必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): North Bergen

省份(region): New Jersey

国家(country): United States

运营商(isp): DigitalOcean LLC

主机名(hostname): unknown

机构(organization): DigitalOcean, LLC

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attackspam
2019-08-27T12:19:21.422240abusebot-6.cloudsearch.cf sshd\[27048\]: Invalid user cx from 104.248.239.22 port 59440
2019-08-27 20:49:39
attackspam
2019-08-24T22:11:00.423902stark.klein-stark.info sshd\[17365\]: Invalid user tang from 104.248.239.22 port 55650
2019-08-24T22:11:00.427965stark.klein-stark.info sshd\[17365\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.239.22
2019-08-24T22:11:02.379052stark.klein-stark.info sshd\[17365\]: Failed password for invalid user tang from 104.248.239.22 port 55650 ssh2
...
2019-08-25 05:03:53
attackbotsspam
Aug 22 05:53:29 plusreed sshd[22907]: Invalid user saturday from 104.248.239.22
...
2019-08-22 19:11:22
attackbotsspam
2019-08-17T02:51:13.134511stark.klein-stark.info sshd\[27119\]: Invalid user yara from 104.248.239.22 port 60930
2019-08-17T02:51:13.141463stark.klein-stark.info sshd\[27119\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.239.22
2019-08-17T02:51:14.838687stark.klein-stark.info sshd\[27119\]: Failed password for invalid user yara from 104.248.239.22 port 60930 ssh2
...
2019-08-17 10:06:21
attackspam
Aug 14 22:13:23 aat-srv002 sshd[1153]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.239.22
Aug 14 22:13:24 aat-srv002 sshd[1153]: Failed password for invalid user matt from 104.248.239.22 port 43220 ssh2
Aug 14 22:17:40 aat-srv002 sshd[1271]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.239.22
Aug 14 22:17:41 aat-srv002 sshd[1271]: Failed password for invalid user ctrls from 104.248.239.22 port 35004 ssh2
...
2019-08-15 11:26:55
attackspambots
Aug  8 00:42:17 spiceship sshd\[23983\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.239.22  user=root
...
2019-08-08 13:58:58
attackspambots
Invalid user admin from 104.248.239.22 port 53176
2019-08-01 20:42:53
attackspam
Apr 19 10:08:36 ubuntu sshd[16564]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.239.22
Apr 19 10:08:39 ubuntu sshd[16564]: Failed password for invalid user cloud from 104.248.239.22 port 33768 ssh2
Apr 19 10:10:55 ubuntu sshd[17144]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.239.22
Apr 19 10:10:57 ubuntu sshd[17144]: Failed password for invalid user zt from 104.248.239.22 port 59436 ssh2
2019-07-31 18:23:03
attack
Invalid user hua from 104.248.239.22 port 39880
2019-07-28 08:26:11
attack
Jul 24 11:59:10 eventyay sshd[28714]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.239.22
Jul 24 11:59:12 eventyay sshd[28714]: Failed password for invalid user dev2 from 104.248.239.22 port 60944 ssh2
Jul 24 12:03:41 eventyay sshd[30007]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.239.22
...
2019-07-24 18:16:48
attack
Jul 23 23:40:19 eventyay sshd[4121]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.239.22
Jul 23 23:40:21 eventyay sshd[4121]: Failed password for invalid user luis from 104.248.239.22 port 34378 ssh2
Jul 23 23:44:42 eventyay sshd[5436]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.239.22
...
2019-07-24 05:51:47
attackbots
Jun 30 15:59:08 ns37 sshd[5388]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.239.22
Jun 30 15:59:08 ns37 sshd[5388]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.239.22
2019-06-30 22:50:00
相同子网IP讨论:
IP 类型 评论内容 时间
104.248.239.9 attackspam
invalid login attempt (test)
2020-06-11 07:28:50
104.248.239.206 attack
Hacking
2020-04-04 15:45:10
104.248.239.188 attackspambots
WordPress wp-login brute force :: 104.248.239.188 0.128 BYPASS [02/Aug/2019:02:12:36  1000] [censored_1] "POST /wp-login.php HTTP/1.1" 200 4039 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2019-08-02 01:04:35
WHOIS信息:
b
DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.248.239.22
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 10696
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;104.248.239.22.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019040700 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Sun Apr 07 17:56:20 +08 2019
;; MSG SIZE  rcvd: 118

HOST信息:
Host 22.239.248.104.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		67.207.67.3
Address:	67.207.67.3#53

