31.41.94.142 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Ukraine

Internet Service Provider: New Information Systems PP

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	2020-05-04T14:47:25.896409homeassistant sshd[7490]: Invalid user cacti from 31.41.94.142 port 43908 2020-05-04T14:47:25.914239homeassistant sshd[7490]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.41.94.142 ...	2020-05-04 23:44:07
attackbotsspam	May 4 07:27:50 buvik sshd[8604]: Invalid user ubuntu from 31.41.94.142 May 4 07:27:50 buvik sshd[8604]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.41.94.142 May 4 07:27:52 buvik sshd[8604]: Failed password for invalid user ubuntu from 31.41.94.142 port 23818 ssh2 ...	2020-05-04 14:15:46

Type

Details

Datetime

attack

2020-05-04T14:47:25.896409homeassistant sshd[7490]: Invalid user cacti from 31.41.94.142 port 43908
2020-05-04T14:47:25.914239homeassistant sshd[7490]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.41.94.142
...

2020-05-04 23:44:07

attackbotsspam

May  4 07:27:50 buvik sshd[8604]: Invalid user ubuntu from 31.41.94.142
May  4 07:27:50 buvik sshd[8604]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.41.94.142
May  4 07:27:52 buvik sshd[8604]: Failed password for invalid user ubuntu from 31.41.94.142 port 23818 ssh2
...

2020-05-04 14:15:46

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 31.41.94.142
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 28809
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;31.41.94.142.			IN	A

;; AUTHORITY SECTION:
.			596	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020050301 1800 900 604800 86400

;; Query time: 96 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon May 04 14:15:42 CST 2020
;; MSG SIZE  rcvd: 116

Host info

142.94.41.31.in-addr.arpa domain name pointer 142-94-41-31.users.novi.uz.ua.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
142.94.41.31.in-addr.arpa	name = 142-94-41-31.users.novi.uz.ua.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
36.90.209.140	attackspam	Honeypot attack, port: 445, PTR: PTR record not found	2020-03-07 18:29:53
175.24.36.114	attack	2020-03-07T05:33:17.808460shield sshd\[6763\]: Invalid user vagrant from 175.24.36.114 port 49520 2020-03-07T05:33:17.813745shield sshd\[6763\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.24.36.114 2020-03-07T05:33:19.898544shield sshd\[6763\]: Failed password for invalid user vagrant from 175.24.36.114 port 49520 ssh2 2020-03-07T05:35:43.670386shield sshd\[7123\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.24.36.114 user=root 2020-03-07T05:35:45.139872shield sshd\[7123\]: Failed password for root from 175.24.36.114 port 47366 ssh2	2020-03-07 18:34:18
94.176.187.254	attackbots	port scan and connect, tcp 80 (http)	2020-03-07 18:21:42
45.146.203.95	attack	Mar 7 07:01:59 mail.srvfarm.net postfix/smtpd[2617077]: NOQUEUE: reject: RCPT from unknown[45.146.203.95]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Mar 7 07:02:57 mail.srvfarm.net postfix/smtpd[2617075]: NOQUEUE: reject: RCPT from unknown[45.146.203.95]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Mar 7 07:02:57 mail.srvfarm.net postfix/smtpd[2613524]: NOQUEUE: reject: RCPT from unknown[45.146.203.95]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Mar 7 07:02:57 mail.srvfarm.net postfix/smtpd[2617089]: NOQUEUE: reject: RCPT from unknown[45.146.203.95]: 450 4.1.8	2020-03-07 18:35:28
83.179.234.2	attack	Honeypot attack, port: 81, PTR: m83-179-234-2.cust.tele2.hr.	2020-03-07 18:45:36
165.194.86.87	attack	leo_www	2020-03-07 18:30:09
134.73.51.152	attackbotsspam	Mar 7 06:40:41 mail.srvfarm.net postfix/smtpd[2611674]: NOQUEUE: reject: RCPT from unknown[134.73.51.152]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Mar 7 06:41:44 mail.srvfarm.net postfix/smtpd[2613523]: NOQUEUE: reject: RCPT from unknown[134.73.51.152]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Mar 7 06:43:28 mail.srvfarm.net postfix/smtpd[2611674]: NOQUEUE: reject: RCPT from unknown[134.73.51.152]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Mar 7 06:43:28 mail.srvfarm.net postfix/smtpd[2613526]: NOQUEUE: reject: RCPT from unknown[134.73.51.152]: 450 4.1.8	2020-03-07 18:52:06
49.89.187.66	attack	Automatic report - Port Scan Attack	2020-03-07 18:23:53
103.74.121.31	attack	Honeypot attack, port: 445, PTR: mail.vpigroup.vn.	2020-03-07 18:41:07
83.130.52.218	attack	Automatic report - Port Scan Attack	2020-03-07 18:15:51
46.105.227.206	attackspam	Mar 7 09:17:23 IngegnereFirenze sshd[22055]: Failed password for invalid user ftpuser from 46.105.227.206 port 35268 ssh2 ...	2020-03-07 18:42:21
69.94.151.22	attackbotsspam	Mar 7 06:50:02 mail.srvfarm.net postfix/smtpd[2617089]: NOQUEUE: reject: RCPT from unknown[69.94.151.22]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Mar 7 06:50:02 mail.srvfarm.net postfix/smtpd[2617076]: NOQUEUE: reject: RCPT from unknown[69.94.151.22]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Mar 7 06:50:02 mail.srvfarm.net postfix/smtpd[2611662]: NOQUEUE: reject: RCPT from unknown[69.94.151.22]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Mar 7 06:50:02 mail.srvfarm.net postfix/smtpd[2617075]: NOQUEUE: reject: RCPT from unknown[69.94.151.2	2020-03-07 18:54:40
139.59.89.180	attackbots	Mar 7 10:32:44 lock-38 sshd[10555]: Failed password for invalid user redmine from 139.59.89.180 port 57986 ssh2 ...	2020-03-07 18:27:53
112.85.42.174	attackspam	Mar 7 00:22:25 web9 sshd\[15610\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.174 user=root Mar 7 00:22:27 web9 sshd\[15610\]: Failed password for root from 112.85.42.174 port 58803 ssh2 Mar 7 00:22:43 web9 sshd\[15640\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.174 user=root Mar 7 00:22:45 web9 sshd\[15640\]: Failed password for root from 112.85.42.174 port 22498 ssh2 Mar 7 00:23:05 web9 sshd\[15683\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.174 user=root	2020-03-07 18:28:34
202.182.115.10	attack	" "	2020-03-07 18:45:15

Recently Reported IPs

89.217.107.120	183.182.104.99	129.204.126.72	185.63.253.33
84.185.223.73	13.76.225.226	175.11.209.79	117.69.147.62
91.195.35.184	111.231.55.74	105.163.196.215	180.183.117.54
66.50.43.29	13.126.236.55	162.243.144.110	78.118.109.44
103.44.248.87	51.91.146.153	94.175.109.94	127.65.214.157