125.75.234.105

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): ChinaNet Gansu Province Network

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspambots	CN_MAINT-CHINANET-GS_<177>1582260939 [1:2010935:3] ET SCAN Suspicious inbound to MSSQL port 1433 [Classification: Potentially Bad Traffic] [Priority: 2] {TCP} 125.75.234.105:51115	2020-02-21 15:37:50
attack	unauthorized connection attempt	2020-01-09 18:26:24
attack	Unauthorized connection attempt detected from IP address 125.75.234.105 to port 1433	2020-01-01 21:24:34

类型

评论内容

时间

attackspambots

CN_MAINT-CHINANET-GS_<177>1582260939 [1:2010935:3] ET SCAN Suspicious inbound to MSSQL port 1433 [Classification: Potentially Bad Traffic] [Priority: 2] {TCP} 125.75.234.105:51115

2020-02-21 15:37:50

attack

unauthorized connection attempt

2020-01-09 18:26:24

attack

Unauthorized connection attempt detected from IP address 125.75.234.105 to port 1433

2020-01-01 21:24:34

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 125.75.234.105
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 21110
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;125.75.234.105.			IN	A

;; AUTHORITY SECTION:
.			484	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019123101 1800 900 604800 86400

;; Query time: 896 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jan 01 21:24:24 CST 2020
;; MSG SIZE  rcvd: 118

HOST信息:

Host 105.234.75.125.in-addr.arpa not found: 2(SERVFAIL)

NSLOOKUP信息:

;; Got SERVFAIL reply from 100.100.2.136, trying next server
;; Got SERVFAIL reply from 100.100.2.138, trying next server
Server:		100.100.2.138
Address:	100.100.2.138#53

** server can't find 105.234.75.125.in-addr.arpa: SERVFAIL

最新评论:

IP	类型	评论内容	时间
39.152.50.22	attack	lfd: (smtpauth) Failed SMTP AUTH login from 39.152.50.22 (CN/China/-): 5 in the last 3600 secs - Fri Dec 14 13:57:05 2018	2020-02-07 10:31:41
104.168.169.238	attack	lfd: (smtpauth) Failed SMTP AUTH login from 104.168.169.238 (US/United States/hwsrv-381733.hostwindsdns.com): 5 in the last 3600 secs - Sat Dec 15 09:16:20 2018	2020-02-07 10:21:06
154.70.200.132	attackspam	lfd: (smtpauth) Failed SMTP AUTH login from 154.70.200.132 (-): 5 in the last 3600 secs - Fri Dec 14 04:44:53 2018	2020-02-07 10:33:15
31.206.49.89	attackbotsspam	Feb 6 20:53:26 grey postfix/smtpd\[31309\]: NOQUEUE: reject: RCPT from unknown\[31.206.49.89\]: 554 5.7.1 Service unavailable\; Client host \[31.206.49.89\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[31.206.49.89\]\; from=\ to=\ proto=ESMTP helo=\<\[31.206.49.89\]\> ...	2020-02-07 10:16:01
218.161.97.174	attackbotsspam	unauthorized connection attempt	2020-02-07 13:08:55
154.70.200.134	attackbotsspam	Brute force blocker - service: exim2 - aantal: 25 - Sat Dec 15 15:00:16 2018	2020-02-07 10:20:12
106.12.148.127	attackbots	Automatic report - SSH Brute-Force Attack	2020-02-07 10:39:19
182.148.122.19	attackspambots	unauthorized connection attempt	2020-02-07 13:10:57
78.90.179.84	attackbots	unauthorized connection attempt	2020-02-07 13:07:38
51.255.67.124	attack	unauthorized connection attempt	2020-02-07 13:19:06
36.66.154.143	attackspam	Feb 7 03:14:42 dcd-gentoo sshd[11872]: Invalid user toor from 36.66.154.143 port 56432 Feb 7 03:14:45 dcd-gentoo sshd[11881]: Invalid user toor from 36.66.154.143 port 57464 Feb 7 03:14:48 dcd-gentoo sshd[11890]: Invalid user toor from 36.66.154.143 port 58112 ...	2020-02-07 10:17:34
171.14.92.65	attackspambots	lfd: (smtpauth) Failed SMTP AUTH login from 171.14.92.65 (CN/China/-): 5 in the last 3600 secs - Thu Dec 13 20:36:40 2018	2020-02-07 10:34:50
181.211.34.54	attack	unauthorized connection attempt	2020-02-07 13:12:02
37.113.234.43	attackspam	lfd: (smtpauth) Failed SMTP AUTH login from 37.113.234.43 (37x113x234x43.dynamic.krsk.ertelecom.ru): 5 in the last 3600 secs - Fri Dec 14 16:37:50 2018	2020-02-07 10:25:12
14.177.255.220	attack	lfd: (smtpauth) Failed SMTP AUTH login from 14.177.255.220 (VN/Vietnam/static.vnpt.vn): 5 in the last 3600 secs - Fri Dec 14 13:59:23 2018	2020-02-07 10:32:18

最近上报的IP列表

221.74.251.145	20.241.245.246	217.147.48.171	121.54.169.19
31.161.47.38	59.196.55.88	119.118.18.223	66.224.89.174
34.53.58.124	48.170.221.66	43.191.23.37	119.39.46.97
43.56.120.97	39.220.122.122	183.99.28.170	88.140.73.40
119.2.7.34	176.35.105.21	130.203.17.224	116.15.101.91