125.45.91.93 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
125.45.91.209	attackspam	Unauthorized connection attempt detected from IP address 125.45.91.209 to port 23 [J]	2020-03-03 08:52:52
125.45.91.219	attack	" "	2019-10-27 14:54:52
125.45.91.80	attackspam	Sep 12 03:07:06 MainVPS sshd[17864]: Invalid user tomas from 125.45.91.80 port 36276 Sep 12 03:07:06 MainVPS sshd[17864]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.45.91.80 Sep 12 03:07:06 MainVPS sshd[17864]: Invalid user tomas from 125.45.91.80 port 36276 Sep 12 03:07:08 MainVPS sshd[17864]: Failed password for invalid user tomas from 125.45.91.80 port 36276 ssh2 Sep 12 03:11:25 MainVPS sshd[18342]: Invalid user git321 from 125.45.91.80 port 47656 ...	2019-09-12 10:09:21

类型

评论内容

时间

125.45.91.209

attackspam

Unauthorized connection attempt detected from IP address 125.45.91.209 to port 23 [J]

2020-03-03 08:52:52

125.45.91.219

attack

" "

2019-10-27 14:54:52

125.45.91.80

attackspam

Sep 12 03:07:06 MainVPS sshd[17864]: Invalid user tomas from 125.45.91.80 port 36276
Sep 12 03:07:06 MainVPS sshd[17864]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.45.91.80
Sep 12 03:07:06 MainVPS sshd[17864]: Invalid user tomas from 125.45.91.80 port 36276
Sep 12 03:07:08 MainVPS sshd[17864]: Failed password for invalid user tomas from 125.45.91.80 port 36276 ssh2
Sep 12 03:11:25 MainVPS sshd[18342]: Invalid user git321 from 125.45.91.80 port 47656
...

2019-09-12 10:09:21

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 125.45.91.93
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 32825
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;125.45.91.93.			IN	A

;; AUTHORITY SECTION:
.			412	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030802 1800 900 604800 86400

;; Query time: 63 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 04:04:54 CST 2022
;; MSG SIZE  rcvd: 105

HOST信息:

93.91.45.125.in-addr.arpa domain name pointer hn.kd.ny.adsl.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
93.91.45.125.in-addr.arpa	name = hn.kd.ny.adsl.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
122.51.216.203	attack	Jun 17 19:24:05 tdfoods sshd\[10137\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.216.203 user=root Jun 17 19:24:07 tdfoods sshd\[10137\]: Failed password for root from 122.51.216.203 port 48942 ssh2 Jun 17 19:27:28 tdfoods sshd\[10498\]: Invalid user admin from 122.51.216.203 Jun 17 19:27:28 tdfoods sshd\[10498\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.216.203 Jun 17 19:27:30 tdfoods sshd\[10498\]: Failed password for invalid user admin from 122.51.216.203 port 58312 ssh2	2020-06-18 19:03:04
18.144.110.74	attack	18.144.110.74 - - [18/Jun/2020:11:27:21 +0200] "POST /xmlrpc.php HTTP/1.1" 403 613 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 18.144.110.74 - - [18/Jun/2020:11:57:15 +0200] "POST /xmlrpc.php HTTP/1.1" 403 611 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-06-18 19:08:32
187.85.166.70	attack	Invalid user chris from 187.85.166.70 port 46271	2020-06-18 18:52:57
173.53.23.48	attackspambots	Jun 18 07:37:27 ws26vmsma01 sshd[7144]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=173.53.23.48 Jun 18 07:37:29 ws26vmsma01 sshd[7144]: Failed password for invalid user usr01 from 173.53.23.48 port 56400 ssh2 ...	2020-06-18 19:19:17
51.38.51.200	attack	Invalid user login from 51.38.51.200 port 39010	2020-06-18 19:24:54
130.0.191.218	attackspam	2020-06-18T05:48:11+0200 Failed SSH Authentication/Brute Force Attack.(Server 2)	2020-06-18 19:06:19
46.101.73.64	attackspambots	2020-06-18T13:09:31+0200 Failed SSH Authentication/Brute Force Attack. (Server 4)	2020-06-18 19:18:01
116.203.25.121	attackbots	This client attempted to login to an administrator account on a Website, or abused from another resource.	2020-06-18 19:00:45
115.159.214.200	attackspam	Jun 17 03:18:01 CT3029 sshd[10644]: Invalid user user from 115.159.214.200 port 47344 Jun 17 03:18:01 CT3029 sshd[10644]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.159.214.200 Jun 17 03:18:03 CT3029 sshd[10644]: Failed password for invalid user user from 115.159.214.200 port 47344 ssh2 Jun 17 03:18:03 CT3029 sshd[10644]: Received disconnect from 115.159.214.200 port 47344:11: Bye Bye [preauth] Jun 17 03:18:03 CT3029 sshd[10644]: Disconnected from 115.159.214.200 port 47344 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=115.159.214.200	2020-06-18 19:16:04
112.123.109.140	attack	" "	2020-06-18 19:24:41
187.177.182.165	attackspam	Automatic report - Port Scan Attack	2020-06-18 19:25:46
145.239.83.104	attackbots	$f2bV_matches	2020-06-18 18:58:08
92.246.84.147	attackspam	[2020-06-18 06:33:48] NOTICE[1273] chan_sip.c: Registration from '' failed for '92.246.84.147:57082' - Wrong password [2020-06-18 06:33:48] SECURITY[1288] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-18T06:33:48.186-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1240384",SessionID="0x7f31c0334138",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/92.246.84.147/57082",Challenge="33a91e29",ReceivedChallenge="33a91e29",ReceivedHash="d05ca63059ca086e946881b1b773659d" [2020-06-18 06:34:28] NOTICE[1273] chan_sip.c: Registration from '' failed for '92.246.84.147:64732' - Wrong password [2020-06-18 06:34:28] SECURITY[1288] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-18T06:34:28.974-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1250400",SessionID="0x7f31c02f97a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/9 ...	2020-06-18 18:54:13
111.231.33.135	attackspam	Invalid user production from 111.231.33.135 port 46042	2020-06-18 18:58:33
77.247.110.101	attack	TCP Port Scanning	2020-06-18 19:01:15

最近上报的IP列表

125.45.91.84	125.45.91.67	125.46.128.17	125.45.91.68
125.45.91.71	125.45.97.160	125.46.128.9	125.46.1.58
125.45.91.79	125.45.91.72	125.45.91.7	118.137.250.97
125.46.129.253	125.46.128.97	125.46.130.34	125.46.134.73
125.46.131.33	125.46.131.19	125.46.131.50	125.46.130.42