163.125.141.15

基本信息:

城市(city): Shenzhen

省份(region): Guangdong

国家(country): China

运营商(isp): China Unicom

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

% [whois.apnic.net]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

% Information related to '163.125.0.0 - 163.125.255.255'

% Abuse contact for '163.125.0.0 - 163.125.255.255' is 'hqs-ipabuse@chinaunicom.cn'

inetnum:        163.125.0.0 - 163.125.255.255
netname:        UNICOM-GD
descr:          China Unicom Guangdong province network
descr:          China Unicom
country:        CN
admin-c:        CH1302-AP
tech-c:         RP181-AP
abuse-c:        AC1718-AP
status:         ALLOCATED PORTABLE
remarks:        service provider
remarks:        --------------------------------------------------------
remarks:        To report network abuse, please contact mnt-irt
remarks:        For troubleshooting, please contact tech-c and admin-c
remarks:        Report invalid contact via www.apnic.net/invalidcontact
remarks:        --------------------------------------------------------
mnt-by:         APNIC-HM
mnt-lower:      MAINT-CNCGROUP-GD
mnt-routes:     MAINT-CNCGROUP-RR
mnt-irt:        IRT-CU-CN
last-modified:  2025-01-22T13:10:14Z
source:         APNIC

irt:            IRT-CU-CN
address:        No.21,Financial Street
address:        Beijing,100033
address:        P.R.China
e-mail:         hqs-ipabuse@chinaunicom.cn
abuse-mailbox:  hqs-ipabuse@chinaunicom.cn
admin-c:        CH1302-AP
tech-c:         CH1302-AP
auth:           # Filtered
remarks:        hqs-ipabuse@chinaunicom.cn was validated on 2026-08-19
mnt-by:         MAINT-CNCGROUP
last-modified:  2026-08-19T00:57:22Z
source:         APNIC

role:           ABUSE CUCN
country:        ZZ
address:        No.21,Financial Street
address:        Beijing,100033
address:        P.R.China
phone:          +000000000
e-mail:         hqs-ipabuse@chinaunicom.cn
admin-c:        CH1302-AP
tech-c:         CH1302-AP
nic-hdl:        AC1718-AP
remarks:        Generated from irt object IRT-CU-CN
remarks:        hqs-ipabuse@chinaunicom.cn was validated on 2026-08-19
abuse-mailbox:  hqs-ipabuse@chinaunicom.cn
mnt-by:         APNIC-ABUSE
last-modified:  2026-08-20T03:22:23Z
source:         APNIC

person:         ChinaUnicom Hostmaster
nic-hdl:        CH1302-AP
e-mail:         hqs-ipabuse@chinaunicom.cn
address:        No.21,Jin-Rong Street
address:        Beijing,100033
address:        P.R.China
phone:          +86-10-66259764
fax-no:         +86-10-66259764
country:        CN
mnt-by:         MAINT-CNCGROUP
last-modified:  2017-08-17T06:13:16Z
source:         APNIC

person:         runkeng pan
nic-hdl:        RP181-AP
e-mail:         gdipnoc@chinaunicom.cn
address:        XinShiKong Plaza,No 666 Huangpu Rd. Guangzhou 510627,China
phone:          +86-20-22214174
fax-no:         +86-20-22212266-4174
country:        CN
mnt-by:         MAINT-CNCGROUP-GD
last-modified:  2015-12-16T03:32:02Z
source:         APNIC

% Information related to '163.125.0.0/16AS17623'

route:          163.125.0.0/16
descr:          China Unicom Guangdong Province Network
country:        CN
origin:         AS17623
mnt-by:         MAINT-CNCGROUP-RR
last-modified:  2011-04-22T07:04:01Z
source:         APNIC

% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-AU4)

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 163.125.141.15
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 24379
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;163.125.141.15.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026082700 1800 900 604800 86400

;; Query time: 30 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Aug 27 14:03:54 CST 2026
;; MSG SIZE  rcvd: 107

HOST信息:

