Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Indonesia

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
125.166.29.107 attackbotsspam
Automatic report - Port Scan Attack
2020-09-30 03:02:55
125.166.29.107 attackbotsspam
Automatic report - Port Scan Attack
2020-09-29 19:05:40
125.166.236.3 attack
Automatic report - Port Scan Attack
2020-08-15 12:03:19
125.166.217.72 attackbotsspam
Unauthorized connection attempt from IP address 125.166.217.72 on Port 445(SMB)
2020-08-06 01:03:46
125.166.233.190 attackbotsspam
20/8/5@01:21:35: FAIL: Alarm-Network address from=125.166.233.190
...
2020-08-05 18:02:45
125.166.24.127 attack
Jun 17 11:24:18 mx01 sshd[28881]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.166.24.127  user=r.r
Jun 17 11:24:20 mx01 sshd[28881]: Failed password for r.r from 125.166.24.127 port 52544 ssh2
Jun 17 11:24:20 mx01 sshd[28881]: Received disconnect from 125.166.24.127: 11: Bye Bye [preauth]
Jun 17 11:40:23 mx01 sshd[31788]: Invalid user sport from 125.166.24.127
Jun 17 11:40:23 mx01 sshd[31788]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.166.24.127 
Jun 17 11:40:26 mx01 sshd[31788]: Failed password for invalid user sport from 125.166.24.127 port 42584 ssh2
Jun 17 11:40:26 mx01 sshd[31788]: Received disconnect from 125.166.24.127: 11: Bye Bye [preauth]
Jun 17 11:44:57 mx01 sshd[32505]: Invalid user comfort from 125.166.24.127
Jun 17 11:44:57 mx01 sshd[32505]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.166.24.127 
Jun 17 11:44:59 ........
-------------------------------
2020-06-17 21:02:04
125.166.29.35 attackspambots
Apr 22 05:49:58 hell sshd[21224]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.166.29.35
Apr 22 05:50:01 hell sshd[21224]: Failed password for invalid user admin1 from 125.166.29.35 port 26157 ssh2
...
2020-04-22 17:48:01
125.166.209.106 attackbotsspam
Invalid user uc from 125.166.209.106 port 42048
2020-04-19 01:18:44
125.166.211.176 attack
Honeypot attack, port: 445, PTR: PTR record not found
2020-03-14 02:47:29
125.166.224.158 attack
Attacks websites by trying to access known vulnerables of plugins, brute-force of backends or probing of administrative tools
2020-01-31 13:45:08
125.166.227.35 attack
1580446753 - 01/31/2020 05:59:13 Host: 125.166.227.35/125.166.227.35 Port: 445 TCP Blocked
2020-01-31 13:15:51
125.166.206.193 attack
Honeypot attack, port: 445, PTR: PTR record not found
2020-01-31 08:59:53
125.166.200.185 attackbotsspam
1580360339 - 01/30/2020 05:58:59 Host: 125.166.200.185/125.166.200.185 Port: 445 TCP Blocked
2020-01-30 15:34:40
125.166.214.128 attackspam
unauthorized connection attempt
2020-01-28 17:19:59
125.166.24.100 attack
Unauthorized connection attempt from IP address 125.166.24.100 on Port 445(SMB)
2020-01-28 02:14:58
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 125.166.2.148
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 57965
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;125.166.2.148.			IN	A

;; AUTHORITY SECTION:
.			132	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021702 1800 900 604800 86400

