City: unknown
Region: unknown
Country: Japan
Internet Service Provider: NTT-ME Corporation
Hostname: unknown
Organization: unknown
Usage Type: Fixed Line ISP
| Type | Details | Datetime |
|---|---|---|
| attack | Unauthorised access (Sep 29) SRC=124.45.44.44 LEN=40 PREC=0x20 TTL=38 ID=41529 TCP DPT=8080 WINDOW=43007 SYN Unauthorised access (Sep 27) SRC=124.45.44.44 LEN=40 PREC=0x20 TTL=38 ID=46261 TCP DPT=8080 WINDOW=43007 SYN Unauthorised access (Sep 26) SRC=124.45.44.44 LEN=40 PREC=0x20 TTL=38 ID=2546 TCP DPT=8080 WINDOW=43007 SYN Unauthorised access (Sep 25) SRC=124.45.44.44 LEN=40 PREC=0x20 TTL=38 ID=27190 TCP DPT=8080 WINDOW=43007 SYN Unauthorised access (Sep 24) SRC=124.45.44.44 LEN=40 PREC=0x20 TTL=38 ID=7301 TCP DPT=8080 WINDOW=43007 SYN Unauthorised access (Sep 24) SRC=124.45.44.44 LEN=40 PREC=0x20 TTL=38 ID=37734 TCP DPT=8080 WINDOW=43007 SYN |
2019-09-29 21:27:11 |
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 124.45.44.44
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 61118
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;124.45.44.44. IN A
;; AUTHORITY SECTION:
. 354 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019092900 1800 900 604800 86400
;; Query time: 235 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Sep 29 21:27:07 CST 2019
;; MSG SIZE rcvd: 116
44.44.45.124.in-addr.arpa domain name pointer g44.124-45-44.ppp.wakwak.ne.jp.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
44.44.45.124.in-addr.arpa name = g44.124-45-44.ppp.wakwak.ne.jp.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 141.98.81.150 | attackbotsspam | 2020-04-22 UTC: (24x) - root(24x) |
2020-04-23 19:57:13 |
| 185.202.1.151 | attack | ET DROP Dshield Block Listed Source group 1 - port: 10000 proto: TCP cat: Misc Attack |
2020-04-23 19:47:45 |
| 185.202.1.119 | attackspam | ET DROP Dshield Block Listed Source group 1 - port: 10000 proto: TCP cat: Misc Attack |
2020-04-23 19:49:14 |
| 80.82.78.192 | attackbots | 04/23/2020-08:01:13.994974 80.82.78.192 Protocol: 6 ET SCAN NMAP -sS window 1024 |
2020-04-23 20:12:27 |
| 49.206.26.9 | attackbotsspam | ET CINS Active Threat Intelligence Poor Reputation IP group 29 - port: 1433 proto: TCP cat: Misc Attack |
2020-04-23 20:22:13 |
| 92.63.194.101 | attackspam | ET DROP Dshield Block Listed Source group 1 - port: 10000 proto: TCP cat: Misc Attack |
2020-04-23 20:02:42 |
| 185.175.93.14 | attackspambots | Apr 23 13:41:15 debian-2gb-nbg1-2 kernel: \[9901024.524728\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=185.175.93.14 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=20596 PROTO=TCP SPT=53743 DPT=9099 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-04-23 19:51:04 |
| 64.227.17.251 | attack | ET CINS Active Threat Intelligence Poor Reputation IP group 52 - port: 5847 proto: TCP cat: Misc Attack |
2020-04-23 20:18:26 |
| 80.241.214.222 | attack | DATE:2020-04-23 12:42:40, IP:80.241.214.222, PORT:ssh SSH brute force auth (docker-dc) |
2020-04-23 20:11:41 |
| 185.36.81.20 | attack | ET SCAN Sipvicious User-Agent Detected (friendly-scanner) - port: 5060 proto: UDP cat: Attempted Information Leak |
2020-04-23 19:54:20 |
| 185.175.93.104 | attack | Fail2Ban Ban Triggered |
2020-04-23 19:50:03 |
| 185.202.1.154 | attackspambots | ET DROP Dshield Block Listed Source group 1 - port: 10000 proto: TCP cat: Misc Attack |
2020-04-23 19:46:27 |
| 87.251.74.242 | attack | 04/23/2020-07:51:04.571725 87.251.74.242 Protocol: 6 ET SCAN NMAP -sS window 1024 |
2020-04-23 20:08:38 |
| 87.251.74.241 | attack | [Fri Apr 17 02:50:20 2020] - DDoS Attack From IP: 87.251.74.241 Port: 40859 |
2020-04-23 20:08:57 |
| 45.143.220.140 | attack | MultiHost/MultiPort Probe, Scan, Hack - |
2020-04-23 20:23:41 |