Host 15.141.125.163.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 15.141.125.163.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
118.25.183.69	attackbotsspam	(sshd) Failed SSH login from 118.25.183.69 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct 9 06:26:56 optimus sshd[20378]: Invalid user testwww from 118.25.183.69 Oct 9 06:26:56 optimus sshd[20378]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.183.69 Oct 9 06:26:57 optimus sshd[20378]: Failed password for invalid user testwww from 118.25.183.69 port 50018 ssh2 Oct 9 06:31:30 optimus sshd[21787]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.183.69 user=root Oct 9 06:31:32 optimus sshd[21787]: Failed password for root from 118.25.183.69 port 46248 ssh2	2020-10-09 21:22:55
202.0.103.51	attackbots	202.0.103.51 - - [09/Oct/2020:07:57:34 +0100] "POST /wp-login.php HTTP/1.1" 200 2545 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 202.0.103.51 - - [09/Oct/2020:07:57:37 +0100] "POST /wp-login.php HTTP/1.1" 200 2540 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 202.0.103.51 - - [09/Oct/2020:07:57:39 +0100] "POST /wp-login.php HTTP/1.1" 200 2539 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-10-09 21:25:36
45.143.221.41	attackbotsspam	[2020-10-09 08:57:34] NOTICE[1182] chan_sip.c: Registration from '"500" ' failed for '45.143.221.41:7835' - Wrong password [2020-10-09 08:57:34] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-09T08:57:34.693-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="500",SessionID="0x7f22f854d238",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.221.41/7835",Challenge="4d9886b8",ReceivedChallenge="4d9886b8",ReceivedHash="5214e316b6a6327690ec7f348ffff693" [2020-10-09 08:57:34] NOTICE[1182] chan_sip.c: Registration from '"500" ' failed for '45.143.221.41:7835' - Wrong password [2020-10-09 08:57:34] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-09T08:57:34.839-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="500",SessionID="0x7f22f8418138",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.2 ...	2020-10-09 21:28:00
117.192.180.139	attackspam	SORBS spam violations / proto=6 . srcport=31717 . dstport=23 Telnet . (959)	2020-10-09 21:33:34
176.212.104.117	attackbotsspam	[portscan] tcp/23 [TELNET] *(RWIN=49206)(10090804)	2020-10-09 21:36:59
222.186.15.115	attackbotsspam	Oct 9 15:16:18 markkoudstaal sshd[25613]: Failed password for root from 222.186.15.115 port 58787 ssh2 Oct 9 15:16:20 markkoudstaal sshd[25613]: Failed password for root from 222.186.15.115 port 58787 ssh2 Oct 9 15:16:22 markkoudstaal sshd[25613]: Failed password for root from 222.186.15.115 port 58787 ssh2 ...	2020-10-09 21:18:01
51.79.52.2	attack	Invalid user birmingham from 51.79.52.2 port 50896	2020-10-09 21:44:27
61.144.20.51	attackbots	SSH invalid-user multiple login attempts	2020-10-09 21:50:23
222.186.30.76	attackspambots	Oct 9 15:16:10 markkoudstaal sshd[25565]: Failed password for root from 222.186.30.76 port 26292 ssh2 Oct 9 15:16:13 markkoudstaal sshd[25565]: Failed password for root from 222.186.30.76 port 26292 ssh2 Oct 9 15:16:14 markkoudstaal sshd[25565]: Failed password for root from 222.186.30.76 port 26292 ssh2 ...	2020-10-09 21:23:52
45.142.120.58	attackbots	2020-10-09 04:39:25 dovecot_login authenticator failed for $localhost$ \[45.142.120.58\]: 535 Incorrect authentication data $set_id=rqd@no-server.de$ 2020-10-09 04:39:36 dovecot_login authenticator failed for $localhost$ \[45.142.120.58\]: 535 Incorrect authentication data $set_id=gid@no-server.de$ 2020-10-09 04:39:38 dovecot_login authenticator failed for $localhost$ \[45.142.120.58\]: 535 Incorrect authentication data $set_id=blacklist@no-server.de$ 2020-10-09 04:39:51 dovecot_login authenticator failed for $localhost$ \[45.142.120.58\]: 535 Incorrect authentication data $set_id=gabvirtual@no-server.de$ 2020-10-09 04:39:57 dovecot_login authenticator failed for $localhost$ \[45.142.120.58\]: 535 Incorrect authentication data $set_id=gofuckyourself@no-server.de$ 2020-10-09 04:39:57 dovecot_login authenticator failed for $localhost$ \[45.142.120.58\]: 535 Incorrect authentication data $set_id=matsuno@no-server.de$ 2020-10-09 04:40:07 dovecot_login authenticator ...	2020-10-09 21:16:21
