City: unknown
Region: unknown
Country: Indonesia
Internet Service Provider: PT Telkom Indonesia
Hostname: unknown
Organization: unknown
Usage Type: unknown
| Type | Details | Datetime |
|---|---|---|
| attack | 05.04.2020 05:56:16 - RDP Login Fail Detected by https://www.elinox.de/RDP-Wächter |
2020-04-05 14:03:50 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 125.161.131.248 | attackbots | Automatic report - Port Scan Attack |
2020-08-18 02:14:00 |
| 125.161.131.136 | attack | (ftpd) Failed FTP login from 125.161.131.136 (ID/Indonesia/136.subnet125-161-131.speedy.telkom.net.id): 10 in the last 3600 secs |
2020-07-16 21:07:00 |
| 125.161.131.201 | attack | Unauthorized connection attempt from IP address 125.161.131.201 on Port 445(SMB) |
2020-05-05 23:45:16 |
| 125.161.131.224 | attackspam | Unauthorized connection attempt from IP address 125.161.131.224 on Port 445(SMB) |
2020-03-30 21:45:53 |
| 125.161.131.236 | attack | 1583735531 - 03/09/2020 07:32:11 Host: 125.161.131.236/125.161.131.236 Port: 445 TCP Blocked |
2020-03-09 18:14:03 |
| 125.161.131.120 | attack | Attempt to attack host OS, exploiting network vulnerabilities, on 17-02-2020 04:55:09. |
2020-02-17 19:32:05 |
| 125.161.131.250 | attack | 22/tcp [2020-02-09]1pkt |
2020-02-09 23:35:39 |
| 125.161.131.144 | attackspambots | Unauthorized connection attempt detected from IP address 125.161.131.144 to port 4567 [J] |
2020-01-29 03:36:45 |
| 125.161.131.81 | attackspam | Unauthorized connection attempt detected from IP address 125.161.131.81 to port 4567 [J] |
2020-01-29 00:09:16 |
| 125.161.131.47 | attackspambots | Unauthorized connection attempt detected from IP address 125.161.131.47 to port 8080 [J] |
2020-01-22 21:07:21 |
| 125.161.131.89 | attackspambots | Honeypot attack, port: 445, PTR: 89.subnet125-161-131.speedy.telkom.net.id. |
2020-01-13 17:11:25 |
| 125.161.131.253 | attackbots | BURG,WP GET /wp-login.php |
2019-12-30 07:39:52 |
| 125.161.131.211 | attackbots | 34567/tcp 34567/tcp [2019-09-21/22]2pkt |
2019-09-24 05:45:23 |
| 125.161.131.244 | attack | Unauthorized connection attempt from IP address 125.161.131.244 on Port 445(SMB) |
2019-09-05 19:45:05 |
| 125.161.131.116 | attack | Unauthorized connection attempt from IP address 125.161.131.116 on Port 445(SMB) |
2019-07-31 21:14:34 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 125.161.131.54
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 16782
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;125.161.131.54. IN A
;; AUTHORITY SECTION:
. 600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020040402 1800 900 604800 86400
;; Query time: 66 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Apr 05 14:03:44 CST 2020
;; MSG SIZE rcvd: 11854.131.161.125.in-addr.arpa domain name pointer 54.subnet125-161-131.speedy.telkom.net.id.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
54.131.161.125.in-addr.arpa name = 54.subnet125-161-131.speedy.telkom.net.id.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 165.22.86.38 | attackspambots | 2019-10-20T14:09:07.204545abusebot-5.cloudsearch.cf sshd\[21710\]: Invalid user swsgest from 165.22.86.38 port 40980 |
2019-10-21 02:55:59 |
| 179.215.58.102 | attackspambots | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/179.215.58.102/ BR - 1H : (301) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : BR NAME ASN : ASN28573 IP : 179.215.58.102 CIDR : 179.215.56.0/21 PREFIX COUNT : 1254 UNIQUE IP COUNT : 9653760 ATTACKS DETECTED ASN28573 : 1H - 1 3H - 4 6H - 4 12H - 10 24H - 21 DateTime : 2019-10-20 13:57:10 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery |
2019-10-21 03:09:18 |
