必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Indonesia

运营商(isp): PT Telkom Indonesia

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
类型 评论内容 时间
attackspam
Unauthorized connection attempt from IP address 125.161.138.219 on Port 445(SMB)
2020-08-19 20:28:25
相同子网IP讨论:
IP 类型 评论内容 时间
125.161.138.123 attackspambots
Unauthorized connection attempt from IP address 125.161.138.123 on Port 445(SMB)
2020-07-25 02:26:04
125.161.138.239 attackspam
Unauthorized connection attempt from IP address 125.161.138.239 on Port 445(SMB)
2020-04-01 19:57:24
125.161.138.184 attackbotsspam
20/2/2@23:54:59: FAIL: Alarm-Network address from=125.161.138.184
20/2/2@23:54:59: FAIL: Alarm-Network address from=125.161.138.184
...
2020-02-03 13:17:28
125.161.138.24 attackbotsspam
Honeypot attack, port: 445, PTR: 24.subnet125-161-138.speedy.telkom.net.id.
2020-01-28 19:07:37
125.161.138.47 attack
unauthorized connection attempt
2020-01-22 20:42:58
125.161.138.4 attackspam
Unauthorised access (Dec 26) SRC=125.161.138.4 LEN=52 TTL=117 ID=19472 DF TCP DPT=445 WINDOW=8192 SYN
2019-12-26 18:35:13
125.161.138.86 attackspambots
1576909573 - 12/21/2019 07:26:13 Host: 125.161.138.86/125.161.138.86 Port: 445 TCP Blocked
2019-12-21 18:38:20
125.161.138.119 attackbotsspam
$f2bV_matches
2019-11-28 17:23:16
125.161.138.50 attackbots
Attempt to attack host OS, exploiting network vulnerabilities, on 19-09-2019 11:51:21.
2019-09-20 00:16:07
125.161.138.50 attack
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-22 03:01:12,439 INFO [amun_request_handler] PortScan Detected on Port: 445 (125.161.138.50)
2019-07-22 15:33:37
125.161.138.190 attack
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-18 08:48:30,794 INFO [amun_request_handler] PortScan Detected on Port: 445 (125.161.138.190)
2019-07-19 05:03:44
125.161.138.188 attackbotsspam
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-03 09:04:06,699 INFO [shellcode_manager] (125.161.138.188) no match, writing hexdump (4d0d6cea53e8cad65547464990b8562c :2116803) - MS17010 (EternalBlue)
2019-07-04 19:56:54
125.161.138.102 attackbots
Jun 24 12:59:26 *** sshd[22400]: reveeclipse mapping checking getaddrinfo for 102.subnet125-161-138.speedy.telkom.net.id [125.161.138.102] failed - POSSIBLE BREAK-IN ATTEMPT!
Jun 24 12:59:26 *** sshd[22400]: Invalid user 2 from 125.161.138.102
Jun 24 12:59:26 *** sshd[22400]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.161.138.102
Jun 24 12:59:28 *** sshd[22400]: Failed password for invalid user 2 from 125.161.138.102 port 42626 ssh2
Jun 24 12:59:28 *** sshd[22400]: Received disconnect from 125.161.138.102: 11: Bye Bye [preauth]
Jun 24 13:03:57 *** sshd[22481]: reveeclipse mapping checking getaddrinfo for 102.subnet125-161-138.speedy.telkom.net.id [125.161.138.102] failed - POSSIBLE BREAK-IN ATTEMPT!
Jun 24 13:03:57 *** sshd[22481]: Invalid user terraria from 125.161.138.102
Jun 24 13:03:57 *** sshd[22481]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.161.138.102


........
------------------------------------------
2019-06-27 11:03:33
125.161.138.102 attackbotsspam
Jun 24 12:59:26 *** sshd[22400]: reveeclipse mapping checking getaddrinfo for 102.subnet125-161-138.speedy.telkom.net.id [125.161.138.102] failed - POSSIBLE BREAK-IN ATTEMPT!
Jun 24 12:59:26 *** sshd[22400]: Invalid user 2 from 125.161.138.102
Jun 24 12:59:26 *** sshd[22400]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.161.138.102
Jun 24 12:59:28 *** sshd[22400]: Failed password for invalid user 2 from 125.161.138.102 port 42626 ssh2
Jun 24 12:59:28 *** sshd[22400]: Received disconnect from 125.161.138.102: 11: Bye Bye [preauth]
Jun 24 13:03:57 *** sshd[22481]: reveeclipse mapping checking getaddrinfo for 102.subnet125-161-138.speedy.telkom.net.id [125.161.138.102] failed - POSSIBLE BREAK-IN ATTEMPT!
Jun 24 13:03:57 *** sshd[22481]: Invalid user terraria from 125.161.138.102
Jun 24 13:03:57 *** sshd[22481]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.161.138.102


