142.255.5.119 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States of America (the)

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
142.255.54.62	attackspam	Telnetd brute force attack detected by fail2ban	2020-06-20 21:37:16
142.255.52.32	attack	Mar 31 05:48:47 debian-2gb-nbg1-2 kernel: \[7885581.531934\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=142.255.52.32 DST=195.201.40.59 LEN=44 TOS=0x00 PREC=0x00 TTL=49 ID=0 DF PROTO=TCP SPT=7547 DPT=62022 WINDOW=29200 RES=0x00 ACK SYN URGP=0	2020-03-31 19:51:13
142.255.54.194	attackspambots	Unauthorized connection attempt detected from IP address 142.255.54.194 to port 5555 [J]	2020-01-26 03:49:14

Type

Details

Datetime

142.255.54.62

attackspam

Telnetd brute force attack detected by fail2ban

2020-06-20 21:37:16

142.255.52.32

attack

Mar 31 05:48:47 debian-2gb-nbg1-2 kernel: \[7885581.531934\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=142.255.52.32 DST=195.201.40.59 LEN=44 TOS=0x00 PREC=0x00 TTL=49 ID=0 DF PROTO=TCP SPT=7547 DPT=62022 WINDOW=29200 RES=0x00 ACK SYN URGP=0

2020-03-31 19:51:13

142.255.54.194

attackspambots

Unauthorized connection attempt detected from IP address 142.255.54.194 to port 5555 [J]

2020-01-26 03:49:14

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 142.255.5.119
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 50528
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;142.255.5.119.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025020901 1800 900 604800 86400

;; Query time: 33 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 10 06:01:43 CST 2025
;; MSG SIZE  rcvd: 106

Host info

119.5.255.142.in-addr.arpa domain name pointer syn-142-255-005-119.res.spectrum.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
119.5.255.142.in-addr.arpa	name = syn-142-255-005-119.res.spectrum.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
133.242.155.85	attack	Aug 7 15:26:15 fhem-rasp sshd[24960]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=133.242.155.85 user=root Aug 7 15:26:18 fhem-rasp sshd[24960]: Failed password for root from 133.242.155.85 port 36140 ssh2 ...	2020-08-07 21:30:12
51.195.136.14	attackspambots	2020-08-07T14:03:34.261239centos sshd[29479]: Failed password for root from 51.195.136.14 port 36752 ssh2 2020-08-07T14:07:44.143211centos sshd[29717]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.195.136.14 user=root 2020-08-07T14:07:46.221036centos sshd[29717]: Failed password for root from 51.195.136.14 port 46978 ssh2 ...	2020-08-07 21:28:08
74.82.47.52	attackspambots	TCP (SYN) 74.82.47.52:41563 -> port 23, len 44	2020-08-07 21:24:29
85.209.0.100	attackspam	Unauthorized access to SSH at 7/Aug/2020:13:10:20 +0000.	2020-08-07 21:24:06
83.97.20.35	attack	Aug 7 14:43:57 debian-2gb-nbg1-2 kernel: \[19062689.004811\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=83.97.20.35 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=54321 PROTO=TCP SPT=49029 DPT=199 WINDOW=65535 RES=0x00 SYN URGP=0	2020-08-07 21:10:50
51.68.230.181	attackbots	Aug 7 09:04:16 vps46666688 sshd[28302]: Failed password for root from 51.68.230.181 port 46090 ssh2 ...	2020-08-07 21:17:02
196.27.127.61	attackspambots	$f2bV_matches	2020-08-07 20:59:12
116.236.15.171	attack	Aug 7 15:09:08 pornomens sshd\[6247\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.236.15.171 user=root Aug 7 15:09:10 pornomens sshd\[6247\]: Failed password for root from 116.236.15.171 port 43482 ssh2 Aug 7 15:13:17 pornomens sshd\[6260\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.236.15.171 user=root ...	2020-08-07 21:27:07
217.165.23.53	attackspam	Aug 3 09:57:18 vestacp sshd[24243]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.165.23.53 user=r.r Aug 3 09:57:20 vestacp sshd[24243]: Failed password for r.r from 217.165.23.53 port 60400 ssh2 Aug 3 09:57:21 vestacp sshd[24243]: Received disconnect from 217.165.23.53 port 60400:11: Bye Bye [preauth] Aug 3 09:57:21 vestacp sshd[24243]: Disconnected from authenticating user r.r 217.165.23.53 port 60400 [preauth] Aug 3 09:59:12 vestacp sshd[24313]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.165.23.53 user=r.r Aug 3 09:59:14 vestacp sshd[24313]: Failed password for r.r from 217.165.23.53 port 56720 ssh2 Aug 3 09:59:15 vestacp sshd[24313]: Received disconnect from 217.165.23.53 port 56720:11: Bye Bye [preauth] Aug 3 09:59:15 vestacp sshd[24313]: Disconnected from authenticating user r.r 217.165.23.53 port 56720 [preauth] Aug 3 10:00:44 vestacp sshd[24825]: pam_unix(ss........ -------------------------------	2020-08-07 21:27:22
164.132.98.75	attack	Aug 7 02:39:19 web1 sshd\[22563\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.132.98.75 user=root Aug 7 02:39:21 web1 sshd\[22563\]: Failed password for root from 164.132.98.75 port 53762 ssh2 Aug 7 02:43:18 web1 sshd\[23007\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.132.98.75 user=root Aug 7 02:43:19 web1 sshd\[23007\]: Failed password for root from 164.132.98.75 port 58461 ssh2 Aug 7 02:47:11 web1 sshd\[23298\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.132.98.75 user=root	2020-08-07 21:03:58
129.204.205.125	attack	Aug 7 08:48:56 NPSTNNYC01T sshd[1648]: Failed password for root from 129.204.205.125 port 33510 ssh2 Aug 7 08:50:38 NPSTNNYC01T sshd[1793]: Failed password for root from 129.204.205.125 port 51420 ssh2 ...	2020-08-07 21:04:26
51.210.14.10	attackspambots	Aug 7 14:02:29 vpn01 sshd[30541]: Failed password for root from 51.210.14.10 port 35234 ssh2 ...	2020-08-07 20:56:15
14.99.88.2	attack	DATE:2020-08-07 14:08:05, IP:14.99.88.2, PORT:telnet Telnet brute force auth on honeypot server (epe-honey1-hq)	2020-08-07 20:50:05
18.144.21.52	attackbots	Automatic report - XMLRPC Attack	2020-08-07 21:06:07
188.166.144.207	attackspam	Aug 7 03:02:17 web9 sshd\[3283\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.144.207 user=root Aug 7 03:02:19 web9 sshd\[3283\]: Failed password for root from 188.166.144.207 port 54668 ssh2 Aug 7 03:06:38 web9 sshd\[4124\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.144.207 user=root Aug 7 03:06:40 web9 sshd\[4124\]: Failed password for root from 188.166.144.207 port 37576 ssh2 Aug 7 03:10:56 web9 sshd\[4685\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.144.207 user=root	2020-08-07 21:29:55

Recently Reported IPs

187.188.114.238	157.38.30.221	220.181.14.155	38.147.155.180
96.151.138.68	93.240.251.76	246.210.9.189	167.17.81.125
140.193.104.203	83.197.219.181	29.235.116.47	200.4.68.43
164.84.34.51	76.132.154.252	132.140.174.240	106.43.167.188
41.58.28.144	147.106.202.120	212.108.48.248	141.32.205.227