104.248.125.149

基本信息:

城市(city): North Bergen

省份(region): New Jersey

国家(country): United States

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
104.248.125.132	attackspambots	TCP (SYN) 104.248.125.132:52049 -> port 22, len 44	2020-06-16 15:54:18
104.248.125.17	attackspam	Feb 29 07:19:54 DAAP sshd[27476]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.125.17 user=root Feb 29 07:19:56 DAAP sshd[27476]: Failed password for root from 104.248.125.17 port 46954 ssh2 Feb 29 07:19:54 DAAP sshd[27481]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.125.17 user=root Feb 29 07:19:56 DAAP sshd[27481]: Failed password for root from 104.248.125.17 port 53414 ssh2 Feb 29 07:19:54 DAAP sshd[27479]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.125.17 user=root Feb 29 07:19:56 DAAP sshd[27479]: Failed password for root from 104.248.125.17 port 50134 ssh2 ...	2020-02-29 15:06:22

类型

评论内容

时间

104.248.125.132

attackspambots

 TCP (SYN) 104.248.125.132:52049 -> port 22, len 44

2020-06-16 15:54:18

104.248.125.17

attackspam

Feb 29 07:19:54 DAAP sshd[27476]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.125.17  user=root
Feb 29 07:19:56 DAAP sshd[27476]: Failed password for root from 104.248.125.17 port 46954 ssh2
Feb 29 07:19:54 DAAP sshd[27481]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.125.17  user=root
Feb 29 07:19:56 DAAP sshd[27481]: Failed password for root from 104.248.125.17 port 53414 ssh2
Feb 29 07:19:54 DAAP sshd[27479]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.125.17  user=root
Feb 29 07:19:56 DAAP sshd[27479]: Failed password for root from 104.248.125.17 port 50134 ssh2
...

2020-02-29 15:06:22

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.248.125.149
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 24282
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.248.125.149.		IN	A

;; AUTHORITY SECTION:
.			27	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022033000 1800 900 604800 86400

;; Query time: 20 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 30 14:38:26 CST 2022
;; MSG SIZE  rcvd: 108

HOST信息:

Host 149.125.248.104.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 149.125.248.104.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
167.71.91.228	attackspam	Nov 10 06:33:27 vps666546 sshd\[8591\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.91.228 user=root Nov 10 06:33:29 vps666546 sshd\[8591\]: Failed password for root from 167.71.91.228 port 53086 ssh2 Nov 10 06:37:09 vps666546 sshd\[8715\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.91.228 user=root Nov 10 06:37:10 vps666546 sshd\[8715\]: Failed password for root from 167.71.91.228 port 34568 ssh2 Nov 10 06:40:59 vps666546 sshd\[8895\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.91.228 user=root ...	2019-11-10 13:57:27
41.207.182.133	attackspambots	Nov 10 06:31:44 lnxded63 sshd[9086]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.207.182.133 Nov 10 06:31:44 lnxded63 sshd[9086]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.207.182.133	2019-11-10 13:56:07
189.115.92.79	attack	Nov 10 07:53:18 hosting sshd[31796]: Invalid user !@#$-QWER from 189.115.92.79 port 60526 ...	2019-11-10 14:27:47
200.236.120.138	attackspambots	port scan and connect, tcp 23 (telnet)	2019-11-10 14:09:07
5.189.142.120	attack	" "	2019-11-10 14:24:37
222.186.175.154	attackspam	SSH-bruteforce attempts	2019-11-10 13:49:26
92.118.38.38	attackbots	Nov 10 06:52:57 webserver postfix/smtpd\[3796\]: warning: unknown\[92.118.38.38\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 10 06:53:32 webserver postfix/smtpd\[4246\]: warning: unknown\[92.118.38.38\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 10 06:54:08 webserver postfix/smtpd\[3796\]: warning: unknown\[92.118.38.38\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 10 06:54:43 webserver postfix/smtpd\[4246\]: warning: unknown\[92.118.38.38\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 10 06:55:19 webserver postfix/smtpd\[4246\]: warning: unknown\[92.118.38.38\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2019-11-10 13:58:30
118.25.195.244	attackbotsspam	$f2bV_matches	2019-11-10 14:11:38
154.92.19.184	spamattackproxy	hacker tool darkweb onion website under siege.	2019-11-10 14:20:58
106.12.82.70	attack	Nov 9 19:38:05 web1 sshd\[7211\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.82.70 user=sshd Nov 9 19:38:07 web1 sshd\[7211\]: Failed password for sshd from 106.12.82.70 port 45374 ssh2 Nov 9 19:46:26 web1 sshd\[8041\]: Invalid user andy from 106.12.82.70 Nov 9 19:46:26 web1 sshd\[8041\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.82.70 Nov 9 19:46:28 web1 sshd\[8041\]: Failed password for invalid user andy from 106.12.82.70 port 40508 ssh2	2019-11-10 13:56:53
139.219.15.178	attackspam	Nov 10 06:49:48 sd-53420 sshd\[17821\]: Invalid user oracle from 139.219.15.178 Nov 10 06:49:48 sd-53420 sshd\[17821\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.219.15.178 Nov 10 06:49:50 sd-53420 sshd\[17821\]: Failed password for invalid user oracle from 139.219.15.178 port 33516 ssh2 Nov 10 06:54:59 sd-53420 sshd\[19296\]: User root from 139.219.15.178 not allowed because none of user's groups are listed in AllowGroups Nov 10 06:54:59 sd-53420 sshd\[19296\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.219.15.178 user=root ...	2019-11-10 14:03:10
93.174.89.55	attackbotsspam	93.174.89.55 was recorded 5 times by 2 hosts attempting to connect to the following ports: 25. Incident counter (4h, 24h, all-time): 5, 14, 25	2019-11-10 14:28:15
88.214.26.102	attackbots	11689/tcp 11789/tcp 60394/tcp... [2019-09-15/11-10]165pkt,106pt.(tcp)	2019-11-10 13:55:10
220.202.75.199	attackbotsspam	Nov 10 07:28:58 srv-ubuntu-dev3 postfix/smtpd[120407]: warning: unknown[220.202.75.199]: SASL LOGIN authentication failed: authentication failure Nov 10 07:29:01 srv-ubuntu-dev3 postfix/smtpd[120407]: warning: unknown[220.202.75.199]: SASL LOGIN authentication failed: authentication failure Nov 10 07:29:04 srv-ubuntu-dev3 postfix/smtpd[120407]: warning: unknown[220.202.75.199]: SASL LOGIN authentication failed: authentication failure Nov 10 07:29:09 srv-ubuntu-dev3 postfix/smtpd[120407]: warning: unknown[220.202.75.199]: SASL LOGIN authentication failed: authentication failure Nov 10 07:29:15 srv-ubuntu-dev3 postfix/smtpd[120407]: warning: unknown[220.202.75.199]: SASL LOGIN authentication failed: authentication failure ...	2019-11-10 14:30:00
207.46.13.173	attack	Joomla User : try to access forms...	2019-11-10 14:18:55

最近上报的IP列表

104.248.124.78	104.248.125.156	104.248.130.141	104.248.132.63
104.248.133.167	104.248.143.122	104.248.143.92	104.248.144.76
104.248.148.179	104.248.156.216	104.248.156.30	104.248.156.31
104.248.16.194	104.248.162.231	104.248.163.205	104.248.165.155
104.248.166.120	104.248.168.12	104.248.17.170	104.248.175.216