必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Indonesia

运营商(isp): PT Telkom Indonesia

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
类型 评论内容 时间
attackspambots
Attempt to attack host OS, exploiting network vulnerabilities, on 18-10-2019 12:45:23.
2019-10-18 19:55:10
相同子网IP讨论:
IP 类型 评论内容 时间
125.161.139.27 attack
Icarus honeypot on github
2020-09-01 06:54:06
125.161.139.88 attackbotsspam
Aug 15 07:12:11 cdc sshd[29247]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.161.139.88  user=pi
Aug 15 07:12:13 cdc sshd[29247]: Failed password for invalid user pi from 125.161.139.88 port 2779 ssh2
2020-08-15 15:30:28
125.161.139.28 attack
Unauthorized connection attempt from IP address 125.161.139.28 on Port 445(SMB)
2020-08-11 02:58:14
125.161.139.239 attackspam
1593740866 - 07/03/2020 03:47:46 Host: 125.161.139.239/125.161.139.239 Port: 445 TCP Blocked
2020-07-04 01:59:32
125.161.139.52 attackbots
125.161.139.52 - - \[26/Apr/2020:05:00:00 -0700\] "POST /index.php/admin/ HTTP/1.1" 404 20411125.161.139.52 - - \[26/Apr/2020:05:00:00 -0700\] "POST /index.php/admin/index/ HTTP/1.1" 404 20435125.161.139.52 - - \[26/Apr/2020:05:00:01 -0700\] "POST /index.php/admin/sales_order/ HTTP/1.1" 404 20459
...
2020-04-27 02:08:51
125.161.139.30 attack
Honeypot attack, port: 445, PTR: 30.subnet125-161-139.speedy.telkom.net.id.
2020-02-27 22:06:28
125.161.139.90 attackspam
1581396504 - 02/11/2020 05:48:24 Host: 125.161.139.90/125.161.139.90 Port: 445 TCP Blocked
2020-02-11 20:55:44
125.161.139.52 attackspambots
1579868924 - 01/24/2020 13:28:44 Host: 125.161.139.52/125.161.139.52 Port: 445 TCP Blocked
2020-01-25 04:52:34
125.161.139.148 attackbotsspam
Invalid user pi from 125.161.139.148 port 50862
2019-11-20 02:43:52
125.161.139.248 attackbotsspam
Attempt to attack host OS, exploiting network vulnerabilities, on 12-10-2019 15:15:18.
2019-10-13 00:17:17
125.161.139.2 attackspambots
Unauthorized connection attempt from IP address 125.161.139.2 on Port 445(SMB)
2019-10-06 01:35:11
125.161.139.240 attackspambots
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-09-12 03:50:48,625 INFO [amun_request_handler] PortScan Detected on Port: 445 (125.161.139.240)
2019-09-12 13:48:54
125.161.139.215 attackbots
Sep  9 22:32:53 srv206 sshd[13747]: Invalid user tomcat from 125.161.139.215
...
2019-09-10 05:18:01
125.161.139.58 attackspam
Unauthorized connection attempt from IP address 125.161.139.58 on Port 445(SMB)
2019-09-09 18:57:15
125.161.139.167 attackbotsspam
Honeypot attack, port: 445, PTR: 167.subnet125-161-139.speedy.telkom.net.id.
2019-08-24 22:41:34
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 125.161.139.42
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 29750
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;125.161.139.42.			IN	A

;; AUTHORITY SECTION:
.			595	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019101800 1800 900 604800 86400

