104.248.0.124 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): None

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
104.248.0.215	attackbots	IP was detected trying to Brute-Force SSH, FTP, Web Apps, Port-Scan or Hacking.	2020-03-06 15:50:30
104.248.0.33	attack	joshuajohannes.de 104.248.0.33 \[04/Jul/2019:16:08:54 +0200\] "POST /wp-login.php HTTP/1.1" 200 5606 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" joshuajohannes.de 104.248.0.33 \[04/Jul/2019:16:08:56 +0200\] "POST /wp-login.php HTTP/1.1" 200 5572 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"	2019-07-04 23:55:30

类型

评论内容

时间

104.248.0.215

attackbots

IP was detected trying to Brute-Force SSH, FTP, Web Apps, Port-Scan or Hacking.

2020-03-06 15:50:30

104.248.0.33

attack

joshuajohannes.de 104.248.0.33 \[04/Jul/2019:16:08:54 +0200\] "POST /wp-login.php HTTP/1.1" 200 5606 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
joshuajohannes.de 104.248.0.33 \[04/Jul/2019:16:08:56 +0200\] "POST /wp-login.php HTTP/1.1" 200 5572 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"

2019-07-04 23:55:30

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.248.0.124
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 12188
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.248.0.124.			IN	A

;; AUTHORITY SECTION:
.			201	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022031500 1800 900 604800 86400

;; Query time: 66 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 16 01:58:35 CST 2022
;; MSG SIZE  rcvd: 106

HOST信息:

