114.125.54.142

Basic Info

City: unknown

Region: unknown

Country: None

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
114.125.54.202	attack	Aug 2 01:01:42 srv1 sshd[1185]: Invalid user thostname0nich from 114.125.54.202 Aug 2 01:01:43 srv1 sshd[1185]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.125.54.202 Aug 2 01:01:45 srv1 sshd[1185]: Failed password for invalid user thostname0nich from 114.125.54.202 port 51660 ssh2 Aug 2 01:01:45 srv1 sshd[1186]: Connection closed by 114.125.54.202 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=114.125.54.202	2019-08-02 16:45:26

Type

Details

Datetime

114.125.54.202

attack

Aug  2 01:01:42 srv1 sshd[1185]: Invalid user thostname0nich from 114.125.54.202
Aug  2 01:01:43 srv1 sshd[1185]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.125.54.202 
Aug  2 01:01:45 srv1 sshd[1185]: Failed password for invalid user thostname0nich from 114.125.54.202 port 51660 ssh2
Aug  2 01:01:45 srv1 sshd[1186]: Connection closed by 114.125.54.202


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=114.125.54.202

2019-08-02 16:45:26

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 114.125.54.142
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 915
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;114.125.54.142.			IN	A

;; AUTHORITY SECTION:
.			254	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030501 1800 900 604800 86400

;; Query time: 20 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Mar 06 10:57:39 CST 2022
;; MSG SIZE  rcvd: 107

Host info

Host 142.54.125.114.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 142.54.125.114.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
185.176.27.242	attackbotsspam	Oct 14 09:15:17 mc1 kernel: \[2323696.190215\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=185.176.27.242 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=57339 PROTO=TCP SPT=47834 DPT=58066 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 14 09:17:29 mc1 kernel: \[2323827.878719\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=185.176.27.242 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=12491 PROTO=TCP SPT=47834 DPT=45852 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 14 09:18:02 mc1 kernel: \[2323860.300879\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=185.176.27.242 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=12123 PROTO=TCP SPT=47834 DPT=38085 WINDOW=1024 RES=0x00 SYN URGP=0 ...	2019-10-14 15:23:20
132.232.40.86	attack	Oct 14 05:52:53 localhost sshd\[11198\]: Invalid user 123 from 132.232.40.86 port 45748 Oct 14 05:52:53 localhost sshd\[11198\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.40.86 Oct 14 05:52:54 localhost sshd\[11198\]: Failed password for invalid user 123 from 132.232.40.86 port 45748 ssh2	2019-10-14 15:28:12
181.40.76.162	attackspambots	2019-10-14T05:28:33.714867abusebot-3.cloudsearch.cf sshd\[17837\]: Invalid user p4\$\$word@2020 from 181.40.76.162 port 44106	2019-10-14 15:42:54
59.56.74.165	attackbotsspam	Tried sshing with brute force.	2019-10-14 15:38:22
182.61.106.114	attack	Oct 14 05:23:15 mxgate1 sshd[15231]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.106.114 user=r.r Oct 14 05:23:17 mxgate1 sshd[15231]: Failed password for r.r from 182.61.106.114 port 51532 ssh2 Oct 14 05:23:17 mxgate1 sshd[15231]: Received disconnect from 182.61.106.114 port 51532:11: Bye Bye [preauth] Oct 14 05:23:17 mxgate1 sshd[15231]: Disconnected from 182.61.106.114 port 51532 [preauth] Oct 14 05:42:01 mxgate1 sshd[15893]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.106.114 user=r.r Oct 14 05:42:03 mxgate1 sshd[15893]: Failed password for r.r from 182.61.106.114 port 52710 ssh2 Oct 14 05:42:04 mxgate1 sshd[15893]: Received disconnect from 182.61.106.114 port 52710:11: Bye Bye [preauth] Oct 14 05:42:04 mxgate1 sshd[15893]: Disconnected from 182.61.106.114 port 52710 [preauth] Oct 14 05:46:21 mxgate1 sshd[15953]: pam_unix(sshd:auth): authentication failure; lognam........ -------------------------------	2019-10-14 15:57:24
106.13.136.3	attackspam	Automatic report - Banned IP Access	2019-10-14 15:33:15
122.4.241.6	attack	Oct 14 04:34:39 firewall sshd[12512]: Failed password for root from 122.4.241.6 port 52418 ssh2 Oct 14 04:38:47 firewall sshd[12601]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.4.241.6 user=root Oct 14 04:38:50 firewall sshd[12601]: Failed password for root from 122.4.241.6 port 27179 ssh2 ...	2019-10-14 15:51:30
89.207.95.37	attack	[portscan] Port scan	2019-10-14 15:33:52
158.69.117.8	attackspam	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/158.69.117.8/ FR - 1H : (61) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : FR NAME ASN : ASN16276 IP : 158.69.117.8 CIDR : 158.69.0.0/16 PREFIX COUNT : 132 UNIQUE IP COUNT : 3052544 WYKRYTE ATAKI Z ASN16276 : 1H - 1 3H - 5 6H - 9 12H - 15 24H - 44 DateTime : 2019-10-14 05:53:31 INFO : Port MAX SCAN Scan Detected and Blocked by ADMIN - data recovery	2019-10-14 15:27:01
119.146.145.50	attackbotsspam	Oct 14 REMOVED dovecot: imap-login: Disconnected $auth failed, 1 attempts in 6 secs$: user=\, method=PLAIN, rip=119.146.145.50, lip=REMOVED, TLS, session=\ Oct 14 REMOVED dovecot: imap-login: Disconnected $auth failed, 1 attempts in 6 secs$: user=\, method=PLAIN, rip=119.146.145.50, lip=REMOVED, TLS, session=\ Oct 14 REMOVED dovecot: imap-login: Disconnected $auth failed, 1 attempts in 6 secs$: user=\, method=PLAIN, rip=119.146.145.50, lip=REMOVED, TLS, session=\<8kpuJ9iUg9N3kpEy\>	2019-10-14 15:29:35
154.144.192.181	attack	Automatic report - Port Scan Attack	2019-10-14 15:46:45
202.120.234.12	attackbots	Oct 14 07:01:07 [munged] sshd[28044]: Failed password for root from 202.120.234.12 port 60836 ssh2	2019-10-14 15:19:19
180.169.17.242	attackbotsspam	Oct 14 07:59:42 nextcloud sshd\[20166\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.169.17.242 user=root Oct 14 07:59:44 nextcloud sshd\[20166\]: Failed password for root from 180.169.17.242 port 40536 ssh2 Oct 14 08:04:08 nextcloud sshd\[26520\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.169.17.242 user=root ...	2019-10-14 15:24:21
148.70.11.143	attackspambots	Invalid user anne from 148.70.11.143 port 34894	2019-10-14 15:27:30
114.33.104.21	attack	/editBlackAndWhiteList	2019-10-14 15:42:05

Recently Reported IPs

114.125.53.250	114.125.52.86	114.125.53.33	114.125.54.77
114.125.56.235	114.125.56.117	114.103.20.115	114.125.57.22
114.125.54.7	114.125.57.35	114.125.57.108	114.125.56.28
114.125.56.49	114.125.57.15	114.103.20.116	114.103.20.125
114.103.20.133	114.103.20.135	114.103.20.14	114.103.20.142