102.42.24.140 - IPInfo

Basic Info

City: Cairo

Region: Cairo Governorate

Country: Egypt

Internet Service Provider: TE Data

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspambots	Mar 14 02:45:33 areeb-Workstation sshd[3531]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.42.24.140 Mar 14 02:45:35 areeb-Workstation sshd[3531]: Failed password for invalid user admin from 102.42.24.140 port 33972 ssh2 ...	2020-03-14 06:52:21

Type

Details

Datetime

attackspambots

Mar 14 02:45:33 areeb-Workstation sshd[3531]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.42.24.140 
Mar 14 02:45:35 areeb-Workstation sshd[3531]: Failed password for invalid user admin from 102.42.24.140 port 33972 ssh2
...

2020-03-14 06:52:21

Comments on same subnet:

IP	Type	Details	Datetime
102.42.247.172	attackbots	Jun 9 22:16:57 b-admin sshd[31137]: Invalid user admin from 102.42.247.172 port 36077 Jun 9 22:16:57 b-admin sshd[31137]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.42.247.172 Jun 9 22:16:58 b-admin sshd[31137]: Failed password for invalid user admin from 102.42.247.172 port 36077 ssh2 Jun 9 22:16:59 b-admin sshd[31137]: Connection closed by 102.42.247.172 port 36077 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=102.42.247.172	2020-06-10 04:25:37
102.42.247.140	attackbotsspam	Mar 27 23:51:51 plusreed sshd[21147]: Invalid user admin from 102.42.247.140 Mar 27 23:51:51 plusreed sshd[21147]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.42.247.140 Mar 27 23:51:51 plusreed sshd[21147]: Invalid user admin from 102.42.247.140 Mar 27 23:51:54 plusreed sshd[21147]: Failed password for invalid user admin from 102.42.247.140 port 55574 ssh2 Mar 27 23:51:57 plusreed sshd[21154]: Invalid user admin from 102.42.247.140 ...	2020-03-28 14:49:56

Type

Details

Datetime

102.42.247.172

attackbots

Jun  9 22:16:57 b-admin sshd[31137]: Invalid user admin from 102.42.247.172 port 36077
Jun  9 22:16:57 b-admin sshd[31137]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.42.247.172
Jun  9 22:16:58 b-admin sshd[31137]: Failed password for invalid user admin from 102.42.247.172 port 36077 ssh2
Jun  9 22:16:59 b-admin sshd[31137]: Connection closed by 102.42.247.172 port 36077 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=102.42.247.172

2020-06-10 04:25:37

102.42.247.140

attackbotsspam

Mar 27 23:51:51 plusreed sshd[21147]: Invalid user admin from 102.42.247.140
Mar 27 23:51:51 plusreed sshd[21147]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.42.247.140
Mar 27 23:51:51 plusreed sshd[21147]: Invalid user admin from 102.42.247.140
Mar 27 23:51:54 plusreed sshd[21147]: Failed password for invalid user admin from 102.42.247.140 port 55574 ssh2
Mar 27 23:51:57 plusreed sshd[21154]: Invalid user admin from 102.42.247.140
...

2020-03-28 14:49:56

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 102.42.24.140
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 64885
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;102.42.24.140.			IN	A

;; AUTHORITY SECTION:
.			148	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020031301 1800 900 604800 86400

;; Query time: 35 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Mar 14 06:52:17 CST 2020
;; MSG SIZE  rcvd: 117