........
------------------------------------------
2019-06-26 01:52:15
125.161.138.102 attackbotsspam
Jun 24 12:59:26 *** sshd[22400]: reveeclipse mapping checking getaddrinfo for 102.subnet125-161-138.speedy.telkom.net.id [125.161.138.102] failed - POSSIBLE BREAK-IN ATTEMPT!
Jun 24 12:59:26 *** sshd[22400]: Invalid user 2 from 125.161.138.102
Jun 24 12:59:26 *** sshd[22400]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.161.138.102
Jun 24 12:59:28 *** sshd[22400]: Failed password for invalid user 2 from 125.161.138.102 port 42626 ssh2
Jun 24 12:59:28 *** sshd[22400]: Received disconnect from 125.161.138.102: 11: Bye Bye [preauth]
Jun 24 13:03:57 *** sshd[22481]: reveeclipse mapping checking getaddrinfo for 102.subnet125-161-138.speedy.telkom.net.id [125.161.138.102] failed - POSSIBLE BREAK-IN ATTEMPT!
Jun 24 13:03:57 *** sshd[22481]: Invalid user terraria from 125.161.138.102
Jun 24 13:03:57 *** sshd[22481]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.161.138.102


........
------------------------------------------
2019-06-24 21:48:39
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 125.161.138.219
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 63781
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;125.161.138.219.		IN	A

;; AUTHORITY SECTION:
.			328	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020081900 1800 900 604800 86400

