必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Indonesia

运营商(isp): PT Telkom Indonesia

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
类型 评论内容 时间
attackspam
1593740866 - 07/03/2020 03:47:46 Host: 125.161.139.239/125.161.139.239 Port: 445 TCP Blocked
2020-07-04 01:59:32
相同子网IP讨论:
IP 类型 评论内容 时间
125.161.139.27 attack
Icarus honeypot on github
2020-09-01 06:54:06
125.161.139.88 attackbotsspam
Aug 15 07:12:11 cdc sshd[29247]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.161.139.88  user=pi
Aug 15 07:12:13 cdc sshd[29247]: Failed password for invalid user pi from 125.161.139.88 port 2779 ssh2
2020-08-15 15:30:28
125.161.139.28 attack
Unauthorized connection attempt from IP address 125.161.139.28 on Port 445(SMB)
2020-08-11 02:58:14
125.161.139.52 attackbots
125.161.139.52 - - \[26/Apr/2020:05:00:00 -0700\] "POST /index.php/admin/ HTTP/1.1" 404 20411125.161.139.52 - - \[26/Apr/2020:05:00:00 -0700\] "POST /index.php/admin/index/ HTTP/1.1" 404 20435125.161.139.52 - - \[26/Apr/2020:05:00:01 -0700\] "POST /index.php/admin/sales_order/ HTTP/1.1" 404 20459
...
2020-04-27 02:08:51
125.161.139.30 attack
Honeypot attack, port: 445, PTR: 30.subnet125-161-139.speedy.telkom.net.id.
2020-02-27 22:06:28
125.161.139.90 attackspam
1581396504 - 02/11/2020 05:48:24 Host: 125.161.139.90/125.161.139.90 Port: 445 TCP Blocked
2020-02-11 20:55:44
125.161.139.52 attackspambots
1579868924 - 01/24/2020 13:28:44 Host: 125.161.139.52/125.161.139.52 Port: 445 TCP Blocked
2020-01-25 04:52:34
125.161.139.148 attackbotsspam
Invalid user pi from 125.161.139.148 port 50862
2019-11-20 02:43:52
125.161.139.42 attackspambots
Attempt to attack host OS, exploiting network vulnerabilities, on 18-10-2019 12:45:23.
2019-10-18 19:55:10
125.161.139.248 attackbotsspam
Attempt to attack host OS, exploiting network vulnerabilities, on 12-10-2019 15:15:18.
2019-10-13 00:17:17
125.161.139.2 attackspambots
Unauthorized connection attempt from IP address 125.161.139.2 on Port 445(SMB)
2019-10-06 01:35:11
125.161.139.240 attackspambots
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-09-12 03:50:48,625 INFO [amun_request_handler] PortScan Detected on Port: 445 (125.161.139.240)
2019-09-12 13:48:54
125.161.139.215 attackbots
Sep  9 22:32:53 srv206 sshd[13747]: Invalid user tomcat from 125.161.139.215
...
2019-09-10 05:18:01
125.161.139.58 attackspam
Unauthorized connection attempt from IP address 125.161.139.58 on Port 445(SMB)
2019-09-09 18:57:15
125.161.139.167 attackbotsspam
Honeypot attack, port: 445, PTR: 167.subnet125-161-139.speedy.telkom.net.id.
2019-08-24 22:41:34
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 125.161.139.239
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 35543
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;125.161.139.239.		IN	A

;; AUTHORITY SECTION:
.			275	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020070301 1800 900 604800 86400

