124.234.141.254

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: Jilin Telecom Corporation

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspambots	CN_APNIC-HM_<177>1581742234 [1:2010935:3] ET SCAN Suspicious inbound to MSSQL port 1433 [Classification: Potentially Bad Traffic] [Priority: 2] {TCP} 124.234.141.254:46436	2020-02-15 17:46:29

Comments on same subnet:

IP	Type	Details	Datetime
124.234.141.235	attackspam	SQL	2020-09-05 01:27:49
124.234.141.235	attack	SQL	2020-09-04 16:48:36
124.234.141.247	attackspambots	Unauthorized connection attempt detected from IP address 124.234.141.247 to port 1433 [T]	2020-01-30 07:11:59
124.234.141.247	attack	1433/tcp 1433/tcp 1433/tcp... [2019-10-11/11-29]6pkt,1pt.(tcp)	2019-11-30 06:06:30
124.234.141.246	attackbotsspam	firewall-block, port(s): 1433/tcp	2019-11-29 03:55:23
124.234.141.247	attackspambots	" "	2019-10-16 17:55:36

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 124.234.141.254
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 34216
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;124.234.141.254.		IN	A

;; AUTHORITY SECTION:
.			600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020021500 1800 900 604800 86400

;; Query time: 505 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 15 17:46:23 CST 2020
;; MSG SIZE  rcvd: 119

Host info

254.141.234.124.in-addr.arpa domain name pointer 254.141.234.124.broad.cc.jl.dynamic.163data.com.cn.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
254.141.234.124.in-addr.arpa	name = 254.141.234.124.broad.cc.jl.dynamic.163data.com.cn.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
200.116.171.189	attackspam	SmallBizIT.US 1 packets to tcp(23)	2020-09-05 22:18:01
195.54.167.152	attackspam	Cowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2020-09-05T08:28:19Z and 2020-09-05T10:08:55Z	2020-09-05 22:23:31
194.180.224.115	attackspambots	Fail2Ban	2020-09-05 21:57:00
27.254.34.155	attackbots	1599238276 - 09/04/2020 18:51:16 Host: 27.254.34.155/27.254.34.155 Port: 445 TCP Blocked	2020-09-05 22:23:00
118.71.90.204	attackspam	Honeypot attack, port: 445, PTR: ip-address-pool-xxx.fpt.vn.	2020-09-05 22:28:15
79.46.191.8	attackbots	Automatic report - Port Scan Attack	2020-09-05 22:09:01
86.45.254.132	attackspambots	Sep 4 18:51:03 mellenthin postfix/smtpd[32584]: NOQUEUE: reject: RCPT from 86-45-254-132-dynamic.agg1.cab.bdt-fng.eircom.net[86.45.254.132]: 554 5.7.1 Service unavailable; Client host [86.45.254.132] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/86.45.254.132; from= to= proto=ESMTP helo=<86-45-254-132-dynamic.agg1.cab.bdt-fng.eircom.net>	2020-09-05 22:35:25
27.195.159.166	attackbotsspam	$f2bV_matches	2020-09-05 22:04:21
195.9.166.62	attack	Helo	2020-09-05 22:08:47
198.245.62.53	attackbotsspam	198.245.62.53 - - [05/Sep/2020:11:23:10 +0200] "GET /wp-login.php HTTP/1.1" 200 9040 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 198.245.62.53 - - [05/Sep/2020:11:23:11 +0200] "POST /wp-login.php HTTP/1.1" 200 9291 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 198.245.62.53 - - [05/Sep/2020:11:23:12 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-09-05 22:19:43
218.92.0.251	attackbotsspam	Sep 5 16:10:58 ns382633 sshd\[4866\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.251 user=root Sep 5 16:10:59 ns382633 sshd\[4866\]: Failed password for root from 218.92.0.251 port 14704 ssh2 Sep 5 16:11:03 ns382633 sshd\[4866\]: Failed password for root from 218.92.0.251 port 14704 ssh2 Sep 5 16:11:05 ns382633 sshd\[4866\]: Failed password for root from 218.92.0.251 port 14704 ssh2 Sep 5 16:11:09 ns382633 sshd\[4866\]: Failed password for root from 218.92.0.251 port 14704 ssh2	2020-09-05 22:11:29
5.135.177.5	attackspambots	[munged]::443 5.135.177.5 - - [05/Sep/2020:12:16:41 +0200] "POST /[munged]: HTTP/1.1" 200 6147 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-09-05 22:05:13
168.197.31.16	attackbots	Sep 5 09:47:48 ip106 sshd[3789]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.197.31.16 Sep 5 09:47:51 ip106 sshd[3789]: Failed password for invalid user ventas from 168.197.31.16 port 55578 ssh2 ...	2020-09-05 21:59:51
45.162.4.67	attackbotsspam	Sep 5 05:40:51 lanister sshd[17502]: Failed password for invalid user tina from 45.162.4.67 port 55652 ssh2 Sep 5 05:45:42 lanister sshd[17553]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.162.4.67 user=root Sep 5 05:45:45 lanister sshd[17553]: Failed password for root from 45.162.4.67 port 35272 ssh2 Sep 5 05:50:00 lanister sshd[17599]: Invalid user ssl from 45.162.4.67	2020-09-05 22:18:37
105.184.91.37	attackbots	20/9/4@12:51:07: FAIL: IoT-Telnet address from=105.184.91.37 ...	2020-09-05 22:32:54

Recently Reported IPs

18.191.229.13	111.249.216.251	117.1.171.118	114.33.198.121
111.249.215.245	111.249.2.45	185.24.25.55	169.212.223.2
176.180.158.7	233.255.9.155	45.116.232.25	114.45.224.160
111.249.19.147	78.36.231.66	111.248.94.246	49.234.207.124
36.237.213.233	190.18.244.47	186.225.56.18	186.121.204.10