城市(city): Jakarta
省份(region): Jakarta
国家(country): Indonesia
运营商(isp): Esia
主机名(hostname): unknown
机构(organization): PT Telekomunikasi Indonesia
使用类型(Usage Type): unknown
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 125.161.139.27 | attack | Icarus honeypot on github |
2020-09-01 06:54:06 |
| 125.161.139.88 | attackbotsspam | Aug 15 07:12:11 cdc sshd[29247]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.161.139.88 user=pi Aug 15 07:12:13 cdc sshd[29247]: Failed password for invalid user pi from 125.161.139.88 port 2779 ssh2 |
2020-08-15 15:30:28 |
| 125.161.139.28 | attack | Unauthorized connection attempt from IP address 125.161.139.28 on Port 445(SMB) |
2020-08-11 02:58:14 |
| 125.161.139.239 | attackspam | 1593740866 - 07/03/2020 03:47:46 Host: 125.161.139.239/125.161.139.239 Port: 445 TCP Blocked |
2020-07-04 01:59:32 |
| 125.161.139.52 | attackbots | 125.161.139.52 - - \[26/Apr/2020:05:00:00 -0700\] "POST /index.php/admin/ HTTP/1.1" 404 20411125.161.139.52 - - \[26/Apr/2020:05:00:00 -0700\] "POST /index.php/admin/index/ HTTP/1.1" 404 20435125.161.139.52 - - \[26/Apr/2020:05:00:01 -0700\] "POST /index.php/admin/sales_order/ HTTP/1.1" 404 20459 ... |
2020-04-27 02:08:51 |
| 125.161.139.30 | attack | Honeypot attack, port: 445, PTR: 30.subnet125-161-139.speedy.telkom.net.id. |
2020-02-27 22:06:28 |
| 125.161.139.90 | attackspam | 1581396504 - 02/11/2020 05:48:24 Host: 125.161.139.90/125.161.139.90 Port: 445 TCP Blocked |
2020-02-11 20:55:44 |
| 125.161.139.52 | attackspambots | 1579868924 - 01/24/2020 13:28:44 Host: 125.161.139.52/125.161.139.52 Port: 445 TCP Blocked |
2020-01-25 04:52:34 |
| 125.161.139.148 | attackbotsspam | Invalid user pi from 125.161.139.148 port 50862 |
2019-11-20 02:43:52 |
| 125.161.139.42 | attackspambots | Attempt to attack host OS, exploiting network vulnerabilities, on 18-10-2019 12:45:23. |
2019-10-18 19:55:10 |
| 125.161.139.248 | attackbotsspam | Attempt to attack host OS, exploiting network vulnerabilities, on 12-10-2019 15:15:18. |
2019-10-13 00:17:17 |
| 125.161.139.2 | attackspambots | Unauthorized connection attempt from IP address 125.161.139.2 on Port 445(SMB) |
2019-10-06 01:35:11 |
| 125.161.139.240 | attackspambots | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-09-12 03:50:48,625 INFO [amun_request_handler] PortScan Detected on Port: 445 (125.161.139.240) |
2019-09-12 13:48:54 |
| 125.161.139.215 | attackbots | Sep 9 22:32:53 srv206 sshd[13747]: Invalid user tomcat from 125.161.139.215 ... |
2019-09-10 05:18:01 |
| 125.161.139.58 | attackspam | Unauthorized connection attempt from IP address 125.161.139.58 on Port 445(SMB) |
2019-09-09 18:57:15 |
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 125.161.139.139
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 51949
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;125.161.139.139. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019040101 1800 900 604800 86400
;; Query time: 2 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Tue Apr 02 08:15:46 +08 2019
;; MSG SIZE rcvd: 119
139.139.161.125.in-addr.arpa domain name pointer 139.subnet125-161-139.speedy.telkom.net.id.
Server: 67.207.67.3
Address: 67.207.67.3#53
Non-authoritative answer:
139.139.161.125.in-addr.arpa name = 139.subnet125-161-139.speedy.telkom.net.id.
