必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Indonesia

运营商(isp): PT Telkom Indonesia

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
类型 评论内容 时间
attack
Auto Detect Rule!
proto TCP (SYN), 125.160.114.139:42056->gjan.info:1433, len 52
2020-09-17 22:20:10
attackbots
Auto Detect Rule!
proto TCP (SYN), 125.160.114.139:42056->gjan.info:1433, len 52
2020-09-17 14:28:15
attackbots
Auto Detect Rule!
proto TCP (SYN), 125.160.114.139:42056->gjan.info:1433, len 52
2020-09-17 05:35:32
相同子网IP讨论:
IP 类型 评论内容 时间
125.160.114.81 attackspambots
Sep 17 09:13:21 vps639187 sshd\[17068\]: Invalid user admin from 125.160.114.81 port 31259
Sep 17 09:13:21 vps639187 sshd\[17068\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.160.114.81
Sep 17 09:13:23 vps639187 sshd\[17068\]: Failed password for invalid user admin from 125.160.114.81 port 31259 ssh2
...
2020-09-17 21:25:13
125.160.114.81 attackspam
Sep 16 14:01:21 logopedia-1vcpu-1gb-nyc1-01 sshd[353377]: Failed password for root from 125.160.114.81 port 21306 ssh2
...
2020-09-17 13:35:12
125.160.114.81 attackspam
Sep 16 14:01:21 logopedia-1vcpu-1gb-nyc1-01 sshd[353377]: Failed password for root from 125.160.114.81 port 21306 ssh2
...
2020-09-17 04:41:53
125.160.114.150 attackspam
Automatic report - Port Scan Attack
2020-08-28 19:56:01
125.160.114.114 attackspambots
20/8/10@23:54:28: FAIL: Alarm-Network address from=125.160.114.114
...
2020-08-11 14:43:14
125.160.114.61 attack
Failed RDP login
2020-07-23 08:03:12
125.160.114.217 attackspambots
Unauthorized connection attempt from IP address 125.160.114.217 on Port 445(SMB)
2020-05-14 04:42:49
125.160.114.142 attackspambots
Unauthorized connection attempt detected from IP address 125.160.114.142 to port 445
2020-05-13 04:03:04
125.160.114.240 attackspam
1586437190 - 04/09/2020 14:59:50 Host: 125.160.114.240/125.160.114.240 Port: 445 TCP Blocked
2020-04-10 02:43:33
125.160.114.45 attack
Honeypot attack, port: 445, PTR: 45.subnet125-160-114.speedy.telkom.net.id.
2020-02-20 18:41:24
125.160.114.195 attackbots
Honeypot attack, port: 445, PTR: 195.subnet125-160-114.speedy.telkom.net.id.
2020-01-25 23:19:49
125.160.114.4 attackbots
1578632223 - 01/10/2020 05:57:03 Host: 125.160.114.4/125.160.114.4 Port: 445 TCP Blocked
2020-01-10 14:11:09
125.160.114.136 attack
Unauthorized connection attempt from IP address 125.160.114.136 on Port 445(SMB)
2019-12-07 04:55:54
125.160.114.41 attackspam
Unauthorised access (Oct 10) SRC=125.160.114.41 LEN=52 TTL=247 ID=22354 DF TCP DPT=445 WINDOW=8192 SYN
2019-10-10 16:42:49
125.160.114.46 attackbotsspam
Unauthorized connection attempt from IP address 125.160.114.46 on Port 445(SMB)
2019-07-25 16:22:23
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 125.160.114.139
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 46615
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;125.160.114.139.		IN	A

;; AUTHORITY SECTION:
.			165	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020091602 1800 900 604800 86400

