125.161.139.28

Basic Info

City: unknown

Region: unknown

Country: Indonesia

Internet Service Provider: PT Telkom Indonesia

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	Unauthorized connection attempt from IP address 125.161.139.28 on Port 445(SMB)	2020-08-11 02:58:14

Comments on same subnet:

IP	Type	Details	Datetime
125.161.139.27	attack	Icarus honeypot on github	2020-09-01 06:54:06
125.161.139.88	attackbotsspam	Aug 15 07:12:11 cdc sshd[29247]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.161.139.88 user=pi Aug 15 07:12:13 cdc sshd[29247]: Failed password for invalid user pi from 125.161.139.88 port 2779 ssh2	2020-08-15 15:30:28
125.161.139.239	attackspam	1593740866 - 07/03/2020 03:47:46 Host: 125.161.139.239/125.161.139.239 Port: 445 TCP Blocked	2020-07-04 01:59:32
125.161.139.52	attackbots	125.161.139.52 - - \[26/Apr/2020:05:00:00 -0700\] "POST /index.php/admin/ HTTP/1.1" 404 20411125.161.139.52 - - \[26/Apr/2020:05:00:00 -0700\] "POST /index.php/admin/index/ HTTP/1.1" 404 20435125.161.139.52 - - \[26/Apr/2020:05:00:01 -0700\] "POST /index.php/admin/sales_order/ HTTP/1.1" 404 20459 ...	2020-04-27 02:08:51
125.161.139.30	attack	Honeypot attack, port: 445, PTR: 30.subnet125-161-139.speedy.telkom.net.id.	2020-02-27 22:06:28
125.161.139.90	attackspam	1581396504 - 02/11/2020 05:48:24 Host: 125.161.139.90/125.161.139.90 Port: 445 TCP Blocked	2020-02-11 20:55:44
125.161.139.52	attackspambots	1579868924 - 01/24/2020 13:28:44 Host: 125.161.139.52/125.161.139.52 Port: 445 TCP Blocked	2020-01-25 04:52:34
125.161.139.148	attackbotsspam	Invalid user pi from 125.161.139.148 port 50862	2019-11-20 02:43:52
125.161.139.42	attackspambots	Attempt to attack host OS, exploiting network vulnerabilities, on 18-10-2019 12:45:23.	2019-10-18 19:55:10
125.161.139.248	attackbotsspam	Attempt to attack host OS, exploiting network vulnerabilities, on 12-10-2019 15:15:18.	2019-10-13 00:17:17
125.161.139.2	attackspambots	Unauthorized connection attempt from IP address 125.161.139.2 on Port 445(SMB)	2019-10-06 01:35:11
125.161.139.240	attackspambots	@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-09-12 03:50:48,625 INFO [amun_request_handler] PortScan Detected on Port: 445 (125.161.139.240)	2019-09-12 13:48:54
125.161.139.215	attackbots	Sep 9 22:32:53 srv206 sshd[13747]: Invalid user tomcat from 125.161.139.215 ...	2019-09-10 05:18:01
125.161.139.58	attackspam	Unauthorized connection attempt from IP address 125.161.139.58 on Port 445(SMB)	2019-09-09 18:57:15
125.161.139.167	attackbotsspam	Honeypot attack, port: 445, PTR: 167.subnet125-161-139.speedy.telkom.net.id.	2019-08-24 22:41:34

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 125.161.139.28
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 17311
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;125.161.139.28.			IN	A

;; AUTHORITY SECTION:
.			228	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020081001 1800 900 604800 86400

;; Query time: 69 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Aug 11 02:58:11 CST 2020
;; MSG SIZE  rcvd: 118

