116.48.125.78 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Hong Kong

Internet Service Provider: CSL Limited

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
116.48.125.48	attackspam	Feb 22 03:44:57 areeb-Workstation sshd[10440]: Failed password for root from 116.48.125.48 port 42480 ssh2 ...	2020-02-22 06:32:18
116.48.125.48	attack	Feb 21 17:34:17 vmd17057 sshd[5329]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.48.125.48 Feb 21 17:34:19 vmd17057 sshd[5329]: Failed password for invalid user invoices from 116.48.125.48 port 39024 ssh2 ...	2020-02-22 03:38:17
116.48.125.48	attackbotsspam	$f2bV_matches	2020-02-18 19:52:29

Type

Details

Datetime

116.48.125.48

attackspam

Feb 22 03:44:57 areeb-Workstation sshd[10440]: Failed password for root from 116.48.125.48 port 42480 ssh2
...

2020-02-22 06:32:18

116.48.125.48

attack

Feb 21 17:34:17 vmd17057 sshd[5329]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.48.125.48 
Feb 21 17:34:19 vmd17057 sshd[5329]: Failed password for invalid user invoices from 116.48.125.48 port 39024 ssh2
...

2020-02-22 03:38:17

116.48.125.48

attackbotsspam

$f2bV_matches

2020-02-18 19:52:29

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 116.48.125.78
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 55772
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;116.48.125.78.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025102100 1800 900 604800 86400

;; Query time: 34 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Oct 21 18:11:53 CST 2025
;; MSG SIZE  rcvd: 106