81.68.125.65	attack	Oct 9 06:20:46 mockhub sshd[895662]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.68.125.65 Oct 9 06:20:46 mockhub sshd[895662]: Invalid user cyrus from 81.68.125.65 port 48726 Oct 9 06:20:48 mockhub sshd[895662]: Failed password for invalid user cyrus from 81.68.125.65 port 48726 ssh2 ...	2020-10-09 21:40:56
51.38.211.30	attackbotsspam	51.38.211.30 - - [09/Oct/2020:06:04:19 +0200] "GET /wp-login.php HTTP/1.1" 200 8796 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 51.38.211.30 - - [09/Oct/2020:06:04:20 +0200] "POST /wp-login.php HTTP/1.1" 200 9047 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 51.38.211.30 - - [09/Oct/2020:06:04:21 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-10-09 21:28:46
183.82.121.34	attackspam	Oct 9 15:03:16 host2 sshd[2100465]: Failed password for root from 183.82.121.34 port 36794 ssh2 Oct 9 15:04:13 host2 sshd[2100474]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.82.121.34 user=root Oct 9 15:04:16 host2 sshd[2100474]: Failed password for root from 183.82.121.34 port 48764 ssh2 Oct 9 15:05:13 host2 sshd[2100511]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.82.121.34 user=root Oct 9 15:05:15 host2 sshd[2100511]: Failed password for root from 183.82.121.34 port 60732 ssh2 ...	2020-10-09 21:38:24
104.248.70.30	attackspambots	[ThuOct0822:46:50.5155032020][:error][pid27673:tid47492339201792][client104.248.70.30:34960][client104.248.70.30]ModSecurity:Accessdeniedwithcode403$phase2$.Patternmatch"$\?:\$mozilla\^\\|mozilla/[45]\\\\\\\\.[1-9]\\|\^mozilla/4\\\\\\\\.0\$$"atREQUEST_HEADERS:User-Agent.[file"/usr/local/apache.ea3/conf/modsec_rules/20_asl_useragents.conf"][line"426"][id"330131"][rev"3"][msg"Atomicorp.comWAFRules:MaliciousBotBlocked$FakeMozillaUserAgentStringDetected$"][severity"CRITICAL"][hostname"www.restaurantgandria.ch"][uri"/index.php"][unique_id"X396ujgSbtvwjJCGO1WJZQAAAIY"]\,referer:www.restaurantgandria.ch[ThuOct0822:47:42.0453082020][:error][pid27605:tid47492377024256][client104.248.70.30:38934][client104.248.70.30]ModSecurity:Accessdeniedwithcode403$phase2$.Patternmatch"$\?:\$mozilla\^\\|mozilla/[45]\\\\\\\\.[1-9]\\|\^mozilla/4\\\\\\\\.0\$$"atREQUEST_HEADERS:User-Agent.[file"/usr/local/apache.ea3/conf/modsec_rules/20_asl_useragents.conf"][line"426"][id"330131"][rev"3"][msg"Atomico	2020-10-09 21:43:05
203.137.119.217	attack	(sshd) Failed SSH login from 203.137.119.217 (JP/Japan/h203-137-119-217.ablenetvps.ne.jp): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct 9 08:41:09 optimus sshd[8434]: Invalid user samantha from 203.137.119.217 Oct 9 08:41:11 optimus sshd[8434]: Failed password for invalid user samantha from 203.137.119.217 port 50462 ssh2 Oct 9 08:43:16 optimus sshd[9091]: Failed password for root from 203.137.119.217 port 46482 ssh2 Oct 9 08:45:16 optimus sshd[9648]: Failed password for root from 203.137.119.217 port 42502 ssh2 Oct 9 08:47:29 optimus sshd[10267]: Failed password for root from 203.137.119.217 port 38520 ssh2	2020-10-09 21:18:27

最近上报的IP列表

182.119.248.109	1.24.26.197	123.12.57.120	120.14.240.196
115.55.17.77	110.244.103.129	112.86.225.196	93.158.90.234
93.158.90.233	93.158.90.215	112.86.225.146	14.207.194.60
171.35.86.133	1.59.156.188	64.16.202.162	111.172.5.27
68.232.155.128	103.77.215.99	51.68.90.63	223.109.252.236