125.161.139.45

Basic Info

City: unknown

Region: unknown

Country: Indonesia

Internet Service Provider: PT Telkom Indonesia

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspam	Unauthorized connection attempt from IP address 125.161.139.45 on Port 445(SMB)	2019-07-22 19:35:39

Comments on same subnet:

IP	Type	Details	Datetime
125.161.139.27	attack	Icarus honeypot on github	2020-09-01 06:54:06
125.161.139.88	attackbotsspam	Aug 15 07:12:11 cdc sshd[29247]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.161.139.88 user=pi Aug 15 07:12:13 cdc sshd[29247]: Failed password for invalid user pi from 125.161.139.88 port 2779 ssh2	2020-08-15 15:30:28
125.161.139.28	attack	Unauthorized connection attempt from IP address 125.161.139.28 on Port 445(SMB)	2020-08-11 02:58:14
125.161.139.239	attackspam	1593740866 - 07/03/2020 03:47:46 Host: 125.161.139.239/125.161.139.239 Port: 445 TCP Blocked	2020-07-04 01:59:32
125.161.139.52	attackbots	125.161.139.52 - - \[26/Apr/2020:05:00:00 -0700\] "POST /index.php/admin/ HTTP/1.1" 404 20411125.161.139.52 - - \[26/Apr/2020:05:00:00 -0700\] "POST /index.php/admin/index/ HTTP/1.1" 404 20435125.161.139.52 - - \[26/Apr/2020:05:00:01 -0700\] "POST /index.php/admin/sales_order/ HTTP/1.1" 404 20459 ...	2020-04-27 02:08:51
125.161.139.30	attack	Honeypot attack, port: 445, PTR: 30.subnet125-161-139.speedy.telkom.net.id.	2020-02-27 22:06:28
125.161.139.90	attackspam	1581396504 - 02/11/2020 05:48:24 Host: 125.161.139.90/125.161.139.90 Port: 445 TCP Blocked	2020-02-11 20:55:44
125.161.139.52	attackspambots	1579868924 - 01/24/2020 13:28:44 Host: 125.161.139.52/125.161.139.52 Port: 445 TCP Blocked	2020-01-25 04:52:34
125.161.139.148	attackbotsspam	Invalid user pi from 125.161.139.148 port 50862	2019-11-20 02:43:52
125.161.139.42	attackspambots	Attempt to attack host OS, exploiting network vulnerabilities, on 18-10-2019 12:45:23.	2019-10-18 19:55:10
125.161.139.248	attackbotsspam	Attempt to attack host OS, exploiting network vulnerabilities, on 12-10-2019 15:15:18.	2019-10-13 00:17:17
125.161.139.2	attackspambots	Unauthorized connection attempt from IP address 125.161.139.2 on Port 445(SMB)	2019-10-06 01:35:11
125.161.139.240	attackspambots	@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-09-12 03:50:48,625 INFO [amun_request_handler] PortScan Detected on Port: 445 (125.161.139.240)	2019-09-12 13:48:54
125.161.139.215	attackbots	Sep 9 22:32:53 srv206 sshd[13747]: Invalid user tomcat from 125.161.139.215 ...	2019-09-10 05:18:01
125.161.139.58	attackspam	Unauthorized connection attempt from IP address 125.161.139.58 on Port 445(SMB)	2019-09-09 18:57:15

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 125.161.139.45
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 47588
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;125.161.139.45.			IN	A

;; AUTHORITY SECTION:
.			3207	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019072200 1800 900 604800 86400

;; Query time: 1 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Mon Jul 22 19:35:31 CST 2019
;; MSG SIZE  rcvd: 118

Host info

45.139.161.125.in-addr.arpa domain name pointer 45.subnet125-161-139.speedy.telkom.net.id.

