City: unknown
Region: unknown
Country: Japan
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
# start
NetRange: 142.248.148.0 - 142.248.151.255
CIDR: 142.248.148.0/22
NetName: BYTENYA-IPV4-10
NetHandle: NET-142-248-148-0-1
Parent: NET142 (NET-142-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: ByteNya LLC (BL-1118)
RegDate: 2025-10-10
Updated: 2025-10-10
Ref: https://rdap.arin.net/registry/ip/142.248.148.0
OrgName: ByteNya LLC
OrgId: BL-1118
Address: 1209 MOUNTAIN ROAD PL NE STE N
City: ALBUQUERQUE
StateProv: NM
PostalCode: 87110
Country: US
RegDate: 2024-11-04
Updated: 2024-11-12
Ref: https://rdap.arin.net/registry/entity/BL-1118
OrgNOCHandle: BYTEN-ARIN
OrgNOCName: ByteNya
OrgNOCPhone: +1-934-400-3399
OrgNOCEmail: noc@bytenya.com
OrgNOCRef: https://rdap.arin.net/registry/entity/BYTEN-ARIN
OrgAbuseHandle: BYTEN-ARIN
OrgAbuseName: ByteNya
OrgAbusePhone: +1-934-400-3399
OrgAbuseEmail: noc@bytenya.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/BYTEN-ARIN
OrgRoutingHandle: BYTEN-ARIN
OrgRoutingName: ByteNya
OrgRoutingPhone: +1-934-400-3399
OrgRoutingEmail: noc@bytenya.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/BYTEN-ARIN
OrgTechHandle: BYTEN-ARIN
OrgTechName: ByteNya
OrgTechPhone: +1-934-400-3399
OrgTechEmail: noc@bytenya.com
OrgTechRef: https://rdap.arin.net/registry/entity/BYTEN-ARIN
OrgDNSHandle: BYTEN-ARIN
OrgDNSName: ByteNya
OrgDNSPhone: +1-934-400-3399
OrgDNSEmail: noc@bytenya.com
OrgDNSRef: https://rdap.arin.net/registry/entity/BYTEN-ARIN
# end
# start
NetRange: 142.248.148.0 - 142.248.151.255
CIDR: 142.248.148.0/22
NetName: SAKURA
NetHandle: NET-142-248-148-0-2
Parent: BYTENYA-IPV4-10 (NET-142-248-148-0-1)
NetType: Reallocated
OriginAS:
Organization: SAKURA LTD. (SL-2135)
RegDate: 2025-10-12
Updated: 2025-12-12
Comment: Geofeed https://geo.yxvm.net/geo.csv
Ref: https://rdap.arin.net/registry/ip/142.248.148.0
OrgName: SAKURA LTD.
OrgId: SL-2135
Address: 2020 N ACADEMY BLVD, STE 261 #1956
City: COLORADO SPRINGS
StateProv: CO
PostalCode: 80909
Country: US
RegDate: 2023-01-31
Updated: 2023-02-06
Ref: https://rdap.arin.net/registry/entity/SL-2135
OrgTechHandle: SAKUR1-ARIN
OrgTechName: SAKURA LTD
OrgTechPhone: +1-530-435-5404
OrgTechEmail: noc@sakura.as
OrgTechRef: https://rdap.arin.net/registry/entity/SAKUR1-ARIN
OrgAbuseHandle: SAKUR1-ARIN
OrgAbuseName: SAKURA LTD
OrgAbusePhone: +1-530-435-5404
OrgAbuseEmail: noc@sakura.as
OrgAbuseRef: https://rdap.arin.net/registry/entity/SAKUR1-ARIN
# end
# start
NetRange: 142.248.148.0 - 142.248.151.255
CIDR: 142.248.148.0/22
NetName: SAKURA
NetHandle: NET-142-248-148-0-3
Parent: SAKURA (NET-142-248-148-0-2)
NetType: Reassigned
OriginAS:
Customer: SAKURA LINK (C11385823)
RegDate: 2025-10-12
Updated: 2025-10-12
Comment: geofeed: https://geo.yxvm.net/geo.csv
Ref: https://rdap.arin.net/registry/ip/142.248.148.0
CustName: SAKURA LINK
Address: Tokyo
City: Shinjuku-ku
StateProv:
PostalCode:
Country: JP
RegDate: 2025-10-12
Updated: 2025-10-12
Ref: https://rdap.arin.net/registry/entity/C11385823
OrgTechHandle: SAKUR1-ARIN
OrgTechName: SAKURA LTD
OrgTechPhone: +1-530-435-5404
OrgTechEmail: noc@sakura.as
OrgTechRef: https://rdap.arin.net/registry/entity/SAKUR1-ARIN
OrgAbuseHandle: SAKUR1-ARIN
OrgAbuseName: SAKURA LTD
OrgAbusePhone: +1-530-435-5404
OrgAbuseEmail: noc@sakura.as
OrgAbuseRef: https://rdap.arin.net/registry/entity/SAKUR1-ARIN
# end
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 142.248.149.11
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 30100
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;142.248.149.11. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026030900 1800 900 604800 86400
;; Query time: 4 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Mar 09 19:37:49 CST 2026
;; MSG SIZE rcvd: 107
