102.129.175.142

Basic Info

City: unknown

Region: unknown

Country: Hong Kong

Internet Service Provider: Sun Network Limited Company

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbotsspam	Honeypot attack, port: 445, PTR: PTR record not found	2020-02-11 13:15:51
attackspam	Honeypot attack, port: 445, PTR: PTR record not found	2020-01-18 22:42:47

Comments on same subnet:

IP	Type	Details	Datetime
102.129.175.229	attackspam	2020-04-15T23:36:00.6406871495-001 sshd[27945]: Invalid user xue from 102.129.175.229 port 59312 2020-04-15T23:36:02.2863331495-001 sshd[27945]: Failed password for invalid user xue from 102.129.175.229 port 59312 ssh2 2020-04-15T23:36:50.8443861495-001 sshd[27973]: Invalid user user0 from 102.129.175.229 port 40002 2020-04-15T23:36:50.8476151495-001 sshd[27973]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.129.175.229 2020-04-15T23:36:50.8443861495-001 sshd[27973]: Invalid user user0 from 102.129.175.229 port 40002 2020-04-15T23:36:52.3488641495-001 sshd[27973]: Failed password for invalid user user0 from 102.129.175.229 port 40002 ssh2 ...	2020-04-16 14:59:23
102.129.175.242	attackbotsspam	2019-07-17T09:55:36.709080cavecanem sshd[29428]: Invalid user mani from 102.129.175.242 port 33400 2019-07-17T09:55:36.711573cavecanem sshd[29428]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.129.175.242 2019-07-17T09:55:36.709080cavecanem sshd[29428]: Invalid user mani from 102.129.175.242 port 33400 2019-07-17T09:55:39.033220cavecanem sshd[29428]: Failed password for invalid user mani from 102.129.175.242 port 33400 ssh2 2019-07-17T09:56:03.939282cavecanem sshd[30045]: Invalid user 123 from 102.129.175.242 port 37124 2019-07-17T09:56:03.941660cavecanem sshd[30045]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.129.175.242 2019-07-17T09:56:03.939282cavecanem sshd[30045]: Invalid user 123 from 102.129.175.242 port 37124 2019-07-17T09:56:06.297601cavecanem sshd[30045]: Failed password for invalid user 123 from 102.129.175.242 port 37124 ssh2 2019-07-17T09:56:32.402911cavecanem sshd[30630]: Inva ...	2019-07-17 20:27:33

Type

Details

Datetime

102.129.175.229

attackspam

2020-04-15T23:36:00.6406871495-001 sshd[27945]: Invalid user xue from 102.129.175.229 port 59312
2020-04-15T23:36:02.2863331495-001 sshd[27945]: Failed password for invalid user xue from 102.129.175.229 port 59312 ssh2
2020-04-15T23:36:50.8443861495-001 sshd[27973]: Invalid user user0 from 102.129.175.229 port 40002
2020-04-15T23:36:50.8476151495-001 sshd[27973]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.129.175.229
2020-04-15T23:36:50.8443861495-001 sshd[27973]: Invalid user user0 from 102.129.175.229 port 40002
2020-04-15T23:36:52.3488641495-001 sshd[27973]: Failed password for invalid user user0 from 102.129.175.229 port 40002 ssh2
...

2020-04-16 14:59:23

102.129.175.242

attackbotsspam

2019-07-17T09:55:36.709080cavecanem sshd[29428]: Invalid user mani from 102.129.175.242 port 33400
2019-07-17T09:55:36.711573cavecanem sshd[29428]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.129.175.242
2019-07-17T09:55:36.709080cavecanem sshd[29428]: Invalid user mani from 102.129.175.242 port 33400
2019-07-17T09:55:39.033220cavecanem sshd[29428]: Failed password for invalid user mani from 102.129.175.242 port 33400 ssh2
2019-07-17T09:56:03.939282cavecanem sshd[30045]: Invalid user 123 from 102.129.175.242 port 37124
2019-07-17T09:56:03.941660cavecanem sshd[30045]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.129.175.242
2019-07-17T09:56:03.939282cavecanem sshd[30045]: Invalid user 123 from 102.129.175.242 port 37124
2019-07-17T09:56:06.297601cavecanem sshd[30045]: Failed password for invalid user 123 from 102.129.175.242 port 37124 ssh2
2019-07-17T09:56:32.402911cavecanem sshd[30630]: Inva
...

2019-07-17 20:27:33

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 102.129.175.142
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 65364
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;102.129.175.142.		IN	A

;; AUTHORITY SECTION:
.			332	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020011800 1800 900 604800 86400

;; Query time: 37 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jan 18 22:42:40 CST 2020
;; MSG SIZE  rcvd: 119

