必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Indonesia

运营商(isp): PT Telkom Indonesia

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
类型 评论内容 时间
attackbots
Unauthorized connection attempt detected from IP address 125.161.106.7 to port 445
2020-01-15 17:10:15
相同子网IP讨论:
IP 类型 评论内容 时间
125.161.106.95 attackspambots
Unauthorized connection attempt from IP address 125.161.106.95 on Port 445(SMB)
2020-04-11 19:23:03
125.161.106.44 attack
Honeypot attack, port: 445, PTR: 44.subnet125-161-106.speedy.telkom.net.id.
2020-03-27 02:46:19
125.161.106.215 attack
IP blocked
2020-03-21 00:05:50
125.161.106.13 attackbots
Unauthorized connection attempt from IP address 125.161.106.13 on Port 445(SMB)
2020-03-09 20:40:23
125.161.106.216 attack
Lines containing failures of 125.161.106.216
Feb 25 00:20:03 shared11 sshd[17061]: Invalid user admin from 125.161.106.216 port 25502
Feb 25 00:20:03 shared11 sshd[17061]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.161.106.216
Feb 25 00:20:05 shared11 sshd[17061]: Failed password for invalid user admin from 125.161.106.216 port 25502 ssh2
Feb 25 00:20:06 shared11 sshd[17061]: Connection closed by invalid user admin 125.161.106.216 port 25502 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=125.161.106.216
2020-02-25 10:35:14
125.161.106.84 attackbots
Unauthorized connection attempt from IP address 125.161.106.84 on Port 445(SMB)
2020-02-14 02:19:09
125.161.106.91 attackbotsspam
unauthorized connection attempt
2020-01-28 18:34:54
125.161.106.112 attack
20/1/11@08:07:04: FAIL: Alarm-Network address from=125.161.106.112
...
2020-01-12 04:03:36
125.161.106.22 attackspambots
Unauthorized connection attempt from IP address 125.161.106.22 on Port 445(SMB)
2019-12-23 05:08:54
125.161.106.101 attackbots
Unauthorized connection attempt from IP address 125.161.106.101 on Port 445(SMB)
2019-11-09 05:03:53
125.161.106.198 attackspambots
Unauthorized connection attempt from IP address 125.161.106.198 on Port 445(SMB)
2019-10-27 00:24:37
125.161.106.243 attackspam
Looking for /woocommerce.zip, Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0
2019-10-19 16:29:06
125.161.106.228 attackspambots
Unauthorized connection attempt from IP address 125.161.106.228 on Port 445(SMB)
2019-08-30 20:18:12
125.161.106.130 attack
Unauthorized connection attempt from IP address 125.161.106.130 on Port 445(SMB)
2019-08-27 04:43:14
125.161.106.24 attackspambots
Unauthorized connection attempt from IP address 125.161.106.24 on Port 445(SMB)
2019-08-20 19:14:22
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 125.161.106.7
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 34906
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;125.161.106.7.			IN	A

;; AUTHORITY SECTION:
.			444	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020011500 1800 900 604800 86400

