1.4.142.193 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Thailand

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 1.4.142.193
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 28805
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;1.4.142.193.			IN	A

;; AUTHORITY SECTION:
.			596	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022500 1800 900 604800 86400

;; Query time: 57 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 25 14:29:01 CST 2022
;; MSG SIZE  rcvd: 104

Host info

193.142.4.1.in-addr.arpa domain name pointer node-2wx.pool-1-4.dynamic.totinternet.net.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
193.142.4.1.in-addr.arpa	name = node-2wx.pool-1-4.dynamic.totinternet.net.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
154.70.134.71	attack	DATE:2020-06-10 13:00:30, IP:154.70.134.71, PORT:telnet Telnet brute force auth on honeypot server (epe-honey1-hq)	2020-06-10 22:32:34
203.63.67.224	attackspambots	Unauthorized SSH login attempts	2020-06-10 21:56:38
37.49.224.14	attackbots	Jun 10 07:56:51 XXX sshd[28440]: Did not receive identification string from 37.49.224.14 Jun 10 07:57:06 XXX sshd[28587]: Invalid user admin from 37.49.224.14 Jun 10 07:57:06 XXX sshd[28587]: Received disconnect from 37.49.224.14: 11: Normal Shutdown, Thank you for playing [preauth] Jun 10 07:57:28 XXX sshd[28595]: Invalid user admin from 37.49.224.14 Jun 10 07:57:28 XXX sshd[28595]: Received disconnect from 37.49.224.14: 11: Normal Shutdown, Thank you for playing [preauth] Jun 10 07:57:50 XXX sshd[28597]: User r.r from 37.49.224.14 not allowed because none of user's groups are listed in AllowGroups Jun 10 07:57:50 XXX sshd[28597]: Received disconnect from 37.49.224.14: 11: Normal Shutdown, Thank you for playing [preauth] Jun 10 07:58:11 XXX sshd[28776]: Invalid user ansible from 37.49.224.14 Jun 10 07:58:11 XXX sshd[28776]: Received disconnect from 37.49.224.14: 11: Normal Shutdown, Thank you for playing [preauth] Jun 10 07:58:32 XXX sshd[28784]: Invalid user centos fr........ -------------------------------	2020-06-10 22:29:45
162.243.143.230	attack	UDP 162.243.143.230:45469 -> port 623, len 51	2020-06-10 22:42:15
117.6.99.86	attackbots	Unauthorized connection attempt from IP address 117.6.99.86 on Port 445(SMB)	2020-06-10 22:12:50
182.141.184.154	attackbotsspam	Jun 10 07:00:53 mx sshd[3928]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.141.184.154 Jun 10 07:00:55 mx sshd[3928]: Failed password for invalid user admin from 182.141.184.154 port 53232 ssh2	2020-06-10 22:03:55
128.199.142.0	attackbots	Jun 10 15:53:54 ns382633 sshd\[22184\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.142.0 user=root Jun 10 15:53:56 ns382633 sshd\[22184\]: Failed password for root from 128.199.142.0 port 41986 ssh2 Jun 10 16:05:22 ns382633 sshd\[24570\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.142.0 user=root Jun 10 16:05:23 ns382633 sshd\[24570\]: Failed password for root from 128.199.142.0 port 60536 ssh2 Jun 10 16:09:15 ns382633 sshd\[24965\]: Invalid user monitor from 128.199.142.0 port 58644 Jun 10 16:09:15 ns382633 sshd\[24965\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.142.0	2020-06-10 22:23:54
186.147.160.189	attackspam	Jun 10 16:23:58 buvik sshd[15101]: Invalid user monitor from 186.147.160.189 Jun 10 16:23:58 buvik sshd[15101]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.147.160.189 Jun 10 16:24:00 buvik sshd[15101]: Failed password for invalid user monitor from 186.147.160.189 port 56414 ssh2 ...	2020-06-10 22:28:24
162.243.137.151	attack	none	2020-06-10 22:40:09
112.85.42.172	attackbots	Jun 10 15:59:54 ns381471 sshd[14290]: Failed password for root from 112.85.42.172 port 58560 ssh2 Jun 10 16:00:04 ns381471 sshd[14290]: Failed password for root from 112.85.42.172 port 58560 ssh2	2020-06-10 22:03:05
37.62.174.171	attackbotsspam	Jun 10 13:00:19 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=37.62.174.171, lip=172.104.140.148, session= Jun 10 13:00:25 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=37.62.174.171, lip=172.104.140.148, session= Jun 10 13:00:25 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=37.62.174.171, lip=172.104.140.148, session= Jun 10 13:00:35 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=37.62.174.171, lip=172.104.140.148, session= Jun 10 13:00:37 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=37.62.174.171, lip=172.104.140.148, se ...	2020-06-10 22:29:07
89.36.160.25	attack	LGS,WP GET /oldsite/wp-includes/wlwmanifest.xml	2020-06-10 22:39:31
186.224.80.34	attackspambots	Spam	2020-06-10 22:18:26
202.137.154.35	attackbots	Dovecot Invalid User Login Attempt.	2020-06-10 22:06:14
49.235.163.198	attackbotsspam	SSH bruteforce	2020-06-10 22:43:03

Recently Reported IPs

1.4.142.195	1.4.142.198	101.109.209.95	1.4.142.200
1.4.142.205	1.4.142.206	1.4.142.21	1.4.142.213
1.4.145.93	1.4.145.52	1.4.146.112	1.4.146.143
1.4.146.121	1.4.146.119	1.4.146.83	101.109.209.96
1.4.147.127	1.4.147.217	1.4.147.167	1.4.147.249