;; Query time: 71 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 10:52:45 CST 2022
;; MSG SIZE  rcvd: 106
Host info
Host 148.2.166.125.in-addr.arpa not found: 2(SERVFAIL)
Nslookup info:
server can't find 125.166.2.148.in-addr.arpa: SERVFAIL
Related IP info:
Related comments:
IP Type Details Datetime
42.118.48.233 spambotsattackproxynormal
LOG
2020-08-13 22:14:59
186.54.19.218 attackbots
Automatic report - Port Scan Attack
2020-08-13 21:44:35
42.118.48.233 spambotsattackproxynormal
BLOCK or LOG
2020-08-13 22:13:16
36.57.65.103 attackbots
Aug 13 15:17:19 srv01 postfix/smtpd\[17034\]: warning: unknown\[36.57.65.103\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug 13 15:24:13 srv01 postfix/smtpd\[17034\]: warning: unknown\[36.57.65.103\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug 13 15:24:25 srv01 postfix/smtpd\[17034\]: warning: unknown\[36.57.65.103\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug 13 15:24:42 srv01 postfix/smtpd\[17034\]: warning: unknown\[36.57.65.103\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug 13 15:25:03 srv01 postfix/smtpd\[17034\]: warning: unknown\[36.57.65.103\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...
2020-08-13 21:43:36
183.187.138.71 attack
Telnet Server BruteForce Attack
2020-08-13 21:36:31
134.209.248.200 attackbots
Aug 13 13:15:19 ajax sshd[13669]: Failed password for root from 134.209.248.200 port 33378 ssh2
2020-08-13 22:07:44
185.39.10.213 attack
Another port scanner
2020-08-13 22:13:05
52.183.30.114 attackbots
Aug 13 15:20:16 mout sshd[15009]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.183.30.114  user=root
Aug 13 15:20:18 mout sshd[15009]: Failed password for root from 52.183.30.114 port 59010 ssh2
2020-08-13 22:10:54
222.186.180.8 attackspambots
Aug 13 07:11:44 dignus sshd[16329]: Failed password for root from 222.186.180.8 port 16596 ssh2
Aug 13 07:11:46 dignus sshd[16329]: Failed password for root from 222.186.180.8 port 16596 ssh2
Aug 13 07:11:50 dignus sshd[16329]: Failed password for root from 222.186.180.8 port 16596 ssh2
Aug 13 07:11:53 dignus sshd[16329]: Failed password for root from 222.186.180.8 port 16596 ssh2
Aug 13 07:11:57 dignus sshd[16329]: Failed password for root from 222.186.180.8 port 16596 ssh2
...
2020-08-13 22:12:18
165.22.40.128 attackbotsspam
165.22.40.128 - - [13/Aug/2020:13:19:02 +0100] "POST /wp-login.php HTTP/1.1" 200 1704 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
165.22.40.128 - - [13/Aug/2020:13:19:03 +0100] "POST /wp-login.php HTTP/1.1" 200 1706 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
165.22.40.128 - - [13/Aug/2020:13:19:03 +0100] "POST /xmlrpc.php HTTP/1.1" 200 247 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-08-13 22:15:02
218.78.213.143 attackbotsspam
Aug 13 19:02:40 gw1 sshd[10734]: Failed password for root from 218.78.213.143 port 29994 ssh2
...
2020-08-13 22:10:34
198.38.90.79 attack
198.38.90.79 - - [13/Aug/2020:13:19:24 +0100] "POST /wp-login.php HTTP/1.1" 200 1996 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
198.38.90.79 - - [13/Aug/2020:13:19:25 +0100] "POST /wp-login.php HTTP/1.1" 200 1949 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
198.38.90.79 - - [13/Aug/2020:13:19:26 +0100] "POST /xmlrpc.php HTTP/1.1" 200 247 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-08-13 21:57:53
42.118.48.233 spambotsattackproxynormal
BLOCK
2020-08-13 22:15:35
125.24.67.201 attack
1597321170 - 08/13/2020 14:19:30 Host: 125.24.67.201/125.24.67.201 Port: 445 TCP Blocked
2020-08-13 21:56:19
82.196.9.161 attack
Aug 13 13:16:19 ajax sshd[14044]: Failed password for root from 82.196.9.161 port 40558 ssh2
2020-08-13 21:35:42

Recently Reported IPs

125.165.158.146 125.166.206.233 125.166.200.207 125.166.0.217
125.166.47.84 125.166.59.51 125.166.8.79 125.166.82.40
125.166.87.253 125.166.102.54 125.166.9.50 125.167.119.198
125.167.122.127 125.167.148.136 125.166.162.49 125.166.187.54
125.167.2.53 125.167.77.16 125.167.32.186 125.166.40.242