Host info

28.139.161.125.in-addr.arpa domain name pointer 28.subnet125-161-139.speedy.telkom.net.id.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
28.139.161.125.in-addr.arpa	name = 28.subnet125-161-139.speedy.telkom.net.id.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
45.55.222.162	attackspambots	k+ssh-bruteforce	2020-04-27 07:09:46
111.231.225.162	attackspam	Apr 27 01:16:54 vps647732 sshd[26085]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.225.162 Apr 27 01:16:56 vps647732 sshd[26085]: Failed password for invalid user liwei from 111.231.225.162 port 56356 ssh2 ...	2020-04-27 07:18:54
113.161.151.29	attackbotsspam	(imapd) Failed IMAP login from 113.161.151.29 (VN/Vietnam/static.vnpt.vn): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Apr 27 01:07:40 ir1 dovecot[264309]: imap-login: Disconnected (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=113.161.151.29, lip=5.63.12.44, TLS, session=	2020-04-27 07:14:05
121.229.2.136	attack	Apr 27 04:15:48 gw1 sshd[19517]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.229.2.136 Apr 27 04:15:50 gw1 sshd[19517]: Failed password for invalid user Joshua from 121.229.2.136 port 54708 ssh2 ...	2020-04-27 07:17:59
210.123.141.241	attack	2020-04-26T23:01:22.744687abusebot-8.cloudsearch.cf sshd[4149]: Invalid user chandra from 210.123.141.241 port 55796 2020-04-26T23:01:22.751821abusebot-8.cloudsearch.cf sshd[4149]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.123.141.241 2020-04-26T23:01:22.744687abusebot-8.cloudsearch.cf sshd[4149]: Invalid user chandra from 210.123.141.241 port 55796 2020-04-26T23:01:24.946652abusebot-8.cloudsearch.cf sshd[4149]: Failed password for invalid user chandra from 210.123.141.241 port 55796 ssh2 2020-04-26T23:07:59.635131abusebot-8.cloudsearch.cf sshd[4612]: Invalid user test from 210.123.141.241 port 60290 2020-04-26T23:07:59.644231abusebot-8.cloudsearch.cf sshd[4612]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.123.141.241 2020-04-26T23:07:59.635131abusebot-8.cloudsearch.cf sshd[4612]: Invalid user test from 210.123.141.241 port 60290 2020-04-26T23:08:01.673442abusebot-8.cloudsearch.cf sshd[461 ...	2020-04-27 07:28:29
178.217.169.247	attack	Invalid user admin from 178.217.169.247 port 34794	2020-04-27 07:27:28
118.116.106.238	attack	1587933496 - 04/26/2020 22:38:16 Host: 118.116.106.238/118.116.106.238 Port: 445 TCP Blocked	2020-04-27 06:51:23
103.51.103.3	attackbots	103.51.103.3 - - \[26/Apr/2020:23:19:52 +0200\] "POST /wp-login.php HTTP/1.0" 200 5658 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0" 103.51.103.3 - - \[26/Apr/2020:23:19:55 +0200\] "POST /wp-login.php HTTP/1.0" 200 5628 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0" 103.51.103.3 - - \[26/Apr/2020:23:19:57 +0200\] "POST /wp-login.php HTTP/1.0" 200 5660 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0"	2020-04-27 07:10:29
185.46.18.99	attackspambots	Apr 26 23:39:37 OPSO sshd\[26864\]: Invalid user zzj from 185.46.18.99 port 58042 Apr 26 23:39:37 OPSO sshd\[26864\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.46.18.99 Apr 26 23:39:39 OPSO sshd\[26864\]: Failed password for invalid user zzj from 185.46.18.99 port 58042 ssh2 Apr 26 23:43:49 OPSO sshd\[27813\]: Invalid user linjk from 185.46.18.99 port 41504 Apr 26 23:43:49 OPSO sshd\[27813\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.46.18.99	2020-04-27 07:19:59
91.121.87.174	attackbotsspam	$f2bV_matches	2020-04-27 06:58:57
222.186.175.163	attackspam	Apr 27 01:25:16 MainVPS sshd[20517]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.163 user=root Apr 27 01:25:18 MainVPS sshd[20517]: Failed password for root from 222.186.175.163 port 51618 ssh2 Apr 27 01:25:21 MainVPS sshd[20517]: Failed password for root from 222.186.175.163 port 51618 ssh2 Apr 27 01:25:16 MainVPS sshd[20517]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.163 user=root Apr 27 01:25:18 MainVPS sshd[20517]: Failed password for root from 222.186.175.163 port 51618 ssh2 Apr 27 01:25:21 MainVPS sshd[20517]: Failed password for root from 222.186.175.163 port 51618 ssh2 Apr 27 01:25:16 MainVPS sshd[20517]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.163 user=root Apr 27 01:25:18 MainVPS sshd[20517]: Failed password for root from 222.186.175.163 port 51618 ssh2 Apr 27 01:25:21 MainVPS sshd[20517]: Failed password for root from 222.18	2020-04-27 07:26:46
46.149.49.30	attackspam	Chat Spam	2020-04-27 06:56:39
222.72.137.113	attackbots	Apr 26 19:01:20 ny01 sshd[1096]: Failed password for root from 222.72.137.113 port 51554 ssh2 Apr 26 19:05:55 ny01 sshd[2039]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.72.137.113 Apr 26 19:05:56 ny01 sshd[2039]: Failed password for invalid user yin from 222.72.137.113 port 20736 ssh2	2020-04-27 07:10:01
118.24.38.12	attackspam	Apr 26 22:38:05 melroy-server sshd[12478]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.38.12 Apr 26 22:38:07 melroy-server sshd[12478]: Failed password for invalid user renard from 118.24.38.12 port 53360 ssh2 ...	2020-04-27 06:58:42
157.230.30.229	attackbotsspam	Apr 26 16:40:52 server1 sshd\[13322\]: Failed password for root from 157.230.30.229 port 52842 ssh2 Apr 26 16:43:52 server1 sshd\[14178\]: Invalid user zero from 157.230.30.229 Apr 26 16:43:52 server1 sshd\[14178\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.30.229 Apr 26 16:43:53 server1 sshd\[14178\]: Failed password for invalid user zero from 157.230.30.229 port 50220 ssh2 Apr 26 16:46:45 server1 sshd\[15145\]: Invalid user pardeep from 157.230.30.229 ...	2020-04-27 07:02:55

Recently Reported IPs

187.190.109.221	82.58.185.14	58.244.89.227	36.157.89.243
185.190.149.65	156.212.40.149	107.175.64.15	87.123.224.200
200.233.206.214	88.230.46.243	31.173.120.227	195.222.46.20
1.171.129.121	52.243.94.224	122.118.3.119	220.124.95.72
88.20.47.119	230.1.58.58	14.177.78.45	138.185.36.35