103.94.125.2 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Indonesia

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
103.94.125.254	attackspambots	Aug 26 04:52:53 shivevps sshd[3849]: Bad protocol version identification '\024' from 103.94.125.254 port 58743 Aug 26 04:52:58 shivevps sshd[4410]: Bad protocol version identification '\024' from 103.94.125.254 port 58766 Aug 26 04:54:46 shivevps sshd[7972]: Bad protocol version identification '\024' from 103.94.125.254 port 59371 ...	2020-08-26 12:54:54
103.94.125.245	attack	Unauthorised access (Sep 24) SRC=103.94.125.245 LEN=52 TOS=0x10 PREC=0x40 TTL=115 ID=157 DF TCP DPT=445 WINDOW=8192 SYN	2019-09-24 16:06:30

Type

Details

Datetime

103.94.125.254

attackspambots

Aug 26 04:52:53 shivevps sshd[3849]: Bad protocol version identification '\024' from 103.94.125.254 port 58743
Aug 26 04:52:58 shivevps sshd[4410]: Bad protocol version identification '\024' from 103.94.125.254 port 58766
Aug 26 04:54:46 shivevps sshd[7972]: Bad protocol version identification '\024' from 103.94.125.254 port 59371
...

2020-08-26 12:54:54

103.94.125.245

attack

Unauthorised access (Sep 24) SRC=103.94.125.245 LEN=52 TOS=0x10 PREC=0x40 TTL=115 ID=157 DF TCP DPT=445 WINDOW=8192 SYN

2019-09-24 16:06:30

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 103.94.125.2
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 36670
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;103.94.125.2.			IN	A

;; AUTHORITY SECTION:
.			418	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022020702 1800 900 604800 86400

;; Query time: 16 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 08 11:14:34 CST 2022
;; MSG SIZE  rcvd: 105

Host info

2.125.94.103.in-addr.arpa domain name pointer idmail.hkcw.id.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
2.125.94.103.in-addr.arpa	name = idmail.hkcw.id.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
218.92.0.171	attackspambots	2020-2-8 12:50:10 AM: failed ssh attempt	2020-02-08 07:56:55
81.22.45.71	attack	ET CINS Active Threat Intelligence Poor Reputation IP group 77 - port: 3389 proto: TCP cat: Misc Attack	2020-02-08 08:03:25
180.242.140.27	attackbotsspam	php WP PHPmyadamin ABUSE blocked for 12h	2020-02-08 07:44:56
167.71.255.56	attackbotsspam	Failed password for invalid user bt from 167.71.255.56 port 52204 ssh2 Invalid user opz from 167.71.255.56 port 46330 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.255.56 Failed password for invalid user opz from 167.71.255.56 port 46330 ssh2 Invalid user anw from 167.71.255.56 port 40460	2020-02-08 07:55:16
190.152.5.86	attackbotsspam	B: f2b postfix aggressive 3x	2020-02-08 07:27:33
34.76.251.191	attack	Fail2Ban Ban Triggered	2020-02-08 07:31:08
107.170.192.131	attack	20 attempts against mh-ssh on cloud	2020-02-08 08:08:43
77.42.118.184	attack	Automatic report - Port Scan Attack	2020-02-08 07:54:57
222.186.175.150	attackspam	Feb 7 13:44:24 hanapaa sshd\[17255\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.150 user=root Feb 7 13:44:25 hanapaa sshd\[17255\]: Failed password for root from 222.186.175.150 port 36346 ssh2 Feb 7 13:44:41 hanapaa sshd\[17272\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.150 user=root Feb 7 13:44:43 hanapaa sshd\[17272\]: Failed password for root from 222.186.175.150 port 54656 ssh2 Feb 7 13:44:46 hanapaa sshd\[17272\]: Failed password for root from 222.186.175.150 port 54656 ssh2	2020-02-08 07:53:59
92.222.209.223	attackspam	02/07/2020-17:38:54.915703 92.222.209.223 Protocol: 17 ET SCAN Sipvicious Scan	2020-02-08 07:47:56
112.84.91.154	attackspambots	Feb 7 23:38:34 grey postfix/smtpd\[12187\]: NOQUEUE: reject: RCPT from unknown\[112.84.91.154\]: 554 5.7.1 Service unavailable\; Client host \[112.84.91.154\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[112.84.91.154\]\; from=\ to=\ proto=ESMTP helo=\ ...	2020-02-08 07:59:31
178.173.1.247	attackbots	[portscan] Port scan	2020-02-08 07:27:07
168.197.41.131	attack	trying to access non-authorized port	2020-02-08 07:56:33
196.218.30.236	attack	trying to access non-authorized port	2020-02-08 07:34:14
51.91.199.233	attackbots	08.02.2020 00:31:39 - RDP Login Fail Detected by https://www.elinox.de/RDP-Wächter	2020-02-08 07:39:42

Recently Reported IPs

193.233.229.86	47.250.41.91	115.61.112.105	154.79.246.242
23.81.127.67	45.84.0.43	109.238.219.225	122.202.215.206
117.132.9.148	183.188.76.74	151.235.237.138	114.39.229.190
42.73.178.68	121.57.98.183	166.88.122.168	42.239.45.222
45.173.44.1	102.35.43.212	34.220.135.161	85.209.151.144