1.2.130.99 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Thailand

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
1.2.130.55	attackbots	Attempt to attack host OS, exploiting network vulnerabilities, on 31-03-2020 13:30:10.	2020-04-01 02:32:05

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 1.2.130.99
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 42151
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;1.2.130.99.			IN	A

;; AUTHORITY SECTION:
.			470	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022400 1800 900 604800 86400

;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 24 18:14:12 CST 2022
;; MSG SIZE  rcvd: 103

Host info

99.130.2.1.in-addr.arpa domain name pointer node-gz.pool-1-2.dynamic.totinternet.net.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
99.130.2.1.in-addr.arpa	name = node-gz.pool-1-2.dynamic.totinternet.net.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
118.24.108.205	attackbotsspam	Aug 18 12:59:08 php1 sshd\[32285\]: Invalid user rt from 118.24.108.205 Aug 18 12:59:08 php1 sshd\[32285\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.108.205 Aug 18 12:59:10 php1 sshd\[32285\]: Failed password for invalid user rt from 118.24.108.205 port 36082 ssh2 Aug 18 13:01:45 php1 sshd\[32544\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.108.205 user=root Aug 18 13:01:48 php1 sshd\[32544\]: Failed password for root from 118.24.108.205 port 58672 ssh2	2019-08-19 09:44:40
183.224.77.205	attack	Port scan	2019-08-19 09:56:45
212.67.0.150	attackspam	[portscan] Port scan	2019-08-19 09:46:53
212.83.184.217	attackbots	\[2019-08-18 21:55:38\] NOTICE\[2288\] chan_sip.c: Registration from '\' failed for '212.83.184.217:2647' - Wrong password \[2019-08-18 21:55:38\] SECURITY\[2326\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-08-18T21:55:38.844-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="19393",SessionID="0x7ff4d07e79a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/212.83.184.217/62689",Challenge="32f3c1df",ReceivedChallenge="32f3c1df",ReceivedHash="4f18966beb3d0927e29487269dfc7bab" \[2019-08-18 21:56:26\] NOTICE\[2288\] chan_sip.c: Registration from '\' failed for '212.83.184.217:2660' - Wrong password \[2019-08-18 21:56:26\] SECURITY\[2326\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-08-18T21:56:26.900-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="33515",SessionID="0x7ff4d07e79a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/212.	2019-08-19 10:03:44
151.80.46.40	attack	Aug 18 23:12:15 MK-Soft-VM4 sshd\[27025\]: Invalid user kibana from 151.80.46.40 port 55510 Aug 18 23:12:15 MK-Soft-VM4 sshd\[27025\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=151.80.46.40 Aug 18 23:12:16 MK-Soft-VM4 sshd\[27025\]: Failed password for invalid user kibana from 151.80.46.40 port 55510 ssh2 ...	2019-08-19 09:54:09
69.158.249.73	attackbots	SSH Bruteforce attack	2019-08-19 10:08:00
188.165.211.201	attackbotsspam	Aug 19 01:16:25 MK-Soft-VM6 sshd\[4119\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.165.211.201 user=root Aug 19 01:16:27 MK-Soft-VM6 sshd\[4119\]: Failed password for root from 188.165.211.201 port 38338 ssh2 Aug 19 01:20:18 MK-Soft-VM6 sshd\[4225\]: Invalid user mario from 188.165.211.201 port 43392 ...	2019-08-19 10:19:03
5.196.70.107	attackbotsspam	2019-08-19T02:06:51.354509abusebot-8.cloudsearch.cf sshd\[7988\]: Invalid user ronaldo from 5.196.70.107 port 39736	2019-08-19 10:16:20
54.36.150.84	attackspam	Automatic report - Banned IP Access	2019-08-19 09:56:20
185.244.241.60	attackspam	" "	2019-08-19 10:04:12
114.113.126.163	attackspam	Aug 19 02:56:15 debian sshd\[639\]: Invalid user rogerio from 114.113.126.163 port 58525 Aug 19 02:56:15 debian sshd\[639\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.113.126.163 ...	2019-08-19 10:07:44
118.24.104.214	attackbots	Aug 19 03:00:47 microserver sshd[9956]: Invalid user inx from 118.24.104.214 port 42008 Aug 19 03:00:47 microserver sshd[9956]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.104.214 Aug 19 03:00:49 microserver sshd[9956]: Failed password for invalid user inx from 118.24.104.214 port 42008 ssh2 Aug 19 03:05:47 microserver sshd[10626]: Invalid user pgbouncer from 118.24.104.214 port 33076 Aug 19 03:05:47 microserver sshd[10626]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.104.214 Aug 19 03:20:12 microserver sshd[12407]: Invalid user bret from 118.24.104.214 port 34484 Aug 19 03:20:12 microserver sshd[12407]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.104.214 Aug 19 03:20:14 microserver sshd[12407]: Failed password for invalid user bret from 118.24.104.214 port 34484 ssh2 Aug 19 03:25:10 microserver sshd[13080]: Invalid user ee from 118.24.104.214 port 53784 Aug	2019-08-19 10:08:30
139.99.37.130	attackspambots	2019-08-19T03:38:22.849272lon01.zurich-datacenter.net sshd\[25642\]: Invalid user twintown from 139.99.37.130 port 5714 2019-08-19T03:38:22.854098lon01.zurich-datacenter.net sshd\[25642\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip130.ip-139-99-37.net 2019-08-19T03:38:25.025850lon01.zurich-datacenter.net sshd\[25642\]: Failed password for invalid user twintown from 139.99.37.130 port 5714 ssh2 2019-08-19T03:44:22.682059lon01.zurich-datacenter.net sshd\[25739\]: Invalid user dalyj from 139.99.37.130 port 51976 2019-08-19T03:44:22.689362lon01.zurich-datacenter.net sshd\[25739\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip130.ip-139-99-37.net ...	2019-08-19 09:54:50
138.68.90.158	attack	Aug 19 00:08:24 [munged] sshd[1409]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.90.158	2019-08-19 10:07:06
171.236.90.250	attackspambots	Splunk® : port scan detected: Aug 18 18:08:34 testbed kernel: Firewall: TCP_IN Blocked IN=eth0 OUT= MAC=82:c6:52:d1:6e:53:c0:42:d0:39:2c:30:08:00 SRC=171.236.90.250 DST=104.248.11.191 LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=34547 PROTO=TCP SPT=23752 DPT=2323 WINDOW=27902 RES=0x00 SYN URGP=0	2019-08-19 10:00:16

Recently Reported IPs

1.2.130.88	1.2.131.136	1.2.131.15	1.2.131.186
1.2.131.192	1.2.131.250	1.2.131.27	1.2.131.45
1.2.132.128	1.2.132.134	1.2.132.151	1.2.132.161
1.2.132.181	1.2.132.237	1.2.132.240	1.2.132.36
1.2.132.48	1.2.132.7	1.2.132.80	1.2.132.96