101.51.104.142

Basic Info

City: unknown

Region: unknown

Country: Thailand

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
101.51.104.215	attackspam	Unauthorized IMAP connection attempt	2020-08-08 13:45:35
101.51.104.13	attack	Lines containing failures of 101.51.104.13 auth.log:Feb 6 14:27:14 omfg sshd[31415]: Connection from 101.51.104.13 port 50811 on 78.46.60.41 port 22 auth.log:Feb 6 14:27:16 omfg sshd[31416]: Connection from 101.51.104.13 port 50838 on 78.46.60.42 port 22 auth.log:Feb 6 14:27:16 omfg sshd[31417]: Connection from 101.51.104.13 port 50531 on 78.46.60.16 port 22 auth.log:Feb 6 14:27:16 omfg sshd[31418]: Connection from 101.51.104.13 port 50880 on 78.46.60.53 port 22 auth.log:Feb 6 14:27:16 omfg sshd[31419]: Connection from 101.51.104.13 port 51638 on 78.46.60.42 port 22 auth.log:Feb 6 14:27:16 omfg sshd[31420]: Connection from 101.51.104.13 port 51637 on 78.46.60.41 port 22 auth.log:Feb 6 14:27:17 omfg sshd[31423]: Connection from 101.51.104.13 port 51645 on 78.46.60.16 port 22 auth.log:Feb 6 14:27:18 omfg sshd[31425]: Connection from 101.51.104.13 port 51910 on 78.46.60.53 port 22 auth.log:Feb 6 14:27:19 omfg sshd[31423]: Invalid user admin from 101.51.104.13 auth......... ------------------------------	2020-02-07 02:18:56
101.51.104.225	attack	Unauthorized connection attempt detected from IP address 101.51.104.225 to port 8080	2020-01-01 04:44:36

Type

Details

Datetime

101.51.104.215

attackspam

Unauthorized IMAP connection attempt

2020-08-08 13:45:35

101.51.104.13

attack

Lines containing failures of 101.51.104.13
auth.log:Feb  6 14:27:14 omfg sshd[31415]: Connection from 101.51.104.13 port 50811 on 78.46.60.41 port 22
auth.log:Feb  6 14:27:16 omfg sshd[31416]: Connection from 101.51.104.13 port 50838 on 78.46.60.42 port 22
auth.log:Feb  6 14:27:16 omfg sshd[31417]: Connection from 101.51.104.13 port 50531 on 78.46.60.16 port 22
auth.log:Feb  6 14:27:16 omfg sshd[31418]: Connection from 101.51.104.13 port 50880 on 78.46.60.53 port 22
auth.log:Feb  6 14:27:16 omfg sshd[31419]: Connection from 101.51.104.13 port 51638 on 78.46.60.42 port 22
auth.log:Feb  6 14:27:16 omfg sshd[31420]: Connection from 101.51.104.13 port 51637 on 78.46.60.41 port 22
auth.log:Feb  6 14:27:17 omfg sshd[31423]: Connection from 101.51.104.13 port 51645 on 78.46.60.16 port 22
auth.log:Feb  6 14:27:18 omfg sshd[31425]: Connection from 101.51.104.13 port 51910 on 78.46.60.53 port 22
auth.log:Feb  6 14:27:19 omfg sshd[31423]: Invalid user admin from 101.51.104.13
auth.........
------------------------------

2020-02-07 02:18:56

101.51.104.225

attack

Unauthorized connection attempt detected from IP address 101.51.104.225 to port 8080

2020-01-01 04:44:36

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 101.51.104.142
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 19200
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;101.51.104.142.			IN	A

;; AUTHORITY SECTION:
.			432	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022500 1800 900 604800 86400

;; Query time: 59 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 25 22:29:44 CST 2022
;; MSG SIZE  rcvd: 107

