213.142.148.141

Basic Info

City: unknown

Region: unknown

Country: Turkey

Internet Service Provider: Tamer Telekom Telekomunikasyon Bilgisayar Elektronik Yazilim Donanim Sanayi ve Ticaret Limited Sirketi

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbots	Nov 24 08:59:31 our-server-hostname postfix/smtpd[26165]: connect from unknown[213.142.148.141] Nov 24 08:59:32 our-server-hostname postfix/smtpd[25209]: connect from unknown[213.142.148.141] Nov x@x Nov x@x Nov 24 08:59:34 our-server-hostname postfix/smtpd[26165]: 6E842A40327: client=unknown[213.142.148.141] Nov x@x Nov x@x Nov 24 08:59:34 our-server-hostname postfix/smtpd[25209]: A8912A40329: client=unknown[213.142.148.141] Nov 24 08:59:35 our-server-hostname postfix/smtpd[30228]: 3B6A6A4032A: client=unknown[127.0.0.1], orig_client=unknown[213.142.148.141] Nov 24 08:59:35 our-server-hostname amavis[27153]: (27153-05) Passed CLEAN, [213.142.148.141] [213.142.148.141] , mail_id: ipOMe-s091WT, Hhostnames: -, size: 9864, queued_as: 3B6A6A4032A, 124 ms Nov x@x Nov x@x Nov 24 08:59:35 our-server-hostname postfix/smtpd[26165]: 7FD11A4001A: client=unknown[213.142.148.141] Nov 24 08:59:35 our-server-hostname postfix/smtpd[30228]: 84C00A4032C: client=unknown[127.0.0.1], or........ -------------------------------	2019-11-24 08:56:04

Type

Details

Datetime

attackbots

Nov 24 08:59:31 our-server-hostname postfix/smtpd[26165]: connect from unknown[213.142.148.141]
Nov 24 08:59:32 our-server-hostname postfix/smtpd[25209]: connect from unknown[213.142.148.141]
Nov x@x
Nov x@x
Nov 24 08:59:34 our-server-hostname postfix/smtpd[26165]: 6E842A40327: client=unknown[213.142.148.141]
Nov x@x
Nov x@x
Nov 24 08:59:34 our-server-hostname postfix/smtpd[25209]: A8912A40329: client=unknown[213.142.148.141]
Nov 24 08:59:35 our-server-hostname postfix/smtpd[30228]: 3B6A6A4032A: client=unknown[127.0.0.1], orig_client=unknown[213.142.148.141]
Nov 24 08:59:35 our-server-hostname amavis[27153]: (27153-05) Passed CLEAN, [213.142.148.141] [213.142.148.141] , mail_id: ipOMe-s091WT, Hhostnames: -, size: 9864, queued_as: 3B6A6A4032A, 124 ms
Nov x@x
Nov x@x
Nov 24 08:59:35 our-server-hostname postfix/smtpd[26165]: 7FD11A4001A: client=unknown[213.142.148.141]
Nov 24 08:59:35 our-server-hostname postfix/smtpd[30228]: 84C00A4032C: client=unknown[127.0.0.1], or........
-------------------------------

2019-11-24 08:56:04

Comments on same subnet:

IP	Type	Details	Datetime
213.142.148.38	attack	port scan and connect, tcp 1433 (ms-sql-s)	2020-05-15 02:25:15
213.142.148.37	attackspam	Unauthorized connection attempt detected from IP address 213.142.148.37 to port 445	2019-12-11 09:28:45
213.142.148.151	attackbots	SASL Brute Force	2019-11-24 16:21:35
213.142.148.149	attackbotsspam	SASL Brute Force	2019-11-24 13:23:37

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 213.142.148.141
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 7896
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;213.142.148.141.		IN	A

;; AUTHORITY SECTION:
.			119	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019112301 1800 900 604800 86400

;; Query time: 612 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Nov 24 08:55:59 CST 2019
;; MSG SIZE  rcvd: 119

