104.248.125.91

基本信息:

城市(city): North Bergen

省份(region): New Jersey

国家(country): United States

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
104.248.125.132	attackspambots	TCP (SYN) 104.248.125.132:52049 -> port 22, len 44	2020-06-16 15:54:18
104.248.125.17	attackspam	Feb 29 07:19:54 DAAP sshd[27476]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.125.17 user=root Feb 29 07:19:56 DAAP sshd[27476]: Failed password for root from 104.248.125.17 port 46954 ssh2 Feb 29 07:19:54 DAAP sshd[27481]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.125.17 user=root Feb 29 07:19:56 DAAP sshd[27481]: Failed password for root from 104.248.125.17 port 53414 ssh2 Feb 29 07:19:54 DAAP sshd[27479]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.125.17 user=root Feb 29 07:19:56 DAAP sshd[27479]: Failed password for root from 104.248.125.17 port 50134 ssh2 ...	2020-02-29 15:06:22

类型

评论内容

时间

104.248.125.132

attackspambots

 TCP (SYN) 104.248.125.132:52049 -> port 22, len 44

2020-06-16 15:54:18

104.248.125.17

attackspam

Feb 29 07:19:54 DAAP sshd[27476]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.125.17  user=root
Feb 29 07:19:56 DAAP sshd[27476]: Failed password for root from 104.248.125.17 port 46954 ssh2
Feb 29 07:19:54 DAAP sshd[27481]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.125.17  user=root
Feb 29 07:19:56 DAAP sshd[27481]: Failed password for root from 104.248.125.17 port 53414 ssh2
Feb 29 07:19:54 DAAP sshd[27479]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.125.17  user=root
Feb 29 07:19:56 DAAP sshd[27479]: Failed password for root from 104.248.125.17 port 50134 ssh2
...

2020-02-29 15:06:22

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.248.125.91
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 57900
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.248.125.91.			IN	A

;; AUTHORITY SECTION:
.			597	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030100 1800 900 604800 86400

;; Query time: 57 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Mar 01 15:46:43 CST 2022
;; MSG SIZE  rcvd: 107

HOST信息:

Host 91.125.248.104.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 91.125.248.104.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
187.189.65.241	attackspambots	Fail2Ban Ban Triggered	2020-10-07 23:12:08
94.242.171.166	attackspam	1602016923 - 10/06/2020 22:42:03 Host: 94.242.171.166/94.242.171.166 Port: 445 TCP Blocked ...	2020-10-07 23:31:01
222.174.213.180	attackbotsspam	$f2bV_matches	2020-10-07 23:24:02
192.241.221.114	attackbots	IP 192.241.221.114 attacked honeypot on port: 1080 at 10/7/2020 6:56:42 AM	2020-10-07 23:22:32
61.177.172.89	attack	Oct 7 17:31:28 vps647732 sshd[21329]: Failed password for root from 61.177.172.89 port 8602 ssh2 Oct 7 17:31:42 vps647732 sshd[21329]: error: maximum authentication attempts exceeded for root from 61.177.172.89 port 8602 ssh2 [preauth] ...	2020-10-07 23:41:58
139.162.75.112	attackbotsspam	Oct 7 18:00:42 baraca inetd[82750]: refused connection from scan-46.security.ipip.net, service sshd (tcp) Oct 7 18:00:43 baraca inetd[82751]: refused connection from scan-46.security.ipip.net, service sshd (tcp) Oct 7 18:00:45 baraca inetd[82753]: refused connection from scan-46.security.ipip.net, service sshd (tcp) ...	2020-10-07 23:08:42
176.109.0.30	attackspam	$f2bV_matches	2020-10-07 23:43:09
120.193.155.140	attackbotsspam	(sshd) Failed SSH login from 120.193.155.140 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct 7 06:05:01 s1 sshd[5647]: Did not receive identification string from 120.193.155.140 port 36700 Oct 7 06:05:14 s1 sshd[5675]: Invalid user 123 from 120.193.155.140 port 37681 Oct 7 06:05:14 s1 sshd[5673]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.193.155.140 user=root Oct 7 06:05:14 s1 sshd[5677]: Invalid user 12345678 from 120.193.155.140 port 37822 Oct 7 06:05:14 s1 sshd[5678]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.193.155.140 user=root	2020-10-07 23:26:55
52.77.116.19	attackbotsspam	Oct 7 15:39:59 scw-gallant-ride sshd[21342]: Failed password for root from 52.77.116.19 port 36776 ssh2	2020-10-07 23:46:36
149.28.171.204	attackspam	"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:	2020-10-07 23:17:23
139.59.241.75	attack	Oct 7 13:33:06 ns382633 sshd\[12585\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.241.75 user=root Oct 7 13:33:08 ns382633 sshd\[12585\]: Failed password for root from 139.59.241.75 port 58325 ssh2 Oct 7 13:36:40 ns382633 sshd\[13090\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.241.75 user=root Oct 7 13:36:42 ns382633 sshd\[13090\]: Failed password for root from 139.59.241.75 port 45505 ssh2 Oct 7 13:37:48 ns382633 sshd\[13183\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.241.75 user=root	2020-10-07 23:27:34
141.98.9.163	attackspam	Invalid user test from 141.98.9.163 port 33293	2020-10-07 23:33:32
139.59.26.6	attackspambots	139.59.26.6 (IN/India/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Oct 7 08:33:40 server5 sshd[27127]: Failed password for root from 71.228.134.158 port 34590 ssh2 Oct 7 08:31:36 server5 sshd[26237]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.227.77.30 user=root Oct 7 08:31:38 server5 sshd[26237]: Failed password for root from 64.227.77.30 port 57058 ssh2 Oct 7 08:34:19 server5 sshd[27203]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.35.27.97 user=root Oct 7 08:34:21 server5 sshd[27203]: Failed password for root from 112.35.27.97 port 42130 ssh2 Oct 7 08:39:33 server5 sshd[29505]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.26.6 user=root IP Addresses Blocked: 71.228.134.158 (US/United States/-) 64.227.77.30 (US/United States/-) 112.35.27.97 (CN/China/-)	2020-10-07 23:37:36
103.84.240.208	attack	Telnet/23 MH Probe, Scan, BF, Hack -	2020-10-07 23:39:15
115.96.151.205	attackspambots	Telnet/23 MH Probe, Scan, BF, Hack -	2020-10-07 23:49:11

最近上报的IP列表

104.248.127.72	104.248.129.110	104.248.129.119	104.248.129.125
104.248.128.22	104.248.158.247	104.248.156.67	104.248.158.29
104.248.160.121	104.248.198.148	104.248.204.178	104.248.204.176
104.248.204.193	104.248.204.182	104.248.204.196	104.248.204.198
104.248.204.200	104.248.204.202	104.248.22.240	104.248.231.109