125.214.249.53

Basic Info

City: Causeway Bay

Region: Eastern

Country: Hong Kong

Internet Service Provider: Hua Nan Securities (HK) Ltd

Hostname: unknown

Organization: unknown

Usage Type: Commercial

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbots	Unauthorized connection attempt from IP address 125.214.249.53 on Port 445(SMB)	2020-08-18 03:49:31
attack	Unauthorized connection attempt from IP address 125.214.249.53 on Port 445(SMB)	2020-07-18 07:15:13

Comments on same subnet:

IP	Type	Details	Datetime
125.214.249.52	attackbots	Unauthorized connection attempt from IP address 125.214.249.52 on Port 445(SMB)	2020-06-03 04:05:21

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 125.214.249.53
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 53948
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;125.214.249.53.			IN	A

;; AUTHORITY SECTION:
.			256	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020071702 1800 900 604800 86400

;; Query time: 99 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jul 18 07:15:09 CST 2020
;; MSG SIZE  rcvd: 118

Host info

Host 53.249.214.125.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 53.249.214.125.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
168.194.207.58	attackbotsspam	Jun 25 18:05:19 server sshd[14308]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.194.207.58 Jun 25 18:05:22 server sshd[14308]: Failed password for invalid user gabriela from 168.194.207.58 port 35481 ssh2 Jun 25 18:16:56 server sshd[15102]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.194.207.58 user=root Jun 25 18:16:59 server sshd[15102]: Failed password for invalid user root from 168.194.207.58 port 37313 ssh2	2020-07-15 08:41:06
185.143.73.48	attack	2020-07-15 02:33:15 dovecot_login authenticator failed for \(User\) \[185.143.73.48\]: 535 Incorrect authentication data \(set_id=citi@no-server.de\) 2020-07-15 02:33:28 dovecot_login authenticator failed for \(User\) \[185.143.73.48\]: 535 Incorrect authentication data \(set_id=cdn01@no-server.de\) 2020-07-15 02:33:31 dovecot_login authenticator failed for \(User\) \[185.143.73.48\]: 535 Incorrect authentication data \(set_id=cdn01@no-server.de\) 2020-07-15 02:33:45 dovecot_login authenticator failed for \(User\) \[185.143.73.48\]: 535 Incorrect authentication data \(set_id=cdn01@no-server.de\) 2020-07-15 02:33:48 dovecot_login authenticator failed for \(User\) \[185.143.73.48\]: 535 Incorrect authentication data \(set_id=eid@no-server.de\) 2020-07-15 02:34:00 dovecot_login authenticator failed for \(User\) \[185.143.73.48\]: 535 Incorrect authentication data \(set_id=eid@no-server.de\) 2020-07-15 02:34:10 dovecot_login authenticator failed for \(User\) \[185.143.73.48\]: 535 Incorrec ...	2020-07-15 08:41:52
174.138.16.52	attackbots	2020-07-15T00:39:44.200530abusebot-6.cloudsearch.cf sshd[7657]: Invalid user dl from 174.138.16.52 port 37348 2020-07-15T00:39:44.206993abusebot-6.cloudsearch.cf sshd[7657]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=174.138.16.52 2020-07-15T00:39:44.200530abusebot-6.cloudsearch.cf sshd[7657]: Invalid user dl from 174.138.16.52 port 37348 2020-07-15T00:39:46.643571abusebot-6.cloudsearch.cf sshd[7657]: Failed password for invalid user dl from 174.138.16.52 port 37348 ssh2 2020-07-15T00:43:02.287003abusebot-6.cloudsearch.cf sshd[7760]: Invalid user rus from 174.138.16.52 port 35328 2020-07-15T00:43:02.299882abusebot-6.cloudsearch.cf sshd[7760]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=174.138.16.52 2020-07-15T00:43:02.287003abusebot-6.cloudsearch.cf sshd[7760]: Invalid user rus from 174.138.16.52 port 35328 2020-07-15T00:43:04.250006abusebot-6.cloudsearch.cf sshd[7760]: Failed password for invalid ...	2020-07-15 08:46:07
176.31.252.167	attackbots	Automated report (2020-07-15T08:27:09+08:00). Faked user agent detected.	2020-07-15 08:45:56
78.173.131.97	attackbotsspam	"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:	2020-07-15 08:31:05
213.200.15.205	attack	"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:	2020-07-15 08:12:37
93.174.93.25	attackbots	Jul 15 02:29:26 mail.srvfarm.net dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=93.174.93.25, lip=185.118.197.126, session= Jul 15 02:29:57 mail.srvfarm.net dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=93.174.93.25, lip=185.118.197.126, session= Jul 15 02:30:22 mail.srvfarm.net dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=93.174.93.25, lip=185.118.197.126, session= Jul 15 02:31:00 mail.srvfarm.net dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=93.174.93.25, lip=185.118.197.126, session= Jul 15 02:32:11 mail.srvfarm.net dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=93.174.93.25, lip=	2020-07-15 08:44:54
1.179.185.50	attack	SSH Invalid Login	2020-07-15 08:26:24
118.68.122.111	attack	Honeypot attack, port: 445, PTR: PTR record not found	2020-07-15 08:43:56
222.186.42.136	attack	Jul 15 02:10:59 piServer sshd[26617]: Failed password for root from 222.186.42.136 port 28004 ssh2 Jul 15 02:11:02 piServer sshd[26617]: Failed password for root from 222.186.42.136 port 28004 ssh2 Jul 15 02:11:13 piServer sshd[26630]: Failed password for root from 222.186.42.136 port 27366 ssh2 ...	2020-07-15 08:19:28
203.106.41.157	attackbotsspam	Invalid user fabiana from 203.106.41.157 port 47976	2020-07-15 08:12:52
149.202.50.155	attack	2020-07-14T22:45:23.692513mail.csmailer.org sshd[12594]: Invalid user lmx from 149.202.50.155 port 44648 2020-07-14T22:45:23.697601mail.csmailer.org sshd[12594]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=155.ip-149-202-50.eu 2020-07-14T22:45:23.692513mail.csmailer.org sshd[12594]: Invalid user lmx from 149.202.50.155 port 44648 2020-07-14T22:45:25.909357mail.csmailer.org sshd[12594]: Failed password for invalid user lmx from 149.202.50.155 port 44648 ssh2 2020-07-14T22:48:31.614367mail.csmailer.org sshd[12860]: Invalid user dspace from 149.202.50.155 port 42490 ...	2020-07-15 08:19:42
192.35.168.226	attackbots	TCP (SYN) 192.35.168.226:41822 -> port 9649, len 44	2020-07-15 08:39:09
210.13.96.74	attack	Jul 13 17:22:25 hidden sshd[6146]: Failed password for invalid user old from 210.13.96.74 port 45777 ssh2	2020-07-15 08:28:29
217.174.227.26	attack	Honeypot attack, port: 445, PTR: PTR record not found	2020-07-15 08:31:25

Recently Reported IPs

77.28.238.79	49.186.215.15	182.31.131.54	161.138.10.34
52.181.38.190	81.214.126.250	75.175.150.34	198.119.254.89
91.10.190.71	126.75.59.63	109.64.166.162	201.97.135.247
134.89.18.146	88.245.245.216	81.1.21.36	71.181.63.192
119.17.66.198	171.249.235.125	68.29.14.86	201.105.74.168