125.162.54.148

Basic Info

City: unknown

Region: unknown

Country: Indonesia

Internet Service Provider: PT Telekomunikasi Indonesia

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	1588872159 - 05/07/2020 19:22:39 Host: 125.162.54.148/125.162.54.148 Port: 445 TCP Blocked	2020-05-08 02:01:49

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 125.162.54.148
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 53743
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;125.162.54.148.			IN	A

;; AUTHORITY SECTION:
.			490	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020050700 1800 900 604800 86400

;; Query time: 109 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri May 08 02:01:44 CST 2020
;; MSG SIZE  rcvd: 118

Host info

148.54.162.125.in-addr.arpa domain name pointer 148.subnet125-162-54.speedy.telkom.net.id.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
148.54.162.125.in-addr.arpa	name = 148.subnet125-162-54.speedy.telkom.net.id.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
46.101.244.155	attack	$f2bV_matches	2019-08-02 22:20:52
84.122.18.69	attackspam	2019-08-02T11:15:24.915671abusebot-4.cloudsearch.cf sshd\[765\]: Invalid user edit from 84.122.18.69 port 43040	2019-08-02 22:27:58
60.250.79.229	attackspambots	Automatic report - SSH Brute-Force Attack	2019-08-02 23:42:14
220.174.209.154	attack	Aug 2 05:23:06 mailman dovecot: imap-login: Disconnected (auth failed, 1 attempts): user=, method=PLAIN, rip=220.174.209.154, lip=[munged], TLS: Disconnected	2019-08-02 22:27:34
2607:f298:5:110b::539:67dd	attackbotsspam	WordPress wp-login brute force :: 2607:f298:5:110b::539:67dd 0.052 BYPASS [02/Aug/2019:18:42:14 1000] [censored_4] "POST /wp-login.php HTTP/1.1" 200 3989 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2019-08-02 23:32:30
185.232.21.28	attack	Many RDP login attempts detected by IDS script	2019-08-02 22:17:57
14.231.102.132	attack	Chat Spam	2019-08-02 22:58:43
185.208.209.7	attackspambots	firewall-block, port(s): 25915/tcp, 27695/tcp, 28772/tcp, 53866/tcp, 56843/tcp	2019-08-02 23:17:20
2.179.73.96	attackbots	scan z	2019-08-02 23:05:38
104.248.229.8	attackspam	Aug 1 14:27:04 srv1 sshd[32597]: Invalid user frida from 104.248.229.8 Aug 1 14:27:04 srv1 sshd[32597]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.229.8 Aug 1 14:27:06 srv1 sshd[32597]: Failed password for invalid user frida from 104.248.229.8 port 43890 ssh2 Aug 1 14:27:06 srv1 sshd[32597]: Received disconnect from 104.248.229.8: 11: Bye Bye [preauth] Aug 1 14:36:52 srv1 sshd[1184]: Invalid user joseph from 104.248.229.8 Aug 1 14:36:52 srv1 sshd[1184]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.229.8 Aug 1 14:36:54 srv1 sshd[1184]: Failed password for invalid user joseph from 104.248.229.8 port 55354 ssh2 Aug 1 14:36:54 srv1 sshd[1184]: Received disconnect from 104.248.229.8: 11: Bye Bye [preauth] Aug 1 14:41:01 srv1 sshd[1637]: Invalid user akbar from 104.248.229.8 Aug 1 14:41:01 srv1 sshd[1637]: pam_unix(sshd:auth): authentication failure; logname= ui........ -------------------------------	2019-08-02 22:36:39
122.228.19.80	attackbots	02.08.2019 14:26:04 Connection to port 8834 blocked by firewall	2019-08-02 22:54:19
51.77.137.211	attackbotsspam	Aug 2 13:25:34 MK-Soft-VM6 sshd\[17641\]: Invalid user anna from 51.77.137.211 port 42000 Aug 2 13:25:34 MK-Soft-VM6 sshd\[17641\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.137.211 Aug 2 13:25:35 MK-Soft-VM6 sshd\[17641\]: Failed password for invalid user anna from 51.77.137.211 port 42000 ssh2 ...	2019-08-02 22:24:19
112.85.42.185	attackspam	Aug 2 14:24:27 dcd-gentoo sshd[21918]: User root from 112.85.42.185 not allowed because none of user's groups are listed in AllowGroups Aug 2 14:24:29 dcd-gentoo sshd[21918]: error: PAM: Authentication failure for illegal user root from 112.85.42.185 Aug 2 14:24:27 dcd-gentoo sshd[21918]: User root from 112.85.42.185 not allowed because none of user's groups are listed in AllowGroups Aug 2 14:24:29 dcd-gentoo sshd[21918]: error: PAM: Authentication failure for illegal user root from 112.85.42.185 Aug 2 14:24:27 dcd-gentoo sshd[21918]: User root from 112.85.42.185 not allowed because none of user's groups are listed in AllowGroups Aug 2 14:24:29 dcd-gentoo sshd[21918]: error: PAM: Authentication failure for illegal user root from 112.85.42.185 Aug 2 14:24:29 dcd-gentoo sshd[21918]: Failed keyboard-interactive/pam for invalid user root from 112.85.42.185 port 38380 ssh2 ...	2019-08-02 23:23:34
68.183.230.27	attack	loopsrockreggae.com 68.183.230.27 \[02/Aug/2019:15:40:49 +0200\] "POST /wp-login.php HTTP/1.1" 200 5624 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0" loopsrockreggae.com 68.183.230.27 \[02/Aug/2019:15:40:52 +0200\] "POST /wp-login.php HTTP/1.1" 200 5583 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0"	2019-08-02 23:04:45
77.120.113.64	attackbotsspam	Invalid user sconsole from 77.120.113.64 port 40840	2019-08-02 22:27:06

Recently Reported IPs

88.194.24.242	248.233.6.74	178.69.73.13	46.131.9.160
134.40.125.167	185.134.228.100	26.61.96.65	99.182.20.77
100.33.108.101	170.246.117.148	136.58.10.168	76.236.121.115
204.214.87.16	51.68.109.87	91.104.35.11	199.68.122.194
175.139.106.240	51.83.141.61	2607:5300:120:373::1	185.143.75.81