;; Query time: 46 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Aug 19 20:28:19 CST 2020
;; MSG SIZE  rcvd: 119
HOST信息:
219.138.161.125.in-addr.arpa domain name pointer 219.subnet125-161-138.speedy.telkom.net.id.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
219.138.161.125.in-addr.arpa	name = 219.subnet125-161-138.speedy.telkom.net.id.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
165.22.60.7 attackspam
Mar 26 15:09:10 DAAP sshd[26942]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.60.7  user=root
Mar 26 15:09:12 DAAP sshd[26942]: Failed password for root from 165.22.60.7 port 24860 ssh2
Mar 26 15:13:00 DAAP sshd[27073]: Invalid user postgres from 165.22.60.7 port 45788
Mar 26 15:13:00 DAAP sshd[27073]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.60.7
Mar 26 15:13:00 DAAP sshd[27073]: Invalid user postgres from 165.22.60.7 port 45788
Mar 26 15:13:02 DAAP sshd[27073]: Failed password for invalid user postgres from 165.22.60.7 port 45788 ssh2
...
2020-03-27 00:31:53
80.211.8.82 attackbotsspam
Mar 26 16:42:35 vps sshd[209265]: Failed password for invalid user staufenbiel from 80.211.8.82 port 43996 ssh2
Mar 26 16:46:30 vps sshd[231150]: Invalid user ivana from 80.211.8.82 port 55824
Mar 26 16:46:30 vps sshd[231150]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.8.82
Mar 26 16:46:32 vps sshd[231150]: Failed password for invalid user ivana from 80.211.8.82 port 55824 ssh2
Mar 26 16:50:42 vps sshd[253897]: Invalid user eleva from 80.211.8.82 port 39420
...
2020-03-27 00:06:33
110.53.234.113 attackbots
ICMP MH Probe, Scan /Distributed -
2020-03-26 23:57:57
51.255.35.58 attackspambots
[ssh] SSH attack
2020-03-26 23:37:49
139.59.180.53 attackspam
Mar 26 17:06:43 pornomens sshd\[8256\]: Invalid user postgres from 139.59.180.53 port 37138
Mar 26 17:06:43 pornomens sshd\[8256\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.180.53
Mar 26 17:06:46 pornomens sshd\[8256\]: Failed password for invalid user postgres from 139.59.180.53 port 37138 ssh2
...
2020-03-27 00:13:41
222.88.210.129 attackbotsspam
Mar 26 13:21:33 vps339862 kernel: \[4444209.184132\] \[iptables\] PORT DENIED: IN=eth0 OUT= MAC=fa:16:3e:65:a1:f6:06:39:8f:aa:3b:a2:08:00 SRC=222.88.210.129 DST=51.254.206.43 LEN=40 TOS=0x00 PREC=0x00 TTL=45 ID=63496 PROTO=TCP SPT=42457 DPT=23 SEQ=872336939 ACK=0 WINDOW=48833 RES=0x00 SYN URGP=0 
Mar 26 13:21:34 vps339862 kernel: \[4444209.644951\] \[iptables\] PORT DENIED: IN=eth0 OUT= MAC=fa:16:3e:65:a1:f6:06:39:8f:aa:3b:a2:08:00 SRC=222.88.210.129 DST=51.254.206.43 LEN=40 TOS=0x00 PREC=0x00 TTL=45 ID=63496 PROTO=TCP SPT=42457 DPT=23 SEQ=872336939 ACK=0 WINDOW=48833 RES=0x00 SYN URGP=0 
Mar 26 13:21:49 vps339862 kernel: \[4444224.564531\] \[iptables\] PORT DENIED: IN=eth0 OUT= MAC=fa:16:3e:65:a1:f6:06:39:8f:aa:3b:a2:08:00 SRC=222.88.210.129 DST=51.254.206.43 LEN=40 TOS=0x00 PREC=0x00 TTL=45 ID=63496 PROTO=TCP SPT=42457 DPT=23 SEQ=872336939 ACK=0 WINDOW=48833 RES=0x00 SYN URGP=0 
Mar 26 13:23:28 vps339862 kernel: \[4444323.879673\] \[iptables\] PORT DENIED: IN=eth0 OUT= MAC=fa:16:3e:6
...
2020-03-27 00:14:55
82.221.131.5 attack
Automatic report - Banned IP Access
2020-03-26 23:58:17
81.247.141.53 attackspam
(sshd) Failed SSH login from 81.247.141.53 (BE/Belgium/53.141-247-81.adsl-dyn.isp.belgacom.be): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Mar 26 13:23:21 ubnt-55d23 sshd[11049]: Invalid user test from 81.247.141.53 port 44664
Mar 26 13:23:24 ubnt-55d23 sshd[11049]: Failed password for invalid user test from 81.247.141.53 port 44664 ssh2
2020-03-27 00:21:20
181.197.64.77 attack
B: Abusive ssh attack
2020-03-26 23:53:24
83.97.20.49 attack
Unauthorized connection attempt detected from IP address 83.97.20.49 to port 8443
2020-03-27 00:25:19
218.78.48.37 attackbotsspam
Brute force acceess on sshd
2020-03-27 00:16:43
37.123.163.106 attackbots
Mar 26 15:36:13 ift sshd\[42014\]: Invalid user csr1dev from 37.123.163.106Mar 26 15:36:15 ift sshd\[42014\]: Failed password for invalid user csr1dev from 37.123.163.106 port 55858 ssh2Mar 26 15:39:52 ift sshd\[42323\]: Invalid user qj from 37.123.163.106Mar 26 15:39:53 ift sshd\[42323\]: Failed password for invalid user qj from 37.123.163.106 port 55858 ssh2Mar 26 15:43:24 ift sshd\[42905\]: Invalid user jo from 37.123.163.106
...
2020-03-26 23:44:06
157.230.54.248 attackspam
$f2bV_matches
2020-03-26 23:59:41
107.155.58.145 attack
ICMP MH Probe, Scan /Distributed -
2020-03-27 00:12:27
51.91.251.20 attackbots
leo_www
2020-03-27 00:11:46

最近上报的IP列表

22.9.113.36 227.82.23.97 36.235.141.25 56.233.232.111
92.113.230.247 176.175.188.51 86.187.89.48 180.242.235.244
45.59.176.166 94.21.137.194 176.194.110.93 107.180.120.51
185.227.213.152 37.126.19.250 131.86.57.192 212.75.238.96
101.93.174.120 244.157.140.244 181.160.41.75 34.184.252.97