125.128.140.114

Basic Info

City: unknown

Region: unknown

Country: Korea, Republic of

Internet Service Provider: KT Corporation

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	TCP Port: 25 invalid blocked abuseat-org also barracuda and spamcop (540)	2020-01-27 02:42:01
attackspam	Dec 19 15:36:52 grey postfix/smtpd\[15051\]: NOQUEUE: reject: RCPT from unknown\[125.128.140.114\]: 554 5.7.1 Service unavailable\; Client host \[125.128.140.114\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[125.128.140.114\]\; from=\ to=\ proto=ESMTP helo=\<\[125.128.140.114\]\> ...	2019-12-20 01:13:23

Type

Details

Datetime

attack

TCP Port: 25      invalid blocked  abuseat-org also barracuda and spamcop           (540)

2020-01-27 02:42:01

attackspam

Dec 19 15:36:52 grey postfix/smtpd\[15051\]: NOQUEUE: reject: RCPT from unknown\[125.128.140.114\]: 554 5.7.1 Service unavailable\; Client host \[125.128.140.114\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[125.128.140.114\]\; from=\ to=\ proto=ESMTP helo=\<\[125.128.140.114\]\>
...

2019-12-20 01:13:23

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 125.128.140.114
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 20071
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;125.128.140.114.		IN	A

;; AUTHORITY SECTION:
.			139	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019121900 1800 900 604800 86400

;; Query time: 114 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Dec 20 01:13:20 CST 2019
;; MSG SIZE  rcvd: 119

Host info

Host 114.140.128.125.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 114.140.128.125.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
222.186.52.89	attack	Automated report - ssh fail2ban: Aug 19 15:46:29 wrong password, user=root, port=36978, ssh2 Aug 19 15:46:33 wrong password, user=root, port=36978, ssh2 Aug 19 15:46:37 wrong password, user=root, port=36978, ssh2	2019-08-19 21:49:51
182.100.69.239	attack	CN China - Failures: 5 smtpauth	2019-08-19 21:54:25
178.62.237.38	attackbots	Invalid user tunnel from 178.62.237.38 port 33563	2019-08-19 21:37:27
198.108.66.17	attackspambots	:	2019-08-19 21:29:13
182.122.153.133	attackbots	Unauthorised access (Aug 19) SRC=182.122.153.133 LEN=40 TTL=50 ID=27471 TCP DPT=23 WINDOW=62183 SYN	2019-08-19 21:53:40
185.143.221.103	attackspambots	08/19/2019-09:19:16.107878 185.143.221.103 Protocol: 6 ET SCAN NMAP -sS window 1024	2019-08-19 21:32:01
51.255.39.143	attackbots	$f2bV_matches	2019-08-19 21:23:17
129.211.76.101	attack	Aug 19 14:16:46 dev0-dcfr-rnet sshd[30940]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.76.101 Aug 19 14:16:48 dev0-dcfr-rnet sshd[30940]: Failed password for invalid user vncuser from 129.211.76.101 port 51618 ssh2 Aug 19 14:21:42 dev0-dcfr-rnet sshd[30976]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.76.101	2019-08-19 21:18:00
123.135.127.85	attackspam	Unauthorised access (Aug 19) SRC=123.135.127.85 LEN=40 TTL=241 ID=31837 TCP DPT=3389 WINDOW=1024 SYN	2019-08-19 21:46:45
195.123.238.100	attackspam	Lines containing failures of 195.123.238.100 Aug 19 13:25:14 shared11 sshd[5598]: Invalid user vmuser from 195.123.238.100 port 38178 Aug 19 13:25:14 shared11 sshd[5598]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.123.238.100 Aug 19 13:25:16 shared11 sshd[5598]: Failed password for invalid user vmuser from 195.123.238.100 port 38178 ssh2 Aug 19 13:25:16 shared11 sshd[5598]: Received disconnect from 195.123.238.100 port 38178:11: Bye Bye [preauth] Aug 19 13:25:16 shared11 sshd[5598]: Disconnected from invalid user vmuser 195.123.238.100 port 38178 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=195.123.238.100	2019-08-19 21:46:11
106.12.11.79	attackspam	Invalid user conf from 106.12.11.79 port 48310	2019-08-19 21:24:53
114.5.81.67	attack	Aug 19 02:58:20 eddieflores sshd\[4839\]: Invalid user pi from 114.5.81.67 Aug 19 02:58:20 eddieflores sshd\[4841\]: Invalid user pi from 114.5.81.67 Aug 19 02:58:20 eddieflores sshd\[4839\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.5.81.67 Aug 19 02:58:20 eddieflores sshd\[4841\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.5.81.67 Aug 19 02:58:22 eddieflores sshd\[4839\]: Failed password for invalid user pi from 114.5.81.67 port 50400 ssh2	2019-08-19 21:27:39
92.118.160.9	attackspambots	Honeypot attack, port: 389, PTR: 92.118.160.9.netsystemsresearch.com.	2019-08-19 21:00:19
206.81.21.47	attack	Automatic report - Banned IP Access	2019-08-19 21:48:56
147.135.195.254	attackspambots	Aug 19 16:27:00 itv-usvr-02 sshd[19821]: Invalid user panda from 147.135.195.254 port 59808 Aug 19 16:27:00 itv-usvr-02 sshd[19821]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=147.135.195.254 Aug 19 16:27:00 itv-usvr-02 sshd[19821]: Invalid user panda from 147.135.195.254 port 59808 Aug 19 16:27:01 itv-usvr-02 sshd[19821]: Failed password for invalid user panda from 147.135.195.254 port 59808 ssh2 Aug 19 16:33:06 itv-usvr-02 sshd[19855]: Invalid user osram from 147.135.195.254 port 35682	2019-08-19 21:58:04

Recently Reported IPs

40.92.21.46	194.224.6.172	197.185.102.85	186.88.206.137
111.90.150.124	154.72.4.8	177.244.49.58	40.92.21.38
23.254.203.91	117.132.9.115	37.211.144.245	167.99.76.243
122.51.135.73	221.43.197.13	94.23.255.92	186.111.212.116
78.168.118.147	45.142.20.152	218.163.194.99	255.177.143.215