125.161.107.74

Basic Info

City: Medan

Region: North Sumatra

Country: Indonesia

Internet Service Provider: PT Telkom Indonesia

Hostname: unknown

Organization: PT Telekomunikasi Indonesia

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspam	Unauthorized connection attempt from IP address 125.161.107.74 on Port 445(SMB)	2019-07-02 23:50:55

Comments on same subnet:

IP	Type	Details	Datetime
125.161.107.87	attackbotsspam	Unauthorized IMAP connection attempt	2020-06-09 02:00:07
125.161.107.49	attack	Invalid user r00t from 125.161.107.49 port 9894	2020-05-23 16:50:54
125.161.107.154	attackbotsspam	20/5/6@08:00:31: FAIL: Alarm-Network address from=125.161.107.154 20/5/6@08:00:31: FAIL: Alarm-Network address from=125.161.107.154 ...	2020-05-06 23:13:15
125.161.107.122	attack	Attempt to attack host OS, exploiting network vulnerabilities, on 13-04-2020 18:20:08.	2020-04-14 02:18:13
125.161.107.22	attackspam	Unauthorized connection attempt from IP address 125.161.107.22 on Port 445(SMB)	2020-03-28 20:36:59
125.161.107.139	attack	Honeypot attack, port: 445, PTR: 139.subnet125-161-107.speedy.telkom.net.id.	2020-03-05 03:15:39
125.161.107.85	attack	Unauthorized connection attempt from IP address 125.161.107.85 on Port 445(SMB)	2020-02-24 18:44:21
125.161.107.150	attackbotsspam	Honeypot attack, port: 445, PTR: 150.subnet125-161-107.speedy.telkom.net.id.	2020-02-20 17:14:21
125.161.107.11	attackbots	Attempt to attack host OS, exploiting network vulnerabilities, on 30-01-2020 01:15:14.	2020-01-30 09:54:24
125.161.107.59	attackbots	1580101077 - 01/27/2020 05:57:57 Host: 125.161.107.59/125.161.107.59 Port: 445 TCP Blocked	2020-01-27 13:04:14
125.161.107.121	attack	Unauthorized connection attempt detected from IP address 125.161.107.121 to port 445	2020-01-20 14:24:44
125.161.107.150	attackspam	Unauthorized connection attempt detected from IP address 125.161.107.150 to port 23 [J]	2020-01-18 14:47:39
125.161.107.13	attackspam	Attempt to attack host OS, exploiting network vulnerabilities, on 14-01-2020 13:05:16.	2020-01-14 21:12:29
125.161.107.193	attackbots	Unauthorized connection attempt from IP address 125.161.107.193 on Port 445(SMB)	2020-01-14 14:10:08
125.161.107.26	attack	1578631909 - 01/10/2020 05:51:49 Host: 125.161.107.26/125.161.107.26 Port: 445 TCP Blocked	2020-01-10 17:19:42

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 125.161.107.74
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 50921
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;125.161.107.74.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019070200 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Tue Jul 02 23:49:59 CST 2019
;; MSG SIZE  rcvd: 118

Host info

74.107.161.125.in-addr.arpa domain name pointer 74.subnet125-161-107.speedy.telkom.net.id.

Nslookup info:

Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
74.107.161.125.in-addr.arpa	name = 74.subnet125-161-107.speedy.telkom.net.id.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
14.23.154.114	attackbotsspam	Aug 1 19:21:04 OPSO sshd\[7474\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.23.154.114 user=root Aug 1 19:21:06 OPSO sshd\[7474\]: Failed password for root from 14.23.154.114 port 60630 ssh2 Aug 1 19:24:17 OPSO sshd\[8192\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.23.154.114 user=root Aug 1 19:24:19 OPSO sshd\[8192\]: Failed password for root from 14.23.154.114 port 42872 ssh2 Aug 1 19:27:32 OPSO sshd\[9444\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.23.154.114 user=root	2020-08-02 01:34:52
181.122.156.250	attack	2020-08-01 07:04:43.283331-0500 localhost smtpd[51711]: NOQUEUE: reject: RCPT from unknown[181.122.156.250]: 554 5.7.1 Service unavailable; Client host [181.122.156.250] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/181.122.156.250; from= to= proto=ESMTP helo=	2020-08-02 01:54:26
59.127.17.138	attack	Telnet/23 MH Probe, Scan, BF, Hack -	2020-08-02 02:01:56
103.242.200.22	attack	Brute-Force	2020-08-02 01:58:01
49.83.38.101	attack	Connection to SSH Honeypot - Detected by HoneypotDB	2020-08-02 01:49:44
181.22.100.81	attackbotsspam	Email rejected due to spam filtering	2020-08-02 01:50:28
193.112.244.218	attack	Aug 1 19:42:31 buvik sshd[16794]: Failed password for root from 193.112.244.218 port 36538 ssh2 Aug 1 19:46:05 buvik sshd[17335]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.112.244.218 user=root Aug 1 19:46:07 buvik sshd[17335]: Failed password for root from 193.112.244.218 port 45324 ssh2 ...	2020-08-02 01:54:09
183.166.146.86	attackbots	Aug 1 17:16:19 srv01 postfix/smtpd\[8606\]: warning: unknown\[183.166.146.86\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 1 17:17:04 srv01 postfix/smtpd\[8606\]: warning: unknown\[183.166.146.86\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 1 17:17:16 srv01 postfix/smtpd\[8606\]: warning: unknown\[183.166.146.86\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 1 17:17:32 srv01 postfix/smtpd\[8606\]: warning: unknown\[183.166.146.86\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 1 17:17:50 srv01 postfix/smtpd\[8606\]: warning: unknown\[183.166.146.86\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2020-08-02 01:46:08
89.16.103.241	attack	Dovecot Invalid User Login Attempt.	2020-08-02 01:47:36
193.35.48.18	attackbots	Aug 1 18:38:12 mail.srvfarm.net postfix/smtpd[1099699]: warning: unknown[193.35.48.18]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 1 18:38:12 mail.srvfarm.net postfix/smtpd[1096967]: warning: unknown[193.35.48.18]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 1 18:38:12 mail.srvfarm.net postfix/smtpd[1099699]: lost connection after AUTH from unknown[193.35.48.18] Aug 1 18:38:12 mail.srvfarm.net postfix/smtpd[1096967]: lost connection after AUTH from unknown[193.35.48.18] Aug 1 18:38:19 mail.srvfarm.net postfix/smtpd[1095918]: lost connection after AUTH from unknown[193.35.48.18] Aug 1 18:38:19 mail.srvfarm.net postfix/smtpd[1099846]: lost connection after AUTH from unknown[193.35.48.18]	2020-08-02 01:41:38
223.71.167.163	attackbots	[H1.VM6] Blocked by UFW	2020-08-02 02:05:34
222.186.190.17	attack	Aug 1 17:30:54 gestao sshd[254831]: Failed password for root from 222.186.190.17 port 29570 ssh2 Aug 1 17:33:08 gestao sshd[254848]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.190.17 user=root Aug 1 17:33:10 gestao sshd[254848]: Failed password for root from 222.186.190.17 port 37808 ssh2 Aug 1 17:34:14 gestao sshd[254850]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.190.17 user=root Aug 1 17:34:16 gestao sshd[254850]: Failed password for root from 222.186.190.17 port 43629 ssh2 ...	2020-08-02 01:40:34
188.137.72.80	attackspambots	Aug 1 12:17:56 vps-51d81928 sshd[372355]: Failed password for root from 188.137.72.80 port 25621 ssh2 Aug 1 12:18:03 vps-51d81928 sshd[372359]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.137.72.80 user=root Aug 1 12:18:05 vps-51d81928 sshd[372359]: Failed password for root from 188.137.72.80 port 26546 ssh2 Aug 1 12:18:13 vps-51d81928 sshd[372361]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.137.72.80 user=root Aug 1 12:18:15 vps-51d81928 sshd[372361]: Failed password for root from 188.137.72.80 port 27634 ssh2 ...	2020-08-02 01:45:48
222.186.175.23	attack	Aug 1 19:51:02 abendstille sshd\[599\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.23 user=root Aug 1 19:51:04 abendstille sshd\[599\]: Failed password for root from 222.186.175.23 port 40252 ssh2 Aug 1 19:51:07 abendstille sshd\[599\]: Failed password for root from 222.186.175.23 port 40252 ssh2 Aug 1 19:51:08 abendstille sshd\[599\]: Failed password for root from 222.186.175.23 port 40252 ssh2 Aug 1 19:51:10 abendstille sshd\[832\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.23 user=root ...	2020-08-02 02:02:22
103.141.188.216	attackspam	2020-07-30T06:04:16.673574correo.[domain] sshd[41471]: Invalid user wangjianxiong from 103.141.188.216 port 34310 2020-07-30T06:04:19.079138correo.[domain] sshd[41471]: Failed password for invalid user wangjianxiong from 103.141.188.216 port 34310 ssh2 2020-07-30T06:15:34.184293correo.[domain] sshd[43466]: Invalid user debian from 103.141.188.216 port 32838 ...	2020-08-02 01:39:10

Recently Reported IPs

109.201.87.210	105.112.96.221	5.90.39.121	83.213.54.2
123.195.44.119	108.48.162.137	114.100.134.38	95.9.159.102
24.84.87.182	114.187.9.163	189.14.14.156	201.219.102.66
86.103.142.42	195.230.201.173	175.54.108.94	76.68.217.143
78.85.141.32	170.158.212.211	103.45.172.121	27.67.228.154