必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
IP 类型 评论内容 时间
104.248.242.175 attack
Attempt to hack Wordpress Login, XMLRPC or other login
2020-04-26 17:53:31
104.248.242.175 attack
104.248.242.175 - - [19/Apr/2020:05:52:01 +0200] "POST /wp-login.php HTTP/1.1" 200 3405 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
104.248.242.175 - - [19/Apr/2020:05:52:03 +0200] "POST /wp-login.php HTTP/1.1" 200 3383 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-04-19 16:20:55
104.248.242.175 attackbotsspam
104.248.242.175 - - [07/Apr/2020:08:16:07 +0200] "GET /wp-login.php HTTP/1.1" 200 5702 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
104.248.242.175 - - [07/Apr/2020:08:16:09 +0200] "POST /wp-login.php HTTP/1.1" 200 6601 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
104.248.242.175 - - [07/Apr/2020:08:16:10 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-04-07 14:38:18
104.248.242.175 attack
Apr  2 18:23:48 wordpress wordpress(www.ruhnke.cloud)[96381]: Blocked authentication attempt for admin from ::ffff:104.248.242.175
2020-04-03 02:10:41
104.248.242.125 attack
2019-09-23T05:53:55.757147lon01.zurich-datacenter.net sshd\[9439\]: Invalid user arma2dm from 104.248.242.125 port 59644
2019-09-23T05:53:55.763996lon01.zurich-datacenter.net sshd\[9439\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.242.125
2019-09-23T05:53:57.312523lon01.zurich-datacenter.net sshd\[9439\]: Failed password for invalid user arma2dm from 104.248.242.125 port 59644 ssh2
2019-09-23T05:58:21.658836lon01.zurich-datacenter.net sshd\[9567\]: Invalid user debian from 104.248.242.125 port 44732
2019-09-23T05:58:21.663684lon01.zurich-datacenter.net sshd\[9567\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.242.125
...
2019-09-23 12:27:55
104.248.242.125 attackspam
Invalid user wk from 104.248.242.125 port 45748
2019-09-20 17:11:02
104.248.242.125 attackbotsspam
$f2bV_matches
2019-09-16 08:44:12
104.248.242.125 attackspam
Sep 15 09:55:34 bouncer sshd\[3771\]: Invalid user yv from 104.248.242.125 port 51650
Sep 15 09:55:34 bouncer sshd\[3771\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.242.125 
Sep 15 09:55:36 bouncer sshd\[3771\]: Failed password for invalid user yv from 104.248.242.125 port 51650 ssh2
...
2019-09-15 20:21:46
104.248.242.125 attack
2019-09-10T05:42:24.064037abusebot-4.cloudsearch.cf sshd\[9329\]: Invalid user guest from 104.248.242.125 port 46608
2019-09-10 14:03:05
104.248.242.125 attackbotsspam
Sep  8 22:04:21 markkoudstaal sshd[2572]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.242.125
Sep  8 22:04:23 markkoudstaal sshd[2572]: Failed password for invalid user test from 104.248.242.125 port 38028 ssh2
Sep  8 22:08:43 markkoudstaal sshd[2950]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.242.125
2019-09-09 04:10:18
104.248.242.125 attackspambots
Aug  3 17:20:56 marvibiene sshd[27227]: Invalid user admin from 104.248.242.125 port 44804
Aug  3 17:20:56 marvibiene sshd[27227]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.242.125
Aug  3 17:20:56 marvibiene sshd[27227]: Invalid user admin from 104.248.242.125 port 44804
Aug  3 17:20:58 marvibiene sshd[27227]: Failed password for invalid user admin from 104.248.242.125 port 44804 ssh2
...
