必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
IP 类型 评论内容 时间
104.248.48.162 attack
Sep 15 09:52:09 host sshd[15076]: Invalid user dell from 104.248.48.162 port 37303
Sep 15 09:52:09 host sshd[15092]: Invalid user aadmin from 104.248.48.162 port 37153
Sep 15 09:52:09 host  sshd[15079]: Invalid user grid from 104.248.48.162 port 37421
Sep 15 09:52:09 host sshd[15086]: Invalid user admin from 104.248.48.162 port 37165
2022-09-15 11:26:03
104.248.48.16 attackbotsspam
2020-06-15T22:08:06.595669shield sshd\[2039\]: Invalid user tech from 104.248.48.16 port 47284
2020-06-15T22:08:06.600015shield sshd\[2039\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.48.16
2020-06-15T22:08:09.132939shield sshd\[2039\]: Failed password for invalid user tech from 104.248.48.16 port 47284 ssh2
2020-06-15T22:12:34.040808shield sshd\[3687\]: Invalid user ubuntu from 104.248.48.16 port 47792
2020-06-15T22:12:34.044435shield sshd\[3687\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.48.16
2020-06-16 06:42:32
104.248.48.16 attackbots
SSH / Telnet Brute Force Attempts on Honeypot
2020-06-15 09:45:29
104.248.48.57 attack
ssh brute-force
2020-06-09 07:49:11
104.248.48.218 attack
ssh brute force
2020-04-13 06:52:05
104.248.48.99 attack
Invalid user fake from 104.248.48.99 port 48194
2020-03-24 06:29:18
104.248.48.199 attackspambots
10s of requests to none existent pages - :443/app-ads.txt - typically bursts of 8 requests per second - undefined
node-superagent/4.1.0
2019-07-12 06:39:12
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.248.48.251
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 1383
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.248.48.251.			IN	A

;; AUTHORITY SECTION:
.			478	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022800 1800 900 604800 86400

;; Query time: 24 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 28 16:12:25 CST 2022
;; MSG SIZE  rcvd: 107
HOST信息:
Host 251.48.248.104.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 251.48.248.104.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
202.164.208.19 attackbotsspam
Listed on    abuseat.org plus zen-spamhaus   / proto=6  .  srcport=58885  .  dstport=445 SMB  .     (3545)
2020-10-06 06:51:10
182.119.202.246 attackbotsspam
8080/tcp 8080/tcp 8080/tcp...
[2020-10-04]4pkt,1pt.(tcp)
2020-10-06 06:40:36
202.91.77.233 attackspam
1601843960 - 10/04/2020 22:39:20 Host: 202.91.77.233/202.91.77.233 Port: 445 TCP Blocked
2020-10-06 06:59:34
111.240.120.49 attack
 TCP (SYN) 111.240.120.49:62627 -> port 445, len 52
2020-10-06 06:38:17
196.196.37.171 attackbotsspam
[N1.H1.VM1] Bad Bot Blocked by UFW
2020-10-06 06:41:55
194.5.176.47 attack
194.5.176.47 (IR/Iran/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Oct  5 05:45:45 jbs1 sshd[8714]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.132.52.29  user=root
Oct  5 05:44:29 jbs1 sshd[8246]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.198.138  user=root
Oct  5 05:44:31 jbs1 sshd[8246]: Failed password for root from 128.199.198.138 port 57928 ssh2
Oct  5 05:44:23 jbs1 sshd[7764]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.5.176.47  user=root
Oct  5 05:44:25 jbs1 sshd[7764]: Failed password for root from 194.5.176.47 port 58150 ssh2
Oct  5 05:42:18 jbs1 sshd[7508]: Failed password for root from 34.126.118.178 port 1075 ssh2

IP Addresses Blocked:

61.132.52.29 (CN/China/-)
128.199.198.138 (SG/Singapore/-)
2020-10-06 06:36:22
35.142.163.228 attackbotsspam
22/tcp 22/tcp
[2020-10-04]2pkt
2020-10-06 06:37:37
89.221.223.46 attackbotsspam
SSH login attempts.
2020-10-06 06:54:21
167.71.202.93 attackspambots
167.71.202.93 - - [05/Oct/2020:13:55:34 +0100] "POST /wp-login.php HTTP/1.1" 200 1861 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
167.71.202.93 - - [05/Oct/2020:13:55:36 +0100] "POST /wp-login.php HTTP/1.1" 200 1839 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
167.71.202.93 - - [05/Oct/2020:13:55:39 +0100] "POST /wp-login.php HTTP/1.1" 200 1845 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-10-06 06:48:16
51.116.115.186 attackbotsspam
51.116.115.186 - - [04/Oct/2020:21:29:26 +0100] "POST //wp-login.php HTTP/1.1" 200 3626 "https://wpeagledemoblog.com//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
51.116.115.186 - - [04/Oct/2020:21:39:34 +0100] "POST //wp-login.php HTTP/1.1" 200 3626 "https://wpeagledemoblog.com//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
51.116.115.186 - - [04/Oct/2020:21:39:34 +0100] "POST //wp-login.php HTTP/1.1" 200 3626 "https://wpeagledemoblog.com//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
...
2020-10-06 06:45:57
94.104.56.219 attack
51759/udp
[2020-10-04]1pkt
2020-10-06 06:51:52
212.70.149.68 attackspam
2020-10-05T16:43:33.823882linuxbox-skyline auth[5409]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=style rhost=212.70.149.68
...
2020-10-06 06:49:36
195.223.211.242 attackspambots
2020-10-05 17:36:24.532123-0500  localhost sshd[40428]: Failed password for root from 195.223.211.242 port 39082 ssh2
2020-10-06 07:01:32
186.96.68.210 attackbotsspam
 TCP (SYN) 186.96.68.210:15950 -> port 37215, len 44
2020-10-06 07:05:43
138.99.188.144 attack
Blocked by Sophos UTM Network Protection . /    / proto=17  .  srcport=25955  .  dstport=43215  .     (3546)
2020-10-06 06:38:54

最近上报的IP列表

104.248.48.252 104.248.48.239 104.248.48.84 104.248.48.233
104.248.49.76 104.248.5.78 104.248.50.109 104.248.5.205
104.248.5.31 104.248.51.125 104.248.5.81 104.248.51.244
104.248.5.68 104.248.51.254 104.248.51.47 104.248.51.138
104.248.52.189 104.248.51.90 104.248.53.109 104.248.53.13