-27 01:33:20
80.248.6.180 attack
Automatic report - Banned IP Access
2019-07-24 04:12:48
80.248.6.141 attackbots
Automated report - ssh fail2ban:
Jul 2 05:16:03 authentication failure 
Jul 2 05:16:05 wrong password, user=yulia, port=51808, ssh2
Jul 2 05:46:59 authentication failure
2019-07-02 18:34:29
80.248.6.148 attackspam
Unauthorized SSH login attempts
2019-07-01 17:59:01
80.248.6.166 attackspambots
SSH Brute Force, server-1 sshd[11804]: Failed password for root from 80.248.6.166 port 54174 ssh2
2019-07-01 02:08:56
80.248.6.186 attackbots
Jun 25 09:05:55 dedicated sshd[7194]: Invalid user pgadmin from 80.248.6.186 port 35036
2019-06-25 15:11:33
80.248.6.155 attack
2019-06-25T08:18:57.0781891240 sshd\[14456\]: Invalid user ubuntu from 80.248.6.155 port 33034
2019-06-25T08:18:57.0833721240 sshd\[14456\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.248.6.155
2019-06-25T08:18:59.2339051240 sshd\[14456\]: Failed password for invalid user ubuntu from 80.248.6.155 port 33034 ssh2
...
2019-06-25 14:22:45
80.248.6.148 attack
Invalid user bbj from 80.248.6.148 port 34496
2019-06-25 13:54:06
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 80.248.6.139
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 20284
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;80.248.6.139.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019073002 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Wed Jul 31 08:25:23 CST 2019
;; MSG SIZE  rcvd: 116
HOST信息:
Host 139.6.248.80.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
139.6.248.80.in-addr.arpa	name = fileserver03.21ctl.com.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
151.250.116.134 attackspambots
 TCP (SYN) 151.250.116.134:56108 -> port 23, len 44
2020-10-05 23:57:14
220.133.226.180 attack
Found on   CINS badguys     / proto=6  .  srcport=26931  .  dstport=23 Telnet  .     (3532)
2020-10-05 23:53:56
202.152.44.202 attackspam
1601843897 - 10/04/2020 22:38:17 Host: 202.152.44.202/202.152.44.202 Port: 445 TCP Blocked
...
2020-10-06 00:01:29
212.247.174.226 attack
(sshd) Failed SSH login from 212.247.174.226 (SE/Sweden/static-212-247-174-226.cust.tele2.se): 5 in the last 3600 secs
2020-10-05 23:51:20
67.230.191.105 attackbotsspam
Oct  5 17:49:39 db sshd[11649]: User root from 67.230.191.105 not allowed because none of user's groups are listed in AllowGroups
...
2020-10-05 23:51:44
104.248.160.58 attackbots
Fail2Ban Ban Triggered (2)
2020-10-05 23:50:37
93.174.93.149 attackbotsspam
GET /phpMyAdmin/scripts/setup.php HTTP/1.1
GET /phpmyadmin/scripts/setup.php HTTP/1.1
GET /myadmin/scripts/setup.php HTTP/1.1
GET /MyAdmin/scripts/setup.php HTTP/1.1
GET /w00tw00t.at.blackhats.romanian.anti-sec:) HTTP/1.1
GET /pma/scripts/setup.php HTTP/1.1
2020-10-05 23:43:28
46.101.184.178 attack
Oct  5 17:33:50 eventyay sshd[21310]: Failed password for root from 46.101.184.178 port 36504 ssh2
Oct  5 17:37:34 eventyay sshd[21416]: Failed password for root from 46.101.184.178 port 43732 ssh2
...
2020-10-05 23:49:29
188.166.251.87 attackspam
(sshd) Failed SSH login from 188.166.251.87 (SG/Singapore/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct  5 09:34:25 server sshd[16658]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.251.87  user=root
Oct  5 09:34:27 server sshd[16658]: Failed password for root from 188.166.251.87 port 37109 ssh2
Oct  5 09:44:17 server sshd[19191]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.251.87  user=root
Oct  5 09:44:19 server sshd[19191]: Failed password for root from 188.166.251.87 port 40006 ssh2
Oct  5 09:48:28 server sshd[20273]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.251.87  user=root
2020-10-05 23:52:09
139.155.13.21 attack
Connection to SSH Honeypot - Detected by HoneypotDB
2020-10-05 23:49:56
182.127.66.27 attackspam
Listed on    abuseat.org plus zen-spamhaus   / proto=6  .  srcport=52928  .  dstport=52869  .     (3533)
2020-10-05 23:47:42
122.51.136.128 attackspam
Oct  5 17:43:41 mail sshd[10645]: Failed password for root from 122.51.136.128 port 36122 ssh2
2020-10-05 23:48:44
81.68.112.71 attackbotsspam
(sshd) Failed SSH login from 81.68.112.71 (NL/Netherlands/-): 5 in the last 3600 secs
2020-10-05 23:53:36
118.193.32.219 attackspambots
[N3.H3.VM3] Port Scanner Detected Blocked by UFW
2020-10-05 23:56:24
220.186.170.95 attack
Oct  5 13:51:01 slaro sshd\[5946\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.186.170.95  user=root
Oct  5 13:51:03 slaro sshd\[5946\]: Failed password for root from 220.186.170.95 port 52156 ssh2
Oct  5 13:56:02 slaro sshd\[6035\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.186.170.95  user=root
...
2020-10-05 23:38:19

最近上报的IP列表

202.75.216.136 241.174.144.251 13.75.94.67 190.85.48.102
107.186.144.186 209.86.89.65 91.60.105.69 37.143.160.18
47.184.108.221 220.189.7.73 147.135.85.17 148.204.211.136
114.237.109.106 122.193.59.101 49.207.180.197 5.204.9.134
77.159.215.87 187.184.140.208 74.68.95.186 224.246.2.30