Host info

78.125.48.116.in-addr.arpa domain name pointer n11648125078.netvigator.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
78.125.48.116.in-addr.arpa	name = n11648125078.netvigator.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
103.214.41.29	attack	Helo	2019-09-07 15:15:24
91.137.8.221	attackbotsspam	Sep 6 20:46:36 php1 sshd\[30667\]: Invalid user password from 91.137.8.221 Sep 6 20:46:36 php1 sshd\[30667\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.137.8.221 Sep 6 20:46:38 php1 sshd\[30667\]: Failed password for invalid user password from 91.137.8.221 port 55510 ssh2 Sep 6 20:50:39 php1 sshd\[31021\]: Invalid user frappe from 91.137.8.221 Sep 6 20:50:39 php1 sshd\[31021\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.137.8.221	2019-09-07 15:01:37
182.72.124.6	attackbots	Sep 6 21:11:41 web9 sshd\[18455\]: Invalid user admin from 182.72.124.6 Sep 6 21:11:41 web9 sshd\[18455\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.72.124.6 Sep 6 21:11:43 web9 sshd\[18455\]: Failed password for invalid user admin from 182.72.124.6 port 46500 ssh2 Sep 6 21:17:14 web9 sshd\[19601\]: Invalid user admin from 182.72.124.6 Sep 6 21:17:14 web9 sshd\[19601\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.72.124.6	2019-09-07 15:21:59
104.131.7.48	attackbotsspam	2019-09-07T05:05:46.221086abusebot-4.cloudsearch.cf sshd\[25881\]: Invalid user ansible from 104.131.7.48 port 38729	2019-09-07 14:48:36
89.248.162.168	attack	09/07/2019-01:07:46.291528 89.248.162.168 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 100	2019-09-07 14:46:13
141.98.9.5	attack	Sep 7 09:08:20 webserver postfix/smtpd\[30913\]: warning: unknown\[141.98.9.5\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 7 09:09:07 webserver postfix/smtpd\[32395\]: warning: unknown\[141.98.9.5\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 7 09:09:55 webserver postfix/smtpd\[30913\]: warning: unknown\[141.98.9.5\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 7 09:10:42 webserver postfix/smtpd\[30913\]: warning: unknown\[141.98.9.5\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 7 09:11:30 webserver postfix/smtpd\[32140\]: warning: unknown\[141.98.9.5\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2019-09-07 15:17:47
218.249.193.237	attackspam	Sep 6 17:53:46 web1 sshd\[26888\]: Invalid user 123456 from 218.249.193.237 Sep 6 17:53:46 web1 sshd\[26888\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.249.193.237 Sep 6 17:53:48 web1 sshd\[26888\]: Failed password for invalid user 123456 from 218.249.193.237 port 51846 ssh2 Sep 6 17:58:26 web1 sshd\[27309\]: Invalid user abc123 from 218.249.193.237 Sep 6 17:58:26 web1 sshd\[27309\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.249.193.237	2019-09-07 15:14:17
27.35.57.64	attackbots	Honeypot attack, port: 23, PTR: PTR record not found	2019-09-07 14:50:30
109.170.1.58	attackbotsspam	2019-09-07T06:17:09.501976abusebot-4.cloudsearch.cf sshd\[26027\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.170.1.58 user=root	2019-09-07 15:21:14
85.25.103.81	attackspambots	F2B jail: sshd. Time: 2019-09-07 08:49:45, Reported by: VKReport	2019-09-07 14:59:09
51.254.220.20	attackbots	Sep 7 06:52:34 www5 sshd\[3375\]: Invalid user jenkins from 51.254.220.20 Sep 7 06:52:34 www5 sshd\[3375\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.254.220.20 Sep 7 06:52:36 www5 sshd\[3375\]: Failed password for invalid user jenkins from 51.254.220.20 port 55996 ssh2 ...	2019-09-07 14:55:42
77.247.109.72	attack	\[2019-09-07 02:15:03\] NOTICE\[1827\] chan_sip.c: Registration from '"200" \' failed for '77.247.109.72:6292' - Wrong password \[2019-09-07 02:15:03\] SECURITY\[1849\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-09-07T02:15:03.458-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="200",SessionID="0x7fd9a819fa08",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.109.72/6292",Challenge="1c730616",ReceivedChallenge="1c730616",ReceivedHash="c25bd75613c6eade4ee3d28482904f39" \[2019-09-07 02:15:03\] NOTICE\[1827\] chan_sip.c: Registration from '"200" \' failed for '77.247.109.72:6292' - Wrong password \[2019-09-07 02:15:03\] SECURITY\[1849\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-09-07T02:15:03.626-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="200",SessionID="0x7fd9a81cb558",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.2	2019-09-07 14:36:55
94.181.94.12	attack	Sep 6 20:30:47 hanapaa sshd\[25465\]: Invalid user wp-user from 94.181.94.12 Sep 6 20:30:47 hanapaa sshd\[25465\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.181.94.12 Sep 6 20:30:49 hanapaa sshd\[25465\]: Failed password for invalid user wp-user from 94.181.94.12 port 39850 ssh2 Sep 6 20:35:26 hanapaa sshd\[25819\]: Invalid user ftpsecure from 94.181.94.12 Sep 6 20:35:26 hanapaa sshd\[25819\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.181.94.12	2019-09-07 14:43:53
190.8.80.42	attackbotsspam	Sep 7 09:03:11 MK-Soft-Root2 sshd\[25480\]: Invalid user tomcat from 190.8.80.42 port 44546 Sep 7 09:03:11 MK-Soft-Root2 sshd\[25480\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.8.80.42 Sep 7 09:03:13 MK-Soft-Root2 sshd\[25480\]: Failed password for invalid user tomcat from 190.8.80.42 port 44546 ssh2 ...	2019-09-07 15:03:40
106.12.93.25	attackspambots	Sep 7 05:55:24 root sshd[16416]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.93.25 Sep 7 05:55:25 root sshd[16416]: Failed password for invalid user ts3server1 from 106.12.93.25 port 56698 ssh2 Sep 7 06:00:34 root sshd[16479]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.93.25 ...	2019-09-07 15:13:08

Recently Reported IPs

61.52.126.215	223.88.223.180	221.182.6.179	183.199.244.235
146.190.29.141	120.230.27.199	120.229.222.140	120.216.104.48
117.181.20.186	112.132.98.214	55.8.220.16	166.0.192.239
218.84.178.158	218.84.178.173	39.154.15.98	39.154.0.136
34.227.52.9	223.91.184.158	223.88.83.103	120.239.28.192