| 94.33.52.72 | attack | 94.33.52.72 - - [20/Oct/2019:15:05:23 +0200] "GET /wp-login.php HTTP/1.1" 200 1129 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 94.33.52.72 - - [20/Oct/2019:15:05:25 +0200] "POST /wp-login.php HTTP/1.1" 200 1524 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 94.33.52.72 - - [20/Oct/2019:15:05:26 +0200] "GET /wp-login.php HTTP/1.1" 200 1129 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 94.33.52.72 - - [20/Oct/2019:15:05:27 +0200] "POST /wp-login.php HTTP/1.1" 200 1507 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 94.33.52.72 - - [20/Oct/2019:15:05:28 +0200] "GET /wp-login.php HTTP/1.1" 200 1129 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 94.33.52.72 - - [20/Oct/2019:15:05:30 +0200] "POST /wp-login.php HTTP/1.1" 200 1503 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2019-10-21 03:07:00 |
| 61.219.118.101 | attackspambots | port scan and connect, tcp 1433 (ms-sql-s) |
2019-10-21 02:57:31 |
| 103.129.121.78 | attackbotsspam | port scan and connect, tcp 5432 (postgresql) |
2019-10-21 02:53:46 |
| 171.25.193.20 | attackbots | Oct 20 21:06:18 rotator sshd\[14429\]: Failed password for root from 171.25.193.20 port 42695 ssh2Oct 20 21:06:21 rotator sshd\[14429\]: Failed password for root from 171.25.193.20 port 42695 ssh2Oct 20 21:06:23 rotator sshd\[14429\]: Failed password for root from 171.25.193.20 port 42695 ssh2Oct 20 21:06:26 rotator sshd\[14429\]: Failed password for root from 171.25.193.20 port 42695 ssh2Oct 20 21:06:29 rotator sshd\[14429\]: Failed password for root from 171.25.193.20 port 42695 ssh2Oct 20 21:06:32 rotator sshd\[14429\]: Failed password for root from 171.25.193.20 port 42695 ssh2 ... |
2019-10-21 03:17:19 |
| 123.206.39.206 | attack | detected by Fail2Ban |
2019-10-21 03:21:44 |
| 49.88.112.70 | attack | Oct 20 20:27:19 MK-Soft-VM5 sshd[18651]: Failed password for root from 49.88.112.70 port 35012 ssh2 Oct 20 20:27:21 MK-Soft-VM5 sshd[18651]: Failed password for root from 49.88.112.70 port 35012 ssh2 ... |
2019-10-21 02:52:52 |
| 94.102.57.16 | attackbotsspam | Oct 20 15:27:01 vmd43113 postfix/smtpd\[22202\]: warning: unknown\[94.102.57.16\]: SASL LOGIN authentication failed: authentication failure Oct 20 15:27:01 vmd43113 postfix/smtpd\[22202\]: warning: unknown\[94.102.57.16\]: SASL LOGIN authentication failed: authentication failure Oct 20 15:27:01 vmd43113 postfix/smtpd\[22202\]: warning: unknown\[94.102.57.16\]: SASL LOGIN authentication failed: authentication failure Oct 20 15:27:01 vmd43113 postfix/smtpd\[22202\]: warning: unknown\[94.102.57.16\]: SASL LOGIN authentication failed: authentication failure Oct 20 15:27:01 vmd43113 postfix/smtpd\[22202\]: warning: unknown\[94.102.57.16\]: SASL LOGIN authentication failed: authentication failure |
2019-10-21 03:15:10 |
| 46.48.48.90 | attackspam | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/46.48.48.90/ RU - 1H : (153) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : RU NAME ASN : ASN12668 IP : 46.48.48.90 CIDR : 46.48.0.0/17 PREFIX COUNT : 11 UNIQUE IP COUNT : 146432 ATTACKS DETECTED ASN12668 : 1H - 1 3H - 1 6H - 1 12H - 1 24H - 1 DateTime : 2019-10-20 13:57:50 INFO : Port MAX SCAN Scan Detected and Blocked by ADMIN - data recovery |
2019-10-21 02:50:48 |
| 31.163.169.157 | attackspam | Honeypot attack, port: 23, PTR: ws157.zone31-163-169.zaural.ru. |
2019-10-21 03:18:42 |
| 59.126.12.119 | attack | " " |
2019-10-21 02:50:30 |
| 106.13.13.188 | attack | Oct 20 17:18:37 xxxxxxx0 sshd[16758]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.13.188 user=r.r Oct 20 17:18:40 xxxxxxx0 sshd[16758]: Failed password for r.r from 106.13.13.188 port 53110 ssh2 Oct 20 17:31:55 xxxxxxx0 sshd[18407]: Invalid user ubnt from 106.13.13.188 port 35888 Oct 20 17:31:55 xxxxxxx0 sshd[18407]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.13.188 Oct 20 17:31:57 xxxxxxx0 sshd[18407]: Failed password for invalid user ubnt from 106.13.13.188 port 35888 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=106.13.13.188 |
2019-10-21 03:05:28 |
| 51.38.33.178 | attackspambots | 2019-10-20T19:11:34.830736abusebot-2.cloudsearch.cf sshd\[30702\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.ip-51-38-33.eu user=root |
2019-10-21 03:21:27 |
| 103.75.35.6 | attackspambots | Telnetd brute force attack detected by fail2ban |
2019-10-21 03:19:53 |