Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: Beijing Kuanjienet Technology Co. Ltd.

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attack
Jun 15 08:34:23 ny01 sshd[25022]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.248.48.105
Jun 15 08:34:25 ny01 sshd[25022]: Failed password for invalid user play from 124.248.48.105 port 58354 ssh2
Jun 15 08:37:09 ny01 sshd[25389]: Failed password for root from 124.248.48.105 port 45068 ssh2
2020-06-15 20:46:47
attackspambots
Jun  4 20:17:29 localhost sshd[1368]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.248.48.105  user=root
Jun  4 20:17:30 localhost sshd[1368]: Failed password for root from 124.248.48.105 port 33400 ssh2
Jun  4 20:20:36 localhost sshd[1667]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.248.48.105  user=root
Jun  4 20:20:39 localhost sshd[1667]: Failed password for root from 124.248.48.105 port 54590 ssh2
Jun  4 20:23:44 localhost sshd[1966]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.248.48.105  user=root
Jun  4 20:23:45 localhost sshd[1966]: Failed password for root from 124.248.48.105 port 47528 ssh2
...
2020-06-05 05:09:16
attackspam
May 28 06:23:01 www sshd[1910]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.248.48.105  user=r.r
May 28 06:23:03 www sshd[1910]: Failed password for r.r from 124.248.48.105 port 46590 ssh2
May 28 06:49:27 www sshd[8283]: Invalid user david from 124.248.48.105
May 28 06:49:27 www sshd[8283]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.248.48.105 
May 28 06:49:29 www sshd[8283]: Failed password for invalid user david from 124.248.48.105 port 43030 ssh2
May 28 06:52:24 www sshd[9077]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.248.48.105  user=r.r
May 28 06:52:26 www sshd[9077]: Failed password for r.r from 124.248.48.105 port 60276 ssh2
May 28 06:55:28 www sshd[9797]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.248.48.105  user=nobody
May 28 06:55:30 www sshd[9797]: Failed password ........
-------------------------------
2020-06-01 01:43:14
Comments on same subnet:
IP Type Details Datetime
124.248.48.106 attackbots
Unauthorized connection attempt detected from IP address 124.248.48.106 to port 1433 [T]
2020-01-29 20:41:44
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 124.248.48.105
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 2311
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;124.248.48.105.			IN	A

;; AUTHORITY SECTION:
.			591	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020053101 1800 900 604800 86400

;; Query time: 97 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jun 01 01:43:09 CST 2020
;; MSG SIZE  rcvd: 118
Host info
Host 105.48.248.124.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 105.48.248.124.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
60.167.177.121 attackbots
Invalid user friend from 60.167.177.121 port 39632
2020-06-26 18:18:56
103.253.69.38 attack
Jun 26 10:29:27 pornomens sshd\[8839\]: Invalid user ubuntu from 103.253.69.38 port 56862
Jun 26 10:29:27 pornomens sshd\[8839\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.253.69.38
Jun 26 10:29:29 pornomens sshd\[8839\]: Failed password for invalid user ubuntu from 103.253.69.38 port 56862 ssh2
...
2020-06-26 18:39:17
179.198.210.161 attackspam
Jun 26 05:49:53 melroy-server sshd[18370]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.198.210.161 
Jun 26 05:49:55 melroy-server sshd[18370]: Failed password for invalid user admin from 179.198.210.161 port 49168 ssh2
...
2020-06-26 18:26:19
113.24.57.106 attackbotsspam
Jun 26 08:02:07 server sshd[30011]: Failed password for root from 113.24.57.106 port 50464 ssh2
Jun 26 08:06:32 server sshd[2355]: Failed password for invalid user otr from 113.24.57.106 port 42796 ssh2
Jun 26 08:10:22 server sshd[6545]: Failed password for invalid user ncs from 113.24.57.106 port 35114 ssh2
2020-06-26 18:46:15
180.183.123.220 attackbotsspam
firewall-block, port(s): 445/tcp
2020-06-26 18:09:29
92.63.197.58 attackspambots
firewall-block, port(s): 4018/tcp, 5020/tcp, 5901/tcp, 33880/tcp
2020-06-26 18:08:36
177.135.103.54 attack
(imapd) Failed IMAP login from 177.135.103.54 (BR/Brazil/177.135.103.54.dynamic.adsl.gvt.net.br): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Jun 26 08:19:32 ir1 dovecot[2885757]: imap-login: Disconnected (auth failed, 1 attempts in 5 secs): user=, method=PLAIN, rip=177.135.103.54, lip=5.63.12.44, TLS: Connection closed, session=
2020-06-26 18:43:06
42.236.10.69 attack
Automated report (2020-06-26T13:57:38+08:00). Scraper detected at this address.
2020-06-26 18:13:07
94.177.214.9 attackbotsspam
94.177.214.9 - - [26/Jun/2020:11:43:48 +0200] "GET /wp-login.php HTTP/1.1" 200 6310 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
94.177.214.9 - - [26/Jun/2020:11:43:49 +0200] "POST /wp-login.php HTTP/1.1" 200 6561 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
94.177.214.9 - - [26/Jun/2020:11:43:50 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-06-26 18:42:19
89.248.167.164 attackbotsspam
firewall-block, port(s): 123/udp
2020-06-26 18:16:43
51.178.182.35 attackspam
(sshd) Failed SSH login from 51.178.182.35 (FR/France/35.ip-51-178-182.eu): 5 in the last 3600 secs
2020-06-26 18:35:27
123.1.154.200 attackspam
$f2bV_matches
2020-06-26 18:25:13
49.233.171.219 attackspambots
$f2bV_matches
2020-06-26 18:22:13
203.143.24.114 attack
Unauthorized connection attempt: SRC=203.143.24.114
...
2020-06-26 18:43:31
189.89.23.42 attack
Automatic report - Port Scan Attack
2020-06-26 18:38:46

Recently Reported IPs

202.44.192.155 14.55.115.106 44.65.87.235 88.242.117.128
15.152.188.31 139.71.177.214 112.1.140.129 250.166.31.252
227.165.3.153 217.132.12.253 83.28.138.102 223.190.85.6
110.112.149.132 194.169.193.137 185.12.45.118 1.4.248.154
34.235.141.36 173.0.129.46 78.171.110.73 37.49.226.22