1.199.125.14 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): Henan Telecom Corporation

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspam	Unauthorized connection attempt from IP address 1.199.125.14 on Port 445(SMB)	2019-06-30 20:17:48

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 1.199.125.14
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 39199
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;1.199.125.14.			IN	A

;; AUTHORITY SECTION:
.			1923	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019063000 1800 900 604800 86400

;; Query time: 1 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sun Jun 30 20:17:41 CST 2019
;; MSG SIZE  rcvd: 116

HOST信息:

Host 14.125.199.1.in-addr.arpa not found: 2(SERVFAIL)

NSLOOKUP信息:

;; Got SERVFAIL reply from 67.207.67.2, trying next server
Server:		67.207.67.3
Address:	67.207.67.3#53

** server can't find 14.125.199.1.in-addr.arpa: SERVFAIL

最新评论:

IP	类型	评论内容	时间
182.126.87.169	attack	DATE:2020-10-02 22:38:55, IP:182.126.87.169, PORT:telnet Telnet brute force auth on honeypot server (epe-honey1-hq)	2020-10-04 04:49:19
193.112.191.228	attackspambots	Automatic Fail2ban report - Trying login SSH	2020-10-04 04:58:38
27.151.115.81	attackspambots	[MK-VM2] Blocked by UFW	2020-10-04 04:41:39
89.233.112.6	attack	TCP (SYN) 89.233.112.6:58236 -> port 23, len 44	2020-10-04 04:41:15
159.89.188.167	attack	Oct 4 02:07:36 itv-usvr-01 sshd[8288]: Invalid user build from 159.89.188.167	2020-10-04 04:22:43
60.174.248.244	attack	Port Scan ...	2020-10-04 04:53:13
51.38.85.146	attackbots	TCP (SYN) 51.38.85.146:57057 -> port 1080, len 52	2020-10-04 04:59:28
40.77.167.237	attackspambots	caw-Joomla User : try to access forms...	2020-10-04 04:30:39
129.211.73.2	attackspambots	Oct 3 13:07:39 scw-gallant-ride sshd[14052]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.73.2	2020-10-04 04:54:34
51.254.37.192	attack	(sshd) Failed SSH login from 51.254.37.192 (FR/France/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct 3 01:14:10 server5 sshd[9274]: Invalid user ofbiz from 51.254.37.192 Oct 3 01:14:12 server5 sshd[9274]: Failed password for invalid user ofbiz from 51.254.37.192 port 57676 ssh2 Oct 3 01:18:05 server5 sshd[11135]: Invalid user root01 from 51.254.37.192 Oct 3 01:18:07 server5 sshd[11135]: Failed password for invalid user root01 from 51.254.37.192 port 40362 ssh2 Oct 3 01:21:23 server5 sshd[12514]: Invalid user docker from 51.254.37.192	2020-10-04 04:30:15
156.208.229.118	attackbotsspam	Telnet Server BruteForce Attack	2020-10-04 04:27:11
170.0.160.165	attackspam	Oct 2 16:27:05 cumulus sshd[22622]: Did not receive identification string from 170.0.160.165 port 56894 Oct 2 16:27:05 cumulus sshd[22624]: Did not receive identification string from 170.0.160.165 port 56901 Oct 2 16:27:05 cumulus sshd[22623]: Did not receive identification string from 170.0.160.165 port 56900 Oct 2 16:27:06 cumulus sshd[22625]: Did not receive identification string from 170.0.160.165 port 57113 Oct 2 16:27:06 cumulus sshd[22626]: Did not receive identification string from 170.0.160.165 port 57110 Oct 2 16:27:06 cumulus sshd[22627]: Did not receive identification string from 170.0.160.165 port 57122 Oct 2 16:27:06 cumulus sshd[22628]: Did not receive identification string from 170.0.160.165 port 57151 Oct 2 16:27:08 cumulus sshd[22631]: Invalid user guest from 170.0.160.165 port 57170 Oct 2 16:27:08 cumulus sshd[22634]: Invalid user guest from 170.0.160.165 port 57173 Oct 2 16:27:08 cumulus sshd[22632]: Invalid user guest from 170.0.160.165 po........ -------------------------------	2020-10-04 04:43:49
46.101.7.67	attackspambots	2020-10-02T22:45:43.647446amanda2.illicoweb.com sshd\[31057\]: Invalid user eduardo from 46.101.7.67 port 55512 2020-10-02T22:45:43.652871amanda2.illicoweb.com sshd\[31057\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.7.67 2020-10-02T22:45:45.384843amanda2.illicoweb.com sshd\[31057\]: Failed password for invalid user eduardo from 46.101.7.67 port 55512 ssh2 2020-10-02T22:50:11.984213amanda2.illicoweb.com sshd\[31426\]: Invalid user fernando from 46.101.7.67 port 39966 2020-10-02T22:50:11.989521amanda2.illicoweb.com sshd\[31426\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.7.67 ...	2020-10-04 04:58:19
175.137.104.57	attack	Lines containing failures of 175.137.104.57 (max 1000) Oct 2 22:27:37 srv sshd[98150]: Connection closed by 175.137.104.57 port 61298 Oct 2 22:27:40 srv sshd[98151]: Invalid user 666666 from 175.137.104.57 port 61479 Oct 2 22:27:40 srv sshd[98151]: Connection closed by invalid user 666666 175.137.104.57 port 61479 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=175.137.104.57	2020-10-04 04:47:51
5.200.241.104	attackbotsspam	1601671289 - 10/02/2020 22:41:29 Host: 5.200.241.104/5.200.241.104 Port: 445 TCP Blocked	2020-10-04 04:49:03

最近上报的IP列表

220.143.148.100	211.63.138.230	14.162.144.47	189.89.219.22
46.167.97.178	191.53.248.27	182.232.177.100	113.182.197.128
133.120.42.59	188.68.198.177	191.35.142.213	123.194.180.238
85.169.71.119	59.46.85.140	35.52.218.69	222.127.50.120
180.107.116.198	177.75.11.122	27.72.72.111	205.61.233.133