113.161.125.20

Basic Info

City: unknown

Region: unknown

Country: Viet Nam

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
113.161.125.106	attackspam	445/tcp 1433/tcp... [2019-10-17/22]4pkt,2pt.(tcp)	2019-10-23 06:32:42
113.161.125.23	attackspambots	Aug 16 21:38:10 hiderm sshd\[4240\]: Invalid user bay from 113.161.125.23 Aug 16 21:38:10 hiderm sshd\[4240\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.161.125.23 Aug 16 21:38:12 hiderm sshd\[4240\]: Failed password for invalid user bay from 113.161.125.23 port 47046 ssh2 Aug 16 21:43:07 hiderm sshd\[4744\]: Invalid user sinus from 113.161.125.23 Aug 16 21:43:07 hiderm sshd\[4744\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.161.125.23	2019-08-17 15:46:40
113.161.125.23	attackbots	Aug 16 01:30:48 tdfoods sshd\[19493\]: Invalid user nhloniphom from 113.161.125.23 Aug 16 01:30:48 tdfoods sshd\[19493\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.161.125.23 Aug 16 01:30:50 tdfoods sshd\[19493\]: Failed password for invalid user nhloniphom from 113.161.125.23 port 40760 ssh2 Aug 16 01:35:49 tdfoods sshd\[19996\]: Invalid user test4 from 113.161.125.23 Aug 16 01:35:49 tdfoods sshd\[19996\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.161.125.23	2019-08-16 19:50:41
113.161.125.23	attackbotsspam	2019-08-11T01:49:50.356408abusebot-2.cloudsearch.cf sshd\[29136\]: Invalid user admin from 113.161.125.23 port 36014	2019-08-11 10:20:44
113.161.125.23	attack	Aug 10 11:27:07 vps200512 sshd\[18919\]: Invalid user debian from 113.161.125.23 Aug 10 11:27:07 vps200512 sshd\[18919\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.161.125.23 Aug 10 11:27:09 vps200512 sshd\[18919\]: Failed password for invalid user debian from 113.161.125.23 port 33978 ssh2 Aug 10 11:32:13 vps200512 sshd\[19004\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.161.125.23 user=root Aug 10 11:32:15 vps200512 sshd\[19004\]: Failed password for root from 113.161.125.23 port 54658 ssh2	2019-08-10 23:34:27
113.161.125.23	attack	Jul 25 02:58:01 itv-usvr-01 sshd[22805]: Invalid user www from 113.161.125.23 Jul 25 02:58:01 itv-usvr-01 sshd[22805]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.161.125.23 Jul 25 02:58:01 itv-usvr-01 sshd[22805]: Invalid user www from 113.161.125.23 Jul 25 02:58:03 itv-usvr-01 sshd[22805]: Failed password for invalid user www from 113.161.125.23 port 60958 ssh2 Jul 25 03:03:35 itv-usvr-01 sshd[23027]: Invalid user canon from 113.161.125.23	2019-07-27 19:11:13
113.161.125.23	attackspambots	Jul 25 22:59:56 vibhu-HP-Z238-Microtower-Workstation sshd\[28190\]: Invalid user ansari from 113.161.125.23 Jul 25 22:59:56 vibhu-HP-Z238-Microtower-Workstation sshd\[28190\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.161.125.23 Jul 25 22:59:58 vibhu-HP-Z238-Microtower-Workstation sshd\[28190\]: Failed password for invalid user ansari from 113.161.125.23 port 59472 ssh2 Jul 25 23:05:09 vibhu-HP-Z238-Microtower-Workstation sshd\[28351\]: Invalid user online from 113.161.125.23 Jul 25 23:05:09 vibhu-HP-Z238-Microtower-Workstation sshd\[28351\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.161.125.23 ...	2019-07-26 01:40:22
113.161.125.23	attackbots	[Aegis] @ 2019-07-24 20:03:28 0100 -> Attempted Administrator Privilege Gain: ET SCAN LibSSH Based Frequent SSH Connections Likely BruteForce Attack	2019-07-25 03:07:47
113.161.125.23	attackbotsspam	Jul 23 12:36:12 ip-172-31-1-72 sshd\[6152\]: Invalid user anthony from 113.161.125.23 Jul 23 12:36:12 ip-172-31-1-72 sshd\[6152\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.161.125.23 Jul 23 12:36:14 ip-172-31-1-72 sshd\[6152\]: Failed password for invalid user anthony from 113.161.125.23 port 39236 ssh2 Jul 23 12:41:34 ip-172-31-1-72 sshd\[6346\]: Invalid user erp from 113.161.125.23 Jul 23 12:41:34 ip-172-31-1-72 sshd\[6346\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.161.125.23	2019-07-23 21:39:36
113.161.125.23	attackbotsspam	Jun 30 16:08:08 OPSO sshd\[25758\]: Invalid user seeb123 from 113.161.125.23 port 60760 Jun 30 16:08:08 OPSO sshd\[25758\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.161.125.23 Jun 30 16:08:10 OPSO sshd\[25758\]: Failed password for invalid user seeb123 from 113.161.125.23 port 60760 ssh2 Jun 30 16:09:57 OPSO sshd\[25779\]: Invalid user 123456 from 113.161.125.23 port 49230 Jun 30 16:09:57 OPSO sshd\[25779\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.161.125.23	2019-07-01 01:21:12
113.161.125.23	attackspam	Jun 28 08:17:22 srv-4 sshd\[11361\]: Invalid user nong from 113.161.125.23 Jun 28 08:17:22 srv-4 sshd\[11361\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.161.125.23 Jun 28 08:17:25 srv-4 sshd\[11361\]: Failed password for invalid user nong from 113.161.125.23 port 54664 ssh2 ...	2019-06-28 14:16:28