Authoritative answers can be found from:
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 192.99.28.247 | attack | Jun 29 19:03:57 unicornsoft sshd\[7956\]: Invalid user kettle from 192.99.28.247 Jun 29 19:03:57 unicornsoft sshd\[7956\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.99.28.247 Jun 29 19:04:00 unicornsoft sshd\[7956\]: Failed password for invalid user kettle from 192.99.28.247 port 51106 ssh2 |
2019-06-30 03:51:23 |
| 189.69.244.133 | attackspam | Unauthorized connection attempt from IP address 189.69.244.133 on Port 445(SMB) |
2019-06-30 03:47:43 |
| 188.170.192.108 | attack | Unauthorized connection attempt from IP address 188.170.192.108 on Port 445(SMB) |
2019-06-30 04:15:47 |
| 106.46.169.12 | attack | Unauthorized connection attempt from IP address 106.46.169.12 on Port 445(SMB) |
2019-06-30 03:49:42 |
| 142.93.39.181 | attackspam | Jun 29 20:18:50 debian sshd\[23234\]: Invalid user admin from 142.93.39.181 port 56268 Jun 29 20:18:50 debian sshd\[23234\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.39.181 ... |
2019-06-30 03:34:25 |
| 180.250.111.17 | attackspam | web-1 [ssh] SSH Attack |
2019-06-30 03:39:27 |
| 188.165.242.200 | attack | Triggered by Fail2Ban at Ares web server |
2019-06-30 04:11:50 |
| 140.143.230.233 | attackbotsspam | Jun 29 20:15:49 mail sshd\[24213\]: Failed password for invalid user varza from 140.143.230.233 port 36116 ssh2 Jun 29 20:31:26 mail sshd\[24363\]: Invalid user zabbix from 140.143.230.233 port 52510 Jun 29 20:31:26 mail sshd\[24363\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.230.233 ... |
2019-06-30 03:31:34 |
| 92.118.37.86 | attackbotsspam | Multiport scan : 41 ports scanned 41 71 81 221 751 921 1061 1131 1271 1691 2391 3151 3251 3601 3691 3831 3881 4461 4471 4741 4901 4951 5631 5701 5851 5921 6621 6761 6871 6971 7081 7281 7331 7461 7601 7691 7911 8001 8571 8641 9361 |
2019-06-30 03:53:04 |
| 187.226.162.58 | attackbots | Unauthorized connection attempt from IP address 187.226.162.58 on Port 445(SMB) |
2019-06-30 03:48:13 |
| 97.74.237.173 | attackbotsspam | xmlrpc attack |
2019-06-30 03:33:53 |
| 103.52.52.23 | attackspam | Jun 29 22:04:00 srv-4 sshd\[29044\]: Invalid user uc from 103.52.52.23 Jun 29 22:04:00 srv-4 sshd\[29044\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.52.52.23 Jun 29 22:04:02 srv-4 sshd\[29044\]: Failed password for invalid user uc from 103.52.52.23 port 46986 ssh2 ... |
2019-06-30 03:48:45 |
| 36.85.88.180 | attackspam | Unauthorized connection attempt from IP address 36.85.88.180 on Port 445(SMB) |
2019-06-30 03:41:45 |
| 95.58.194.143 | attackspam | (sshd) Failed SSH login from 95.58.194.143 (95.58.194.143.megaline.telecom.kz): 5 in the last 3600 secs |
2019-06-30 04:13:35 |
| 106.12.78.102 | attack | Jun 29 21:20:19 SilenceServices sshd[27584]: Failed password for root from 106.12.78.102 port 60416 ssh2 Jun 29 21:22:09 SilenceServices sshd[28727]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.78.102 Jun 29 21:22:12 SilenceServices sshd[28727]: Failed password for invalid user admin from 106.12.78.102 port 60548 ssh2 |
2019-06-30 03:35:11 |