Nslookup info:

Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
45.139.161.125.in-addr.arpa	name = 45.subnet125-161-139.speedy.telkom.net.id.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
157.230.214.150	attack	$f2bV_matches	2019-09-14 05:10:27
122.161.199.110	attack	Sep 13 19:56:01 saschabauer sshd[8901]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.161.199.110 Sep 13 19:56:02 saschabauer sshd[8901]: Failed password for invalid user 1234 from 122.161.199.110 port 46301 ssh2	2019-09-14 04:48:14
198.144.184.34	attack	vps1:sshd-InvalidUser	2019-09-14 04:37:52
45.55.145.31	attack	Sep 13 20:57:05 [host] sshd[8239]: Invalid user test from 45.55.145.31 Sep 13 20:57:05 [host] sshd[8239]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.145.31 Sep 13 20:57:06 [host] sshd[8239]: Failed password for invalid user test from 45.55.145.31 port 54882 ssh2	2019-09-14 05:07:52
202.126.208.122	attackbotsspam	Sep 13 17:55:10 meumeu sshd[10814]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.126.208.122 Sep 13 17:55:12 meumeu sshd[10814]: Failed password for invalid user bot from 202.126.208.122 port 59511 ssh2 Sep 13 18:00:00 meumeu sshd[11396]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.126.208.122 ...	2019-09-14 05:01:35
14.177.66.183	attack	Unauthorized connection attempt from IP address 14.177.66.183 on Port 445(SMB)	2019-09-14 04:40:47
1.191.17.37	attack	" "	2019-09-14 04:35:56
24.35.32.239	attackspambots	$f2bV_matches	2019-09-14 04:46:14
81.171.58.72	attack	\[2019-09-13 16:41:25\] NOTICE\[20685\] chan_sip.c: Registration from '\' failed for '81.171.58.72:56754' - Wrong password \[2019-09-13 16:41:25\] SECURITY\[20693\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-09-13T16:41:25.281-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="9143",SessionID="0x7f8a6c255a88",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/81.171.58.72/56754",Challenge="376670ac",ReceivedChallenge="376670ac",ReceivedHash="434faa32ad2bc81725ec401c7deb8fbf" \[2019-09-13 16:41:44\] NOTICE\[20685\] chan_sip.c: Registration from '\' failed for '81.171.58.72:64344' - Wrong password \[2019-09-13 16:41:44\] SECURITY\[20693\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-09-13T16:41:44.033-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="7429",SessionID="0x7f8a6c830888",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/81.171.5	2019-09-14 05:06:40
176.31.66.138	attackspambots	DATE:2019-09-13 15:40:52, IP:176.31.66.138, PORT:3306 - MySQL/MariaDB brute force auth on a honeypot server (epe-dc)	2019-09-14 04:36:28
27.106.45.6	attackspam	Sep 13 08:22:42 hanapaa sshd\[15811\]: Invalid user git from 27.106.45.6 Sep 13 08:22:42 hanapaa sshd\[15811\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.106.45.6 Sep 13 08:22:44 hanapaa sshd\[15811\]: Failed password for invalid user git from 27.106.45.6 port 36118 ssh2 Sep 13 08:28:08 hanapaa sshd\[16302\]: Invalid user user1 from 27.106.45.6 Sep 13 08:28:08 hanapaa sshd\[16302\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.106.45.6	2019-09-14 04:53:28
144.217.85.183	attack	Sep 13 23:10:12 dedicated sshd[30769]: Invalid user alex from 144.217.85.183 port 37035	2019-09-14 05:10:58
181.115.187.75	attack	Automatic report - Port Scan Attack	2019-09-14 05:03:28
63.240.240.74	attackspambots	Sep 13 17:40:44 vps01 sshd[14348]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=63.240.240.74 Sep 13 17:40:47 vps01 sshd[14348]: Failed password for invalid user user from 63.240.240.74 port 43965 ssh2	2019-09-14 04:44:07
75.87.52.203	attackbotsspam	Sep 13 20:28:35 nextcloud sshd\[6582\]: Invalid user admin3 from 75.87.52.203 Sep 13 20:28:35 nextcloud sshd\[6582\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=75.87.52.203 Sep 13 20:28:37 nextcloud sshd\[6582\]: Failed password for invalid user admin3 from 75.87.52.203 port 57474 ssh2 ...	2019-09-14 04:39:53

Recently Reported IPs

2.183.140.128	136.93.254.16	173.134.236.220	117.159.36.20
36.65.16.28	93.93.225.70	118.70.80.154	201.54.240.155
106.13.112.197	119.53.244.167	113.175.84.232	18.1.70.211
177.140.219.180	4.129.14.182	92.253.27.115	117.60.141.137
113.161.68.24	1.52.172.101	210.212.31.25	27.73.173.213