187.125.245.140

Basic Info

City: unknown

Region: unknown

Country: Brazil

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 187.125.245.140
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 53929
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;187.125.245.140.		IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025020500 1800 900 604800 86400

;; Query time: 16 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 06 00:03:20 CST 2025
;; MSG SIZE  rcvd: 108

Host info

140.245.125.187.in-addr.arpa domain name pointer 187125245140.telemar.net.br.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
140.245.125.187.in-addr.arpa	name = 187125245140.telemar.net.br.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
191.53.195.253	attackspam	Aug 3 10:02:33 mailman postfix/smtpd[11905]: warning: unknown[191.53.195.253]: SASL PLAIN authentication failed: authentication failure	2019-08-04 07:36:25
185.220.101.44	attack	Aug 3 20:35:46 MK-Soft-VM5 sshd\[22812\]: Invalid user cisco from 185.220.101.44 port 35483 Aug 3 20:35:46 MK-Soft-VM5 sshd\[22812\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.220.101.44 Aug 3 20:35:47 MK-Soft-VM5 sshd\[22812\]: Failed password for invalid user cisco from 185.220.101.44 port 35483 ssh2 ...	2019-08-04 07:10:45
5.36.47.97	attackbotsspam	Automatic report - Port Scan Attack	2019-08-04 07:06:36
2.111.91.225	attackbotsspam	Aug 4 00:32:11 dedicated sshd[21096]: Invalid user xmas from 2.111.91.225 port 59255	2019-08-04 06:56:02
5.62.41.134	attackbotsspam	\[2019-08-03 18:54:28\] NOTICE\[2288\] chan_sip.c: Registration from '\' failed for '5.62.41.134:12238' - Wrong password \[2019-08-03 18:54:28\] SECURITY\[2326\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-08-03T18:54:28.962-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="40567",SessionID="0x7ff4d07e79a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/5.62.41.134/58554",Challenge="32f91c4d",ReceivedChallenge="32f91c4d",ReceivedHash="707b972b83a327c9383462d982326d78" \[2019-08-03 18:55:17\] NOTICE\[2288\] chan_sip.c: Registration from '\' failed for '5.62.41.134:12356' - Wrong password \[2019-08-03 18:55:17\] SECURITY\[2326\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-08-03T18:55:17.961-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="51921",SessionID="0x7ff4d07e79a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/5.62.41.134	2019-08-04 07:05:09
109.96.127.74	attackspam	Unauthorised access (Aug 3) SRC=109.96.127.74 LEN=40 PREC=0x20 TTL=244 ID=20214 TCP DPT=445 WINDOW=1024 SYN	2019-08-04 06:55:09
5.3.6.166	attackspambots	Aug 4 00:48:31 nextcloud sshd\[28618\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.3.6.166 user=root Aug 4 00:48:33 nextcloud sshd\[28618\]: Failed password for root from 5.3.6.166 port 39806 ssh2 Aug 4 00:53:32 nextcloud sshd\[7586\]: Invalid user nvidia from 5.3.6.166 Aug 4 00:53:32 nextcloud sshd\[7586\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.3.6.166 ...	2019-08-04 07:05:41
71.6.135.131	attackbots	fail2ban honeypot	2019-08-04 07:44:33
63.240.240.74	attack	Aug 3 23:53:10 dedicated sshd[16440]: Invalid user sidney from 63.240.240.74 port 41584	2019-08-04 07:07:57
1.54.92.190	attackspam	Honeypot attack, port: 23, PTR: PTR record not found	2019-08-04 07:28:59
85.105.188.215	attackspambots	Honeypot attack, port: 23, PTR: 85.105.188.215.static.ttnet.com.tr.	2019-08-04 07:13:33
62.173.145.245	attackbotsspam	Aug 3 17:02:49 mail kernel: [346287.405568] [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:05:0d:89:f8:66:f2:68:66:ff:08:00 SRC=62.173.145.245 DST=77.73.69.240 LEN=444 TOS=0x00 PREC=0x00 TTL=124 ID=9399 PROTO=UDP SPT=5060 DPT=4606 LEN=424 Aug 3 17:02:49 mail kernel: [346287.406247] [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:05:0d:89:f8:66:f2:68:66:ff:08:00 SRC=62.173.145.245 DST=77.73.69.240 LEN=443 TOS=0x00 PREC=0x00 TTL=124 ID=9402 PROTO=UDP SPT=5060 DPT=4607 LEN=423 Aug 3 17:02:49 mail kernel: [346287.406417] [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:05:0d:89:f8:66:f2:68:66:ff:08:00 SRC=62.173.145.245 DST=77.73.69.240 LEN=443 TOS=0x00 PREC=0x00 TTL=124 ID=9411 PROTO=UDP SPT=5060 DPT=4611 LEN=423 Aug 3 17:02:49 mail kernel: [346287.406593] [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:05:0d:89:f8:66:f2:68:66:ff:08:00 SRC=62.173.145.245 DST=77.73.69.240 LEN=443 TOS=0x00 PREC=0x00 TTL=124 ID=9405 PROTO=UDP SPT=5060 DPT=4609 LEN=423 Aug 3 17:02:49 mail kernel: [346287.406849] [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:05:0d:89:f8:6	2019-08-04 07:23:15
220.246.24.3	attackspambots	firewall-block, port(s): 445/tcp	2019-08-04 07:27:44
185.86.164.111	attack	Wordpress attack	2019-08-04 06:56:54
190.230.76.22	attackspambots	WordPress wp-login brute force :: 190.230.76.22 0.128 BYPASS [04/Aug/2019:01:02:47 1000] [censored_1] "POST /wp-login.php HTTP/1.1" 200 3972 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2019-08-04 07:25:00

Recently Reported IPs

8.63.9.240	38.132.79.250	97.82.118.60	33.240.218.10
123.5.134.19	142.194.90.143	160.213.193.198	202.199.237.84
150.35.222.119	199.200.76.203	20.125.29.224	171.107.57.192
48.101.127.91	247.16.174.216	88.231.9.49	22.86.241.113
151.235.197.79	215.140.48.45	158.107.152.206	150.41.167.29