必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Indonesia

运营商(isp): PT Telkom Indonesia

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
类型 评论内容 时间
attackspambots
Unauthorized connection attempt from IP address 125.161.139.2 on Port 445(SMB)
2019-10-06 01:35:11
相同子网IP讨论:
IP 类型 评论内容 时间
125.161.139.27 attack
Icarus honeypot on github
2020-09-01 06:54:06
125.161.139.88 attackbotsspam
Aug 15 07:12:11 cdc sshd[29247]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.161.139.88  user=pi
Aug 15 07:12:13 cdc sshd[29247]: Failed password for invalid user pi from 125.161.139.88 port 2779 ssh2
2020-08-15 15:30:28
125.161.139.28 attack
Unauthorized connection attempt from IP address 125.161.139.28 on Port 445(SMB)
2020-08-11 02:58:14
125.161.139.239 attackspam
1593740866 - 07/03/2020 03:47:46 Host: 125.161.139.239/125.161.139.239 Port: 445 TCP Blocked
2020-07-04 01:59:32
125.161.139.52 attackbots
125.161.139.52 - - \[26/Apr/2020:05:00:00 -0700\] "POST /index.php/admin/ HTTP/1.1" 404 20411125.161.139.52 - - \[26/Apr/2020:05:00:00 -0700\] "POST /index.php/admin/index/ HTTP/1.1" 404 20435125.161.139.52 - - \[26/Apr/2020:05:00:01 -0700\] "POST /index.php/admin/sales_order/ HTTP/1.1" 404 20459
...
2020-04-27 02:08:51
125.161.139.30 attack
Honeypot attack, port: 445, PTR: 30.subnet125-161-139.speedy.telkom.net.id.
2020-02-27 22:06:28
125.161.139.90 attackspam
1581396504 - 02/11/2020 05:48:24 Host: 125.161.139.90/125.161.139.90 Port: 445 TCP Blocked
2020-02-11 20:55:44
125.161.139.52 attackspambots
1579868924 - 01/24/2020 13:28:44 Host: 125.161.139.52/125.161.139.52 Port: 445 TCP Blocked
2020-01-25 04:52:34
125.161.139.148 attackbotsspam
Invalid user pi from 125.161.139.148 port 50862
2019-11-20 02:43:52
125.161.139.42 attackspambots
Attempt to attack host OS, exploiting network vulnerabilities, on 18-10-2019 12:45:23.
2019-10-18 19:55:10
125.161.139.248 attackbotsspam
Attempt to attack host OS, exploiting network vulnerabilities, on 12-10-2019 15:15:18.
2019-10-13 00:17:17
125.161.139.240 attackspambots
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-09-12 03:50:48,625 INFO [amun_request_handler] PortScan Detected on Port: 445 (125.161.139.240)
2019-09-12 13:48:54
125.161.139.215 attackbots
Sep  9 22:32:53 srv206 sshd[13747]: Invalid user tomcat from 125.161.139.215
...
2019-09-10 05:18:01
125.161.139.58 attackspam
Unauthorized connection attempt from IP address 125.161.139.58 on Port 445(SMB)
2019-09-09 18:57:15
125.161.139.167 attackbotsspam
Honeypot attack, port: 445, PTR: 167.subnet125-161-139.speedy.telkom.net.id.
2019-08-24 22:41:34
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 125.161.139.2
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 25839
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;125.161.139.2.			IN	A

;; AUTHORITY SECTION:
.			258	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019100500 1800 900 604800 86400

