1.1.130.48 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Thailand

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
1.1.130.70	attack	Lines containing failures of 1.1.130.70 May 20 09:23:44 MAKserver05 sshd[25383]: Did not receive identification string from 1.1.130.70 port 50508 May 20 09:23:47 MAKserver05 sshd[25384]: Invalid user sniffer from 1.1.130.70 port 50945 May 20 09:23:48 MAKserver05 sshd[25384]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.1.130.70 May 20 09:23:49 MAKserver05 sshd[25384]: Failed password for invalid user sniffer from 1.1.130.70 port 50945 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=1.1.130.70	2020-05-20 20:52:51

Type

Details

Datetime

1.1.130.70

attack

Lines containing failures of 1.1.130.70
May 20 09:23:44 MAKserver05 sshd[25383]: Did not receive identification string from 1.1.130.70 port 50508
May 20 09:23:47 MAKserver05 sshd[25384]: Invalid user sniffer from 1.1.130.70 port 50945
May 20 09:23:48 MAKserver05 sshd[25384]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.1.130.70 
May 20 09:23:49 MAKserver05 sshd[25384]: Failed password for invalid user sniffer from 1.1.130.70 port 50945 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=1.1.130.70

2020-05-20 20:52:51

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 1.1.130.48
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 62319
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;1.1.130.48.			IN	A

;; AUTHORITY SECTION:
.			389	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022500 1800 900 604800 86400

;; Query time: 64 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 25 14:18:31 CST 2022
;; MSG SIZE  rcvd: 103

Host info

48.130.1.1.in-addr.arpa domain name pointer node-fk.pool-1-1.dynamic.totinternet.net.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
48.130.1.1.in-addr.arpa	name = node-fk.pool-1-1.dynamic.totinternet.net.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
68.183.102.246	attackbots	leo_www	2020-03-12 12:55:08
133.130.89.86	attackbotsspam	Too many connections or unauthorized access detected from Arctic banned ip	2020-03-12 12:58:40
62.148.236.220	attackspambots	B: zzZZzz blocked content access	2020-03-12 13:17:13
62.234.97.139	attackbots	(sshd) Failed SSH login from 62.234.97.139 (CN/China/-): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Mar 12 05:42:56 ubnt-55d23 sshd[3126]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.97.139 user=root Mar 12 05:42:58 ubnt-55d23 sshd[3126]: Failed password for root from 62.234.97.139 port 58711 ssh2	2020-03-12 13:01:03
222.247.169.90	attackbots	Honeypot hit.	2020-03-12 13:13:19
217.112.142.144	attack	Mar 12 04:47:05 mail.srvfarm.net postfix/smtpd[1642190]: NOQUEUE: reject: RCPT from unknown[217.112.142.144]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Mar 12 04:47:06 mail.srvfarm.net postfix/smtpd[1643017]: NOQUEUE: reject: RCPT from unknown[217.112.142.144]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Mar 12 04:47:16 mail.srvfarm.net postfix/smtpd[1637567]: NOQUEUE: reject: RCPT from unknown[217.112.142.144]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Mar 12 04:48:06 mail.srvfarm.net postfix/smtpd[1639715]: NOQUEUE: reject:	2020-03-12 13:17:48
180.76.240.142	attackspam	Mar 11 23:49:53 ny01 sshd[6099]: Failed password for root from 180.76.240.142 port 44432 ssh2 Mar 11 23:52:50 ny01 sshd[7263]: Failed password for root from 180.76.240.142 port 52128 ssh2	2020-03-12 12:57:59
34.76.223.69	attackbots	/clients	2020-03-12 13:07:57
113.178.188.131	attack	SSH brutforce	2020-03-12 13:04:11
222.186.190.92	attack	Mar 12 05:43:27 Ubuntu-1404-trusty-64-minimal sshd\[23450\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.190.92 user=root Mar 12 05:43:29 Ubuntu-1404-trusty-64-minimal sshd\[23450\]: Failed password for root from 222.186.190.92 port 58682 ssh2 Mar 12 05:43:47 Ubuntu-1404-trusty-64-minimal sshd\[23520\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.190.92 user=root Mar 12 05:43:49 Ubuntu-1404-trusty-64-minimal sshd\[23520\]: Failed password for root from 222.186.190.92 port 5456 ssh2 Mar 12 05:43:59 Ubuntu-1404-trusty-64-minimal sshd\[23520\]: Failed password for root from 222.186.190.92 port 5456 ssh2	2020-03-12 12:47:02
134.122.64.59	attackspambots	[2020-03-12 00:42:19] NOTICE[1148][C-00010e17] chan_sip.c: Call from '' (134.122.64.59:65023) to extension '201146812111443' rejected because extension not found in context 'public'. [2020-03-12 00:42:19] SECURITY[1163] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-03-12T00:42:19.936-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="201146812111443",SessionID="0x7fd82c530768",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/134.122.64.59/65023",ACLName="no_extension_match" [2020-03-12 00:47:16] NOTICE[1148][C-00010e1b] chan_sip.c: Call from '' (134.122.64.59:51018) to extension '101146812111443' rejected because extension not found in context 'public'. [2020-03-12 00:47:16] SECURITY[1163] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-03-12T00:47:16.942-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="101146812111443",SessionID="0x7fd82c3f03d8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/ ...	2020-03-12 13:00:42
222.186.30.57	attackbots	2020-03-12T06:07:35.371079scmdmz1 sshd[26516]: Failed password for root from 222.186.30.57 port 63964 ssh2 2020-03-12T06:07:37.732404scmdmz1 sshd[26516]: Failed password for root from 222.186.30.57 port 63964 ssh2 2020-03-12T06:07:39.996685scmdmz1 sshd[26516]: Failed password for root from 222.186.30.57 port 63964 ssh2 ...	2020-03-12 13:10:29
188.128.43.28	attackbots	Mar 12 05:05:13 meumeu sshd[11571]: Failed password for root from 188.128.43.28 port 60830 ssh2 Mar 12 05:09:07 meumeu sshd[12235]: Failed password for root from 188.128.43.28 port 48146 ssh2 ...	2020-03-12 13:25:33
14.241.226.78	attack	Mar 12 03:13:22 host sshd[62767]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.241.226.78 Mar 12 03:13:22 host sshd[62767]: Invalid user noc from 14.241.226.78 port 63242 Mar 12 03:13:24 host sshd[62767]: Failed password for invalid user noc from 14.241.226.78 port 63242 ssh2 ...	2020-03-12 12:42:59
117.3.69.229	attackspambots	Port probing on unauthorized port 445	2020-03-12 13:11:09

Recently Reported IPs

1.1.130.60	101.109.108.59	1.1.166.80	1.1.166.92
1.1.167.11	1.1.167.104	1.1.166.76	1.1.169.180
1.1.167.108	1.1.169.189	101.109.108.64	1.1.166.96
1.1.166.9	1.1.180.94	1.1.180.98	89.43.34.142
101.109.108.66	1.1.181.110	1.1.181.10	1.1.181.112