;; Query time: 61 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Sep 17 05:35:28 CST 2020
;; MSG SIZE  rcvd: 119
HOST信息:
139.114.160.125.in-addr.arpa domain name pointer 139.subnet125-160-114.speedy.telkom.net.id.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
139.114.160.125.in-addr.arpa	name = 139.subnet125-160-114.speedy.telkom.net.id.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
1.214.156.164 attackspambots
Sep 17 18:28:12 email sshd\[25716\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.214.156.164  user=root
Sep 17 18:28:14 email sshd\[25716\]: Failed password for root from 1.214.156.164 port 49523 ssh2
Sep 17 18:33:45 email sshd\[26699\]: Invalid user support from 1.214.156.164
Sep 17 18:33:45 email sshd\[26699\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.214.156.164
Sep 17 18:33:48 email sshd\[26699\]: Failed password for invalid user support from 1.214.156.164 port 55099 ssh2
...
2020-09-18 07:55:37
177.85.142.179 attackspambots
Sep 17 18:19:24 mail.srvfarm.net postfix/smtpd[143201]: warning: unknown[177.85.142.179]: SASL PLAIN authentication failed: 
Sep 17 18:19:25 mail.srvfarm.net postfix/smtpd[143201]: lost connection after AUTH from unknown[177.85.142.179]
Sep 17 18:25:13 mail.srvfarm.net postfix/smtps/smtpd[159171]: lost connection after CONNECT from unknown[177.85.142.179]
Sep 17 18:29:05 mail.srvfarm.net postfix/smtpd[157369]: warning: unknown[177.85.142.179]: SASL PLAIN authentication failed: 
Sep 17 18:29:06 mail.srvfarm.net postfix/smtpd[157369]: lost connection after AUTH from unknown[177.85.142.179]
2020-09-18 08:14:56
103.19.201.125 attackspam
Sep 17 18:32:50 mail.srvfarm.net postfix/smtpd[156674]: warning: unknown[103.19.201.125]: SASL PLAIN authentication failed: 
Sep 17 18:32:50 mail.srvfarm.net postfix/smtpd[156674]: lost connection after AUTH from unknown[103.19.201.125]
Sep 17 18:36:25 mail.srvfarm.net postfix/smtpd[161687]: warning: unknown[103.19.201.125]: SASL PLAIN authentication failed: 
Sep 17 18:36:25 mail.srvfarm.net postfix/smtpd[161687]: lost connection after AUTH from unknown[103.19.201.125]
Sep 17 18:39:51 mail.srvfarm.net postfix/smtpd[157369]: warning: unknown[103.19.201.125]: SASL PLAIN authentication failed:
2020-09-18 08:18:18
203.86.30.17 attackbots
Sep 17 19:57:04 web01.agentur-b-2.de postfix/smtpd[1726661]: lost connection after STARTTLS from unknown[203.86.30.17]
Sep 17 19:57:07 web01.agentur-b-2.de postfix/smtpd[1741741]: NOQUEUE: reject: RCPT from unknown[203.86.30.17]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Sep 17 19:57:07 web01.agentur-b-2.de postfix/smtpd[1741741]: NOQUEUE: reject: RCPT from unknown[203.86.30.17]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Sep 17 19:58:10 web01.agentur-b-2.de postfix/smtpd[1741399]: lost connection after STARTTLS from unknown[203.86.30.17]
Sep 17 19:58:12 web01.agentur-b-2.de postfix/smtpd[1741741]: NOQUEUE: reject: RCPT from unknown[203.86.30.17]: 450 4.7.1 : Helo command rejected: Host not found; from=
2020-09-18 08:01:41
115.99.104.126 attackbots
port scan and connect, tcp 23 (telnet)
2020-09-18 08:17:48
168.195.47.100 attackbotsspam
SASL PLAIN auth failed: ruser=...
2020-09-18 08:02:54
177.87.221.253 attack
Sep 17 18:18:19 mail.srvfarm.net postfix/smtpd[156674]: warning: unknown[177.87.221.253]: SASL PLAIN authentication failed: 
Sep 17 18:18:19 mail.srvfarm.net postfix/smtpd[156674]: lost connection after AUTH from unknown[177.87.221.253]
Sep 17 18:20:50 mail.srvfarm.net postfix/smtpd[157366]: warning: unknown[177.87.221.253]: SASL PLAIN authentication failed: 
Sep 17 18:20:51 mail.srvfarm.net postfix/smtpd[157366]: lost connection after AUTH from unknown[177.87.221.253]
Sep 17 18:25:23 mail.srvfarm.net postfix/smtps/smtpd[157125]: warning: unknown[177.87.221.253]: SASL PLAIN authentication failed:
2020-09-18 08:14:20
66.248.205.175 attackbotsspam
spam
2020-09-18 12:06:59
170.83.188.77 attackspam
Sep 17 18:47:36 mail.srvfarm.net postfix/smtpd[163115]: warning: unknown[170.83.188.77]: SASL PLAIN authentication failed: 
Sep 17 18:47:37 mail.srvfarm.net postfix/smtpd[163115]: lost connection after AUTH from unknown[170.83.188.77]
Sep 17 18:47:53 mail.srvfarm.net postfix/smtps/smtpd[157125]: warning: unknown[170.83.188.77]: SASL PLAIN authentication failed: 
Sep 17 18:47:53 mail.srvfarm.net postfix/smtps/smtpd[157125]: lost connection after AUTH from unknown[170.83.188.77]
Sep 17 18:49:00 mail.srvfarm.net postfix/smtpd[163481]: warning: unknown[170.83.188.77]: SASL PLAIN authentication failed:
2020-09-18 08:02:33
93.99.134.28 attackbotsspam
(CZ/Czechia/-) SMTP Bruteforcing attempts
2020-09-18 08:05:17
114.246.34.147 attackspambots
114.246.34.147 (CN/China/-), 3 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep 17 21:21:41 honeypot sshd[144277]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.246.34.147  user=root
Sep 17 21:21:43 honeypot sshd[144277]: Failed password for root from 114.246.34.147 port 5193 ssh2
Sep 17 21:31:00 honeypot sshd[144370]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.173.213.6  user=root