;; Query time: 92 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jul 04 01:59:26 CST 2020
;; MSG SIZE  rcvd: 119
HOST信息:
239.139.161.125.in-addr.arpa domain name pointer 239.subnet125-161-139.speedy.telkom.net.id.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
239.139.161.125.in-addr.arpa	name = 239.subnet125-161-139.speedy.telkom.net.id.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
128.199.170.254 attackbotsspam
2053/tcp
[2020-06-11]1pkt
2020-06-12 01:07:42
222.186.173.183 attackbots
Jun 11 18:58:06 home sshd[2205]: Failed password for root from 222.186.173.183 port 14876 ssh2
Jun 11 18:58:09 home sshd[2205]: Failed password for root from 222.186.173.183 port 14876 ssh2
Jun 11 18:58:13 home sshd[2205]: Failed password for root from 222.186.173.183 port 14876 ssh2
Jun 11 18:58:17 home sshd[2205]: Failed password for root from 222.186.173.183 port 14876 ssh2
...
2020-06-12 01:02:09
124.253.53.66 attackbots
Honeypot attack, port: 81, PTR: PTR record not found
2020-06-12 01:08:07
182.76.29.59 attackspam
20/6/11@08:11:45: FAIL: Alarm-Network address from=182.76.29.59
20/6/11@08:11:45: FAIL: Alarm-Network address from=182.76.29.59
...
2020-06-12 01:35:10
49.234.121.213 attackspam
2020-06-11T08:51:07.635581morrigan.ad5gb.com sshd[2297]: Invalid user yqi from 49.234.121.213 port 40158
2020-06-11T08:51:09.681819morrigan.ad5gb.com sshd[2297]: Failed password for invalid user yqi from 49.234.121.213 port 40158 ssh2
2020-06-11T08:51:10.462236morrigan.ad5gb.com sshd[2297]: Disconnected from invalid user yqi 49.234.121.213 port 40158 [preauth]
2020-06-12 01:09:22
200.57.113.28 attackbots
Automatic report - Port Scan Attack
2020-06-12 01:33:53
106.13.82.54 attackspam
Jun 11 19:14:13 vps sshd[722207]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.82.54  user=root
Jun 11 19:14:16 vps sshd[722207]: Failed password for root from 106.13.82.54 port 57910 ssh2
Jun 11 19:16:47 vps sshd[735860]: Invalid user digicel from 106.13.82.54 port 36052
Jun 11 19:16:47 vps sshd[735860]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.82.54
Jun 11 19:16:49 vps sshd[735860]: Failed password for invalid user digicel from 106.13.82.54 port 36052 ssh2
...
2020-06-12 01:32:22
188.165.24.200 attackbotsspam
Jun 11 14:46:18 rush sshd[2568]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.165.24.200
Jun 11 14:46:21 rush sshd[2568]: Failed password for invalid user test from 188.165.24.200 port 37294 ssh2
Jun 11 14:49:33 rush sshd[2654]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.165.24.200
...
2020-06-12 01:05:14
159.203.72.14 attack
Invalid user tmpu from 159.203.72.14 port 50924
2020-06-12 01:20:52
139.199.119.76 attack
Jun 11 14:44:29 vps639187 sshd\[23338\]: Invalid user admin from 139.199.119.76 port 49448
Jun 11 14:44:29 vps639187 sshd\[23338\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.119.76
Jun 11 14:44:31 vps639187 sshd\[23338\]: Failed password for invalid user admin from 139.199.119.76 port 49448 ssh2
...
2020-06-12 01:21:45
180.76.165.254 attackbotsspam
Unauthorized access or intrusion attempt detected from Thor banned IP
2020-06-12 01:19:36
39.97.124.130 attackspam
Unauthorized connection attempt detected from IP address 39.97.124.130 to port 23
2020-06-12 01:30:04
94.191.124.33 attack
Jun 10 07:04:58 mail sshd[11496]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.124.33 
Jun 10 07:05:00 mail sshd[11496]: Failed password for invalid user admin from 94.191.124.33 port 40352 ssh2
...
2020-06-12 00:57:09
80.246.2.153 attackbots
2020-06-11T14:59:29.793842abusebot-3.cloudsearch.cf sshd[22800]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.246.2.153  user=root
2020-06-11T14:59:31.635701abusebot-3.cloudsearch.cf sshd[22800]: Failed password for root from 80.246.2.153 port 52844 ssh2
2020-06-11T15:05:43.391509abusebot-3.cloudsearch.cf sshd[23126]: Invalid user monuser from 80.246.2.153 port 53116
2020-06-11T15:05:43.398309abusebot-3.cloudsearch.cf sshd[23126]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.246.2.153
2020-06-11T15:05:43.391509abusebot-3.cloudsearch.cf sshd[23126]: Invalid user monuser from 80.246.2.153 port 53116
2020-06-11T15:05:45.586002abusebot-3.cloudsearch.cf sshd[23126]: Failed password for invalid user monuser from 80.246.2.153 port 53116 ssh2
2020-06-11T15:09:14.728576abusebot-3.cloudsearch.cf sshd[23350]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.246.2.1
...
2020-06-12 01:23:36
103.131.71.124 attackspam
(mod_security) mod_security (id:210730) triggered by 103.131.71.124 (VN/Vietnam/bot-103-131-71-124.coccoc.com): 5 in the last 3600 secs
2020-06-12 00:52:12

最近上报的IP列表

190.104.26.202 43.252.221.31 106.12.26.242 192.241.215.38
161.35.224.10 120.36.253.169 31.15.243.211 185.233.78.180
113.172.26.16 78.83.87.253 113.173.177.82 180.242.182.166
60.6.57.239 70.186.57.181 61.166.19.224 113.167.236.223
13.75.198.102 197.234.48.236 200.13.45.22 87.117.59.165