39.42.97.148 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Pakistan

Internet Service Provider: Pakistan Telecommunication Company Limited

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbots	Unauthorized connection attempt detected from IP address 39.42.97.148 to port 1433 [T]	2020-01-09 01:44:10

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 39.42.97.148
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 29775
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;39.42.97.148.			IN	A

;; AUTHORITY SECTION:
.			519	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020010801 1800 900 604800 86400

;; Query time: 126 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jan 09 01:44:04 CST 2020
;; MSG SIZE  rcvd: 116

Host info

Host 148.97.42.39.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 148.97.42.39.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
152.101.29.177	attackspam	TCP (SYN) 152.101.29.177:31733 -> port 8080, len 40	2020-09-05 00:30:49
31.16.207.26	attackspam	Sep 2 04:40:22 cumulus sshd[14368]: Invalid user pi from 31.16.207.26 port 46578 Sep 2 04:40:22 cumulus sshd[14367]: Invalid user pi from 31.16.207.26 port 46576 Sep 2 04:40:23 cumulus sshd[14368]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.16.207.26 Sep 2 04:40:23 cumulus sshd[14367]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.16.207.26 Sep 2 04:40:25 cumulus sshd[14368]: Failed password for invalid user pi from 31.16.207.26 port 46578 ssh2 Sep 2 04:40:25 cumulus sshd[14367]: Failed password for invalid user pi from 31.16.207.26 port 46576 ssh2 Sep 2 04:40:25 cumulus sshd[14368]: Connection closed by 31.16.207.26 port 46578 [preauth] Sep 2 04:40:25 cumulus sshd[14367]: Connection closed by 31.16.207.26 port 46576 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=31.16.207.26	2020-09-04 23:47:58
200.21.174.58	attackspam	Honeypot attack, port: 445, PTR: PTR record not found	2020-09-04 23:56:54
117.69.154.5	attackspam	Sep 3 19:47:52 srv01 postfix/smtpd\[25076\]: warning: unknown\[117.69.154.5\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 3 19:51:18 srv01 postfix/smtpd\[308\]: warning: unknown\[117.69.154.5\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 3 19:54:45 srv01 postfix/smtpd\[775\]: warning: unknown\[117.69.154.5\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 3 19:54:57 srv01 postfix/smtpd\[775\]: warning: unknown\[117.69.154.5\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 3 19:55:13 srv01 postfix/smtpd\[775\]: warning: unknown\[117.69.154.5\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2020-09-05 00:18:24
94.253.211.89	attack	Sep 3 18:47:05 mellenthin postfix/smtpd[20751]: NOQUEUE: reject: RCPT from cpe-94-253-211-89.st2.cable.xnet.hr[94.253.211.89]: 554 5.7.1 Service unavailable; Client host [94.253.211.89] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/94.253.211.89; from= to= proto=ESMTP helo=	2020-09-05 00:16:58
182.61.133.172	attack	2020-08-22 19:07:03,972 fail2ban.actions [1312]: NOTICE [sshd] Ban 182.61.133.172 2020-08-22 19:20:52,092 fail2ban.actions [1312]: NOTICE [sshd] Ban 182.61.133.172 2020-08-22 19:34:28,085 fail2ban.actions [1312]: NOTICE [sshd] Ban 182.61.133.172 2020-08-22 19:47:51,311 fail2ban.actions [1312]: NOTICE [sshd] Ban 182.61.133.172 2020-08-22 20:00:45,021 fail2ban.actions [1312]: NOTICE [sshd] Ban 182.61.133.172 ...	2020-09-05 00:33:04
118.69.71.106	attackbots	Sep 4 10:32:44 master sshd[3351]: Failed password for invalid user ftp1 from 118.69.71.106 port 45411 ssh2	2020-09-05 00:28:31
91.207.181.144	attackbots	Honeypot attack, port: 445, PTR: PTR record not found	2020-09-05 00:26:36
35.188.182.6	attackbotsspam	fail2ban - Attack against Apache (too many 404s)	2020-09-05 00:00:26
218.92.0.145	attackbotsspam	Fail2Ban Ban Triggered (2)	2020-09-05 00:14:26
106.220.105.251	attack	Honeypot attack, port: 445, PTR: PTR record not found	2020-09-05 00:34:38
73.186.246.242	attackbots	Firewall Dropped Connection	2020-09-05 00:03:10
183.2.102.19	attackspam	Lines containing failures of 183.2.102.19 Sep 2 04:40:06 newdogma sshd[28433]: Invalid user csvn from 183.2.102.19 port 40690 Sep 2 04:40:06 newdogma sshd[28433]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.2.102.19 Sep 2 04:40:08 newdogma sshd[28433]: Failed password for invalid user csvn from 183.2.102.19 port 40690 ssh2 Sep 2 04:40:10 newdogma sshd[28433]: Received disconnect from 183.2.102.19 port 40690:11: Bye Bye [preauth] Sep 2 04:40:10 newdogma sshd[28433]: Disconnected from invalid user csvn 183.2.102.19 port 40690 [preauth] Sep 2 04:45:26 newdogma sshd[29511]: Invalid user michael from 183.2.102.19 port 37776 Sep 2 04:45:26 newdogma sshd[29511]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.2.102.19 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=183.2.102.19	2020-09-05 00:05:09
67.85.226.26	attackbotsspam	SSH/22 MH Probe, BF, Hack -	2020-09-05 00:10:13
222.186.180.223	attackspam	Sep 4 17:32:58 rocket sshd[1745]: Failed password for root from 222.186.180.223 port 64438 ssh2 Sep 4 17:33:02 rocket sshd[1745]: Failed password for root from 222.186.180.223 port 64438 ssh2 Sep 4 17:33:05 rocket sshd[1745]: Failed password for root from 222.186.180.223 port 64438 ssh2 ...	2020-09-05 00:34:13

Recently Reported IPs

7.190.242.127	171.4.178.121	180.222.125.242	226.174.237.40
154.8.224.43	210.25.36.80	95.32.76.198	179.103.246.8
179.9.53.140	81.15.207.188	128.199.242.45	201.107.58.102
26.201.107.170	165.168.201.149	125.118.57.239	63.139.70.83
225.78.228.87	122.229.31.219	24.33.34.198	251.55.46.244