必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): None

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
IP 类型 评论内容 时间
104.248.224.124 attackspambots
104.248.224.124 - - [27/Sep/2020:20:10:36 +0200] "GET /wp-login.php HTTP/1.1" 200 8796 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
104.248.224.124 - - [27/Sep/2020:20:10:38 +0200] "POST /wp-login.php HTTP/1.1" 200 9047 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
104.248.224.124 - - [27/Sep/2020:20:10:39 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-09-28 02:23:54
104.248.224.124 attack
104.248.224.124 - - [27/Sep/2020:09:00:57 +0200] "POST /wp-login.php HTTP/1.0" 200 4794 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-09-27 18:30:04
104.248.224.124 attackspambots
"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:
2020-09-16 00:13:27
104.248.224.124 attackspam
"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:
2020-09-15 16:06:45
104.248.224.124 attackspam
104.248.224.124 - - [15/Sep/2020:02:00:21 +0200] "GET /wp-login.php HTTP/1.1" 200 8796 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
104.248.224.124 - - [15/Sep/2020:02:00:22 +0200] "POST /wp-login.php HTTP/1.1" 200 9047 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
104.248.224.124 - - [15/Sep/2020:02:00:23 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-09-15 08:12:24
104.248.224.124 attackbots
104.248.224.124 - - [03/Sep/2020:07:35:55 +0100] "POST /wp-login.php HTTP/1.1" 200 1704 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
104.248.224.124 - - [03/Sep/2020:07:35:56 +0100] "POST /wp-login.php HTTP/1.1" 200 1685 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
104.248.224.124 - - [03/Sep/2020:07:35:56 +0100] "POST /xmlrpc.php HTTP/1.1" 200 247 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-09-03 23:33:45
104.248.224.124 attackbotsspam
104.248.224.124 - - [03/Sep/2020:07:35:55 +0100] "POST /wp-login.php HTTP/1.1" 200 1704 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
104.248.224.124 - - [03/Sep/2020:07:35:56 +0100] "POST /wp-login.php HTTP/1.1" 200 1685 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
104.248.224.124 - - [03/Sep/2020:07:35:56 +0100] "POST /xmlrpc.php HTTP/1.1" 200 247 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-09-03 15:04:28
104.248.224.124 attackspam
104.248.224.124 - - \[02/Sep/2020:22:42:07 +0200\] "POST /wp-login.php HTTP/1.0" 200 5983 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
104.248.224.124 - - \[02/Sep/2020:22:42:10 +0200\] "POST /wp-login.php HTTP/1.0" 200 5815 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
104.248.224.124 - - \[02/Sep/2020:22:42:11 +0200\] "POST /xmlrpc.php HTTP/1.0" 200 736 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
2020-09-03 07:17:19
104.248.224.124 attack
104.248.224.124 - - [01/Sep/2020:14:17:43 +0100] "POST /wp-login.php HTTP/1.1" 200 2216 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
104.248.224.124 - - [01/Sep/2020:14:17:44 +0100] "POST /wp-login.php HTTP/1.1" 200 2240 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
104.248.224.124 - - [01/Sep/2020:14:17:44 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-09-01 22:09:22
104.248.224.124 attack
104.248.224.124 - - [21/Aug/2020:13:13:40 +0100] "POST /wp-login.php HTTP/1.1" 200 2216 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
104.248.224.124 - - [21/Aug/2020:13:13:41 +0100] "POST /wp-login.php HTTP/1.1" 200 2240 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
104.248.224.124 - - [21/Aug/2020:13:13:41 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-08-21 23:12:03
104.248.224.146 attackbotsspam
$f2bV_matches
2020-08-18 00:58:33
104.248.224.124 attackspambots
SS1,DEF GET /wp-login.php
2020-08-12 04:16:55
104.248.224.124 attackspambots
104.248.224.124 - - [08/Aug/2020:22:28:00 +0100] "POST /wp-login.php HTTP/1.1" 200 2018 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
104.248.224.124 - - [08/Aug/2020:22:28:02 +0100] "POST /wp-login.php HTTP/1.1" 200 1967 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
104.248.224.124 - - [08/Aug/2020:22:28:02 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-08-09 08:04:39
104.248.224.146 attackbotsspam
$f2bV_matches
2020-08-07 04:11:03
104.248.224.146 attack
Jul 27 22:20:46 ns382633 sshd\[9644\]: Invalid user sonarqube from 104.248.224.146 port 56344
Jul 27 22:20:46 ns382633 sshd\[9644\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.224.146
Jul 27 22:20:48 ns382633 sshd\[9644\]: Failed password for invalid user sonarqube from 104.248.224.146 port 56344 ssh2
Jul 27 22:24:14 ns382633 sshd\[10140\]: Invalid user sanyi from 104.248.224.146 port 34024
Jul 27 22:24:14 ns382633 sshd\[10140\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.224.146
2020-07-28 04:50:12
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.248.224.112
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49860
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.248.224.112.		IN	A

;; AUTHORITY SECTION:
.			585	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022040702 1800 900 604800 86400

