必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Indonesia

运营商(isp): PT Telkom Indonesia

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
类型 评论内容 时间
attackbots
Unauthorized connection attempt from IP address 125.161.107.193 on Port 445(SMB)
2020-01-14 14:10:08
相同子网IP讨论:
IP 类型 评论内容 时间
125.161.107.87 attackbotsspam
Unauthorized IMAP connection attempt
2020-06-09 02:00:07
125.161.107.49 attack
Invalid user r00t from 125.161.107.49 port 9894
2020-05-23 16:50:54
125.161.107.154 attackbotsspam
20/5/6@08:00:31: FAIL: Alarm-Network address from=125.161.107.154
20/5/6@08:00:31: FAIL: Alarm-Network address from=125.161.107.154
...
2020-05-06 23:13:15
125.161.107.122 attack
Attempt to attack host OS, exploiting network vulnerabilities, on 13-04-2020 18:20:08.
2020-04-14 02:18:13
125.161.107.22 attackspam
Unauthorized connection attempt from IP address 125.161.107.22 on Port 445(SMB)
2020-03-28 20:36:59
125.161.107.139 attack
Honeypot attack, port: 445, PTR: 139.subnet125-161-107.speedy.telkom.net.id.
2020-03-05 03:15:39
125.161.107.85 attack
Unauthorized connection attempt from IP address 125.161.107.85 on Port 445(SMB)
2020-02-24 18:44:21
125.161.107.150 attackbotsspam
Honeypot attack, port: 445, PTR: 150.subnet125-161-107.speedy.telkom.net.id.
2020-02-20 17:14:21
125.161.107.11 attackbots
Attempt to attack host OS, exploiting network vulnerabilities, on 30-01-2020 01:15:14.
2020-01-30 09:54:24
125.161.107.59 attackbots
1580101077 - 01/27/2020 05:57:57 Host: 125.161.107.59/125.161.107.59 Port: 445 TCP Blocked
2020-01-27 13:04:14
125.161.107.121 attack
Unauthorized connection attempt detected from IP address 125.161.107.121 to port 445
2020-01-20 14:24:44
125.161.107.150 attackspam
Unauthorized connection attempt detected from IP address 125.161.107.150 to port 23 [J]
2020-01-18 14:47:39
125.161.107.13 attackspam
Attempt to attack host OS, exploiting network vulnerabilities, on 14-01-2020 13:05:16.
2020-01-14 21:12:29
125.161.107.26 attack
1578631909 - 01/10/2020 05:51:49 Host: 125.161.107.26/125.161.107.26 Port: 445 TCP Blocked
2020-01-10 17:19:42
125.161.107.202 attack
1576421456 - 12/15/2019 15:50:56 Host: 125.161.107.202/125.161.107.202 Port: 445 TCP Blocked
2019-12-16 02:09:20
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 125.161.107.193
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 24705
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;125.161.107.193.		IN	A

;; AUTHORITY SECTION:
.			219	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020011400 1800 900 604800 86400

;; Query time: 115 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jan 14 14:10:04 CST 2020
;; MSG SIZE  rcvd: 119
HOST信息:
193.107.161.125.in-addr.arpa domain name pointer 193.subnet125-161-107.speedy.telkom.net.id.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
193.107.161.125.in-addr.arpa	name = 193.subnet125-161-107.speedy.telkom.net.id.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
213.147.98.196 attackspam
Trying to (more than 3 packets) bruteforce (not open) telnet port 23
2019-10-27 15:57:20
222.223.51.148 attackspam
10/27/2019-04:51:54.784280 222.223.51.148 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433
2019-10-27 15:55:54
110.81.203.18 attackspam
/data/admin/allowurl.txt
2019-10-27 15:58:18
80.82.70.239 attack
Scanning (more than 2 packets) random ports - tries to find possible vulnerable services
2019-10-27 16:11:13
211.110.140.200 attackbotsspam
Oct 27 04:36:26 ws22vmsma01 sshd[222119]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.110.140.200
Oct 27 04:36:28 ws22vmsma01 sshd[222119]: Failed password for invalid user postgres from 211.110.140.200 port 48194 ssh2
...
2019-10-27 15:36:55
36.155.114.198 attackbots
Oct 27 08:58:30 www5 sshd\[54467\]: Invalid user qwerty from 36.155.114.198
Oct 27 08:58:30 www5 sshd\[54467\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.155.114.198
Oct 27 08:58:32 www5 sshd\[54467\]: Failed password for invalid user qwerty from 36.155.114.198 port 36540 ssh2
...
2019-10-27 16:06:53
106.12.202.181 attackbotsspam
$f2bV_matches
2019-10-27 16:10:58
80.211.43.205 attackspambots
$f2bV_matches
2019-10-27 15:38:26
117.121.214.50 attack
IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/117.121.214.50/ 
 
