City: unknown
Region: unknown
Country: Japan
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 125.48.2.142
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 36364
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;125.48.2.142. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020901 1800 900 604800 86400
;; Query time: 10 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 10 04:32:25 CST 2025
;; MSG SIZE rcvd: 105142.2.48.125.in-addr.arpa domain name pointer KHP125048002142.ppp-bb.dion.ne.jp.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
142.2.48.125.in-addr.arpa name = KHP125048002142.ppp-bb.dion.ne.jp.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 115.85.77.195 | attack | " " |
2019-06-25 19:18:44 |
| 80.108.220.67 | attack | ssh failed login |
2019-06-25 18:58:29 |
| 189.46.223.217 | attackbots | port scan and connect, tcp 23 (telnet) |
2019-06-25 19:31:26 |
| 103.23.100.217 | attackspam | Jun 25 11:45:22 Ubuntu-1404-trusty-64-minimal sshd\[12745\]: Invalid user server from 103.23.100.217 Jun 25 11:45:22 Ubuntu-1404-trusty-64-minimal sshd\[12745\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.23.100.217 Jun 25 11:45:24 Ubuntu-1404-trusty-64-minimal sshd\[12745\]: Failed password for invalid user server from 103.23.100.217 port 41009 ssh2 Jun 25 12:59:02 Ubuntu-1404-trusty-64-minimal sshd\[32698\]: Invalid user ftp from 103.23.100.217 Jun 25 12:59:02 Ubuntu-1404-trusty-64-minimal sshd\[32698\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.23.100.217 |
2019-06-25 19:14:11 |
| 180.248.26.50 | attackspam | Unauthorized connection attempt from IP address 180.248.26.50 on Port 445(SMB) |
2019-06-25 19:11:32 |
| 221.229.219.188 | attack | SSH Bruteforce |
2019-06-25 18:46:06 |
| 113.173.246.246 | attackspambots | Port scan on 1 port(s): 9527 |
2019-06-25 19:10:37 |
| 116.55.241.86 | attackspambots | Jun 25 10:59:53 gitlab-ci sshd\[19685\]: Invalid user murai1 from 116.55.241.86Jun 25 11:00:48 gitlab-ci sshd\[19688\]: Invalid user postgres from 116.55.241.86 ... |
2019-06-25 19:17:44 |
| 185.56.81.42 | attackbots | Jun 24 14:05:53 box kernel: [495076.176460] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:68:c5:28:99:3a:4d:30:af:08:00 SRC=185.56.81.42 DST=[munged] LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=54321 PROTO=TCP SPT=37751 DPT=8089 WINDOW=65535 RES=0x00 SYN URGP=0 Jun 24 16:02:28 box kernel: [502071.112393] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:68:c5:28:99:3a:4d:30:af:08:00 SRC=185.56.81.42 DST=[munged] LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=54321 PROTO=TCP SPT=40552 DPT=8089 WINDOW=65535 RES=0x00 SYN URGP=0 Jun 24 20:00:25 box kernel: [516347.922731] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:68:c5:28:99:3a:4d:30:af:08:00 SRC=185.56.81.42 DST=[munged] LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=54321 PROTO=TCP SPT=46164 DPT=8089 WINDOW=65535 RES=0x00 SYN URGP=0 Jun 25 05:34:39 box kernel: [550802.449625] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:68:c5:28:99:3a:4d:30:af:08:00 SRC=185.56.81.42 DST=[munged] LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=54321 PROTO=TCP SPT=59324 DPT=8089 WINDOW=65535 RES=0x00 SYN URGP=0 Jun 25 10:43:40 box |
2019-06-25 18:43:55 |
| 192.241.233.153 | attackspambots | php WP PHPmyadamin ABUSE blocked for 12h |
2019-06-25 18:54:53 |
| 111.231.83.123 | attackspam | Invalid user sou from 111.231.83.123 port 37303 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.83.123 Failed password for invalid user sou from 111.231.83.123 port 37303 ssh2 Invalid user tanis from 111.231.83.123 port 54154 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.83.123 |
2019-06-25 19:24:52 |
| 51.158.124.35 | attackspam | Jun 25 06:51:51 Tower sshd[26501]: Connection from 51.158.124.35 port 56038 on 192.168.10.220 port 22 Jun 25 06:51:52 Tower sshd[26501]: Invalid user uploader from 51.158.124.35 port 56038 Jun 25 06:51:52 Tower sshd[26501]: error: Could not get shadow information for NOUSER Jun 25 06:51:52 Tower sshd[26501]: Failed password for invalid user uploader from 51.158.124.35 port 56038 ssh2 Jun 25 06:51:52 Tower sshd[26501]: Received disconnect from 51.158.124.35 port 56038:11: Bye Bye [preauth] Jun 25 06:51:52 Tower sshd[26501]: Disconnected from invalid user uploader 51.158.124.35 port 56038 [preauth] |
2019-06-25 19:06:15 |
| 120.136.26.240 | attackbotsspam | Jun 25 08:58:08 rpi sshd\[16538\]: Invalid user jira from 120.136.26.240 port 27971 Jun 25 08:58:08 rpi sshd\[16538\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.136.26.240 Jun 25 08:58:10 rpi sshd\[16538\]: Failed password for invalid user jira from 120.136.26.240 port 27971 ssh2 |
2019-06-25 19:25:36 |
| 104.144.49.86 | attack | bad bot |
2019-06-25 19:26:29 |
| 189.176.192.242 | attack | Unauthorised access (Jun 25) SRC=189.176.192.242 LEN=44 TTL=241 ID=44129 TCP DPT=445 WINDOW=1024 SYN |
2019-06-25 19:16:32 |