;; Query time: 64 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Oct 18 19:55:06 CST 2019
;; MSG SIZE  rcvd: 118
HOST信息:
42.139.161.125.in-addr.arpa domain name pointer 42.subnet125-161-139.speedy.telkom.net.id.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
42.139.161.125.in-addr.arpa	name = 42.subnet125-161-139.speedy.telkom.net.id.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
177.66.167.18 attackspam
Unauthorized connection attempt from IP address 177.66.167.18 on Port 445(SMB)
2020-09-05 02:31:23
189.234.67.203 attackbots
20/9/3@12:44:55: FAIL: Alarm-Network address from=189.234.67.203
20/9/3@12:44:55: FAIL: Alarm-Network address from=189.234.67.203
20/9/3@12:44:55: FAIL: Alarm-Network address from=189.234.67.203
20/9/3@12:44:55: FAIL: Alarm-Network address from=189.234.67.203
...
2020-09-05 02:41:08
62.234.153.213 attackspambots
Bruteforce detected by fail2ban
2020-09-05 02:59:35
180.242.177.179 attack
Lines containing failures of 180.242.177.179
Sep  2 22:06:19 newdogma sshd[8484]: Invalid user ssl from 180.242.177.179 port 40004
Sep  2 22:06:19 newdogma sshd[8484]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.242.177.179 
Sep  2 22:06:21 newdogma sshd[8484]: Failed password for invalid user ssl from 180.242.177.179 port 40004 ssh2
Sep  2 22:06:23 newdogma sshd[8484]: Received disconnect from 180.242.177.179 port 40004:11: Bye Bye [preauth]
Sep  2 22:06:23 newdogma sshd[8484]: Disconnected from invalid user ssl 180.242.177.179 port 40004 [preauth]
Sep  2 22:23:11 newdogma sshd[12294]: Invalid user dg from 180.242.177.179 port 49156
Sep  2 22:23:11 newdogma sshd[12294]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.242.177.179 
Sep  2 22:23:13 newdogma sshd[12294]: Failed password for invalid user dg from 180.242.177.179 port 49156 ssh2
Sep  2 22:23:14 newdogma sshd[12294]: Rec........
------------------------------
2020-09-05 03:06:07
116.68.205.75 attackbots
Unauthorized connection attempt from IP address 116.68.205.75 on Port 445(SMB)
2020-09-05 02:33:11
201.218.81.117 attackspam
REQUESTED PAGE: /wp-login.php
2020-09-05 02:42:30
125.124.254.31 attackbotsspam
Invalid user imc from 125.124.254.31 port 58570
2020-09-05 02:54:03
61.178.108.175 attackbots
 TCP (SYN) 61.178.108.175:57813 -> port 1433, len 44
2020-09-05 03:07:34
173.214.162.250 attackbotsspam
Sep  4 00:16:39 php1 sshd\[6230\]: Invalid user git from 173.214.162.250
Sep  4 00:16:39 php1 sshd\[6230\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=173.214.162.250
Sep  4 00:16:41 php1 sshd\[6230\]: Failed password for invalid user git from 173.214.162.250 port 58066 ssh2
Sep  4 00:17:47 php1 sshd\[6311\]: Invalid user xavier from 173.214.162.250
Sep  4 00:17:47 php1 sshd\[6311\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=173.214.162.250
2020-09-05 02:35:04
213.14.216.51 attackspam
Unauthorized connection attempt from IP address 213.14.216.51 on Port 445(SMB)
2020-09-05 02:34:45
171.25.209.203 attackbotsspam
Sep  4 12:51:26 vm1 sshd[2363]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.25.209.203
Sep  4 12:51:28 vm1 sshd[2363]: Failed password for invalid user ww from 171.25.209.203 port 60270 ssh2
...
2020-09-05 02:50:13
105.163.154.230 attackbotsspam
Sep  3 18:45:02 mellenthin postfix/smtpd[20408]: NOQUEUE: reject: RCPT from unknown[105.163.154.230]: 554 5.7.1 Service unavailable; Client host [105.163.154.230] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/105.163.154.230; from= to= proto=ESMTP helo=<[105.163.154.230]>
2020-09-05 02:36:06
118.163.4.200 attackspam
Scanning an empty webserver with deny all robots.txt
2020-09-05 02:58:35
212.64.3.40 attackspambots
fail2ban/Sep  4 15:45:53 h1962932 sshd[27930]: Invalid user zhangshuai from 212.64.3.40 port 44630
Sep  4 15:45:53 h1962932 sshd[27930]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.3.40
Sep  4 15:45:53 h1962932 sshd[27930]: Invalid user zhangshuai from 212.64.3.40 port 44630
Sep  4 15:45:55 h1962932 sshd[27930]: Failed password for invalid user zhangshuai from 212.64.3.40 port 44630 ssh2
Sep  4 15:50:55 h1962932 sshd[29008]: Invalid user www-data from 212.64.3.40 port 59112
2020-09-05 03:04:51
91.228.65.14 attackspambots
Unauthorized IMAP connection attempt
2020-09-05 03:07:22

最近上报的IP列表

103.225.70.35 193.84.17.40 103.253.72.80 191.84.198.102
89.64.0.249 80.211.231.224 109.62.97.25 109.86.108.114
197.255.216.166 118.25.127.248 185.228.82.210 36.127.132.119
117.212.32.23 123.22.138.101 76.87.161.6 190.226.46.116
66.130.182.146 156.213.8.58 51.9.11.32 159.203.201.159