2019-08-04 08:47:39
104.248.242.125 attackspam
Apr 21 04:18:53 ubuntu sshd[12827]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.242.125
Apr 21 04:18:55 ubuntu sshd[12827]: Failed password for invalid user ai from 104.248.242.125 port 43198 ssh2
Apr 21 04:21:18 ubuntu sshd[13181]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.242.125
Apr 21 04:21:19 ubuntu sshd[13181]: Failed password for invalid user pavel from 104.248.242.125 port 39790 ssh2
2019-07-31 18:08:24
104.248.242.125 attack
Jul 21 07:13:22 localhost sshd\[28348\]: Invalid user op from 104.248.242.125 port 43188
Jul 21 07:13:22 localhost sshd\[28348\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.242.125
...
2019-07-21 14:30:34
104.248.242.11 attack
joshuajohannes.de 104.248.242.11 \[04/Jul/2019:16:52:54 +0200\] "POST /wp-login.php HTTP/1.1" 200 5606 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
joshuajohannes.de 104.248.242.11 \[04/Jul/2019:16:52:54 +0200\] "POST /wp-login.php HTTP/1.1" 200 5572 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
2019-07-05 03:27:35
104.248.242.125 attackbots
Invalid user fleurs from 104.248.242.125 port 46798
2019-06-28 21:23:39
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.248.242.89
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 2690
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.248.242.89.			IN	A

;; AUTHORITY SECTION:
.			336	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022031100 1800 900 604800 86400

;; Query time: 52 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Mar 11 19:46:27 CST 2022
;; MSG SIZE  rcvd: 107
HOST信息:
Host 89.242.248.104.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 89.242.248.104.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
123.59.195.245 attackspam
Invalid user oms from 123.59.195.245 port 59510
2020-05-21 15:13:01
83.48.101.184 attack
May 21 06:49:30 sip sshd[30750]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=83.48.101.184
May 21 06:49:32 sip sshd[30750]: Failed password for invalid user syt from 83.48.101.184 port 36638 ssh2
May 21 07:03:15 sip sshd[3352]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=83.48.101.184
2020-05-21 15:01:17
182.61.2.67 attackspam
Unauthorized access or intrusion attempt detected from Thor banned IP
2020-05-21 14:55:16
171.231.64.54 attackspam
May 21 06:21:43 mail sshd[13405]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.231.64.54 
May 21 06:21:45 mail sshd[13405]: Failed password for invalid user ubnt from 171.231.64.54 port 38389 ssh2
...
2020-05-21 14:40:33
139.59.84.55 attackspam
May 21 05:53:55 game-panel sshd[4364]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.84.55
May 21 05:53:56 game-panel sshd[4364]: Failed password for invalid user gf from 139.59.84.55 port 55406 ssh2
May 21 05:57:48 game-panel sshd[4531]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.84.55
2020-05-21 14:53:51
106.54.200.22 attack
2020-05-21T05:39:04.393881shield sshd\[5309\]: Invalid user nhq from 106.54.200.22 port 56056
2020-05-21T05:39:04.397983shield sshd\[5309\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.200.22
2020-05-21T05:39:05.924865shield sshd\[5309\]: Failed password for invalid user nhq from 106.54.200.22 port 56056 ssh2
2020-05-21T05:41:17.172175shield sshd\[5889\]: Invalid user okc from 106.54.200.22 port 52266
2020-05-21T05:41:17.175694shield sshd\[5889\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.200.22
2020-05-21 14:33:54
166.111.152.230 attack
Invalid user okp from 166.111.152.230 port 38134
2020-05-21 14:44:15
129.204.186.151 attackbots
5x Failed Password
2020-05-21 14:51:26
194.26.29.15 attack
[MK-VM3] Blocked by UFW
2020-05-21 14:51:59
106.12.200.70 attack
May 21 09:04:00 santamaria sshd\[5942\]: Invalid user irv from 106.12.200.70
May 21 09:04:00 santamaria sshd\[5942\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.200.70
May 21 09:04:02 santamaria sshd\[5942\]: Failed password for invalid user irv from 106.12.200.70 port 36538 ssh2
...
