Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Medan

Region: North Sumatra

Country: Indonesia

Internet Service Provider: PT Telkom Indonesia

Hostname: unknown

Organization: PT Telekomunikasi Indonesia

Usage Type: unknown

Comments:
Type Details Datetime
attack
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-18 09:03:35,008 INFO [amun_request_handler] PortScan Detected on Port: 445 (125.162.21.143)
2019-07-19 00:47:26
Comments on same subnet:
IP Type Details Datetime
125.162.210.216 attack
Automatic report - Port Scan Attack
2020-09-17 01:51:08
125.162.210.216 attackbots
Automatic report - Port Scan Attack
2020-09-16 18:07:23
125.162.217.150 attackspam
Unauthorized connection attempt from IP address 125.162.217.150 on Port 445(SMB)
2020-09-02 22:18:30
125.162.217.150 attackspambots
Unauthorized connection attempt from IP address 125.162.217.150 on Port 445(SMB)
2020-09-02 14:08:43
125.162.217.150 attackbotsspam
Unauthorized connection attempt from IP address 125.162.217.150 on Port 445(SMB)
2020-09-02 07:09:16
125.162.216.127 attack
Unauthorized connection attempt from IP address 125.162.216.127 on Port 445(SMB)
2020-08-22 02:51:02
125.162.211.170 attackspambots
port 23
2020-08-14 14:55:59
125.162.21.191 attackbotsspam
May  2 19:17:11 santamaria sshd\[32006\]: Invalid user test from 125.162.21.191
May  2 19:17:11 santamaria sshd\[32006\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.162.21.191
May  2 19:17:13 santamaria sshd\[32006\]: Failed password for invalid user test from 125.162.21.191 port 49880 ssh2
...
2020-05-03 03:49:27
125.162.216.240 attackbots
Honeypot attack, port: 445, PTR: 240.subnet125-162-216.speedy.telkom.net.id.
2020-03-06 17:34:36
125.162.217.128 attackbots
DATE:2019-11-30 15:34:02, IP:125.162.217.128, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc)
2019-12-01 02:06:40
125.162.21.149 attack
Unauthorized connection attempt from IP address 125.162.21.149 on Port 445(SMB)
2019-11-11 21:20:11
125.162.214.188 attackbots
Unauthorized connection attempt from IP address 125.162.214.188 on Port 445(SMB)
2019-07-09 10:36:37
125.162.215.225 attackspambots
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-05 06:53:54,273 INFO [amun_request_handler] PortScan Detected on Port: 445 (125.162.215.225)
2019-07-05 20:47:30
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 125.162.21.143
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 8810
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;125.162.21.143.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019071800 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Fri Jul 19 00:47:14 CST 2019
;; MSG SIZE  rcvd: 118
Host info
143.21.162.125.in-addr.arpa domain name pointer 143.subnet125-162-21.speedy.telkom.net.id.
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
143.21.162.125.in-addr.arpa	name = 143.subnet125-162-21.speedy.telkom.net.id.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
14.191.224.71 attack
unauthorized connection attempt
2020-02-29 22:14:52
92.35.224.120 attackspam
Port probing on unauthorized port 5555
2020-02-29 22:42:31
124.123.119.130 attack
unauthorized connection attempt
2020-02-29 22:16:28
89.136.92.70 attackbotsspam
unauthorized connection attempt
2020-02-29 22:24:11
168.121.69.230 attackspambots
Icarus honeypot on github
2020-02-29 22:12:43
82.22.30.18 attackbotsspam
unauthorized connection attempt
2020-02-29 22:25:07
49.233.146.194 attackbotsspam
Feb 29 15:28:20 vps647732 sshd[1768]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.146.194
Feb 29 15:28:21 vps647732 sshd[1768]: Failed password for invalid user mc from 49.233.146.194 port 51792 ssh2
...
2020-02-29 22:29:17
185.206.163.35 attack
Wordpress Admin Login attack
2020-02-29 22:43:55
122.128.195.129 attack
MultiHost/MultiPort Probe, Scan, Hack -
2020-02-29 22:31:42
101.89.112.10 attackspambots
Feb 29 15:24:33 lnxded64 sshd[15746]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.89.112.10
Feb 29 15:24:36 lnxded64 sshd[15746]: Failed password for invalid user lisha from 101.89.112.10 port 54580 ssh2
Feb 29 15:33:52 lnxded64 sshd[17651]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.89.112.10
2020-02-29 22:49:11
103.206.8.132 attack
unauthorized connection attempt
2020-02-29 22:23:44
185.36.81.57 attackbotsspam
2020-02-29 15:19:31 dovecot_login authenticator failed for \(User\) \[185.36.81.57\]: 535 Incorrect authentication data \(set_id=nicola\)
2020-02-29 15:21:05 dovecot_login authenticator failed for \(User\) \[185.36.81.57\]: 535 Incorrect authentication data \(set_id=nicola\)
2020-02-29 15:21:10 dovecot_login authenticator failed for \(User\) \[185.36.81.57\]: 535 Incorrect authentication data \(set_id=nicola\)
2020-02-29 15:21:10 dovecot_login authenticator failed for \(User\) \[185.36.81.57\]: 535 Incorrect authentication data \(set_id=nicola\)
2020-02-29 15:28:14 dovecot_login authenticator failed for \(User\) \[185.36.81.57\]: 535 Incorrect authentication data \(set_id=edu@no-server.de\)
...
2020-02-29 22:35:26
122.128.202.13 attackspambots
MultiHost/MultiPort Probe, Scan, Hack -
2020-02-29 22:29:55
49.149.71.232 attackspambots
unauthorized connection attempt
2020-02-29 22:20:14
202.134.61.41 attackbots
Port scan: Attack repeated for 24 hours
2020-02-29 22:37:55

Recently Reported IPs

154.64.181.64 73.186.185.157 91.190.200.38 2a01:598:b00e:9a13:94f2:d619:1697:7ebe
202.8.197.121 159.203.123.195 188.50.62.209 89.44.65.10
223.111.160.236 178.14.146.235 54.203.111.193 43.251.177.176
168.46.195.92 37.48.189.250 65.6.156.240 1.236.77.81
89.36.205.23 168.120.40.198 2003:de:3f16:6700:8bc:8e8a:3d92:f435 189.187.227.71