202.117.58.25 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 202.117.58.25
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 8383
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;202.117.58.25.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025020602 1800 900 604800 86400

;; Query time: 37 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 07 07:43:04 CST 2025
;; MSG SIZE  rcvd: 106

HOST信息:

25.58.117.202.in-addr.arpa domain name pointer 58h25.xjtu.edu.cn.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
25.58.117.202.in-addr.arpa	name = 58h25.xjtu.edu.cn.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
92.222.92.237	attackbotsspam	92.222.92.237 - - [21/Sep/2020:18:28:11 +0200] "GET /wp-login.php HTTP/1.1" 200 9061 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 92.222.92.237 - - [21/Sep/2020:18:28:11 +0200] "POST /wp-login.php HTTP/1.1" 200 9312 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 92.222.92.237 - - [21/Sep/2020:18:28:12 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-09-22 03:02:14
45.143.221.96	attackspambots	[2020-09-21 13:44:29] NOTICE[1239][C-000061aa] chan_sip.c: Call from '' (45.143.221.96:5071) to extension '+972594771385' rejected because extension not found in context 'public'. [2020-09-21 13:44:29] SECURITY[1264] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-09-21T13:44:29.808-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="+972594771385",SessionID="0x7f4d480381a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.221.96/5071",ACLName="no_extension_match" [2020-09-21 13:52:36] NOTICE[1239][C-000061b2] chan_sip.c: Call from '' (45.143.221.96:5071) to extension '972594771385' rejected because extension not found in context 'public'. [2020-09-21 13:52:36] SECURITY[1264] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-09-21T13:52:36.178-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="972594771385",SessionID="0x7f4d48965da8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.221.96 ...	2020-09-22 03:10:49
112.254.55.131	attackspambots	[Sun Sep 20 23:58:02.153212 2020] [:error] [pid 23423:tid 140118059661056] [client 112.254.55.131:39665] [client 112.254.55.131] ModSecurity: Access denied with code 403 (phase 1). Match of "within %{tx.allowed_http_versions}" against "REQUEST_PROTOCOL" required. [file "/etc/modsecurity/coreruleset-3.3.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1041"] [id "920430"] [msg "HTTP protocol version is not allowed by policy"] [data "HTTP/1.0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/setup.cgi"] [unique_id "AAAAAKyLvmllluV-tW9b4QAAAC0"] ...	2020-09-22 02:59:45
198.199.91.245	attackspambots	Triggered by Fail2Ban at Ares web server	2020-09-22 02:48:01
95.15.201.15	attack	Automatic report - Port Scan Attack	2020-09-22 03:14:38
123.194.117.96	attackbots	Found on Alienvault / proto=6 . srcport=2771 . dstport=81 . (2290)	2020-09-22 03:23:11
95.103.33.98	attackbots	Sep 20 17:57:59 blackbee postfix/smtpd[4139]: NOQUEUE: reject: RCPT from bband-dyn98.95-103-33.t-com.sk[95.103.33.98]: 554 5.7.1 Service unavailable; Client host [95.103.33.98] blocked using cbl.abuseat.org; Blocked - see http://www.abuseat.org/lookup.cgi?ip=95.103.33.98; from= to= proto=ESMTP helo= ...	2020-09-22 03:01:54
125.227.255.79	attack	SSH Brute-Force reported by Fail2Ban	2020-09-22 03:13:52
182.151.58.230	attackbotsspam	Sep 20 21:03:08 server sshd[11187]: Failed password for root from 182.151.58.230 port 53384 ssh2 Sep 20 21:04:41 server sshd[11955]: Failed password for root from 182.151.58.230 port 46954 ssh2 Sep 20 21:06:17 server sshd[13014]: Failed password for root from 182.151.58.230 port 40520 ssh2	2020-09-22 02:58:07
189.8.108.50	attackbotsspam	detected by Fail2Ban	2020-09-22 03:20:38
45.174.163.130	attackspam	Listed on zen-spamhaus also abuseat.org / proto=6 . srcport=39451 . dstport=80 . (2295)	2020-09-22 02:57:42
125.42.4.7	attackspam	Found on Alienvault / proto=6 . srcport=38058 . dstport=23 . (2292)	2020-09-22 03:18:35
60.243.168.25	attack	Listed on dnsbl-sorbs plus abuseat.org and zen-spamhaus / proto=6 . srcport=62854 . dstport=23 . (2296)	2020-09-22 02:52:03
49.88.112.114	attackspambots	[MK-VM2] SSH login failed	2020-09-22 03:01:02
82.64.201.47	attack	Sep 21 18:55:47 ovpn sshd\[20924\]: Invalid user test1 from 82.64.201.47 Sep 21 18:55:47 ovpn sshd\[20924\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.64.201.47 Sep 21 18:55:50 ovpn sshd\[20924\]: Failed password for invalid user test1 from 82.64.201.47 port 53010 ssh2 Sep 21 19:00:47 ovpn sshd\[22230\]: Invalid user ubuntu from 82.64.201.47 Sep 21 19:00:47 ovpn sshd\[22230\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.64.201.47	2020-09-22 03:18:58

最近上报的IP列表

143.62.168.247	73.240.74.147	50.4.225.210	84.208.192.165
216.6.95.114	196.24.253.133	63.243.75.168	173.55.194.34
46.145.77.174	160.14.225.196	16.228.251.98	45.66.109.225
131.189.112.75	155.242.172.98	161.200.15.97	174.113.38.187
123.48.255.142	139.58.229.130	186.10.231.153	18.4.102.127