Host info

Host 141.148.142.213.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 141.148.142.213.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
95.12.134.198	attack	Brute forcing RDP port 3389	2020-06-05 22:57:50
185.232.30.130	attackspam	ET SCAN Suspicious inbound to mSQL port 4333 - port: 4333 proto: TCP cat: Potentially Bad Traffic	2020-06-05 22:53:33
222.186.180.41	attackspam	Jun 5 17:15:31 MainVPS sshd[16809]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.41 user=root Jun 5 17:15:34 MainVPS sshd[16809]: Failed password for root from 222.186.180.41 port 24694 ssh2 Jun 5 17:15:36 MainVPS sshd[16809]: Failed password for root from 222.186.180.41 port 24694 ssh2 Jun 5 17:15:31 MainVPS sshd[16809]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.41 user=root Jun 5 17:15:34 MainVPS sshd[16809]: Failed password for root from 222.186.180.41 port 24694 ssh2 Jun 5 17:15:36 MainVPS sshd[16809]: Failed password for root from 222.186.180.41 port 24694 ssh2 Jun 5 17:15:31 MainVPS sshd[16809]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.41 user=root Jun 5 17:15:34 MainVPS sshd[16809]: Failed password for root from 222.186.180.41 port 24694 ssh2 Jun 5 17:15:36 MainVPS sshd[16809]: Failed password for root from 222.186.180.41	2020-06-05 23:16:23
112.85.42.232	attackbots	Jun 5 17:00:49 home sshd[1091]: Failed password for root from 112.85.42.232 port 50427 ssh2 Jun 5 17:01:57 home sshd[1251]: Failed password for root from 112.85.42.232 port 39862 ssh2 ...	2020-06-05 23:10:06
172.58.35.206	spambotsattack	Hacking into my face book her name Tracy Rix 916 5791233 I found all her info when I pushed in a couple up addresses	2020-06-05 23:23:04
27.72.88.141	attackbots	Unauthorized connection attempt from IP address 27.72.88.141 on Port 445(SMB)	2020-06-05 23:04:00
106.13.166.122	attackspambots	Jun 5 14:32:43 PorscheCustomer sshd[27406]: Failed password for root from 106.13.166.122 port 43590 ssh2 Jun 5 14:36:39 PorscheCustomer sshd[27538]: Failed password for root from 106.13.166.122 port 36844 ssh2 ...	2020-06-05 22:37:36
216.57.160.47	attackbotsspam	Jun 5 16:34:48 vmd48417 sshd[26215]: Failed password for root from 216.57.160.47 port 48570 ssh2	2020-06-05 22:55:59
212.154.70.149	attackspambots	Unauthorized connection attempt from IP address 212.154.70.149 on Port 445(SMB)	2020-06-05 22:39:20
5.79.181.162	attackspam	Unauthorized connection attempt from IP address 5.79.181.162 on Port 445(SMB)	2020-06-05 23:22:16
78.128.113.77	attack	Jun 5 15:48:15 mail postfix/smtpd\[7985\]: warning: unknown\[78.128.113.77\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Jun 5 15:48:33 mail postfix/smtpd\[8296\]: warning: unknown\[78.128.113.77\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Jun 5 15:48:52 mail postfix/smtpd\[7985\]: warning: unknown\[78.128.113.77\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Jun 5 16:47:44 mail postfix/smtpd\[10140\]: warning: unknown\[78.128.113.77\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\	2020-06-05 22:48:14
93.120.207.250	attackspam	1591358492 - 06/05/2020 14:01:32 Host: 93.120.207.250/93.120.207.250 Port: 445 TCP Blocked	2020-06-05 22:44:35
222.186.175.163	attackbots	Jun 5 14:47:45 localhost sshd[110289]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.163 user=root Jun 5 14:47:47 localhost sshd[110289]: Failed password for root from 222.186.175.163 port 11318 ssh2 Jun 5 14:47:51 localhost sshd[110289]: Failed password for root from 222.186.175.163 port 11318 ssh2 Jun 5 14:47:45 localhost sshd[110289]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.163 user=root Jun 5 14:47:47 localhost sshd[110289]: Failed password for root from 222.186.175.163 port 11318 ssh2 Jun 5 14:47:51 localhost sshd[110289]: Failed password for root from 222.186.175.163 port 11318 ssh2 Jun 5 14:47:45 localhost sshd[110289]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.163 user=root Jun 5 14:47:47 localhost sshd[110289]: Failed password for root from 222.186.175.163 port 11318 ssh2 Jun 5 14:47:51 localhost ...	2020-06-05 22:51:55
62.234.162.95	attackspam	Jun 5 09:20:33 vps46666688 sshd[31409]: Failed password for root from 62.234.162.95 port 50202 ssh2 ...	2020-06-05 23:05:32
85.105.246.70	attackspam	Unauthorized connection attempt from IP address 85.105.246.70 on Port 445(SMB)	2020-06-05 23:15:13

Recently Reported IPs

79.166.145.169	112.113.118.19	64.105.117.244	5.239.244.236
188.75.142.18	93.66.127.160	188.96.155.164	183.169.26.112
188.72.120.21	125.231.6.127	87.253.93.57	63.11.8.136
84.52.84.157	178.62.193.4	167.71.147.145	163.172.20.239
2408:8214:38:c244:fcee:817f:d4bb:b21e	119.41.167.125	49.71.135.40	197.26.117.122