必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Indonesia

运营商(isp): PT Telkom Indonesia

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
类型 评论内容 时间
attack
1580360175 - 01/30/2020 05:56:15 Host: 125.160.139.90/125.160.139.90 Port: 445 TCP Blocked
2020-01-30 20:38:23
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 125.160.139.90
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 51694
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;125.160.139.90.			IN	A

;; AUTHORITY SECTION:
.			542	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020013001 1800 900 604800 86400

;; Query time: 184 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jan 30 20:38:16 CST 2020
;; MSG SIZE  rcvd: 118
HOST信息:
90.139.160.125.in-addr.arpa domain name pointer 90.subnet125-160-139.speedy.telkom.net.id.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
90.139.160.125.in-addr.arpa	name = 90.subnet125-160-139.speedy.telkom.net.id.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
203.162.230.150 attackbots
SSH invalid-user multiple login try
2020-10-05 21:04:01
114.226.35.254 attack
Oct  4 22:32:44 georgia postfix/smtpd[11542]: connect from unknown[114.226.35.254]
Oct  4 22:32:45 georgia postfix/smtpd[11542]: warning: unknown[114.226.35.254]: SASL LOGIN authentication failed: authentication failure
Oct  4 22:32:46 georgia postfix/smtpd[11542]: lost connection after AUTH from unknown[114.226.35.254]
Oct  4 22:32:46 georgia postfix/smtpd[11542]: disconnect from unknown[114.226.35.254] ehlo=2 starttls=1 auth=0/1 commands=3/4
Oct  4 22:32:46 georgia postfix/smtpd[11542]: connect from unknown[114.226.35.254]
Oct  4 22:32:50 georgia postfix/smtpd[11542]: warning: unknown[114.226.35.254]: SASL LOGIN authentication failed: authentication failure
Oct  4 22:32:50 georgia postfix/smtpd[11542]: lost connection after AUTH from unknown[114.226.35.254]
Oct  4 22:32:50 georgia postfix/smtpd[11542]: disconnect from unknown[114.226.35.254] ehlo=2 starttls=1 auth=0/1 commands=3/4
Oct  4 22:32:50 georgia postfix/smtpd[11542]: connect from unknown[114.226.35.254]
Oct  ........
-------------------------------
2020-10-05 20:49:43
223.130.31.240 attackbotsspam
Port Scan: TCP/23
2020-10-05 20:43:20
120.196.181.230 attack
1433/tcp 1433/tcp 1433/tcp
[2020-09-29/10-04]3pkt
2020-10-05 20:59:46
134.175.165.186 attack
Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-10-05T08:49:46Z and 2020-10-05T09:01:31Z
2020-10-05 20:43:02
202.137.142.159 attack
52869/tcp 52869/tcp 52869/tcp
[2020-10-02/03]3pkt
2020-10-05 21:09:08
49.233.182.177 attackspambots
6379/tcp 6379/tcp 6379/tcp...
[2020-09-03/10-04]4pkt,1pt.(tcp)
2020-10-05 20:37:44
188.251.35.192 attackbots
Lines containing failures of 188.251.35.192
Oct  4 22:32:51 MAKserver05 sshd[11281]: Did not receive identification string from 188.251.35.192 port 58548
Oct  4 22:32:54 MAKserver05 sshd[11286]: Invalid user user1 from 188.251.35.192 port 59056
Oct  4 22:32:54 MAKserver05 sshd[11286]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.251.35.192 
Oct  4 22:32:55 MAKserver05 sshd[11286]: Failed password for invalid user user1 from 188.251.35.192 port 59056 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=188.251.35.192
2020-10-05 20:40:27
112.85.42.151 attackbotsspam
Oct  5 14:43:48 santamaria sshd\[26153\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.151  user=root
Oct  5 14:43:50 santamaria sshd\[26153\]: Failed password for root from 112.85.42.151 port 2354 ssh2
Oct  5 14:44:08 santamaria sshd\[26155\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.151  user=root
...
2020-10-05 20:50:11
58.216.160.214 attack
1433/tcp 1433/tcp 1433/tcp...
[2020-08-10/10-04]8pkt,1pt.(tcp)
2020-10-05 20:41:00
80.169.225.123 attackbotsspam
Oct  5 12:10:08 serwer sshd\[23501\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.169.225.123  user=root
Oct  5 12:10:11 serwer sshd\[23501\]: Failed password for root from 80.169.225.123 port 36228 ssh2
Oct  5 12:13:30 serwer sshd\[23831\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.169.225.123  user=root
...
2020-10-05 21:03:03
106.75.8.155 attack
Port scan: Attack repeated for 24 hours
2020-10-05 20:50:25
71.6.158.166 attack
connect from ninja.census.shodan.io[71.6.158.166] all over the postfix logs.
2020-10-05 20:53:55
45.143.221.135 attack
ET SCAN Sipvicious Scan - port: 5060 proto: sip cat: Attempted Information Leakbytes: 456
2020-10-05 21:03:26
182.84.46.229 attackbotsspam
Found on   CINS badguys     / proto=6  .  srcport=44587  .  dstport=23 Telnet  .     (3558)
2020-10-05 20:59:18

最近上报的IP列表

117.246.38.103 167.172.118.129 154.0.24.173 37.59.138.195
194.143.249.136 75.165.168.77 125.161.130.218 106.13.4.84
61.69.198.154 147.228.32.60 49.204.0.123 200.194.4.237
61.72.210.201 95.70.156.116 195.114.147.135 185.182.57.79
37.239.232.212 78.106.20.218 118.163.228.92 36.80.40.187