104.248.125.132

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States

运营商(isp): DigitalOcean LLC

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspambots	TCP (SYN) 104.248.125.132:52049 -> port 22, len 44	2020-06-16 15:54:18

相同子网IP讨论:

IP	类型	评论内容	时间
104.248.125.17	attackspam	Feb 29 07:19:54 DAAP sshd[27476]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.125.17 user=root Feb 29 07:19:56 DAAP sshd[27476]: Failed password for root from 104.248.125.17 port 46954 ssh2 Feb 29 07:19:54 DAAP sshd[27481]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.125.17 user=root Feb 29 07:19:56 DAAP sshd[27481]: Failed password for root from 104.248.125.17 port 53414 ssh2 Feb 29 07:19:54 DAAP sshd[27479]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.125.17 user=root Feb 29 07:19:56 DAAP sshd[27479]: Failed password for root from 104.248.125.17 port 50134 ssh2 ...	2020-02-29 15:06:22

类型

评论内容

时间

104.248.125.17

attackspam

Feb 29 07:19:54 DAAP sshd[27476]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.125.17  user=root
Feb 29 07:19:56 DAAP sshd[27476]: Failed password for root from 104.248.125.17 port 46954 ssh2
Feb 29 07:19:54 DAAP sshd[27481]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.125.17  user=root
Feb 29 07:19:56 DAAP sshd[27481]: Failed password for root from 104.248.125.17 port 53414 ssh2
Feb 29 07:19:54 DAAP sshd[27479]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.125.17  user=root
Feb 29 07:19:56 DAAP sshd[27479]: Failed password for root from 104.248.125.17 port 50134 ssh2
...

2020-02-29 15:06:22

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.248.125.132
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 691
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;104.248.125.132.		IN	A

;; AUTHORITY SECTION:
.			283	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020061600 1800 900 604800 86400

;; Query time: 99 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jun 16 15:54:14 CST 2020
;; MSG SIZE  rcvd: 119

HOST信息:

Host 132.125.248.104.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 132.125.248.104.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
95.184.14.133	attackbots	2019-07-04 07:51:27 unexpected disconnection while reading SMTP command from ([95.184.14.133]) [95.184.14.133]:35214 I=[10.100.18.25]:25 (error: Connection reset by peer) 2019-07-04 07:53:15 unexpected disconnection while reading SMTP command from ([95.184.14.133]) [95.184.14.133]:14426 I=[10.100.18.25]:25 (error: Connection reset by peer) 2019-07-04 07:53:36 unexpected disconnection while reading SMTP command from ([95.184.14.133]) [95.184.14.133]:58141 I=[10.100.18.25]:25 (error: Connection reset by peer) ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=95.184.14.133	2019-07-04 21:04:31
185.220.101.61	attackbotsspam	Automatic report - Web App Attack	2019-07-04 21:36:02
183.129.55.8	attackbots	Jul 4 07:54:41 mail postfix/smtpd[22507]: warning: unknown[183.129.55.8]: SASL LOGIN authentication failed: authentication failure Jul 4 07:54:41 mail postfix/smtpd[22512]: warning: unknown[183.129.55.8]: SASL LOGIN authentication failed: authentication failure Jul 4 07:54:41 mail postfix/smtpd[22513]: warning: unknown[183.129.55.8]: SASL LOGIN authentication failed: authentication failure Jul 4 07:54:43 mail postfix/smtpd[22513]: warning: unknown[183.129.55.8]: SASL LOGIN authentication failed: authentication failure Jul 4 07:54:43 mail postfix/smtpd[22512]: warning: unknown[183.129.55.8]: SASL LOGIN authentication failed: authentication failure ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=183.129.55.8	2019-07-04 21:11:17
125.18.26.59	attackbotsspam	Many RDP login attempts detected by IDS script	2019-07-04 21:45:45
80.245.118.42	attackspambots	[portscan] Port scan	2019-07-04 21:49:08
189.164.185.190	attackspam	3389BruteforceFW22	2019-07-04 21:29:37
71.6.135.131	attackspam	Portscan or hack attempt detected by psad/fwsnort	2019-07-04 21:05:46
113.2.196.41	attack	" "	2019-07-04 21:44:45
190.111.249.177	attackspam	Reported by AbuseIPDB proxy server.	2019-07-04 21:47:02
159.65.245.203	attackbotsspam	Jul 4 14:09:36 jane sshd\[26423\]: Invalid user harold from 159.65.245.203 port 36146 Jul 4 14:09:36 jane sshd\[26423\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.245.203 Jul 4 14:09:37 jane sshd\[26423\]: Failed password for invalid user harold from 159.65.245.203 port 36146 ssh2 ...	2019-07-04 21:02:28
218.92.0.207	attackspam	Jul 4 09:54:06 plusreed sshd[10470]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.207 user=root Jul 4 09:54:08 plusreed sshd[10470]: Failed password for root from 218.92.0.207 port 59962 ssh2 ...	2019-07-04 21:55:41
41.221.168.167	attackbots	04.07.2019 08:32:28 SSH access blocked by firewall	2019-07-04 21:14:19
104.248.161.244	attackspambots	Jul 4 15:14:16 SilenceServices sshd[15538]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.161.244 Jul 4 15:14:17 SilenceServices sshd[15538]: Failed password for invalid user joel from 104.248.161.244 port 41134 ssh2 Jul 4 15:17:47 SilenceServices sshd[17353]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.161.244	2019-07-04 21:26:09
108.161.131.203	attackspam	$f2bV_matches	2019-07-04 21:09:54
178.128.193.112	attackbotsspam	Automatic report - Web App Attack	2019-07-04 21:10:51

最近上报的IP列表

168.167.89.197	167.250.98.3	119.28.214.129	109.203.187.9
104.43.9.166	103.237.57.65	103.207.7.192	94.154.106.27
94.74.175.123	94.74.134.199	91.245.30.115	91.245.26.207
89.186.12.6	80.82.154.88	44.131.179.123	45.228.254.168
45.77.139.236	41.139.10.86	213.235.88.84	213.92.248.7