IP Addresses Blocked:
2020-09-18 12:11:55
170.83.188.170 attack
Sep 17 18:18:05 mail.srvfarm.net postfix/smtps/smtpd[157154]: warning: unknown[170.83.188.170]: SASL PLAIN authentication failed: 
Sep 17 18:18:05 mail.srvfarm.net postfix/smtps/smtpd[157154]: lost connection after AUTH from unknown[170.83.188.170]
Sep 17 18:20:45 mail.srvfarm.net postfix/smtps/smtpd[137957]: warning: unknown[170.83.188.170]: SASL PLAIN authentication failed: 
Sep 17 18:20:46 mail.srvfarm.net postfix/smtps/smtpd[137957]: lost connection after AUTH from unknown[170.83.188.170]
Sep 17 18:22:43 mail.srvfarm.net postfix/smtps/smtpd[157127]: warning: unknown[170.83.188.170]: SASL PLAIN authentication failed:
2020-09-18 08:16:32
118.24.163.126 attackbots
Sep 17 19:47:34 web03.srvfarm.net pure-ftpd: (?@118.24.163.126) [WARNING] Authentication failed for user [www-data]
Sep 17 19:47:40 web03.srvfarm.net pure-ftpd: (?@118.24.163.126) [WARNING] Authentication failed for user [www-data]
Sep 17 19:47:46 web03.srvfarm.net pure-ftpd: (?@118.24.163.126) [WARNING] Authentication failed for user [www-data]
Sep 17 19:47:56 web03.srvfarm.net pure-ftpd: (?@118.24.163.126) [WARNING] Authentication failed for user [www-data]
Sep 17 19:48:02 web03.srvfarm.net pure-ftpd: (?@118.24.163.126) [WARNING] Authentication failed for user [www-data]
2020-09-18 08:04:11
223.190.33.238 attackbotsspam
Unauthorized connection attempt from IP address 223.190.33.238 on Port 445(SMB)
2020-09-18 12:09:05
170.233.68.153 attackspam
Sep 17 18:21:07 mail.srvfarm.net postfix/smtpd[143201]: warning: unknown[170.233.68.153]: SASL PLAIN authentication failed: 
Sep 17 18:21:08 mail.srvfarm.net postfix/smtpd[143201]: lost connection after AUTH from unknown[170.233.68.153]
Sep 17 18:21:39 mail.srvfarm.net postfix/smtpd[157369]: warning: unknown[170.233.68.153]: SASL PLAIN authentication failed: 
Sep 17 18:21:40 mail.srvfarm.net postfix/smtpd[157369]: lost connection after AUTH from unknown[170.233.68.153]
Sep 17 18:28:14 mail.srvfarm.net postfix/smtpd[157371]: warning: unknown[170.233.68.153]: SASL PLAIN authentication failed:
2020-09-18 08:15:45

最近上报的IP列表

145.27.0.243 213.52.70.110 158.80.197.198 189.165.63.114
214.32.184.10 251.165.138.107 27.218.199.183 166.66.19.38
235.237.177.124 130.165.165.95 143.39.161.32 178.8.199.91
81.245.117.29 148.45.119.246 104.11.41.5 197.207.0.112
49.37.130.111 41.230.68.191 200.107.241.52 168.70.114.21