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 113.161.125.20
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 32568
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;113.161.125.20.			IN	A

;; AUTHORITY SECTION:
.			261	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022020700 1800 900 604800 86400

;; Query time: 62 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 07 17:48:00 CST 2022
;; MSG SIZE  rcvd: 107

Host info

Host 20.125.161.113.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 20.125.161.113.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
112.85.42.189	attackbotsspam	2020-08-18T12:20:33.371215lavrinenko.info sshd[18896]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.189 user=root 2020-08-18T12:20:35.067843lavrinenko.info sshd[18896]: Failed password for root from 112.85.42.189 port 30290 ssh2 2020-08-18T12:20:33.371215lavrinenko.info sshd[18896]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.189 user=root 2020-08-18T12:20:35.067843lavrinenko.info sshd[18896]: Failed password for root from 112.85.42.189 port 30290 ssh2 2020-08-18T12:20:37.642561lavrinenko.info sshd[18896]: Failed password for root from 112.85.42.189 port 30290 ssh2 ...	2020-08-18 17:21:56
180.180.213.66	attackbotsspam	Port Scan ...	2020-08-18 16:52:53
112.85.42.89	attackspambots	Aug 18 08:44:46 jumpserver sshd[199712]: Failed password for root from 112.85.42.89 port 47569 ssh2 Aug 18 08:45:48 jumpserver sshd[199724]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.89 user=root Aug 18 08:45:51 jumpserver sshd[199724]: Failed password for root from 112.85.42.89 port 27344 ssh2 ...	2020-08-18 17:01:58
185.190.16.70	attackspam	C1,WP GET /nelson/www/wp-includes/wlwmanifest.xml	2020-08-18 17:24:45
104.244.76.170	attackspam	Automatic report - Banned IP Access	2020-08-18 16:57:46
77.247.109.88	attack	[2020-08-18 04:37:47] NOTICE[1185][C-00003201] chan_sip.c: Call from '' (77.247.109.88:54961) to extension '011442037699492' rejected because extension not found in context 'public'. [2020-08-18 04:37:47] SECURITY[1203] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-08-18T04:37:47.673-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="011442037699492",SessionID="0x7f10c43f67a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.109.88/54961",ACLName="no_extension_match" [2020-08-18 04:38:08] NOTICE[1185][C-00003202] chan_sip.c: Call from '' (77.247.109.88:60315) to extension '011441519470478' rejected because extension not found in context 'public'. [2020-08-18 04:38:08] SECURITY[1203] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-08-18T04:38:08.395-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="011441519470478",SessionID="0x7f10c4481d18",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/ ...	2020-08-18 16:52:24
103.59.200.58	attackbots	Dovecot Invalid User Login Attempt.	2020-08-18 17:24:21