;; Query time: 25 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Apr 08 02:43:41 CST 2022
;; MSG SIZE  rcvd: 108
HOST信息:
Host 112.224.248.104.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 112.224.248.104.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
106.53.12.243 attackspam
Brute-force attempt banned
2020-05-05 19:12:53
188.68.255.214 attack
SpamScore above: 10.0
2020-05-05 19:07:58
218.92.0.168 attackbotsspam
v+ssh-bruteforce
2020-05-05 18:43:46
45.143.220.127 attack
[2020-05-05 06:44:14] NOTICE[1157][C-0000035d] chan_sip.c: Call from '' (45.143.220.127:49173) to extension '46812420945' rejected because extension not found in context 'public'.
[2020-05-05 06:44:14] SECURITY[1173] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-05-05T06:44:14.741-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="46812420945",SessionID="0x7f5f1006ccf8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.220.127/49173",ACLName="no_extension_match"
[2020-05-05 06:46:36] NOTICE[1157][C-00000360] chan_sip.c: Call from '' (45.143.220.127:58939) to extension '01146812420945' rejected because extension not found in context 'public'.
[2020-05-05 06:46:36] SECURITY[1173] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-05-05T06:46:36.307-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="01146812420945",SessionID="0x7f5f100266a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.
...
2020-05-05 19:18:33
147.139.160.218 attack
May  5 14:19:55 gw1 sshd[27237]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=147.139.160.218
May  5 14:19:57 gw1 sshd[27237]: Failed password for invalid user trent from 147.139.160.218 port 41480 ssh2
...
2020-05-05 19:01:02
157.230.42.76 attack
May  5 05:29:50 master sshd[29805]: Failed password for invalid user moniq from 157.230.42.76 port 46744 ssh2
May  5 05:31:37 master sshd[29822]: Failed password for invalid user sam from 157.230.42.76 port 54824 ssh2
May  5 05:32:48 master sshd[29824]: Failed password for invalid user tanya from 157.230.42.76 port 59975 ssh2
May  5 05:33:55 master sshd[29826]: Failed password for root from 157.230.42.76 port 36880 ssh2
May  5 05:37:24 master sshd[29830]: Failed password for root from 157.230.42.76 port 42144 ssh2
May  5 05:38:28 master sshd[29832]: Failed password for invalid user ftpuser from 157.230.42.76 port 47289 ssh2
May  5 05:39:33 master sshd[29834]: Failed password for invalid user pankaj from 157.230.42.76 port 52461 ssh2
May  5 05:40:39 master sshd[29838]: Failed password for invalid user ba from 157.230.42.76 port 57663 ssh2
May  5 05:41:51 master sshd[29840]: Failed password for root from 157.230.42.76 port 34629 ssh2
2020-05-05 18:32:28
80.255.130.197 attackspambots
May  5 11:20:38 electroncash sshd[37189]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.255.130.197 
May  5 11:20:38 electroncash sshd[37189]: Invalid user future from 80.255.130.197 port 35710
May  5 11:20:40 electroncash sshd[37189]: Failed password for invalid user future from 80.255.130.197 port 35710 ssh2
May  5 11:21:54 electroncash sshd[37526]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.255.130.197  user=root
May  5 11:21:57 electroncash sshd[37526]: Failed password for root from 80.255.130.197 port 43762 ssh2
...
2020-05-05 18:57:34
92.118.161.37 attackspam
Honeypot attack, port: 81, PTR: 92.118.161.37.netsystemsresearch.com.
2020-05-05 19:05:15
51.89.94.204 attack
May  5 13:01:57 lukav-desktop sshd\[13950\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.89.94.204  user=root
May  5 13:02:00 lukav-desktop sshd\[13950\]: Failed password for root from 51.89.94.204 port 60474 ssh2
May  5 13:06:00 lukav-desktop sshd\[24667\]: Invalid user squid from 51.89.94.204
May  5 13:06:00 lukav-desktop sshd\[24667\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.89.94.204
May  5 13:06:01 lukav-desktop sshd\[24667\]: Failed password for invalid user squid from 51.89.94.204 port 40562 ssh2
2020-05-05 18:50:48
183.131.135.234 attackspam
Port probing on unauthorized port 4899
2020-05-05 18:34:23
37.72.18.156 attackspam
port scan and connect, tcp 23 (telnet)
2020-05-05 19:13:49
95.68.242.167 attackspam
odoo8
...
2020-05-05 19:18:19
139.198.5.79 attack
May  5 12:44:47 inter-technics sshd[17604]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.198.5.79  user=root
May  5 12:44:50 inter-technics sshd[17604]: Failed password for root from 139.198.5.79 port 33496 ssh2
May  5 12:48:33 inter-technics sshd[19466]: Invalid user mateo from 139.198.5.79 port 59392
May  5 12:48:33 inter-technics sshd[19466]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.198.5.79
May  5 12:48:33 inter-technics sshd[19466]: Invalid user mateo from 139.198.5.79 port 59392
May  5 12:48:35 inter-technics sshd[19466]: Failed password for invalid user mateo from 139.198.5.79 port 59392 ssh2
...
2020-05-05 19:15:23
129.28.103.85 attackbots
May  5 00:00:25 php1 sshd\[12587\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.28.103.85  user=root
May  5 00:00:27 php1 sshd\[12587\]: Failed password for root from 129.28.103.85 port 33954 ssh2
May  5 00:03:34 php1 sshd\[12856\]: Invalid user dragos from 129.28.103.85
May  5 00:03:34 php1 sshd\[12856\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.28.103.85
May  5 00:03:36 php1 sshd\[12856\]: Failed password for invalid user dragos from 129.28.103.85 port 39944 ssh2
2020-05-05 18:32:55
217.112.128.26 attackspambots
SpamScore above: 10.0
2020-05-05 19:05:30

最近上报的IP列表

104.248.22.2 104.248.236.1 104.248.246.144 104.248.25.12
104.248.36.4 104.248.37.65 104.248.45.20 104.248.49.18
104.248.58.134 2.39.79.214 104.248.8.116 104.248.86.108
104.25.11.69 104.25.114.18 104.25.115.18 104.25.12.69
104.25.142.15 115.33.15.244 104.25.143.15 104.25.146.34