1.1.242.43 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Thailand

Internet Service Provider: TOT Public Company Limited

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspambots	Attempt to attack host OS, exploiting network vulnerabilities, on 12-03-2020 03:50:08.	2020-03-12 17:03:35

Comments on same subnet:

IP	Type	Details	Datetime
1.1.242.100	attack	Unauthorized connection attempt from IP address 1.1.242.100 on Port 445(SMB)	2020-07-08 13:35:35
1.1.242.100	attackspam	SSH / Telnet Brute Force Attempts on Honeypot	2020-06-26 08:42:44
1.1.242.89	attackspambots	port scan/probe/communication attempt; port 23	2019-11-24 07:09:49
1.1.242.11	attack	Unauthorized connection attempt from IP address 1.1.242.11 on Port 445(SMB)	2019-08-28 00:26:49

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 1.1.242.43
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 40412
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;1.1.242.43.			IN	A

;; AUTHORITY SECTION:
.			260	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020031200 1800 900 604800 86400

;; Query time: 114 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Mar 12 17:03:31 CST 2020
;; MSG SIZE  rcvd: 114

Host info

43.242.1.1.in-addr.arpa domain name pointer node-mjv.pool-1-1.dynamic.totinternet.net.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
43.242.1.1.in-addr.arpa	name = node-mjv.pool-1-1.dynamic.totinternet.net.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
51.75.255.250	attackspam	Failed password for invalid user test from 51.75.255.250 port 54134 ssh2 Invalid user server2 from 51.75.255.250 port 53462 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=250.ip-51-75-255.eu Invalid user server2 from 51.75.255.250 port 53462 Failed password for invalid user server2 from 51.75.255.250 port 53462 ssh2	2020-06-20 18:18:48
201.192.152.202	attackspambots	Too many connections or unauthorized access detected from Arctic banned ip	2020-06-20 18:29:06
183.234.111.88	attackspambots	Port Scan detected! ...	2020-06-20 18:26:50
134.122.117.231	attackbots	$f2bV_matches	2020-06-20 18:12:23
41.33.52.38	attackbotsspam	20/6/19@23:48:30: FAIL: Alarm-Network address from=41.33.52.38 ...	2020-06-20 17:52:22
159.89.196.75	attackspam	$f2bV_matches	2020-06-20 18:08:21
88.214.26.90	attackbotsspam	Cowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2020-06-20T08:23:06Z and 2020-06-20T09:48:56Z	2020-06-20 18:12:09
45.178.141.20	attackbots	Invalid user webtest from 45.178.141.20 port 33634	2020-06-20 18:26:03
47.190.18.35	attackspam	Jun 20 06:47:40 server2 sshd\[18561\]: User root from 47.190.18.35 not allowed because not listed in AllowUsers Jun 20 06:47:41 server2 sshd\[18563\]: Invalid user DUP from 47.190.18.35 Jun 20 06:47:42 server2 sshd\[18565\]: User root from 47.190.18.35 not allowed because not listed in AllowUsers Jun 20 06:47:44 server2 sshd\[18567\]: User root from 47.190.18.35 not allowed because not listed in AllowUsers Jun 20 06:47:45 server2 sshd\[18571\]: User root from 47.190.18.35 not allowed because not listed in AllowUsers Jun 20 06:47:46 server2 sshd\[18577\]: User root from 47.190.18.35 not allowed because not listed in AllowUsers	2020-06-20 18:19:04
36.82.97.201	attackbotsspam	Unauthorized IMAP connection attempt	2020-06-20 18:31:11
128.199.207.238	attackspambots	Jun 20 11:32:01 ns381471 sshd[24704]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.207.238 Jun 20 11:32:03 ns381471 sshd[24704]: Failed password for invalid user zhaohao from 128.199.207.238 port 46174 ssh2	2020-06-20 18:10:56
185.216.34.232	attackbotsspam	Many_bad_calls	2020-06-20 18:10:09
112.134.171.155	attack	PHI,WP GET /wp-login.php	2020-06-20 18:19:43
51.254.123.127	attackspam	Invalid user test from 51.254.123.127 port 34979	2020-06-20 18:15:05
65.49.20.104	attackbotsspam	TCP (SYN) 65.49.20.104:34933 -> port 22, len 40	2020-06-20 18:30:21

Recently Reported IPs

116.110.83.32	27.123.213.78	1.179.181.74	213.6.53.170
106.54.32.196	67.180.80.249	103.219.29.28	222.187.238.123
171.241.62.104	118.172.0.117	200.141.184.169	119.188.157.211
42.116.18.180	213.60.134.170	61.154.168.19	36.69.199.50
180.101.186.24	122.226.134.39	91.243.90.184	5.14.77.52