 TH - 1H : (20)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : TH 
 NAME ASN : ASN38794 
 
 IP : 117.121.214.50 
 
 CIDR : 117.121.214.0/24 
 
 PREFIX COUNT : 167 
 
 UNIQUE IP COUNT : 67840 
 
 
 ATTACKS DETECTED ASN38794 :  
  1H - 1 
  3H - 1 
  6H - 1 
 12H - 1 
 24H - 1 
 
 DateTime : 2019-10-27 06:26:38 
 
 INFO : Port SSH 22 Scan Detected and Blocked by ADMIN  - data recovery
2019-10-27 16:13:37
222.186.169.194 attackspambots
Oct 27 08:46:48 fr01 sshd[21187]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.169.194  user=root
Oct 27 08:46:50 fr01 sshd[21187]: Failed password for root from 222.186.169.194 port 15024 ssh2
...
2019-10-27 15:52:34
177.69.213.236 attackbots
2019-10-27T04:48:08.005963lon01.zurich-datacenter.net sshd\[15869\]: Invalid user Martti from 177.69.213.236 port 47942
2019-10-27T04:48:08.014117lon01.zurich-datacenter.net sshd\[15869\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.69.213.236
2019-10-27T04:48:10.247306lon01.zurich-datacenter.net sshd\[15869\]: Failed password for invalid user Martti from 177.69.213.236 port 47942 ssh2
2019-10-27T04:52:21.299748lon01.zurich-datacenter.net sshd\[15974\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.69.213.236  user=root
2019-10-27T04:52:23.598239lon01.zurich-datacenter.net sshd\[15974\]: Failed password for root from 177.69.213.236 port 57820 ssh2
...
2019-10-27 15:41:37
165.22.189.217 attackspambots
Oct 27 10:45:35 itv-usvr-01 sshd[13627]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.189.217  user=root
Oct 27 10:45:38 itv-usvr-01 sshd[13627]: Failed password for root from 165.22.189.217 port 54406 ssh2
Oct 27 10:48:57 itv-usvr-01 sshd[13713]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.189.217  user=root
Oct 27 10:48:59 itv-usvr-01 sshd[13713]: Failed password for root from 165.22.189.217 port 34846 ssh2
Oct 27 10:52:19 itv-usvr-01 sshd[13862]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.189.217  user=root
Oct 27 10:52:21 itv-usvr-01 sshd[13862]: Failed password for root from 165.22.189.217 port 43518 ssh2
2019-10-27 15:43:55
185.196.118.119 attack
Oct 27 07:56:07 lnxweb62 sshd[20270]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.196.118.119
2019-10-27 15:57:36
43.252.36.98 attack
Oct 27 03:51:07 debian sshd\[7138\]: Invalid user usuario from 43.252.36.98 port 49502
Oct 27 03:51:07 debian sshd\[7138\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.252.36.98
Oct 27 03:51:09 debian sshd\[7138\]: Failed password for invalid user usuario from 43.252.36.98 port 49502 ssh2
...
2019-10-27 16:08:46
91.183.90.237 attackbotsspam
Automatic report - Banned IP Access
2019-10-27 15:36:27

最近上报的IP列表

190.199.161.120 61.153.223.98 218.102.236.226 112.133.246.90
77.240.172.72 115.144.186.229 178.44.134.184 213.6.54.67
124.6.166.67 220.132.168.22 200.87.51.75 36.68.202.141
220.132.225.213 218.35.44.178 218.7.19.244 191.7.216.114
190.52.182.120 129.215.57.100 190.2.102.140 189.189.175.161