必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Indonesia

运营商(isp): PT Telkom Indonesia

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
类型 评论内容 时间
attackspambots
Unauthorized connection attempt from IP address 125.161.106.24 on Port 445(SMB)
2019-08-20 19:14:22
相同子网IP讨论:
IP 类型 评论内容 时间
125.161.106.95 attackspambots
Unauthorized connection attempt from IP address 125.161.106.95 on Port 445(SMB)
2020-04-11 19:23:03
125.161.106.44 attack
Honeypot attack, port: 445, PTR: 44.subnet125-161-106.speedy.telkom.net.id.
2020-03-27 02:46:19
125.161.106.215 attack
IP blocked
2020-03-21 00:05:50
125.161.106.13 attackbots
Unauthorized connection attempt from IP address 125.161.106.13 on Port 445(SMB)
2020-03-09 20:40:23
125.161.106.216 attack
Lines containing failures of 125.161.106.216
Feb 25 00:20:03 shared11 sshd[17061]: Invalid user admin from 125.161.106.216 port 25502
Feb 25 00:20:03 shared11 sshd[17061]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.161.106.216
Feb 25 00:20:05 shared11 sshd[17061]: Failed password for invalid user admin from 125.161.106.216 port 25502 ssh2
Feb 25 00:20:06 shared11 sshd[17061]: Connection closed by invalid user admin 125.161.106.216 port 25502 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=125.161.106.216
2020-02-25 10:35:14
125.161.106.84 attackbots
Unauthorized connection attempt from IP address 125.161.106.84 on Port 445(SMB)
2020-02-14 02:19:09
125.161.106.91 attackbotsspam
unauthorized connection attempt
2020-01-28 18:34:54
125.161.106.7 attackbots
Unauthorized connection attempt detected from IP address 125.161.106.7 to port 445
2020-01-15 17:10:15
125.161.106.112 attack
20/1/11@08:07:04: FAIL: Alarm-Network address from=125.161.106.112
...
2020-01-12 04:03:36
125.161.106.22 attackspambots
Unauthorized connection attempt from IP address 125.161.106.22 on Port 445(SMB)
2019-12-23 05:08:54
125.161.106.101 attackbots
Unauthorized connection attempt from IP address 125.161.106.101 on Port 445(SMB)
2019-11-09 05:03:53
125.161.106.198 attackspambots
Unauthorized connection attempt from IP address 125.161.106.198 on Port 445(SMB)
2019-10-27 00:24:37
125.161.106.243 attackspam
Looking for /woocommerce.zip, Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0
2019-10-19 16:29:06
125.161.106.228 attackspambots
Unauthorized connection attempt from IP address 125.161.106.228 on Port 445(SMB)
2019-08-30 20:18:12
125.161.106.130 attack
Unauthorized connection attempt from IP address 125.161.106.130 on Port 445(SMB)
2019-08-27 04:43:14
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 125.161.106.24
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 64416
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;125.161.106.24.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019082000 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Tue Aug 20 19:14:14 CST 2019
;; MSG SIZE  rcvd: 118
HOST信息:
24.106.161.125.in-addr.arpa domain name pointer 24.subnet125-161-106.speedy.telkom.net.id.
NSLOOKUP信息:
Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
24.106.161.125.in-addr.arpa	name = 24.subnet125-161-106.speedy.telkom.net.id.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
219.156.15.221 attackbots
23/tcp
[2020-10-03]1pkt
2020-10-05 00:04:50
34.94.192.185 attack
21 attempts against mh-ssh on air
2020-10-05 00:09:20
62.234.116.25 attack
Oct  4 15:40:32 db sshd[13362]: User root from 62.234.116.25 not allowed because none of user's groups are listed in AllowGroups
...
2020-10-05 00:21:54
190.145.12.22 attack
445/tcp
[2020-10-03]1pkt
2020-10-05 00:18:22
58.213.116.170 attackspam
2020-10-04T03:24:43.169280dreamphreak.com sshd[524676]: Invalid user minecraft from 58.213.116.170 port 46074
2020-10-04T03:24:44.760684dreamphreak.com sshd[524676]: Failed password for invalid user minecraft from 58.213.116.170 port 46074 ssh2
...
2020-10-05 00:17:51
218.92.0.223 attack
Oct  4 16:03:19 scw-gallant-ride sshd[10279]: Failed password for root from 218.92.0.223 port 8042 ssh2
2020-10-05 00:14:07
118.27.95.212 attackspam
"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:
2020-10-05 00:19:19
218.4.239.146 attackbots
Unauthorized connection attempt from IP address 218.4.239.146 on Port 25(SMTP)
2020-10-05 00:09:44
177.19.187.79 attackspambots
(imapd) Failed IMAP login from 177.19.187.79 (BR/Brazil/corporativo.static.gvt.net.br): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Oct  4 10:36:15 ir1 dovecot[1917636]: imap-login: Disconnected (auth failed, 1 attempts in 5 secs): user=, method=PLAIN, rip=177.19.187.79, lip=5.63.12.44, TLS: Connection closed, session=
2020-10-05 00:26:09
172.220.92.210 attackspam
Forbidden directory scan :: 2020/10/03 20:39:13 [error] 16144#16144: *15483 access forbidden by rule, client: 172.220.92.210, server: [censored_1], request: "GET /downloads/WebcamViewerV1.0.zip HTTP/2.0", host: "www.[censored_1]", referrer: "https://www.[censored_1]/knowledge-base/windows-8/windows-8-how-to-view-web-camera-without-installing-software/"
2020-10-05 00:01:01
185.132.53.14 attackspam
2020-10-04 10:40:34.849649-0500  localhost sshd[74206]: Failed password for root from 185.132.53.14 port 35032 ssh2
2020-10-04 23:53:41
171.253.176.31 attackspam
SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: dynamic-ip-adsl.viettel.vn.
2020-10-05 00:10:24
196.92.143.188 attackspambots
23/tcp
[2020-10-03]1pkt
2020-10-05 00:19:56
112.237.121.181 attack
23/tcp
[2020-10-03]1pkt
2020-10-05 00:24:02
142.93.122.207 attackbots
142.93.122.207 - - [04/Oct/2020:18:20:02 +0200] "GET /wp-login.php HTTP/1.1" 200 1984 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
142.93.122.207 - - [04/Oct/2020:18:20:08 +0200] "POST /wp-login.php HTTP/1.1" 200 2104 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
142.93.122.207 - - [04/Oct/2020:18:20:13 +0200] "GET /wp-login.php HTTP/1.1" 200 1984 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
142.93.122.207 - - [04/Oct/2020:18:20:14 +0200] "POST /wp-login.php HTTP/1.1" 200 2090 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
142.93.122.207 - - [04/Oct/2020:18:20:19 +0200] "GET /wp-login.php HTTP/1.1" 200 1984 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
142.93.122.207 - - [04/Oct/2020:18:20:20 +0200] "POST /wp-login.php HTTP/1.1" 200 2091 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/201001
...
2020-10-05 00:28:37

最近上报的IP列表

216.10.245.198 59.16.194.158 17.124.52.50 245.38.185.176
7.237.124.211 218.122.66.66 115.73.222.228 105.211.12.245
74.3.57.127 135.70.26.182 36.139.47.75 82.86.2.37
102.35.81.70 188.120.119.239 103.74.111.115 209.138.232.254
153.33.248.175 228.162.208.83 161.129.198.202 51.13.176.102