Host info

140.24.42.102.in-addr.arpa domain name pointer host-102.42.24.140.tedata.net.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
140.24.42.102.in-addr.arpa	name = host-102.42.24.140.tedata.net.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
107.152.205.47	attack	MYH,DEF GET http://meyer-pantalons.fr/includes/adminer.php	2020-02-13 13:39:55
154.9.165.81	attack	MYH,DEF GET http://meyer-pantalons.fr/downloader/adminer.php	2020-02-13 13:41:52
185.147.215.14	attackspam	[2020-02-13 00:15:23] NOTICE[1148] chan_sip.c: Registration from '' failed for '185.147.215.14:58742' - Wrong password [2020-02-13 00:15:23] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-02-13T00:15:23.493-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="4223",SessionID="0x7fd82c2348d8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.147.215.14/58742",Challenge="0a584148",ReceivedChallenge="0a584148",ReceivedHash="8665e75081da493211f6f56066041245" [2020-02-13 00:15:51] NOTICE[1148] chan_sip.c: Registration from '' failed for '185.147.215.14:53428' - Wrong password [2020-02-13 00:15:51] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-02-13T00:15:51.683-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="4224",SessionID="0x7fd82c2aad18",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.147.21 ...	2020-02-13 13:57:24
125.74.27.185	attackspambots	Feb 12 18:45:57 hpm sshd\[28220\]: Invalid user aaron from 125.74.27.185 Feb 12 18:45:57 hpm sshd\[28220\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.74.27.185 Feb 12 18:45:59 hpm sshd\[28220\]: Failed password for invalid user aaron from 125.74.27.185 port 49930 ssh2 Feb 12 18:55:17 hpm sshd\[29289\]: Invalid user pgbouncer from 125.74.27.185 Feb 12 18:55:17 hpm sshd\[29289\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.74.27.185	2020-02-13 13:14:05
103.24.98.12	attackbotsspam	port scan and connect, tcp 22 (ssh)	2020-02-13 13:24:01
172.246.70.135	attack	MYH,DEF GET /errors/adminer.php	2020-02-13 13:38:38
218.92.0.178	attackbotsspam	Feb1305:30:27server6sshd[12869]:refusedconnectfrom218.92.0.178\(218.92.0.178\)Feb1305:30:33server6sshd[12872]:refusedconnectfrom218.92.0.178\(218.92.0.178\)Feb1306:23:10server6sshd[16683]:refusedconnectfrom218.92.0.178\(218.92.0.178\)Feb1306:23:10server6sshd[16684]:refusedconnectfrom218.92.0.178\(218.92.0.178\)Feb1306:23:18server6sshd[16694]:refusedconnectfrom218.92.0.178\(218.92.0.178\)	2020-02-13 13:27:54
101.200.172.191	attackbotsspam	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-13 13:33:06
123.153.1.189	attackspam	Feb 13 06:48:14 MK-Soft-Root2 sshd[29578]: Failed password for root from 123.153.1.189 port 46924 ssh2 ...	2020-02-13 13:52:20
47.244.13.202	attackbotsspam	WEB SPAM: https://168cash.com.tw/	2020-02-13 13:33:23
82.64.129.178	attack	Feb 13 05:55:16 MK-Soft-Root2 sshd[17700]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.64.129.178 Feb 13 05:55:19 MK-Soft-Root2 sshd[17700]: Failed password for invalid user deploy from 82.64.129.178 port 41932 ssh2 ...	2020-02-13 13:13:50
170.82.0.243	attack	MYH,DEF GET http://meyer-pantalons.fr/shop/errors/adminer.php	2020-02-13 13:39:26
185.176.27.54	attack	02/13/2020-00:06:42.022637 185.176.27.54 Protocol: 6 ET DROP Dshield Block Listed Source group 1	2020-02-13 13:26:41
222.186.42.7	attack	Feb 13 06:21:18 piServer sshd[12772]: Failed password for root from 222.186.42.7 port 34039 ssh2 Feb 13 06:21:29 piServer sshd[12772]: Failed password for root from 222.186.42.7 port 34039 ssh2 Feb 13 06:21:34 piServer sshd[12836]: Failed password for root from 222.186.42.7 port 46239 ssh2 ...	2020-02-13 13:22:12
115.77.186.62	attackbotsspam	1581569708 - 02/13/2020 05:55:08 Host: 115.77.186.62/115.77.186.62 Port: 445 TCP Blocked	2020-02-13 13:23:46

Recently Reported IPs

89.76.3.133	95.202.90.121	63.101.162.142	85.82.93.231
87.141.19.157	209.16.66.94	217.170.206.138	188.153.174.76
40.174.245.234	4.55.38.95	221.108.117.82	160.94.82.90
70.94.76.234	171.238.230.195	88.178.215.139	34.176.151.132
162.241.121.45	225.145.20.97	124.144.84.89	158.222.154.46