City: unknown
Region: unknown
Country: Indonesia
Internet Service Provider: PT Telkom Indonesia
Hostname: unknown
Organization: unknown
Usage Type: unknown
| Type | Details | Datetime |
|---|---|---|
| attackspam | Unauthorized connection attempt from IP address 125.161.139.58 on Port 445(SMB) |
2019-09-09 18:57:15 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 125.161.139.27 | attack | Icarus honeypot on github |
2020-09-01 06:54:06 |
| 125.161.139.88 | attackbotsspam | Aug 15 07:12:11 cdc sshd[29247]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.161.139.88 user=pi Aug 15 07:12:13 cdc sshd[29247]: Failed password for invalid user pi from 125.161.139.88 port 2779 ssh2 |
2020-08-15 15:30:28 |
| 125.161.139.28 | attack | Unauthorized connection attempt from IP address 125.161.139.28 on Port 445(SMB) |
2020-08-11 02:58:14 |
| 125.161.139.239 | attackspam | 1593740866 - 07/03/2020 03:47:46 Host: 125.161.139.239/125.161.139.239 Port: 445 TCP Blocked |
2020-07-04 01:59:32 |
| 125.161.139.52 | attackbots | 125.161.139.52 - - \[26/Apr/2020:05:00:00 -0700\] "POST /index.php/admin/ HTTP/1.1" 404 20411125.161.139.52 - - \[26/Apr/2020:05:00:00 -0700\] "POST /index.php/admin/index/ HTTP/1.1" 404 20435125.161.139.52 - - \[26/Apr/2020:05:00:01 -0700\] "POST /index.php/admin/sales_order/ HTTP/1.1" 404 20459 ... |
2020-04-27 02:08:51 |
| 125.161.139.30 | attack | Honeypot attack, port: 445, PTR: 30.subnet125-161-139.speedy.telkom.net.id. |
2020-02-27 22:06:28 |
| 125.161.139.90 | attackspam | 1581396504 - 02/11/2020 05:48:24 Host: 125.161.139.90/125.161.139.90 Port: 445 TCP Blocked |
2020-02-11 20:55:44 |
| 125.161.139.52 | attackspambots | 1579868924 - 01/24/2020 13:28:44 Host: 125.161.139.52/125.161.139.52 Port: 445 TCP Blocked |
2020-01-25 04:52:34 |
| 125.161.139.148 | attackbotsspam | Invalid user pi from 125.161.139.148 port 50862 |
2019-11-20 02:43:52 |
| 125.161.139.42 | attackspambots | Attempt to attack host OS, exploiting network vulnerabilities, on 18-10-2019 12:45:23. |
2019-10-18 19:55:10 |
| 125.161.139.248 | attackbotsspam | Attempt to attack host OS, exploiting network vulnerabilities, on 12-10-2019 15:15:18. |
2019-10-13 00:17:17 |
| 125.161.139.2 | attackspambots | Unauthorized connection attempt from IP address 125.161.139.2 on Port 445(SMB) |
2019-10-06 01:35:11 |
| 125.161.139.240 | attackspambots | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-09-12 03:50:48,625 INFO [amun_request_handler] PortScan Detected on Port: 445 (125.161.139.240) |
2019-09-12 13:48:54 |
| 125.161.139.215 | attackbots | Sep 9 22:32:53 srv206 sshd[13747]: Invalid user tomcat from 125.161.139.215 ... |
2019-09-10 05:18:01 |
| 125.161.139.167 | attackbotsspam | Honeypot attack, port: 445, PTR: 167.subnet125-161-139.speedy.telkom.net.id. |
2019-08-24 22:41:34 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 125.161.139.58
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 60725
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;125.161.139.58. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019090900 1800 900 604800 86400
;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Mon Sep 09 18:56:57 CST 2019
;; MSG SIZE rcvd: 11858.139.161.125.in-addr.arpa domain name pointer 58.subnet125-161-139.speedy.telkom.net.id.
Server: 67.207.67.2
Address: 67.207.67.2#53
Non-authoritative answer:
58.139.161.125.in-addr.arpa name = 58.subnet125-161-139.speedy.telkom.net.id.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 49.234.43.173 | attackbotsspam | Mar 24 13:05:48 gw1 sshd[796]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.43.173 Mar 24 13:05:50 gw1 sshd[796]: Failed password for invalid user view from 49.234.43.173 port 46194 ssh2 ... |
2020-03-24 16:13:06 |
| 91.82.219.162 | attackspam | 2020-03-24T08:00:39.615847vps773228.ovh.net sshd[26208]: Failed password for invalid user minecraft from 91.82.219.162 port 50854 ssh2 2020-03-24T08:06:10.965932vps773228.ovh.net sshd[28262]: Invalid user ow from 91.82.219.162 port 37700 2020-03-24T08:06:10.982490vps773228.ovh.net sshd[28262]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.82.219.162 2020-03-24T08:06:10.965932vps773228.ovh.net sshd[28262]: Invalid user ow from 91.82.219.162 port 37700 2020-03-24T08:06:12.802145vps773228.ovh.net sshd[28262]: Failed password for invalid user ow from 91.82.219.162 port 37700 ssh2 ... |
2020-03-24 15:51:57 |
| 106.13.27.31 | attack | $f2bV_matches |
2020-03-24 16:35:50 |
| 184.22.75.180 | attackspam | Honeypot attack, port: 445, PTR: 184-22-75-0.24.myaisfibre.com. |
2020-03-24 16:08:10 |
| 210.212.237.67 | attack | <6 unauthorized SSH connections |
2020-03-24 16:35:22 |
| 106.54.248.201 | attack | Invalid user hack from 106.54.248.201 port 53476 |
2020-03-24 16:32:14 |
| 46.228.3.2 | attackspam | 20/3/24@01:53:09: FAIL: Alarm-Network address from=46.228.3.2 20/3/24@01:53:10: FAIL: Alarm-Network address from=46.228.3.2 ... |
2020-03-24 16:01:17 |
| 190.85.54.158 | attackbotsspam | $f2bV_matches |
2020-03-24 16:09:44 |
| 181.174.84.69 | attackbots | Mar 24 07:00:57 XXX sshd[43946]: Invalid user wangli from 181.174.84.69 port 55824 |
2020-03-24 16:13:30 |
| 181.30.28.59 | attack | $f2bV_matches |
2020-03-24 15:54:30 |
| 178.46.152.106 | attack | Icarus honeypot on github |
2020-03-24 16:26:56 |
| 51.83.68.213 | attackbots | Mar 24 09:18:06 ns381471 sshd[17804]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.83.68.213 Mar 24 09:18:08 ns381471 sshd[17804]: Failed password for invalid user shoshanna from 51.83.68.213 port 43526 ssh2 |
2020-03-24 16:26:27 |
| 92.63.194.59 | attackspam | Mar 24 13:35:57 areeb-Workstation sshd[30692]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.63.194.59 Mar 24 13:35:59 areeb-Workstation sshd[30692]: Failed password for invalid user admin from 92.63.194.59 port 39971 ssh2 ... |
2020-03-24 16:14:59 |
| 59.127.236.164 | attackbots | Honeypot attack, port: 81, PTR: 59-127-236-164.HINET-IP.hinet.net. |
2020-03-24 15:55:15 |
| 191.242.214.249 | attackspam | port scan and connect, tcp 80 (http) |
2020-03-24 16:22:47 |