2020-05-21 15:10:41
122.51.49.32 attack
May 20 10:28:16 Tower sshd[8156]: refused connect from 179.213.231.148 (179.213.231.148)
May 20 23:55:44 Tower sshd[8156]: Connection from 122.51.49.32 port 56146 on 192.168.10.220 port 22 rdomain ""
May 20 23:55:46 Tower sshd[8156]: Invalid user yqp from 122.51.49.32 port 56146
May 20 23:55:46 Tower sshd[8156]: error: Could not get shadow information for NOUSER
May 20 23:55:46 Tower sshd[8156]: Failed password for invalid user yqp from 122.51.49.32 port 56146 ssh2
May 20 23:55:47 Tower sshd[8156]: Received disconnect from 122.51.49.32 port 56146:11: Bye Bye [preauth]
May 20 23:55:47 Tower sshd[8156]: Disconnected from invalid user yqp 122.51.49.32 port 56146 [preauth]
2020-05-21 14:32:34
111.200.216.72 attack
2020-05-21T03:50:07.311108dmca.cloudsearch.cf sshd[788]: Invalid user peo from 111.200.216.72 port 8442
2020-05-21T03:50:07.319375dmca.cloudsearch.cf sshd[788]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.200.216.72
2020-05-21T03:50:07.311108dmca.cloudsearch.cf sshd[788]: Invalid user peo from 111.200.216.72 port 8442
2020-05-21T03:50:09.433551dmca.cloudsearch.cf sshd[788]: Failed password for invalid user peo from 111.200.216.72 port 8442 ssh2
2020-05-21T03:55:29.878053dmca.cloudsearch.cf sshd[1127]: Invalid user vem from 111.200.216.72 port 21894
2020-05-21T03:55:29.883291dmca.cloudsearch.cf sshd[1127]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.200.216.72
2020-05-21T03:55:29.878053dmca.cloudsearch.cf sshd[1127]: Invalid user vem from 111.200.216.72 port 21894
2020-05-21T03:55:32.534449dmca.cloudsearch.cf sshd[1127]: Failed password for invalid user vem from 111.200.216.72 port 21894 ssh2
...
2020-05-21 15:03:45
119.204.60.185 attackspambots
May 21 05:56:15 icecube postfix/smtpd[55237]: NOQUEUE: reject: RCPT from unknown[119.204.60.185]: 553 5.7.1 : Sender address rejected: not logged in; from= to= proto=ESMTP helo=<[127.0.0.1]>
2020-05-21 14:31:21
183.89.237.57 attack
SSH invalid-user multiple login try
2020-05-21 15:00:07
222.186.173.154 attackbots
2020-05-21T09:31:38.168656afi-git.jinr.ru sshd[2756]: Failed password for root from 222.186.173.154 port 20364 ssh2
2020-05-21T09:31:41.059922afi-git.jinr.ru sshd[2756]: Failed password for root from 222.186.173.154 port 20364 ssh2
2020-05-21T09:31:44.030841afi-git.jinr.ru sshd[2756]: Failed password for root from 222.186.173.154 port 20364 ssh2
2020-05-21T09:31:44.030987afi-git.jinr.ru sshd[2756]: error: maximum authentication attempts exceeded for root from 222.186.173.154 port 20364 ssh2 [preauth]
2020-05-21T09:31:44.031001afi-git.jinr.ru sshd[2756]: Disconnecting: Too many authentication failures [preauth]
...
2020-05-21 14:35:42

最近上报的IP列表

104.248.242.34 104.248.244.230 104.248.245.157 198.59.71.172
104.248.245.158 215.97.221.169 104.248.245.245 104.248.246.106
104.248.246.5 104.248.248.35 104.248.249.136 104.248.249.89
104.248.25.207 104.248.28.19 104.248.28.7 13.121.229.171
104.248.3.206 104.248.30.115 104.248.30.53 104.248.31.251