142.11.205.214

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: Hostwinds LLC.

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspambots	DATE:2019-09-01 10:02:13, IP:142.11.205.214, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc)	2019-09-01 21:02:12

Comments on same subnet:

IP	Type	Details	Datetime
142.11.205.123	attackbotsspam	Oct 20 13:50:36 mxgate1 postfix/postscreen[6839]: CONNECT from [142.11.205.123]:40992 to [176.31.12.44]:25 Oct 20 13:50:36 mxgate1 postfix/dnsblog[6952]: addr 142.11.205.123 listed by domain zen.spamhaus.org as 127.0.0.3 Oct 20 13:50:36 mxgate1 postfix/dnsblog[6950]: addr 142.11.205.123 listed by domain b.barracudacentral.org as 127.0.0.2 Oct 20 13:50:42 mxgate1 postfix/postscreen[6839]: DNSBL rank 3 for [142.11.205.123]:40992 Oct x@x Oct 20 13:50:43 mxgate1 postfix/postscreen[6839]: DISCONNECT [142.11.205.123]:40992 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=142.11.205.123	2019-10-20 22:50:22

Type

Details

Datetime

142.11.205.123

attackbotsspam

Oct 20 13:50:36 mxgate1 postfix/postscreen[6839]: CONNECT from [142.11.205.123]:40992 to [176.31.12.44]:25
Oct 20 13:50:36 mxgate1 postfix/dnsblog[6952]: addr 142.11.205.123 listed by domain zen.spamhaus.org as 127.0.0.3
Oct 20 13:50:36 mxgate1 postfix/dnsblog[6950]: addr 142.11.205.123 listed by domain b.barracudacentral.org as 127.0.0.2
Oct 20 13:50:42 mxgate1 postfix/postscreen[6839]: DNSBL rank 3 for [142.11.205.123]:40992
Oct x@x
Oct 20 13:50:43 mxgate1 postfix/postscreen[6839]: DISCONNECT [142.11.205.123]:40992


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=142.11.205.123

2019-10-20 22:50:22

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 142.11.205.214
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 13030
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;142.11.205.214.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019090100 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sun Sep 01 21:02:01 CST 2019
;; MSG SIZE  rcvd: 118

Host info

214.205.11.142.in-addr.arpa domain name pointer hwsrv-564805.hostwindsdns.com.

Nslookup info:

Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
214.205.11.142.in-addr.arpa	name = hwsrv-564805.hostwindsdns.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
202.137.134.50	attack	(imapd) Failed IMAP login from 202.137.134.50 (LA/Laos/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Jul 17 16:43:29 ir1 dovecot[2885757]: imap-login: Disconnected (auth failed, 1 attempts in 10 secs): user=, method=PLAIN, rip=202.137.134.50, lip=5.63.12.44, TLS, session=	2020-07-17 22:11:17
223.95.186.74	attack	Jul 17 16:34:16 hosting sshd[15522]: Invalid user test from 223.95.186.74 port 36752 ...	2020-07-17 22:13:01
162.14.18.148	attackbotsspam	Jul 17 12:36:36 rush sshd[2616]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.14.18.148 Jul 17 12:36:38 rush sshd[2616]: Failed password for invalid user esc from 162.14.18.148 port 59744 ssh2 Jul 17 12:38:45 rush sshd[2654]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.14.18.148 ...	2020-07-17 22:51:12
202.83.54.167	attackbots	Fail2Ban Ban Triggered	2020-07-17 22:14:29
188.166.78.16	attack	2020-07-17T14:16:04.799782shield sshd\[11382\]: Invalid user xip from 188.166.78.16 port 35927 2020-07-17T14:16:04.812274shield sshd\[11382\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.78.16 2020-07-17T14:16:07.447628shield sshd\[11382\]: Failed password for invalid user xip from 188.166.78.16 port 35927 ssh2 2020-07-17T14:20:45.481770shield sshd\[12075\]: Invalid user code from 188.166.78.16 port 43432 2020-07-17T14:20:45.495234shield sshd\[12075\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.78.16	2020-07-17 22:38:38
140.143.204.66	attackbots	Jul 17 14:13:11 ns381471 sshd[31606]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.204.66 Jul 17 14:13:13 ns381471 sshd[31606]: Failed password for invalid user ting from 140.143.204.66 port 34600 ssh2	2020-07-17 22:35:07
189.193.147.107	attackspam	Port scan on 2 port(s): 22 8291	2020-07-17 22:48:43
95.84.128.25	attackbotsspam	Dovecot Invalid User Login Attempt.	2020-07-17 22:53:09
112.85.42.174	attack	SSH authentication failure x 6 reported by Fail2Ban ...	2020-07-17 22:16:28
192.241.237.52	attackspam	scans 2 times in preceeding hours on the ports (in chronological order) 9001 2376 resulting in total of 68 scans from 192.241.128.0/17 block.	2020-07-17 22:44:32
140.213.5.123	attackspam	Automated report (2020-07-17T20:13:04+08:00). Referrer spam originating from this address detected (anti-crisis-seo.com).	2020-07-17 22:43:40
106.13.172.167	attackbots	Jul 17 15:47:27 fhem-rasp sshd[2303]: Invalid user ftp from 106.13.172.167 port 38978 ...	2020-07-17 22:14:05
51.38.118.26	attackbotsspam	SSH authentication failure x 6 reported by Fail2Ban ...	2020-07-17 22:53:56
183.66.65.214	attack	Jul 17 15:34:07 PorscheCustomer sshd[31760]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.66.65.214 Jul 17 15:34:09 PorscheCustomer sshd[31760]: Failed password for invalid user sari from 183.66.65.214 port 40096 ssh2 Jul 17 15:36:33 PorscheCustomer sshd[31804]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.66.65.214 ...	2020-07-17 22:45:53
64.202.186.78	attack	Jul 17 14:22:57 ip-172-31-61-156 sshd[5769]: Invalid user bitbucket from 64.202.186.78 Jul 17 14:22:59 ip-172-31-61-156 sshd[5769]: Failed password for invalid user bitbucket from 64.202.186.78 port 39248 ssh2 Jul 17 14:22:57 ip-172-31-61-156 sshd[5769]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.202.186.78 Jul 17 14:22:57 ip-172-31-61-156 sshd[5769]: Invalid user bitbucket from 64.202.186.78 Jul 17 14:22:59 ip-172-31-61-156 sshd[5769]: Failed password for invalid user bitbucket from 64.202.186.78 port 39248 ssh2 ...	2020-07-17 22:26:08

Recently Reported IPs

123.34.151.232	217.58.158.25	212.130.141.169	14.186.213.47
180.149.126.65	39.35.3.243	41.141.226.91	119.153.54.134
179.180.224.57	134.209.87.150	82.64.45.6	113.192.36.73
13.88.41.105	44.127.9.18	5.62.5.177	190.39.239.136
60.19.183.95	121.137.77.82	5.57.33.71	64.63.252.170