125.87.95.42 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: None

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
125.87.95.40	attackbots	[SunMay3122:25:18.8157292020][:error][pid7818:tid47395492247296][client125.87.95.40:60707][client125.87.95.40]ModSecurity:Accessdeniedwithcode403\(phase2\).File"/tmp/20200531-222517-XtQSrJGbLHS4OomTzlCAAgAAAYk-file-HhZnJ7"rejectedbytheapproverscript"/etc/cxs/cxscgi.sh":0[file"/etc/apache2/conf.d/modsec_vendor_configs/configserver/00_configserver.conf"][line"7"][id"1010101"][msg"ConfigServerExploitScanner\(cxs\)triggered"][severity"CRITICAL"][hostname"inerta.eu"][uri"/wp-admin/admin-ajax.php"][unique_id"XtQSrJGbLHS4OomTzlCAAgAAAYk"]	2020-06-01 06:01:37

Type

Details

Datetime

125.87.95.40

attackbots

[SunMay3122:25:18.8157292020][:error][pid7818:tid47395492247296][client125.87.95.40:60707][client125.87.95.40]ModSecurity:Accessdeniedwithcode403\(phase2\).File"/tmp/20200531-222517-XtQSrJGbLHS4OomTzlCAAgAAAYk-file-HhZnJ7"rejectedbytheapproverscript"/etc/cxs/cxscgi.sh":0[file"/etc/apache2/conf.d/modsec_vendor_configs/configserver/00_configserver.conf"][line"7"][id"1010101"][msg"ConfigServerExploitScanner\(cxs\)triggered"][severity"CRITICAL"][hostname"inerta.eu"][uri"/wp-admin/admin-ajax.php"][unique_id"XtQSrJGbLHS4OomTzlCAAgAAAYk"]

2020-06-01 06:01:37

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 125.87.95.42
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 51134
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;125.87.95.42.			IN	A

;; AUTHORITY SECTION:
.			112	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030802 1800 900 604800 86400

;; Query time: 56 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 04:20:40 CST 2022
;; MSG SIZE  rcvd: 105

Host info

Host 42.95.87.125.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 42.95.87.125.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
179.107.67.80	attack	spam	2020-08-17 17:32:08
59.88.200.49	attack	1597636611 - 08/17/2020 05:56:51 Host: 59.88.200.49/59.88.200.49 Port: 445 TCP Blocked ...	2020-08-17 17:15:49
95.84.128.25	attackspambots	spam	2020-08-17 17:31:05
84.47.111.110	attackspambots	IP: 84.47.111.110 Ports affected Simple Mail Transfer (25) Abuse Confidence rating 55% Found in DNSBL('s) ASN Details AS6855 Slovak Telecom a. s. Slovakia (SK) CIDR 84.47.0.0/17 Log Date: 17/08/2020 7:53:20 AM UTC	2020-08-17 16:52:37
112.21.188.235	attackspambots	(sshd) Failed SSH login from 112.21.188.235 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Aug 17 06:30:28 s1 sshd[27256]: Invalid user itu from 112.21.188.235 port 45034 Aug 17 06:30:30 s1 sshd[27256]: Failed password for invalid user itu from 112.21.188.235 port 45034 ssh2 Aug 17 06:51:22 s1 sshd[28160]: Invalid user print from 112.21.188.235 port 36646 Aug 17 06:51:24 s1 sshd[28160]: Failed password for invalid user print from 112.21.188.235 port 36646 ssh2 Aug 17 06:56:54 s1 sshd[28350]: Invalid user cos from 112.21.188.235 port 49260	2020-08-17 17:07:15
187.44.134.150	attack	spam	2020-08-17 17:21:08
197.255.160.226	attackspambots	Aug 17 14:36:07 dhoomketu sshd[2422337]: Invalid user phpmyadmin from 197.255.160.226 port 33846 Aug 17 14:36:07 dhoomketu sshd[2422337]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.255.160.226 Aug 17 14:36:07 dhoomketu sshd[2422337]: Invalid user phpmyadmin from 197.255.160.226 port 33846 Aug 17 14:36:09 dhoomketu sshd[2422337]: Failed password for invalid user phpmyadmin from 197.255.160.226 port 33846 ssh2 Aug 17 14:40:37 dhoomketu sshd[2422523]: Invalid user mosquitto from 197.255.160.226 port 43442 ...	2020-08-17 17:16:21
110.49.70.242	attackspambots	Aug 17 07:19:29 ns381471 sshd[8730]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.49.70.242 Aug 17 07:19:31 ns381471 sshd[8730]: Failed password for invalid user nagios from 110.49.70.242 port 33330 ssh2	2020-08-17 17:27:12
118.70.220.116	attackspambots	spam	2020-08-17 17:01:08
203.76.110.186	attackbots	spam	2020-08-17 17:00:40
177.66.118.20	attackbotsspam	spam	2020-08-17 17:29:37
206.189.87.108	attackbotsspam	Aug 17 06:56:53 minden010 sshd[31177]: Failed password for root from 206.189.87.108 port 44446 ssh2 Aug 17 07:00:32 minden010 sshd[32473]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.87.108 Aug 17 07:00:35 minden010 sshd[32473]: Failed password for invalid user morris from 206.189.87.108 port 39962 ssh2 ...	2020-08-17 17:28:26
145.255.28.2	attackspam	spam	2020-08-17 16:59:48
200.105.209.170	attack	Aug 17 07:49:50 blackbee postfix/smtpd[6708]: NOQUEUE: reject: RCPT from static-200-105-209-170.acelerate.net[200.105.209.170]: 554 5.7.1 Service unavailable; Client host [200.105.209.170] blocked using dnsbl.sorbs.net; Currently Sending Spam See: http://www.sorbs.net/lookup.shtml?200.105.209.170 / Exploitable Server See: http://www.sorbs.net/lookup.shtml?200.105.209.170; from= to= proto=ESMTP helo= ...	2020-08-17 17:22:27
185.234.216.226	attack	spam	2020-08-17 17:26:59

Recently Reported IPs

125.87.95.41	125.87.95.49	125.87.95.46	125.87.95.51
118.165.69.67	125.87.95.52	125.87.95.54	125.87.95.6
125.87.95.57	125.87.95.61	125.87.95.79	125.87.95.77
125.87.95.63	125.87.95.8	125.87.95.82	125.87.95.97
118.165.73.184	125.87.95.91	125.87.95.80	125.87.95.84