124.0.248.104.in-addr.arpa domain name pointer skynet.anthonyfontanez.com.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
124.0.248.104.in-addr.arpa	name = skynet.anthonyfontanez.com.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
120.92.172.196	attack	Invalid user usuario from 120.92.172.196 port 15832	2019-10-02 16:32:57
149.202.223.136	attack	\[2019-10-02 01:43:32\] NOTICE\[1948\] chan_sip.c: Registration from '\' failed for '149.202.223.136:61537' - Wrong password \[2019-10-02 01:43:32\] SECURITY\[2006\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-02T01:43:32.018-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="7200054",SessionID="0x7f1e1c1fe738",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/149.202.223.136/61537",Challenge="0493e544",ReceivedChallenge="0493e544",ReceivedHash="f2ea9e633c13a7d6a3fc14b92126a1b8" \[2019-10-02 01:44:01\] NOTICE\[1948\] chan_sip.c: Registration from '\' failed for '149.202.223.136:64541' - Wrong password \[2019-10-02 01:44:01\] SECURITY\[2006\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-02T01:44:01.499-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1719",SessionID="0x7f1e1c02d9c8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/149.202.223.1	2019-10-02 16:15:01
67.184.64.224	attackbots	Oct 1 22:01:48 kapalua sshd\[28118\]: Invalid user yin from 67.184.64.224 Oct 1 22:01:48 kapalua sshd\[28118\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=c-67-184-64-224.hsd1.il.comcast.net Oct 1 22:01:51 kapalua sshd\[28118\]: Failed password for invalid user yin from 67.184.64.224 port 62855 ssh2 Oct 1 22:05:34 kapalua sshd\[28431\]: Invalid user ryley from 67.184.64.224 Oct 1 22:05:34 kapalua sshd\[28431\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=c-67-184-64-224.hsd1.il.comcast.net	2019-10-02 16:11:38
13.59.186.123	attack	Oct 2 11:01:44 tuotantolaitos sshd[10869]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.59.186.123 Oct 2 11:01:46 tuotantolaitos sshd[10869]: Failed password for invalid user 87654321 from 13.59.186.123 port 37488 ssh2 ...	2019-10-02 16:30:57
123.16.255.244	attack	Oct 2 04:51:39 f201 sshd[15822]: Address 123.16.255.244 maps to static.vnpt.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Oct 2 04:51:41 f201 sshd[15822]: Connection closed by 123.16.255.244 [preauth] Oct 2 05:39:21 f201 sshd[28029]: Address 123.16.255.244 maps to static.vnpt.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Oct 2 05:39:22 f201 sshd[28029]: Connection closed by 123.16.255.244 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=123.16.255.244	2019-10-02 16:07:07
42.115.221.40	attackbotsspam	Oct 2 01:29:10 plusreed sshd[14841]: Invalid user sn0wcat123 from 42.115.221.40 ...	2019-10-02 16:02:41
23.129.64.170	attackbots	Oct 2 07:25:59 rotator sshd\[2797\]: Failed password for root from 23.129.64.170 port 56112 ssh2Oct 2 07:26:01 rotator sshd\[2797\]: Failed password for root from 23.129.64.170 port 56112 ssh2Oct 2 07:26:04 rotator sshd\[2797\]: Failed password for root from 23.129.64.170 port 56112 ssh2Oct 2 07:26:07 rotator sshd\[2797\]: Failed password for root from 23.129.64.170 port 56112 ssh2Oct 2 07:26:10 rotator sshd\[2797\]: Failed password for root from 23.129.64.170 port 56112 ssh2Oct 2 07:26:13 rotator sshd\[2797\]: Failed password for root from 23.129.64.170 port 56112 ssh2 ...	2019-10-02 16:24:28
45.114.244.56	attackbotsspam	Oct 2 10:19:18 core sshd[26424]: Invalid user ftpuser from 45.114.244.56 port 46177 Oct 2 10:19:19 core sshd[26424]: Failed password for invalid user ftpuser from 45.114.244.56 port 46177 ssh2 ...	2019-10-02 16:23:38
61.82.104.236	attackspam	Oct 2 06:50:13 www sshd\[184390\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.82.104.236 user=root Oct 2 06:50:15 www sshd\[184390\]: Failed password for root from 61.82.104.236 port 52554 ssh2 Oct 2 06:50:17 www sshd\[184392\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.82.104.236 user=root ...	2019-10-02 15:49:10
121.251.161.7	attackbotsspam	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/121.251.161.7/ CN - 1H : (688) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : CN NAME ASN : ASN24363 IP : 121.251.161.7 CIDR : 121.251.160.0/20 PREFIX COUNT : 260 UNIQUE IP COUNT : 553984 WYKRYTE ATAKI Z ASN24363 : 1H - 1 3H - 1 6H - 1 12H - 2 24H - 2 DateTime : 2019-10-02 05:49:58 INFO : Port MAX SCAN Scan Detected and Blocked by ADMIN - data recovery	2019-10-02 16:14:16
217.182.172.204	attackbotsspam	SSH invalid-user multiple login try	2019-10-02 15:58:42
8.9.36.31	attackbots	2019-10-02T07:52:53.384251tmaserv sshd\[29293\]: Invalid user arena from 8.9.36.31 port 50810 2019-10-02T07:52:53.387444tmaserv sshd\[29293\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.9.36.31 2019-10-02T07:52:55.247964tmaserv sshd\[29293\]: Failed password for invalid user arena from 8.9.36.31 port 50810 ssh2 2019-10-02T07:57:13.613317tmaserv sshd\[29556\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.9.36.31 user=root 2019-10-02T07:57:15.167506tmaserv sshd\[29556\]: Failed password for root from 8.9.36.31 port 54376 ssh2 2019-10-02T08:01:22.248015tmaserv sshd\[29830\]: Invalid user fc from 8.9.36.31 port 57108 ...	2019-10-02 16:21:34
114.67.70.94	attackspam	Oct 1 21:18:11 auw2 sshd\[11102\]: Invalid user xc from 114.67.70.94 Oct 1 21:18:11 auw2 sshd\[11102\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.67.70.94 Oct 1 21:18:13 auw2 sshd\[11102\]: Failed password for invalid user xc from 114.67.70.94 port 34964 ssh2 Oct 1 21:23:19 auw2 sshd\[11544\]: Invalid user ye from 114.67.70.94 Oct 1 21:23:19 auw2 sshd\[11544\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.67.70.94	2019-10-02 15:48:37
106.12.206.70	attack	Oct 2 00:56:04 plusreed sshd[7287]: Invalid user po7rte from 106.12.206.70 ...	2019-10-02 16:24:54
120.92.119.155	attack	Oct 2 06:43:20 docs sshd\[45180\]: Invalid user wordpress from 120.92.119.155Oct 2 06:43:22 docs sshd\[45180\]: Failed password for invalid user wordpress from 120.92.119.155 port 51430 ssh2Oct 2 06:46:31 docs sshd\[45414\]: Invalid user minera from 120.92.119.155Oct 2 06:46:32 docs sshd\[45414\]: Failed password for invalid user minera from 120.92.119.155 port 12148 ssh2Oct 2 06:50:01 docs sshd\[45504\]: Invalid user test2 from 120.92.119.155Oct 2 06:50:03 docs sshd\[45504\]: Failed password for invalid user test2 from 120.92.119.155 port 37424 ssh2 ...	2019-10-02 16:09:19

最近上报的IP列表

80.72.153.214	95.19.136.131	104.248.100.172	104.248.102.15
104.248.103.27	104.248.104.106	104.248.105.172	104.248.106.154
20.120.48.110	87.198.115.72	104.248.107.12	209.252.5.198
104.248.107.191	104.248.108.98	104.248.109.118	104.248.111.21
104.248.112.174	104.248.113.135	104.248.113.175	104.248.113.37