Host info

Host 142.175.129.102.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 142.175.129.102.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
68.183.225.222	attackspambots	Jan 7 21:51:19 vpn sshd[13398]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.225.222 Jan 7 21:51:21 vpn sshd[13398]: Failed password for invalid user hill from 68.183.225.222 port 56062 ssh2 Jan 7 21:55:02 vpn sshd[13401]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.225.222	2020-01-05 17:08:57
68.183.182.199	attackbots	Jan 25 03:46:44 vpn sshd[3260]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.182.199 Jan 25 03:46:46 vpn sshd[3260]: Failed password for invalid user apache from 68.183.182.199 port 41127 ssh2 Jan 25 03:52:23 vpn sshd[3278]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.182.199	2020-01-05 17:14:48
68.183.148.78	attack	Mar 18 13:20:22 vpn sshd[17693]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.148.78 Mar 18 13:20:24 vpn sshd[17693]: Failed password for invalid user market from 68.183.148.78 port 48448 ssh2 Mar 18 13:26:38 vpn sshd[17709]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.148.78	2020-01-05 17:20:11
222.186.173.238	attackbotsspam	2020-01-05T09:13:20.605964homeassistant sshd[11966]: Failed none for root from 222.186.173.238 port 9900 ssh2 2020-01-05T09:13:20.800181homeassistant sshd[11966]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.238 user=root ...	2020-01-05 17:19:30
68.183.16.188	attackspam	Mar 22 16:44:04 vpn sshd[27685]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.16.188 Mar 22 16:44:06 vpn sshd[27685]: Failed password for invalid user patricia from 68.183.16.188 port 55204 ssh2 Mar 22 16:48:11 vpn sshd[27722]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.16.188	2020-01-05 17:20:38
68.183.185.65	attackbots	Dec 20 23:53:56 vpn sshd[18215]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.185.65 Dec 20 23:53:58 vpn sshd[18215]: Failed password for invalid user kdk from 68.183.185.65 port 52088 ssh2 Dec 20 23:58:41 vpn sshd[18246]: Failed password for backup from 68.183.185.65 port 45804 ssh2	2020-01-05 17:13:10
193.112.44.102	attackspam	Unauthorized connection attempt detected from IP address 193.112.44.102 to port 2220 [J]	2020-01-05 17:00:20
68.183.184.141	attack	Feb 3 15:06:38 vpn sshd[23645]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.184.141 Feb 3 15:06:40 vpn sshd[23645]: Failed password for invalid user test from 68.183.184.141 port 38378 ssh2 Feb 3 15:07:49 vpn sshd[23647]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.184.141	2020-01-05 17:14:24
106.13.183.92	attackbots	Jan 4 21:46:28 hanapaa sshd\[29577\]: Invalid user bmuuser from 106.13.183.92 Jan 4 21:46:28 hanapaa sshd\[29577\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.183.92 Jan 4 21:46:30 hanapaa sshd\[29577\]: Failed password for invalid user bmuuser from 106.13.183.92 port 49680 ssh2 Jan 4 21:56:03 hanapaa sshd\[30458\]: Invalid user 123456 from 106.13.183.92 Jan 4 21:56:03 hanapaa sshd\[30458\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.183.92	2020-01-05 17:24:45
203.205.34.207	attackbotsspam	Unauthorized connection attempt detected from IP address 203.205.34.207 to port 23 [J]	2020-01-05 17:11:38
68.183.103.253	attackbotsspam	Jan 11 19:49:05 vpn sshd[17424]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.103.253 Jan 11 19:49:07 vpn sshd[17424]: Failed password for invalid user fletcher from 68.183.103.253 port 56676 ssh2 Jan 11 19:52:30 vpn sshd[17431]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.103.253	2020-01-05 17:33:18
68.183.184.39	attackspam	Mar 21 12:04:20 vpn sshd[3680]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.184.39 Mar 21 12:04:22 vpn sshd[3680]: Failed password for invalid user Alphanetworks from 68.183.184.39 port 36902 ssh2 Mar 21 12:09:08 vpn sshd[3688]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.184.39	2020-01-05 17:13:33
222.186.175.202	attackspam	Jan 5 03:52:55 TORMINT sshd\[25585\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.202 user=root Jan 5 03:52:57 TORMINT sshd\[25585\]: Failed password for root from 222.186.175.202 port 49382 ssh2 Jan 5 03:53:01 TORMINT sshd\[25585\]: Failed password for root from 222.186.175.202 port 49382 ssh2 ...	2020-01-05 16:54:20
68.183.239.207	attackspambots	Dec 24 08:56:14 vpn sshd[23874]: Failed password for mysql from 68.183.239.207 port 49380 ssh2 Dec 24 09:01:03 vpn sshd[23913]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.239.207 Dec 24 09:01:04 vpn sshd[23913]: Failed password for invalid user site02 from 68.183.239.207 port 42308 ssh2	2020-01-05 17:02:30
63.143.53.138	attackbots	\[2020-01-05 04:01:49\] NOTICE\[2839\] chan_sip.c: Registration from '"444" \' failed for '63.143.53.138:5432' - Wrong password \[2020-01-05 04:01:49\] SECURITY\[2857\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-01-05T04:01:49.562-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="444",SessionID="0x7f0fb447f838",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/63.143.53.138/5432",Challenge="6ff0eb8f",ReceivedChallenge="6ff0eb8f",ReceivedHash="c66642aefdfcbc36807e3729c91f65a8" \[2020-01-05 04:01:49\] NOTICE\[2839\] chan_sip.c: Registration from '"444" \' failed for '63.143.53.138:5432' - Wrong password \[2020-01-05 04:01:49\] SECURITY\[2857\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-01-05T04:01:49.638-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="444",SessionID="0x7f0fb4073278",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/63.1	2020-01-05 17:02:12

Recently Reported IPs

43.196.157.237	197.211.128.28	179.222.97.194	167.172.124.157
157.245.201.142	114.254.37.30	155.110.225.65	111.231.75.5
169.236.10.250	241.56.133.131	186.34.33.58	144.251.199.30
196.38.217.231	190.187.82.114	176.24.23.187	184.87.47.223
252.61.30.151	81.107.6.25	75.179.57.101	176.213.27.81