** server can't find 22.239.248.104.in-addr.arpa: NXDOMAIN

相关IP信息:
最新评论:
IP 类型 评论内容 时间
171.229.131.87 attackbotsspam
Found on   CINS badguys     / proto=6  .  srcport=17237  .  dstport=23 Telnet  .     (3299)
2020-10-09 02:29:43
162.142.125.26 attackspambots
firewall-block, port(s): 33389/tcp
2020-10-09 02:16:10
64.225.53.232 attackbots
Oct  8 18:21:48 scw-6657dc sshd[24211]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.225.53.232  user=root
Oct  8 18:21:48 scw-6657dc sshd[24211]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.225.53.232  user=root
Oct  8 18:21:50 scw-6657dc sshd[24211]: Failed password for root from 64.225.53.232 port 51446 ssh2
...
2020-10-09 02:30:20
61.216.61.175 attackbots
20/10/8@01:49:39: FAIL: Alarm-Network address from=61.216.61.175
20/10/8@01:49:39: FAIL: Alarm-Network address from=61.216.61.175
...
2020-10-09 02:30:37
119.53.143.8 attackbotsspam
MultiHost/MultiPort Probe, Scan, Hack -
2020-10-09 02:28:19
218.89.222.16 attackspam
Oct  8 14:16:16 ny01 sshd[20381]: Failed password for root from 218.89.222.16 port 54377 ssh2
Oct  8 14:17:37 ny01 sshd[20555]: Failed password for root from 218.89.222.16 port 54383 ssh2
2020-10-09 02:36:40
122.202.32.70 attackspam
2020-10-08T21:19:43.874139mail.standpoint.com.ua sshd[32335]: Failed password for root from 122.202.32.70 port 46216 ssh2
2020-10-08T21:21:26.479593mail.standpoint.com.ua sshd[32715]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.202.32.70  user=root
2020-10-08T21:21:28.383685mail.standpoint.com.ua sshd[32715]: Failed password for root from 122.202.32.70 port 38256 ssh2
2020-10-08T21:23:08.444175mail.standpoint.com.ua sshd[741]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.202.32.70  user=root
2020-10-08T21:23:10.349303mail.standpoint.com.ua sshd[741]: Failed password for root from 122.202.32.70 port 58528 ssh2
...
2020-10-09 02:29:59
171.246.52.48 attack
 TCP (SYN) 171.246.52.48:8124 -> port 23, len 44
2020-10-09 02:25:55
201.75.53.218 attackbotsspam
2020-10-08T08:28:23.105335morrigan.ad5gb.com sshd[2793202]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.75.53.218  user=root
2020-10-08T08:28:25.168284morrigan.ad5gb.com sshd[2793202]: Failed password for root from 201.75.53.218 port 34917 ssh2
2020-10-09 02:13:58
220.186.159.148 attack
Oct  8 19:14:36 host2 sshd[1942472]: Failed password for root from 220.186.159.148 port 51504 ssh2
Oct  8 19:14:34 host2 sshd[1942472]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.186.159.148  user=root
Oct  8 19:14:36 host2 sshd[1942472]: Failed password for root from 220.186.159.148 port 51504 ssh2
Oct  8 19:18:32 host2 sshd[1943078]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.186.159.148  user=root
Oct  8 19:18:34 host2 sshd[1943078]: Failed password for root from 220.186.159.148 port 48882 ssh2
...
2020-10-09 02:18:39
120.53.22.204 attack
(sshd) Failed SSH login from 120.53.22.204 (CN/China/-): 5 in the last 3600 secs
2020-10-09 02:17:26
129.204.249.11 attackspambots
2020-10-08T18:14:37.045682abusebot-4.cloudsearch.cf sshd[15637]: Invalid user deployer from 129.204.249.11 port 51874
2020-10-08T18:14:37.051545abusebot-4.cloudsearch.cf sshd[15637]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.249.11
2020-10-08T18:14:37.045682abusebot-4.cloudsearch.cf sshd[15637]: Invalid user deployer from 129.204.249.11 port 51874
2020-10-08T18:14:39.141988abusebot-4.cloudsearch.cf sshd[15637]: Failed password for invalid user deployer from 129.204.249.11 port 51874 ssh2
2020-10-08T18:23:03.528951abusebot-4.cloudsearch.cf sshd[15744]: Invalid user mdpi from 129.204.249.11 port 34834
2020-10-08T18:23:03.536881abusebot-4.cloudsearch.cf sshd[15744]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.249.11
2020-10-08T18:23:03.528951abusebot-4.cloudsearch.cf sshd[15744]: Invalid user mdpi from 129.204.249.11 port 34834
2020-10-08T18:23:05.090702abusebot-4.cloudsearch.cf sshd[
...
2020-10-09 02:33:05
49.88.112.117 attackbotsspam
Oct  8 20:19:14 pve1 sshd[20871]: Failed password for root from 49.88.112.117 port 12633 ssh2
Oct  8 20:19:18 pve1 sshd[20871]: Failed password for root from 49.88.112.117 port 12633 ssh2
...
2020-10-09 02:27:31
80.211.56.216 attack
Oct  8 19:13:54 nextcloud sshd\[10553\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.56.216  user=root
Oct  8 19:13:57 nextcloud sshd\[10553\]: Failed password for root from 80.211.56.216 port 33604 ssh2
Oct  8 19:33:36 nextcloud sshd\[639\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.56.216  user=root
2020-10-09 02:22:51
118.25.114.245 attackbots
Invalid user testuser from 118.25.114.245 port 35008
2020-10-09 02:18:11

最近上报的IP列表

212.170.50.203 112.78.1.123 186.103.184.227 104.248.188.192
90.189.117.121 134.175.80.27 104.248.3.39 220.233.119.247
106.12.85.172 104.248.174.126 112.78.144.58 65.184.200.184
179.111.154.18 58.87.108.112 201.149.10.165 39.72.120.123
104.248.121.67 110.87.103.59 190.26.134.230 181.65.187.157