;; Query time: 75 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Oct 06 01:35:08 CST 2019
;; MSG SIZE  rcvd: 117
HOST信息:
2.139.161.125.in-addr.arpa domain name pointer 2.subnet125-161-139.speedy.telkom.net.id.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
2.139.161.125.in-addr.arpa	name = 2.subnet125-161-139.speedy.telkom.net.id.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
89.37.143.6 attack
Automatic report - XMLRPC Attack
2019-10-15 21:24:48
124.66.144.114 attackbotsspam
Oct 15 13:23:23 ns341937 sshd[13662]: Failed password for root from 124.66.144.114 port 46282 ssh2
Oct 15 13:40:29 ns341937 sshd[18917]: Failed password for root from 124.66.144.114 port 37360 ssh2
...
2019-10-15 21:32:32
75.31.93.181 attack
Oct 15 11:41:11 game-panel sshd[7604]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=75.31.93.181
Oct 15 11:41:12 game-panel sshd[7604]: Failed password for invalid user sjt from 75.31.93.181 port 36388 ssh2
Oct 15 11:45:18 game-panel sshd[7748]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=75.31.93.181
2019-10-15 21:27:59
213.32.20.107 attackbots
Automatic report - XMLRPC Attack
2019-10-15 21:13:32
211.193.13.111 attack
Oct 15 15:04:16 vps647732 sshd[9578]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.193.13.111
Oct 15 15:04:18 vps647732 sshd[9578]: Failed password for invalid user freeswitch from 211.193.13.111 port 48934 ssh2
...
2019-10-15 21:30:27
194.126.182.131 attackspam
10/15/2019-13:45:06.405110 194.126.182.131 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433
2019-10-15 21:35:03
59.145.221.103 attackbotsspam
Oct 15 15:28:40 SilenceServices sshd[14948]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.145.221.103
Oct 15 15:28:42 SilenceServices sshd[14948]: Failed password for invalid user kara from 59.145.221.103 port 47182 ssh2
Oct 15 15:33:56 SilenceServices sshd[16355]: Failed password for root from 59.145.221.103 port 38374 ssh2
2019-10-15 21:48:24
122.167.81.85 attackbotsspam
Oct 15 07:29:58 ntp sshd[4528]: Invalid user pi from 122.167.81.85
Oct 15 07:29:59 ntp sshd[4528]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.167.81.85
Oct 15 07:29:59 ntp sshd[4529]: Invalid user pi from 122.167.81.85
Oct 15 07:29:59 ntp sshd[4529]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.167.81.85
Oct 15 07:30:01 ntp sshd[4528]: Failed password for invalid user pi from 122.167.81.85 port 50136 ssh2

........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=122.167.81.85
2019-10-15 21:45:47
118.144.155.254 attackspam
2019-10-15T12:46:23.451418abusebot-5.cloudsearch.cf sshd\[5775\]: Invalid user rowland from 118.144.155.254 port 48533
2019-10-15 21:14:42
43.242.125.185 attackspambots
Oct 15 14:40:20 bouncer sshd\[10201\]: Invalid user mysql from 43.242.125.185 port 59183
Oct 15 14:40:20 bouncer sshd\[10201\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.242.125.185 
Oct 15 14:40:22 bouncer sshd\[10201\]: Failed password for invalid user mysql from 43.242.125.185 port 59183 ssh2
...
2019-10-15 21:19:36
208.102.113.11 attack
Oct 15 13:24:14 localhost sshd\[8791\]: Invalid user user from 208.102.113.11 port 40292
Oct 15 13:24:14 localhost sshd\[8791\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=208.102.113.11
Oct 15 13:24:15 localhost sshd\[8791\]: Failed password for invalid user user from 208.102.113.11 port 40292 ssh2
...
2019-10-15 21:42:58
106.12.6.74 attackspam
$f2bV_matches
2019-10-15 21:51:00
104.236.230.165 attackspam
Oct 15 08:41:50 firewall sshd[1053]: Invalid user zhaozheng from 104.236.230.165
Oct 15 08:41:52 firewall sshd[1053]: Failed password for invalid user zhaozheng from 104.236.230.165 port 50015 ssh2
Oct 15 08:45:30 firewall sshd[1158]: Invalid user cmschef123 from 104.236.230.165
...
2019-10-15 21:20:37
185.90.118.21 attackbotsspam
10/15/2019-09:10:45.179005 185.90.118.21 Protocol: 6 ET SCAN Potential SSH Scan
2019-10-15 21:36:27
206.81.4.235 attackspambots
Oct 15 09:19:41 xtremcommunity sshd\[545384\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.81.4.235  user=root
Oct 15 09:19:43 xtremcommunity sshd\[545384\]: Failed password for root from 206.81.4.235 port 42179 ssh2
Oct 15 09:23:31 xtremcommunity sshd\[545428\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.81.4.235  user=root
Oct 15 09:23:34 xtremcommunity sshd\[545428\]: Failed password for root from 206.81.4.235 port 33954 ssh2
Oct 15 09:27:23 xtremcommunity sshd\[545475\]: Invalid user elephant from 206.81.4.235 port 53831
...
2019-10-15 21:38:11

最近上报的IP列表

81.26.235.135 36.76.183.184 107.210.60.202 100.164.59.121
126.161.17.118 182.30.197.132 129.154.241.134 71.88.26.102
182.176.91.229 35.152.88.125 105.222.119.116 145.239.41.135
205.254.150.20 59.32.120.110 198.102.239.219 79.46.153.171
193.150.158.229 47.176.106.58 54.195.253.182 107.94.61.32