必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Indonesia

运营商(isp): PT Telkom Indonesia

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
类型 评论内容 时间
attack
firewall-block, port(s): 445/tcp
2019-09-12 19:14:41
相同子网IP讨论:
IP 类型 评论内容 时间
125.161.107.87 attackbotsspam
Unauthorized IMAP connection attempt
2020-06-09 02:00:07
125.161.107.49 attack
Invalid user r00t from 125.161.107.49 port 9894
2020-05-23 16:50:54
125.161.107.154 attackbotsspam
20/5/6@08:00:31: FAIL: Alarm-Network address from=125.161.107.154
20/5/6@08:00:31: FAIL: Alarm-Network address from=125.161.107.154
...
2020-05-06 23:13:15
125.161.107.122 attack
Attempt to attack host OS, exploiting network vulnerabilities, on 13-04-2020 18:20:08.
2020-04-14 02:18:13
125.161.107.22 attackspam
Unauthorized connection attempt from IP address 125.161.107.22 on Port 445(SMB)
2020-03-28 20:36:59
125.161.107.139 attack
Honeypot attack, port: 445, PTR: 139.subnet125-161-107.speedy.telkom.net.id.
2020-03-05 03:15:39
125.161.107.85 attack
Unauthorized connection attempt from IP address 125.161.107.85 on Port 445(SMB)
2020-02-24 18:44:21
125.161.107.150 attackbotsspam
Honeypot attack, port: 445, PTR: 150.subnet125-161-107.speedy.telkom.net.id.
2020-02-20 17:14:21
125.161.107.11 attackbots
Attempt to attack host OS, exploiting network vulnerabilities, on 30-01-2020 01:15:14.
2020-01-30 09:54:24
125.161.107.59 attackbots
1580101077 - 01/27/2020 05:57:57 Host: 125.161.107.59/125.161.107.59 Port: 445 TCP Blocked
2020-01-27 13:04:14
125.161.107.121 attack
Unauthorized connection attempt detected from IP address 125.161.107.121 to port 445
2020-01-20 14:24:44
125.161.107.150 attackspam
Unauthorized connection attempt detected from IP address 125.161.107.150 to port 23 [J]
2020-01-18 14:47:39
125.161.107.13 attackspam
Attempt to attack host OS, exploiting network vulnerabilities, on 14-01-2020 13:05:16.
2020-01-14 21:12:29
125.161.107.193 attackbots
Unauthorized connection attempt from IP address 125.161.107.193 on Port 445(SMB)
2020-01-14 14:10:08
125.161.107.26 attack
1578631909 - 01/10/2020 05:51:49 Host: 125.161.107.26/125.161.107.26 Port: 445 TCP Blocked
2020-01-10 17:19:42
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 125.161.107.20
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11609
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;125.161.107.20.			IN	A

;; AUTHORITY SECTION:
.			1724	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019091200 1800 900 604800 86400

;; Query time: 1 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Thu Sep 12 19:14:27 CST 2019
;; MSG SIZE  rcvd: 118
HOST信息:
20.107.161.125.in-addr.arpa domain name pointer 20.subnet125-161-107.speedy.telkom.net.id.
NSLOOKUP信息:
Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
20.107.161.125.in-addr.arpa	name = 20.subnet125-161-107.speedy.telkom.net.id.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
5.196.72.58 attackbotsspam
Jun 29 08:31:40 cac1d2 sshd\[31880\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.196.72.58  user=root
Jun 29 08:31:41 cac1d2 sshd\[31880\]: Failed password for root from 5.196.72.58 port 36356 ssh2
Jun 29 11:46:26 cac1d2 sshd\[23207\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.196.72.58  user=root
...
2019-06-30 02:55:39
198.211.118.157 attackbotsspam
Invalid user jie from 198.211.118.157 port 52278
2019-06-30 02:27:58
124.158.4.235 attack
Sql/code injection probe
2019-06-30 02:35:28
191.53.58.37 attack
$f2bV_matches
2019-06-30 02:49:54
189.113.219.217 attack
" "
2019-06-30 02:52:56
95.180.141.30 attackbotsspam
Attempted SSH login
2019-06-30 02:38:55
51.38.179.143 attackspam
2019-06-29T18:22:00.780265abusebot-2.cloudsearch.cf sshd\[13236\]: Invalid user test from 51.38.179.143 port 49666
2019-06-30 02:39:50
67.245.146.49 attackbotsspam
Jun 29 20:38:14 itv-usvr-01 sshd[32565]: Invalid user tomcat from 67.245.146.49
Jun 29 20:38:14 itv-usvr-01 sshd[32565]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=67.245.146.49
Jun 29 20:38:14 itv-usvr-01 sshd[32565]: Invalid user tomcat from 67.245.146.49
Jun 29 20:38:16 itv-usvr-01 sshd[32565]: Failed password for invalid user tomcat from 67.245.146.49 port 40353 ssh2
Jun 29 20:48:00 itv-usvr-01 sshd[566]: Invalid user csgoserver from 67.245.146.49
2019-06-30 02:28:58
51.38.37.223 attackspam
Jun 29 18:12:34 vps691689 sshd[9313]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.37.223
Jun 29 18:12:36 vps691689 sshd[9313]: Failed password for invalid user ftpuser from 51.38.37.223 port 41762 ssh2
...
2019-06-30 02:36:09
54.186.237.233 attackbotsspam
2019-06-29T10:46:14.993283scmdmz1 sshd\[9966\]: Invalid user monit from 54.186.237.233 port 53060
2019-06-29T10:46:14.997961scmdmz1 sshd\[9966\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ec2-54-186-237-233.us-west-2.compute.amazonaws.com
2019-06-29T10:46:16.868940scmdmz1 sshd\[9966\]: Failed password for invalid user monit from 54.186.237.233 port 53060 ssh2
...
2019-06-30 02:53:16
37.187.115.201 attackspambots
2019-06-29T18:12:01.667640abusebot-8.cloudsearch.cf sshd\[31777\]: Invalid user tan from 37.187.115.201 port 55744
2019-06-30 03:03:53
220.128.109.148 attack
SSH Bruteforce Attack
2019-06-30 03:10:27
37.128.144.184 attackbotsspam
WP Authentication failure
2019-06-30 02:33:41
45.40.204.132 attackbotsspam
Jun 29 14:03:32 lnxmysql61 sshd[11784]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.40.204.132
Jun 29 14:03:32 lnxmysql61 sshd[11784]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.40.204.132
2019-06-30 02:58:07
122.228.19.79 attack
29.06.2019 15:08:14 POP3s access blocked by firewall
2019-06-30 02:38:31

最近上报的IP列表

217.252.138.113 195.70.213.29 145.203.207.77 99.198.47.215
215.2.34.233 51.91.10.217 36.67.116.123 59.126.174.228
116.98.219.152 174.31.252.16 33.151.237.241 152.230.78.40
122.5.199.145 109.44.30.238 197.132.98.237 201.166.185.207
143.123.26.35 220.229.206.219 40.92.235.202 201.157.202.138