Host info

142.104.51.101.in-addr.arpa domain name pointer node-kni.pool-101-51.dynamic.totinternet.net.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
142.104.51.101.in-addr.arpa	name = node-kni.pool-101-51.dynamic.totinternet.net.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
222.186.180.6	attackbotsspam	Jun 5 22:16:56 vmi345603 sshd[13004]: Failed password for root from 222.186.180.6 port 13324 ssh2 Jun 5 22:16:59 vmi345603 sshd[13004]: Failed password for root from 222.186.180.6 port 13324 ssh2 ...	2020-06-06 04:20:39
92.63.194.35	attack	TCP (SYN) 92.63.194.35:41027 -> port 1723, len 60	2020-06-06 04:10:01
146.196.4.62	attackspam	20/6/5@07:56:31: FAIL: Alarm-Network address from=146.196.4.62 ...	2020-06-06 04:17:24
223.25.101.202	attackbotsspam	[04/Jun/2020:07:18:05 -0400] "GET / HTTP/1.1" Safari 9.1.2 UA	2020-06-06 04:20:05
103.4.146.54	attackspam	Multiple organisations/people, including this one, are trying to hack my account. They are active in the next countries; Bangladesh (Dhaka), Liberia (Monrovia), Russia (Samara), Brasil, South-Afrika (Johannesburg), Maleisië (georgetown), China (hefei).	2020-06-06 04:07:29
51.255.35.58	attackbots	sshd: Failed password for .... from 51.255.35.58 port 56382 ssh2 (12 attempts)	2020-06-06 03:59:58
186.83.184.115	attackbotsspam	186.83.184.115 - - \[05/Jun/2020:13:56:11 +0200\] "POST /xmlrpc.php HTTP/1.0" 200 738 "-" "Mozilla/5.0 $Windows NT 6.1\; Win64\; x64$ AppleWebKit/537.36 $KHTML, like Gecko$ Chrome/59.0.3071.109 Safari/537.36" 186.83.184.115 - - \[05/Jun/2020:13:56:17 +0200\] "POST /xmlrpc.php HTTP/1.0" 200 738 "-" "Mozilla/5.0 $Windows NT 6.1\; Win64\; x64$ AppleWebKit/537.36 $KHTML, like Gecko$ Chrome/59.0.3071.109 Safari/537.36" 186.83.184.115 - - \[05/Jun/2020:13:56:22 +0200\] "POST /xmlrpc.php HTTP/1.0" 200 738 "-" "Mozilla/5.0 $Windows NT 6.1\; Win64\; x64$ AppleWebKit/537.36 $KHTML, like Gecko$ Chrome/59.0.3071.109 Safari/537.36"	2020-06-06 04:23:33
162.243.144.96	attackbotsspam	Jun 5 21:51:56 debian kernel: [285677.523954] [UFW BLOCK] IN=eth0 OUT= MAC=52:54:00:be:e4:65:08:e8:4f:6e:48:0c:08:00 SRC=162.243.144.96 DST=89.252.131.35 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=54321 PROTO=TCP SPT=57919 DPT=3306 WINDOW=65535 RES=0x00 SYN URGP=0	2020-06-06 03:59:28
111.67.193.170	attackspam	$f2bV_matches	2020-06-06 03:56:23
173.232.33.24	attack	Spam	2020-06-06 04:25:40
5.40.81.218	attackspambots	Unauthorized connection attempt detected from IP address 5.40.81.218 to port 80	2020-06-06 03:51:30
159.203.98.41	attack	159.203.98.41 - - [05/Jun/2020:16:18:07 +0200] "GET /wp-login.php HTTP/1.1" 200 6302 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 159.203.98.41 - - [05/Jun/2020:16:18:09 +0200] "POST /wp-login.php HTTP/1.1" 200 6469 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 159.203.98.41 - - [05/Jun/2020:16:18:10 +0200] "GET /wp-login.php HTTP/1.1" 200 6302 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-06-06 04:27:46
45.153.185.22	attackspam	TCP (SYN) 45.153.185.22:33175 -> port 23, len 44	2020-06-06 04:11:25
54.39.138.251	attackspambots	2020-06-05T12:54:34.149978abusebot-6.cloudsearch.cf sshd[14812]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip251.ip-54-39-138.net user=root 2020-06-05T12:54:36.104279abusebot-6.cloudsearch.cf sshd[14812]: Failed password for root from 54.39.138.251 port 60012 ssh2 2020-06-05T13:00:00.601750abusebot-6.cloudsearch.cf sshd[15103]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip251.ip-54-39-138.net user=root 2020-06-05T13:00:02.977524abusebot-6.cloudsearch.cf sshd[15103]: Failed password for root from 54.39.138.251 port 45484 ssh2 2020-06-05T13:01:53.720310abusebot-6.cloudsearch.cf sshd[15248]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip251.ip-54-39-138.net user=root 2020-06-05T13:01:55.940937abusebot-6.cloudsearch.cf sshd[15248]: Failed password for root from 54.39.138.251 port 48714 ssh2 2020-06-05T13:03:47.040962abusebot-6.cloudsearch.cf sshd[15357]: ...	2020-06-06 04:13:00
206.189.135.73	attack	TCP (SYN) 206.189.135.73:61000 -> port 8080, len 44	2020-06-06 04:22:16

Recently Reported IPs

101.51.104.127	101.51.104.139	101.51.104.148	101.51.104.151
101.51.104.140	101.51.104.156	101.51.104.155	101.51.104.162
101.51.104.144	101.51.104.159	102.130.81.65	101.51.104.166
101.51.104.17	101.51.104.169	101.51.104.153	101.51.104.175
101.51.104.179	101.51.104.172	101.51.104.183	101.51.104.180