218.255.94.142

Basic Info

City: unknown

Region: unknown

Country: Hong Kong

Internet Service Provider: WTT HK Limited

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbots	Unauthorized connection attempt from IP address 218.255.94.142 on Port 445(SMB)	2020-03-06 23:34:18

Comments on same subnet:

IP	Type	Details	Datetime
218.255.94.186	attackspambots	Nov 20 16:58:39 our-server-hostname postfix/smtpd[13020]: connect from unknown[218.255.94.186] Nov x@x Nov x@x Nov 20 16:58:39 our-server-hostname postfix/smtpd[13020]: lost connection after DATA from unknown[218.255.94.186] Nov 20 16:58:39 our-server-hostname postfix/smtpd[13020]: disconnect from unknown[218.255.94.186] Nov 20 19:01:36 our-server-hostname postfix/smtpd[18167]: connect from unknown[218.255.94.186] Nov x@x Nov x@x Nov 20 19:01:36 our-server-hostname postfix/smtpd[18167]: lost connection after DATA from unknown[218.255.94.186] Nov 20 19:01:36 our-server-hostname postfix/smtpd[18167]: disconnect from unknown[218.255.94.186] Nov 20 19:02:01 our-server-hostname postfix/smtpd[17520]: connect from unknown[218.255.94.186] Nov x@x Nov x@x Nov 20 19:02:01 our-server-hostname postfix/smtpd[17520]: lost connection after DATA from unknown[218.255.94.186] Nov 20 19:02:01 our-server-hostname postfix/smtpd[17520]: disconnect from unknown[218.255.94.186] Nov 20 19:02:26........ -------------------------------	2019-11-22 04:25:40

Type

Details

Datetime

218.255.94.186

attackspambots

Nov 20 16:58:39 our-server-hostname postfix/smtpd[13020]: connect from unknown[218.255.94.186]
Nov x@x
Nov x@x
Nov 20 16:58:39 our-server-hostname postfix/smtpd[13020]: lost connection after DATA from unknown[218.255.94.186]
Nov 20 16:58:39 our-server-hostname postfix/smtpd[13020]: disconnect from unknown[218.255.94.186]
Nov 20 19:01:36 our-server-hostname postfix/smtpd[18167]: connect from unknown[218.255.94.186]
Nov x@x
Nov x@x
Nov 20 19:01:36 our-server-hostname postfix/smtpd[18167]: lost connection after DATA from unknown[218.255.94.186]
Nov 20 19:01:36 our-server-hostname postfix/smtpd[18167]: disconnect from unknown[218.255.94.186]
Nov 20 19:02:01 our-server-hostname postfix/smtpd[17520]: connect from unknown[218.255.94.186]
Nov x@x
Nov x@x
Nov 20 19:02:01 our-server-hostname postfix/smtpd[17520]: lost connection after DATA from unknown[218.255.94.186]
Nov 20 19:02:01 our-server-hostname postfix/smtpd[17520]: disconnect from unknown[218.255.94.186]
Nov 20 19:02:26........
-------------------------------

2019-11-22 04:25:40

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 218.255.94.142
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 33502
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;218.255.94.142.			IN	A

;; AUTHORITY SECTION:
.			599	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020030600 1800 900 604800 86400

;; Query time: 107 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Mar 06 23:34:11 CST 2020
;; MSG SIZE  rcvd: 118

Host info

142.94.255.218.in-addr.arpa domain name pointer static.reserve.wtt.net.hk.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
142.94.255.218.in-addr.arpa	name = static.reserve.wtt.net.hk.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
5.157.26.208	attackbotsspam	Registration form abuse	2020-10-05 15:57:38
60.6.224.98	attackbots	Oct 4 17:35:39 shivevps sshd[13759]: Failed password for root from 60.6.224.98 port 45054 ssh2 Oct 4 17:37:56 shivevps sshd[13891]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.6.224.98 user=root Oct 4 17:37:57 shivevps sshd[13891]: Failed password for root from 60.6.224.98 port 51883 ssh2 ...	2020-10-05 16:20:31
45.27.48.161	attack	sshguard	2020-10-05 16:21:03
114.119.145.237	attackbotsspam	$f2bV_matches	2020-10-05 16:18:33
212.33.199.201	attackbotsspam	Found on CINS badguys / proto=17 . srcport=43548 . dstport=5060 . (3529)	2020-10-05 16:01:19
51.254.38.106	attackbotsspam	51.254.38.106 (FR/France/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Oct 5 03:37:52 server2 sshd[932]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.219.157.174 user=root Oct 5 03:37:54 server2 sshd[932]: Failed password for root from 114.219.157.174 port 33202 ssh2 Oct 5 03:37:23 server2 sshd[409]: Failed password for root from 222.211.70.141 port 44023 ssh2 Oct 5 03:37:24 server2 sshd[432]: Failed password for root from 51.254.38.106 port 32780 ssh2 Oct 5 03:38:07 server2 sshd[1334]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.120.145 user=root IP Addresses Blocked: 114.219.157.174 (CN/China/-) 222.211.70.141 (CN/China/-)	2020-10-05 16:25:16
80.200.181.33	attackspam	Automatic report - Banned IP Access	2020-10-05 16:18:59
148.70.38.19	attack	Oct 4 19:42:08 kapalua sshd\[19739\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.38.19 user=root Oct 4 19:42:09 kapalua sshd\[19739\]: Failed password for root from 148.70.38.19 port 58980 ssh2 Oct 4 19:46:39 kapalua sshd\[20076\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.38.19 user=root Oct 4 19:46:41 kapalua sshd\[20076\]: Failed password for root from 148.70.38.19 port 49864 ssh2 Oct 4 19:51:00 kapalua sshd\[20340\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.38.19 user=root	2020-10-05 15:48:00
82.64.15.106	attackspam	srv02 SSH BruteForce Attacks 22 ..	2020-10-05 15:56:03
212.247.174.226	attackspambots	(sshd) Failed SSH login from 212.247.174.226 (SE/Sweden/static-212-247-174-226.cust.tele2.se): 5 in the last 3600 secs	2020-10-05 15:51:36
104.248.52.139	attackbots	TCP (SYN) 104.248.52.139:54796 -> port 22, len 44	2020-10-05 16:19:36
94.191.88.34	attackbots	Oct 5 00:38:42 Tower sshd[44422]: Connection from 94.191.88.34 port 37596 on 192.168.10.220 port 22 rdomain "" Oct 5 00:38:44 Tower sshd[44422]: Failed password for root from 94.191.88.34 port 37596 ssh2 Oct 5 00:38:45 Tower sshd[44422]: Received disconnect from 94.191.88.34 port 37596:11: Bye Bye [preauth] Oct 5 00:38:45 Tower sshd[44422]: Disconnected from authenticating user root 94.191.88.34 port 37596 [preauth]	2020-10-05 16:06:24
14.254.96.4	attackbotsspam	Automatic report - Port Scan Attack	2020-10-05 16:13:46
46.101.184.178	attack	Brute-force attempt banned	2020-10-05 15:49:33
220.133.226.180	attackbotsspam	Found on CINS badguys / proto=6 . srcport=26931 . dstport=23 Telnet . (3532)	2020-10-05 15:54:50

Recently Reported IPs

73.159.166.213	130.240.251.82	112.237.198.207	183.152.77.131
189.63.150.251	41.39.189.179	80.242.214.85	14.248.208.141
118.70.116.173	185.7.216.130	183.152.66.228	77.42.115.137
103.37.201.168	179.229.67.19	123.55.84.140	36.74.201.155
201.236.144.114	89.219.13.99	37.228.116.85	183.152.65.123