Host 11.149.248.142.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 11.149.248.142.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 198.168.103.11 | attack | Unauthorized connection attempt detected from IP address 198.168.103.11 to port 445 |
2019-12-14 02:49:08 |
| 133.242.155.85 | attackspambots | Dec 13 17:29:07 vps691689 sshd[23219]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=133.242.155.85 Dec 13 17:29:09 vps691689 sshd[23219]: Failed password for invalid user ftp from 133.242.155.85 port 35484 ssh2 Dec 13 17:35:20 vps691689 sshd[23406]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=133.242.155.85 ... |
2019-12-14 02:44:13 |
| 58.249.123.38 | attack | Dec 13 22:57:14 webhost01 sshd[20046]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.249.123.38 Dec 13 22:57:16 webhost01 sshd[20046]: Failed password for invalid user password000 from 58.249.123.38 port 44472 ssh2 ... |
2019-12-14 03:07:36 |
| 157.230.252.45 | attack | Dec 13 19:01:02 h2177944 sshd\[28479\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.252.45 user=root Dec 13 19:01:04 h2177944 sshd\[28479\]: Failed password for root from 157.230.252.45 port 54496 ssh2 Dec 13 19:08:13 h2177944 sshd\[28655\]: Invalid user jacky from 157.230.252.45 port 40756 Dec 13 19:08:13 h2177944 sshd\[28655\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.252.45 ... |
2019-12-14 02:38:48 |
| 207.246.249.46 | attackspam | Says bank of america I don't even bank there |
2019-12-14 02:40:43 |
| 150.95.212.72 | attackbotsspam | Dec 13 19:40:35 eventyay sshd[29400]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.95.212.72 Dec 13 19:40:37 eventyay sshd[29400]: Failed password for invalid user stinson from 150.95.212.72 port 33270 ssh2 Dec 13 19:47:11 eventyay sshd[29572]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.95.212.72 ... |
2019-12-14 03:01:24 |
| 191.6.4.121 | attackbots | Unauthorized connection attempt detected from IP address 191.6.4.121 to port 445 |
2019-12-14 03:13:46 |
| 149.28.116.58 | attackbots | 149.28.116.58 - - [13/Dec/2019:16:32:57 +0000] "POST /wp-login.php HTTP/1.1" 200 6393 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 149.28.116.58 - - [13/Dec/2019:16:32:58 +0000] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2019-12-14 02:38:59 |
| 188.253.2.98 | attack | 12/13/2019-10:57:32.019503 188.253.2.98 Protocol: 6 ET SCAN NMAP -sS window 1024 |
2019-12-14 02:55:59 |
| 106.12.10.203 | attackspambots | DLink DSL Remote OS Command Injection Vulnerability, PTR: PTR record not found |
2019-12-14 02:46:06 |
| 95.110.159.28 | attackspambots | Dec 13 18:50:13 vps647732 sshd[30851]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.110.159.28 Dec 13 18:50:15 vps647732 sshd[30851]: Failed password for invalid user takehiko from 95.110.159.28 port 39702 ssh2 ... |
2019-12-14 02:57:12 |
| 51.38.98.23 | attackspambots | $f2bV_matches |
2019-12-14 02:58:05 |
| 45.93.20.176 | attackspam | Dec 13 21:24:12 debian-2gb-vpn-nbg1-1 kernel: [639828.597386] [UFW BLOCK] IN=eth0 OUT= MAC=96:00:00:38:96:44:d2:74:7f:6e:37:e3:08:00 SRC=45.93.20.176 DST=78.46.192.101 LEN=40 TOS=0x08 PREC=0x00 TTL=241 ID=53989 PROTO=TCP SPT=61000 DPT=2645 WINDOW=1024 RES=0x00 SYN URGP=0 |
2019-12-14 02:43:35 |
| 186.89.114.51 | attackbots | 8291/tcp 8291/tcp [2019-12-13]2pkt |
2019-12-14 02:51:14 |
| 165.22.211.73 | attackspambots | 2019-12-13T16:50:42.334401vps751288.ovh.net sshd\[20114\]: Invalid user ciszynski from 165.22.211.73 port 45476 2019-12-13T16:50:42.344039vps751288.ovh.net sshd\[20114\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.211.73 2019-12-13T16:50:44.772185vps751288.ovh.net sshd\[20114\]: Failed password for invalid user ciszynski from 165.22.211.73 port 45476 ssh2 2019-12-13T16:57:19.737307vps751288.ovh.net sshd\[20192\]: Invalid user khoinguyen from 165.22.211.73 port 54508 2019-12-13T16:57:19.745238vps751288.ovh.net sshd\[20192\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.211.73 |
2019-12-14 03:05:32 |