118.24.11.226	attack	2020-08-18T00:27:01.238214linuxbox-skyline sshd[154435]: Invalid user konica from 118.24.11.226 port 53788 ...	2020-08-18 17:09:18
202.147.198.154	attackspambots	2020-08-18T08:09:07.724375abusebot.cloudsearch.cf sshd[3666]: Invalid user nagios from 202.147.198.154 port 51352 2020-08-18T08:09:07.729781abusebot.cloudsearch.cf sshd[3666]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.147.198.154 2020-08-18T08:09:07.724375abusebot.cloudsearch.cf sshd[3666]: Invalid user nagios from 202.147.198.154 port 51352 2020-08-18T08:09:10.033714abusebot.cloudsearch.cf sshd[3666]: Failed password for invalid user nagios from 202.147.198.154 port 51352 ssh2 2020-08-18T08:14:23.698252abusebot.cloudsearch.cf sshd[3792]: Invalid user mk from 202.147.198.154 port 53634 2020-08-18T08:14:23.702832abusebot.cloudsearch.cf sshd[3792]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.147.198.154 2020-08-18T08:14:23.698252abusebot.cloudsearch.cf sshd[3792]: Invalid user mk from 202.147.198.154 port 53634 2020-08-18T08:14:25.720857abusebot.cloudsearch.cf sshd[3792]: Failed password for ...	2020-08-18 17:14:09
132.232.120.145	attack	Aug 18 08:59:53 ns382633 sshd\[9420\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.120.145 user=root Aug 18 08:59:54 ns382633 sshd\[9420\]: Failed password for root from 132.232.120.145 port 32774 ssh2 Aug 18 09:02:06 ns382633 sshd\[10076\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.120.145 user=root Aug 18 09:02:08 ns382633 sshd\[10076\]: Failed password for root from 132.232.120.145 port 52364 ssh2 Aug 18 09:03:25 ns382633 sshd\[10170\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.120.145 user=root	2020-08-18 17:13:20
206.189.128.215	attackspambots	Aug 18 10:06:46 OPSO sshd\[16123\]: Invalid user hzw from 206.189.128.215 port 54548 Aug 18 10:06:46 OPSO sshd\[16123\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.128.215 Aug 18 10:06:48 OPSO sshd\[16123\]: Failed password for invalid user hzw from 206.189.128.215 port 54548 ssh2 Aug 18 10:11:05 OPSO sshd\[17473\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.128.215 user=root Aug 18 10:11:06 OPSO sshd\[17473\]: Failed password for root from 206.189.128.215 port 33874 ssh2	2020-08-18 17:00:33
45.176.214.238	attackbotsspam	IMAP/SMTP Authentication Failure	2020-08-18 17:12:23
46.101.114.250	attackspambots	TCP (SYN) 46.101.114.250:54486 -> port 22, len 40	2020-08-18 17:21:33
36.73.104.89	attackspambots	Port probing on unauthorized port 445	2020-08-18 17:28:53
114.32.124.155	attack	Port probing on unauthorized port 23	2020-08-18 17:24:01

Recently Reported IPs

125.59.23.61	218.108.31.28	37.8.108.199	37.8.56.33
144.255.29.105	190.92.99.253	172.80.67.78	191.53.221.85
178.72.69.247	186.50.80.227	183.29.153.221	46.176.198.250
119.167.67.70	117.251.48.220	79.104.192.17	180.188.251.51
113.100.193.134	159.223.86.185	20.106.28.104	95.178.108.89