必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Nigeria

运营商(isp): 21st Century Technologies Limited

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:
类型 评论内容 时间
attack
Jul 31 00:14:06 web2 sshd[15711]: Failed password for mail from 80.248.6.139 port 38516 ssh2
Jul 31 00:41:48 web2 sshd[17309]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.248.6.139
2019-07-31 08:25:29
相同子网IP讨论:
IP 类型 评论内容 时间
80.248.6.131 attackspam
Dec  8 15:02:39 gw1 sshd[25179]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.248.6.131
Dec  8 15:02:42 gw1 sshd[25179]: Failed password for invalid user prsky from 80.248.6.131 port 34916 ssh2
...
2019-12-08 18:13:48
80.248.6.165 attack
Nov 16 21:30:11 server sshd\[11971\]: Invalid user morch from 80.248.6.165
Nov 16 21:30:11 server sshd\[11971\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.248.6.165 
Nov 16 21:30:13 server sshd\[11971\]: Failed password for invalid user morch from 80.248.6.165 port 49242 ssh2
Nov 16 21:49:13 server sshd\[16412\]: Invalid user gan from 80.248.6.165
Nov 16 21:49:13 server sshd\[16412\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.248.6.165 
...
2019-11-17 04:02:28
80.248.6.187 attackspambots
Sep  5 12:34:24 hanapaa sshd\[22556\]: Invalid user server from 80.248.6.187
Sep  5 12:34:24 hanapaa sshd\[22556\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.248.6.187
Sep  5 12:34:26 hanapaa sshd\[22556\]: Failed password for invalid user server from 80.248.6.187 port 47016 ssh2
Sep  5 12:39:43 hanapaa sshd\[23074\]: Invalid user postgres from 80.248.6.187
Sep  5 12:39:43 hanapaa sshd\[23074\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.248.6.187
2019-09-06 06:46:13
80.248.6.187 attackspambots
Sep  3 04:29:34 meumeu sshd[14673]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.248.6.187 
Sep  3 04:29:36 meumeu sshd[14673]: Failed password for invalid user install from 80.248.6.187 port 57464 ssh2
Sep  3 04:35:23 meumeu sshd[15356]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.248.6.187 
...
2019-09-03 10:44:03
80.248.6.153 attack
Aug 17 20:35:11 nextcloud sshd\[24710\]: Invalid user renee from 80.248.6.153
Aug 17 20:35:11 nextcloud sshd\[24710\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.248.6.153
Aug 17 20:35:13 nextcloud sshd\[24710\]: Failed password for invalid user renee from 80.248.6.153 port 59466 ssh2
...
2019-08-18 02:59:49
80.248.6.174 attackbots
Aug 11 17:45:41 MK-Soft-VM7 sshd\[14333\]: Invalid user ftpuser from 80.248.6.174 port 49094
Aug 11 17:45:41 MK-Soft-VM7 sshd\[14333\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.248.6.174
Aug 11 17:45:43 MK-Soft-VM7 sshd\[14333\]: Failed password for invalid user ftpuser from 80.248.6.174 port 49094 ssh2
...
2019-08-12 02:15:01
80.248.6.186 attackspambots
Jul 30 08:14:41 areeb-Workstation sshd\[26747\]: Invalid user lai from 80.248.6.186
Jul 30 08:14:41 areeb-Workstation sshd\[26747\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.248.6.186
Jul 30 08:14:43 areeb-Workstation sshd\[26747\]: Failed password for invalid user lai from 80.248.6.186 port 60440 ssh2
...
2019-07-30 11:55:59
80.248.6.146 attack
Jul 26 10:46:34 Ubuntu-1404-trusty-64-minimal sshd\[29974\]: Invalid user admin from 80.248.6.146
Jul 26 10:46:34 Ubuntu-1404-trusty-64-minimal sshd\[29974\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.248.6.146
Jul 26 10:46:36 Ubuntu-1404-trusty-64-minimal sshd\[29974\]: Failed password for invalid user admin from 80.248.6.146 port 47444 ssh2
Jul 26 10:55:59 Ubuntu-1404-trusty-64-minimal sshd\[6070\]: Invalid user contabil from 80.248.6.146
Jul 26 10:55:59 Ubuntu-1404-trusty-64-minimal sshd\[6070\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.248.6.146
2019-07-27 01:33:20
80.248.6.180 attack
Automatic report - Banned IP Access
2019-07-24 04:12:48
80.248.6.141 attackbots
Automated report - ssh fail2ban:
Jul 2 05:16:03 authentication failure 
Jul 2 05:16:05 wrong password, user=yulia, port=51808, ssh2
Jul 2 05:46:59 authentication failure
2019-07-02 18:34:29
80.248.6.148 attackspam
Unauthorized SSH login attempts
2019-07-01 17:59:01
80.248.6.166 attackspambots
SSH Brute Force, server-1 sshd[11804]: Failed password for root from 80.248.6.166 port 54174 ssh2
2019-07-01 02:08:56
80.248.6.186 attackbots
