45.112.125.4 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Indonesia

运营商(isp): PT. Fiber Networks Indonesia

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbotsspam	unauthorized connection attempt	2020-02-07 13:27:31

相同子网IP讨论:

IP	类型	评论内容	时间
45.112.125.66	attack	SSH authentication failure x 6 reported by Fail2Ban ...	2019-10-07 03:07:30
45.112.125.66	attackspam	Sep 27 00:28:00 core sshd[12912]: Invalid user tmp from 45.112.125.66 port 39046 Sep 27 00:28:02 core sshd[12912]: Failed password for invalid user tmp from 45.112.125.66 port 39046 ssh2 ...	2019-09-27 06:47:51
45.112.125.98	attack	Honeypot attack, port: 445, PTR: 98-125.fiber.net.id.	2019-06-27 19:32:30

类型

评论内容

时间

45.112.125.66

attack

SSH authentication failure x 6 reported by Fail2Ban
...

2019-10-07 03:07:30

45.112.125.66

attackspam

Sep 27 00:28:00 core sshd[12912]: Invalid user tmp from 45.112.125.66 port 39046
Sep 27 00:28:02 core sshd[12912]: Failed password for invalid user tmp from 45.112.125.66 port 39046 ssh2
...

2019-09-27 06:47:51

45.112.125.98

attack

Honeypot attack, port: 445, PTR: 98-125.fiber.net.id.

2019-06-27 19:32:30

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.112.125.4
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 41135
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.112.125.4.			IN	A

;; AUTHORITY SECTION:
.			556	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020020601 1800 900 604800 86400

;; Query time: 112 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 07 13:27:25 CST 2020
;; MSG SIZE  rcvd: 116

HOST信息:

4.125.112.45.in-addr.arpa domain name pointer 4-125-saranainstrument.fiber.net.id.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
4.125.112.45.in-addr.arpa	name = 4-125-saranainstrument.fiber.net.id.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
50.247.165.85	attack	TCP (SYN) 50.247.165.85:59473 -> port 23, len 44	2020-08-02 23:42:51
51.222.48.59	attackspam	firewall-block, port(s): 15191/tcp	2020-08-02 23:42:18
218.92.0.191	attackbots	Aug 2 16:50:43 dcd-gentoo sshd[22029]: User root from 218.92.0.191 not allowed because none of user's groups are listed in AllowGroups Aug 2 16:50:47 dcd-gentoo sshd[22029]: error: PAM: Authentication failure for illegal user root from 218.92.0.191 Aug 2 16:50:47 dcd-gentoo sshd[22029]: Failed keyboard-interactive/pam for invalid user root from 218.92.0.191 port 45399 ssh2 ...	2020-08-02 23:09:10
3.235.28.165	attackspambots	Auto report Web spam and bad bot from CCBot/2.0 (https://commoncrawl.org/faq/) \| HTTP/1.1 \| GET \| Sunday, August 2nd 2020 @ 12:10:33	2020-08-02 23:26:08
172.81.251.60	attackspambots	Aug 2 15:10:11 hosting sshd[17133]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.81.251.60 user=root Aug 2 15:10:14 hosting sshd[17133]: Failed password for root from 172.81.251.60 port 50858 ssh2 ...	2020-08-02 23:37:50
159.69.26.234	attackspam	"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:	2020-08-02 23:06:16
103.150.108.3	attackspam	Email rejected due to spam filtering	2020-08-02 23:31:01
197.51.146.170	attackspam	firewall-block, port(s): 445/tcp	2020-08-02 23:29:57
206.189.154.38	attackspambots	Fail2Ban Ban Triggered	2020-08-02 23:52:51
128.201.78.220	attackspambots	Aug 2 08:10:38 logopedia-1vcpu-1gb-nyc1-01 sshd[113873]: Failed password for root from 128.201.78.220 port 33360 ssh2 ...	2020-08-02 23:17:01
93.179.118.218	attackspambots	(sshd) Failed SSH login from 93.179.118.218 (US/United States/93.179.118.218.16clouds.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Aug 2 17:52:28 s1 sshd[11579]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.179.118.218 user=root Aug 2 17:52:31 s1 sshd[11579]: Failed password for root from 93.179.118.218 port 42380 ssh2 Aug 2 18:01:49 s1 sshd[11819]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.179.118.218 user=root Aug 2 18:01:51 s1 sshd[11819]: Failed password for root from 93.179.118.218 port 47648 ssh2 Aug 2 18:17:40 s1 sshd[12193]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.179.118.218 user=root	2020-08-02 23:21:43
62.210.185.4	attackbotsspam	MYH,DEF GET /wp-login.php	2020-08-02 23:34:24
104.198.100.105	attackbots	$f2bV_matches	2020-08-02 23:51:52
142.93.247.221	attackspambots	2020-08-02T19:10:33.535121hostname sshd[45098]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.247.221 user=root 2020-08-02T19:10:35.740053hostname sshd[45098]: Failed password for root from 142.93.247.221 port 36326 ssh2 ...	2020-08-02 23:21:11
193.70.38.187	attack	Aug 2 14:10:13 h2829583 sshd[6531]: Failed password for root from 193.70.38.187 port 46592 ssh2	2020-08-02 23:37:20

最近上报的IP列表

190.97.209.42	189.126.230.81	162.181.147.61	156.3.129.145
187.189.93.192	114.38.115.27	179.110.20.44	163.61.84.66
242.246.49.129	176.193.35.148	51.140.64.26	139.223.174.90
130.254.10.22	176.113.161.59	72.42.35.107	113.25.58.150
96.49.253.108	80.95.85.3	60.54.124.250	46.209.13.130