;; Query time: 108 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jan 15 17:10:12 CST 2020
;; MSG SIZE  rcvd: 117
HOST信息:
7.106.161.125.in-addr.arpa domain name pointer 7.subnet125-161-106.speedy.telkom.net.id.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
7.106.161.125.in-addr.arpa	name = 7.subnet125-161-106.speedy.telkom.net.id.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
159.192.144.203 attackspam
Invalid user anna from 159.192.144.203 port 55936
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.192.144.203
Failed password for invalid user anna from 159.192.144.203 port 55936 ssh2
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.192.144.203  user=nagios
Failed password for nagios from 159.192.144.203 port 41996 ssh2
2019-07-08 05:19:48
168.228.149.64 attack
Brute force attempt
2019-07-08 05:16:40
163.179.32.29 attack
Banned for posting to wp-login.php without referer {"redirect_to":"http:\/\/yolandabradfordudoujrealtors.com\/wp-admin\/theme-install.php","pwd":"admin","log":"admin","wp-submit":"Log In","testcookie":"1"}
2019-07-08 05:58:18
157.230.146.88 attackbotsspam
Jul  7 18:37:18 [host] sshd[8823]: Invalid user donut from 157.230.146.88
Jul  7 18:37:18 [host] sshd[8823]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.146.88
Jul  7 18:37:20 [host] sshd[8823]: Failed password for invalid user donut from 157.230.146.88 port 59114 ssh2
2019-07-08 05:35:41
182.191.122.33 attackbotsspam
Unauthorized connection attempt from IP address 182.191.122.33 on Port 445(SMB)
2019-07-08 05:11:16
185.176.26.78 attackspam
Honeypot attack, port: 5555, PTR: PTR record not found
2019-07-08 05:24:19
68.64.61.11 attack
Jul  7 15:24:07 s64-1 sshd[867]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.64.61.11
Jul  7 15:24:10 s64-1 sshd[867]: Failed password for invalid user lewis from 68.64.61.11 port 49065 ssh2
Jul  7 15:27:59 s64-1 sshd[905]: Failed password for root from 68.64.61.11 port 43348 ssh2
...
2019-07-08 05:42:26
191.53.79.229 attackbots
Jul  7 08:29:01 mailman postfix/smtpd[2469]: warning: unknown[191.53.79.229]: SASL PLAIN authentication failed: authentication failure
2019-07-08 05:28:04
102.165.38.225 attackbotsspam
\[2019-07-07 17:10:49\] SECURITY\[13451\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-07-07T17:10:49.097-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="759448585359005",SessionID="0x7f02f8405d48",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/102.165.38.225/53274",ACLName="no_extension_match"
\[2019-07-07 17:11:03\] SECURITY\[13451\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-07-07T17:11:03.326-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="10020048914258004",SessionID="0x7f02f821ae38",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/102.165.38.225/63103",ACLName="no_extension_match"
\[2019-07-07 17:11:13\] SECURITY\[13451\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-07-07T17:11:13.391-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="24990048585359005",SessionID="0x7f02f867ac88",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/102.165.38.225/50526",ACLNa
2019-07-08 05:18:19
179.127.195.95 attackspam
SMTP-sasl brute force
...
2019-07-08 05:54:34
170.239.22.36 attackbots
SMTP-sasl brute force
...
2019-07-08 05:37:57
104.245.153.82 attack
Jul  7 09:27:54 server sshd\[41967\]: Invalid user manager1 from 104.245.153.82
Jul  7 09:27:54 server sshd\[41967\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.245.153.82
Jul  7 09:27:56 server sshd\[41967\]: Failed password for invalid user manager1 from 104.245.153.82 port 45006 ssh2
...
2019-07-08 05:42:59
2.229.63.6 attack
Jul  7 15:27:07 [host] sshd[5746]: Invalid user sip from 2.229.63.6
Jul  7 15:27:07 [host] sshd[5746]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.229.63.6
Jul  7 15:27:09 [host] sshd[5746]: Failed password for invalid user sip from 2.229.63.6 port 50910 ssh2
2019-07-08 05:54:54
64.8.71.112 attackbotsspam
Received: from 10.213.252.189  (EHLO smtp.knology.net) (64.8.71.112)
  by mta4399.mail.gq1.yahoo.com with SMTPS; Sun, 07 Jul 2019 05:10:55 +0000
Return-Path: 
2019-07-08 05:43:58
217.182.71.54 attackspambots
Jul  7 15:29:22 rpi sshd[15365]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.182.71.54 
Jul  7 15:29:24 rpi sshd[15365]: Failed password for invalid user ts3 from 217.182.71.54 port 35794 ssh2
2019-07-08 05:23:05

最近上报的IP列表

157.245.155.240 49.49.20.101 122.51.81.31 103.107.101.135
142.93.208.24 103.18.179.196 58.8.110.132 42.112.192.52
178.62.41.225 171.251.80.194 175.23.88.215 125.164.81.166
172.105.86.235 115.73.212.189 37.186.121.234 145.239.41.140
93.169.42.145 78.16.251.202 190.42.26.161 156.166.192.100