202.125.145.148

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Pakistan

运营商(isp): ITI

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Commercial

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspam	suspicious action Fri, 06 Mar 2020 10:31:35 -0300	2020-03-07 00:30:58

相同子网IP讨论:

IP	类型	评论内容	时间
202.125.145.50	attackspambots	Unauthorized connection attempt from IP address 202.125.145.50 on Port 445(SMB)	2019-12-06 02:50:21
202.125.145.55	attackspambots	Unauthorized connection attempt from IP address 202.125.145.55 on Port 445(SMB)	2019-11-08 01:14:11
202.125.145.55	attackspam	TCP port 445 (SMB) attempt blocked by firewall. [2019-06-25 19:07:16]	2019-06-26 09:51:30

类型

评论内容

时间

202.125.145.50

attackspambots

Unauthorized connection attempt from IP address 202.125.145.50 on Port 445(SMB)

2019-12-06 02:50:21

202.125.145.55

attackspambots

Unauthorized connection attempt from IP address 202.125.145.55 on Port 445(SMB)

2019-11-08 01:14:11

202.125.145.55

attackspam

TCP port 445 (SMB) attempt blocked by firewall. [2019-06-25 19:07:16]

2019-06-26 09:51:30

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 202.125.145.148
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 64397
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;202.125.145.148.		IN	A

;; AUTHORITY SECTION:
.			392	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020030600 1800 900 604800 86400

;; Query time: 52 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Mar 07 00:30:49 CST 2020
;; MSG SIZE  rcvd: 119

HOST信息:

148.145.125.202.in-addr.arpa domain name pointer lhr63.pie.net.pk.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
148.145.125.202.in-addr.arpa	name = lhr63.pie.net.pk.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
176.109.254.135	attack	" "	2020-01-01 17:51:43
190.123.210.228	attackspam	Automatic report - Banned IP Access	2020-01-01 17:42:47
185.234.216.206	attackbotsspam	smtp probe/invalid login attempt	2020-01-01 17:27:53
51.159.35.94	attackbots	SSH bruteforce (Triggered fail2ban)	2020-01-01 18:06:00
218.92.0.195	attackbots	Jan 1 07:24:52 dcd-gentoo sshd[14475]: User root from 218.92.0.195 not allowed because none of user's groups are listed in AllowGroups Jan 1 07:24:56 dcd-gentoo sshd[14475]: error: PAM: Authentication failure for illegal user root from 218.92.0.195 Jan 1 07:24:52 dcd-gentoo sshd[14475]: User root from 218.92.0.195 not allowed because none of user's groups are listed in AllowGroups Jan 1 07:24:56 dcd-gentoo sshd[14475]: error: PAM: Authentication failure for illegal user root from 218.92.0.195 Jan 1 07:24:52 dcd-gentoo sshd[14475]: User root from 218.92.0.195 not allowed because none of user's groups are listed in AllowGroups Jan 1 07:24:56 dcd-gentoo sshd[14475]: error: PAM: Authentication failure for illegal user root from 218.92.0.195 Jan 1 07:24:56 dcd-gentoo sshd[14475]: Failed keyboard-interactive/pam for invalid user root from 218.92.0.195 port 62926 ssh2 ...	2020-01-01 17:40:34
187.16.96.37	attackspambots	Jan 1 06:35:18 ws22vmsma01 sshd[243945]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.16.96.37 Jan 1 06:35:20 ws22vmsma01 sshd[243945]: Failed password for invalid user leckich from 187.16.96.37 port 36422 ssh2 ...	2020-01-01 17:41:16
182.180.128.134	attack	SSH login attempts.	2020-01-01 18:03:41
125.161.94.86	attackspam	Unauthorized connection attempt detected from IP address 125.161.94.86 to port 445	2020-01-01 18:08:00
222.186.175.182	attackspambots	2020-01-01T09:41:41.962502abusebot-4.cloudsearch.cf sshd[19162]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.182 user=root 2020-01-01T09:41:43.906059abusebot-4.cloudsearch.cf sshd[19162]: Failed password for root from 222.186.175.182 port 21338 ssh2 2020-01-01T09:41:47.574959abusebot-4.cloudsearch.cf sshd[19162]: Failed password for root from 222.186.175.182 port 21338 ssh2 2020-01-01T09:41:41.962502abusebot-4.cloudsearch.cf sshd[19162]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.182 user=root 2020-01-01T09:41:43.906059abusebot-4.cloudsearch.cf sshd[19162]: Failed password for root from 222.186.175.182 port 21338 ssh2 2020-01-01T09:41:47.574959abusebot-4.cloudsearch.cf sshd[19162]: Failed password for root from 222.186.175.182 port 21338 ssh2 2020-01-01T09:41:41.962502abusebot-4.cloudsearch.cf sshd[19162]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 ...	2020-01-01 17:58:17
106.13.126.21	attackspambots	Jan 1 06:23:44 raspberrypi sshd\[16288\]: Invalid user aumiller from 106.13.126.21Jan 1 06:23:46 raspberrypi sshd\[16288\]: Failed password for invalid user aumiller from 106.13.126.21 port 39662 ssh2Jan 1 06:51:16 raspberrypi sshd\[17412\]: Failed password for root from 106.13.126.21 port 54748 ssh2 ...	2020-01-01 17:44:19
119.200.186.168	attackspam	invalid user	2020-01-01 18:04:53
189.90.241.134	attack	2020-01-01T08:23:00.088095shield sshd\[22663\]: Invalid user vanbemmelen from 189.90.241.134 port 36018 2020-01-01T08:23:00.093708shield sshd\[22663\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.90.241.134 2020-01-01T08:23:02.258636shield sshd\[22663\]: Failed password for invalid user vanbemmelen from 189.90.241.134 port 36018 ssh2 2020-01-01T08:29:30.187959shield sshd\[25665\]: Invalid user 123@Abc from 189.90.241.134 port 38226 2020-01-01T08:29:30.193491shield sshd\[25665\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.90.241.134	2020-01-01 18:06:36
37.49.230.74	attackspambots	\[2020-01-01 04:54:16\] NOTICE\[2839\] chan_sip.c: Registration from '"12340" \' failed for '37.49.230.74:5195' - Wrong password \[2020-01-01 04:54:16\] SECURITY\[2857\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-01-01T04:54:16.207-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="12340",SessionID="0x7f0fb447f838",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/37.49.230.74/5195",Challenge="141595d4",ReceivedChallenge="141595d4",ReceivedHash="d093c6c7c3e15c44e57f66571e38f7bc" \[2020-01-01 04:54:16\] NOTICE\[2839\] chan_sip.c: Registration from '"12340" \' failed for '37.49.230.74:5195' - Wrong password \[2020-01-01 04:54:16\] SECURITY\[2857\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-01-01T04:54:16.363-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="12340",SessionID="0x7f0fb40977c8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4	2020-01-01 18:03:24
222.171.170.117	attack	Dec 31 09:14:29 atlantis sshd[1177]: reveeclipse mapping checking getaddrinfo for 117.170.171.222.dial.hr.hl.dynamic.163data.com.cn [222.171.170.117] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 31 09:14:29 atlantis sshd[1177]: Received disconnect from 222.171.170.117: 11: Normal Shutdown, Thank you for playing [preauth] Dec 31 09:14:32 atlantis sshd[1182]: reveeclipse mapping checking getaddrinfo for 117.170.171.222.dial.hr.hl.dynamic.163data.com.cn [222.171.170.117] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 31 09:14:32 atlantis sshd[1182]: Received disconnect from 222.171.170.117: 11: Normal Shutdown, Thank you for playing [preauth] Dec 31 09:14:35 atlantis sshd[1185]: reveeclipse mapping checking getaddrinfo for 117.170.171.222.dial.hr.hl.dynamic.163data.com.cn [222.171.170.117] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 31 09:14:35 atlantis sshd[1185]: Received disconnect from 222.171.170.117: 11: Normal Shutdown, Thank you for playing [preauth] Dec 31 09:14:36 atlantis sshd[........ -------------------------------	2020-01-01 18:06:16
203.137.182.54	attackspambots	Jan 1 09:04:13 vh1 sshd[25983]: Did not receive identification string from 203.137.182.54 Jan 1 09:06:48 vh1 sshd[26023]: Did not receive identification string from 203.137.182.54 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=203.137.182.54	2020-01-01 17:30:57

最近上报的IP列表

37.19.41.51	236.248.85.134	19.188.125.250	162.227.45.185
46.75.100.144	163.26.151.149	156.39.178.13	37.29.5.210
15.35.149.29	104.182.44.180	68.248.144.50	1.55.142.212
67.202.202.202	167.71.115.245	183.82.42.178	46.3.1.162
94.25.233.158	103.60.136.2	43.226.35.161	197.51.163.241