Jun 25 09:05:55 dedicated sshd[7194]: Invalid user pgadmin from 80.248.6.186 port 35036
2019-06-25 15:11:33
80.248.6.155 attack
2019-06-25T08:18:57.0781891240 sshd\[14456\]: Invalid user ubuntu from 80.248.6.155 port 33034
2019-06-25T08:18:57.0833721240 sshd\[14456\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.248.6.155
2019-06-25T08:18:59.2339051240 sshd\[14456\]: Failed password for invalid user ubuntu from 80.248.6.155 port 33034 ssh2
...
2019-06-25 14:22:45
80.248.6.148 attack
Invalid user bbj from 80.248.6.148 port 34496
2019-06-25 13:54:06
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 80.248.6.139
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 20284
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;80.248.6.139.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019073002 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Wed Jul 31 08:25:23 CST 2019
;; MSG SIZE  rcvd: 116
HOST信息:
Host 139.6.248.80.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
139.6.248.80.in-addr.arpa	name = fileserver03.21ctl.com.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
213.194.169.40 attack
2019-08-10T09:05:44.702803Z 18f0c9def845 New connection: 213.194.169.40:47676 (172.17.0.3:2222) [session: 18f0c9def845]
2019-08-10T09:54:16.132239Z 3c0e28819dee New connection: 213.194.169.40:56798 (172.17.0.3:2222) [session: 3c0e28819dee]
2019-08-10 19:50:07
187.188.183.73 attackspam
Aug 10 04:25:35 mailserver postfix/smtpd[84364]: connect from fixed-187-188-183-73.totalplay.net[187.188.183.73]
Aug 10 04:25:39 mailserver postfix/smtpd[84364]: NOQUEUE: reject: RCPT from fixed-187-188-183-73.totalplay.net[187.188.183.73]: 450 4.1.8 : Sender address rejected: Domain not found; from= to=<[hidden]> proto=ESMTP helo=
Aug 10 04:25:40 mailserver postfix/smtpd[84364]: NOQUEUE: reject: RCPT from fixed-187-188-183-73.totalplay.net[187.188.183.73]: 450 4.1.8 : Sender address rejected: Domain not found; from= to=<[hidden]> proto=ESMTP helo=
2019-08-10 19:19:28
129.211.76.101 attack
Aug 10 04:24:00 ubuntu-2gb-nbg1-dc3-1 sshd[20598]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.76.101
Aug 10 04:24:01 ubuntu-2gb-nbg1-dc3-1 sshd[20598]: Failed password for invalid user laurentiu from 129.211.76.101 port 33288 ssh2
...
2019-08-10 19:51:35
179.61.149.252 attackbotsspam
Registration form abuse
2019-08-10 19:54:07
58.237.170.236 attack
Aug 10 04:23:54 rpi sshd[9228]: Failed password for pi from 58.237.170.236 port 54788 ssh2
2019-08-10 19:55:00
192.3.139.150 attack
Malicious Traffic/Form Submission
2019-08-10 19:11:32
218.158.208.173 attackspam
[UnAuth Telnet (port 23) login attempt
2019-08-10 19:37:00
103.228.112.192 attackbotsspam
Aug 10 12:46:49 nextcloud sshd\[20497\]: Invalid user filippo from 103.228.112.192
Aug 10 12:46:49 nextcloud sshd\[20497\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.228.112.192
Aug 10 12:46:51 nextcloud sshd\[20497\]: Failed password for invalid user filippo from 103.228.112.192 port 50630 ssh2
...
2019-08-10 19:47:13
167.71.56.222 attackbotsspam
Aug 10 13:24:18 rpi sshd[14702]: Failed password for root from 167.71.56.222 port 42834 ssh2
Aug 10 13:24:22 rpi sshd[14702]: Failed password for root from 167.71.56.222 port 42834 ssh2
2019-08-10 19:31:13
41.236.200.43 attack
19/8/9@22:26:05: FAIL: IoT-Telnet address from=41.236.200.43
...
2019-08-10 19:08:23
184.105.139.76 attackspam
Scanning random ports - tries to find possible vulnerable services
2019-08-10 19:26:51
51.77.244.196 attackbotsspam
v+ssh-bruteforce
2019-08-10 19:30:31
167.71.84.203 attackbots
*Port Scan* detected from 167.71.84.203 (US/United States/-). 4 hits in the last 196 seconds
2019-08-10 19:34:22
80.82.77.193 attackspam
[portscan] udp/137 [netbios NS]
*(RWIN=-)(08101032)
2019-08-10 19:31:44
128.199.154.237 attack
Aug 10 06:49:13 dedicated sshd[19917]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.154.237  user=root
Aug 10 06:49:15 dedicated sshd[19917]: Failed password for root from 128.199.154.237 port 47190 ssh2
2019-08-10 19:19:06

最近上报的IP列表

202.75.216.136 241.174.144.251 13.75.94.67 190.85.48.102
107.186.144.186 209.86.89.65 91.60.105.69 37.143.160.18
47.184.108.221 220.189.7.73 147.135.85.17 148.204.211.136
114.237.109.106 122.193.59.101 49.207.180.197 5.204.9.134
77.159.215.87 187.184.140.208 74.68.95.186 224.246.2.30