167.99.142.112

Basic Info

City: unknown

Region: unknown

Country: Germany

Internet Service Provider: DigitalOcean LLC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspam	Sep 16 00:45:14 localhost postfix/smtpd[6420]: disconnect from unknown[167.99.142.112] ehlo=1 auth=0/1 quhostname=1 commands=2/3 Sep 16 01:18:28 localhost postfix/smtpd[14278]: disconnect from unknown[167.99.142.112] ehlo=1 auth=0/1 quhostname=1 commands=2/3 Sep 16 01:49:04 localhost postfix/smtpd[21061]: disconnect from unknown[167.99.142.112] ehlo=1 auth=0/1 quhostname=1 commands=2/3 Sep 16 01:56:29 localhost postfix/smtpd[23238]: disconnect from unknown[167.99.142.112] ehlo=1 auth=0/1 quhostname=1 commands=2/3 Sep 16 02:04:10 localhost postfix/smtpd[24637]: disconnect from unknown[167.99.142.112] ehlo=1 auth=0/1 quhostname=1 commands=2/3 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=167.99.142.112	2019-09-26 15:58:33

Type

Details

Datetime

attackspam

Sep 16 00:45:14 localhost postfix/smtpd[6420]: disconnect from unknown[167.99.142.112] ehlo=1 auth=0/1 quhostname=1 commands=2/3
Sep 16 01:18:28 localhost postfix/smtpd[14278]: disconnect from unknown[167.99.142.112] ehlo=1 auth=0/1 quhostname=1 commands=2/3
Sep 16 01:49:04 localhost postfix/smtpd[21061]: disconnect from unknown[167.99.142.112] ehlo=1 auth=0/1 quhostname=1 commands=2/3
Sep 16 01:56:29 localhost postfix/smtpd[23238]: disconnect from unknown[167.99.142.112] ehlo=1 auth=0/1 quhostname=1 commands=2/3
Sep 16 02:04:10 localhost postfix/smtpd[24637]: disconnect from unknown[167.99.142.112] ehlo=1 auth=0/1 quhostname=1 commands=2/3


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=167.99.142.112

2019-09-26 15:58:33

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 167.99.142.112
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 23383
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;167.99.142.112.			IN	A

;; AUTHORITY SECTION:
.			434	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019092600 1800 900 604800 86400

;; Query time: 139 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Sep 26 15:58:30 CST 2019
;; MSG SIZE  rcvd: 118

Host info

Host 112.142.99.167.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 112.142.99.167.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
157.44.169.117	attack	Unauthorized connection attempt from IP address 157.44.169.117 on Port 445(SMB)	2020-09-05 01:44:53
200.29.232.154	attackspam	Unauthorized connection attempt from IP address 200.29.232.154 on Port 445(SMB)	2020-09-05 01:51:51
88.247.101.17	attackspambots	Honeypot attack, port: 81, PTR: 88.247.101.17.static.ttnet.com.tr.	2020-09-05 02:08:42
46.31.221.116	attackbots	Invalid user scj from 46.31.221.116 port 56500	2020-09-05 02:18:11
174.108.238.163	attack	Icarus honeypot on github	2020-09-05 02:19:29
213.240.255.188	attackspam	Attempted connection to port 445.	2020-09-05 01:54:46
138.97.242.113	attack	Sep 3 18:45:37 mellenthin postfix/smtpd[20478]: NOQUEUE: reject: RCPT from unknown[138.97.242.113]: 554 5.7.1 Service unavailable; Client host [138.97.242.113] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/138.97.242.113; from= to= proto=ESMTP helo=<138-97-242-113.altavelocidade>	2020-09-05 01:57:57
183.60.83.19	botsattack	malware	2020-09-05 01:52:44
37.239.56.169	attackbots	2020-09-02 11:09:17 plain_virtual_exim authenticator failed for ([37.239.56.169]) [37.239.56.169]: 535 Incorrect authentication data ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=37.239.56.169	2020-09-05 01:46:03
183.82.114.15	attack	Unauthorized connection attempt from IP address 183.82.114.15 on Port 445(SMB)	2020-09-05 01:49:17
104.206.128.14	attackspam	trying to access non-authorized port	2020-09-05 01:45:48
176.126.175.49	attackspam	1 Attack(s) Detected [DoS Attack: TCP/UDP Chargen] from source: 176.126.175.49, port 57836, Thursday, September 03, 2020 19:47:11	2020-09-05 01:55:44
90.170.249.175	attackspambots	Sep 3 18:45:42 mellenthin postfix/smtpd[20478]: NOQUEUE: reject: RCPT from unknown[90.170.249.175]: 554 5.7.1 Service unavailable; Client host [90.170.249.175] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/90.170.249.175; from= to= proto=ESMTP helo=<[90.170.249.175]>	2020-09-05 01:51:31
222.186.30.57	attackbots	Sep 4 20:22:29 theomazars sshd[23469]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.57 user=root Sep 4 20:22:30 theomazars sshd[23469]: Failed password for root from 222.186.30.57 port 51662 ssh2	2020-09-05 02:24:08
106.51.38.193	attack	Unauthorized connection attempt from IP address 106.51.38.193 on Port 445(SMB)	2020-09-05 02:23:18

Recently Reported IPs

107.68.114.111	156.60.181.205	223.4.70.106	158.145.244.161
58.149.33.74	194.189.67.248	93.100.140.78	218.53.29.161
175.39.60.26	145.239.90.182	192.54.158.1	106.163.198.209
157.37.194.102	139.103.215.254	68.75.65.216	1.179.140.148
52.166.161.172	202.105.178.114	144.2.87.192	230.131.183.233