110.42.1.159 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
110.42.10.50	attackspambots	SMB Server BruteForce Attack	2020-08-08 18:15:22
110.42.10.38	attack	May 9 04:44:57 vpn01 sshd[30538]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.42.10.38 May 9 04:45:00 vpn01 sshd[30538]: Failed password for invalid user vnc from 110.42.10.38 port 38408 ssh2 ...	2020-05-09 13:37:51
110.42.1.99	attackspam	3389/tcp 3389/tcp 3389/tcp [2019-08-18]3pkt	2019-08-19 15:17:11

Type

Details

Datetime

110.42.10.50

attackspambots

SMB Server BruteForce Attack

2020-08-08 18:15:22

110.42.10.38

attack

May  9 04:44:57 vpn01 sshd[30538]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.42.10.38
May  9 04:45:00 vpn01 sshd[30538]: Failed password for invalid user vnc from 110.42.10.38 port 38408 ssh2
...

2020-05-09 13:37:51

110.42.1.99

attackspam

3389/tcp 3389/tcp 3389/tcp
[2019-08-18]3pkt

2019-08-19 15:17:11

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 110.42.1.159
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 15806
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;110.42.1.159.			IN	A

;; AUTHORITY SECTION:
.			589	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022040201 1800 900 604800 86400

;; Query time: 68 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Apr 03 08:04:31 CST 2022
;; MSG SIZE  rcvd: 105

Host info

Host 159.1.42.110.in-addr.arpa not found: 2(SERVFAIL)

Nslookup info:

;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 159.1.42.110.in-addr.arpa: SERVFAIL

Related IP info:

Related comments:

IP	Type	Details	Datetime
217.182.71.54	attack	SSH Brute-Force reported by Fail2Ban	2019-08-29 06:00:29
198.50.227.75	attackspambots	WordPress brute force	2019-08-29 05:29:47
122.172.87.0	attackbots	Aug 29 00:58:26 www sshd\[178170\]: Invalid user tomcat from 122.172.87.0 Aug 29 00:58:26 www sshd\[178170\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.172.87.0 Aug 29 00:58:28 www sshd\[178170\]: Failed password for invalid user tomcat from 122.172.87.0 port 49886 ssh2 ...	2019-08-29 06:11:51
106.52.202.144	attackspam	Automatic report - Banned IP Access	2019-08-29 05:40:43
23.249.162.136	attack	\[2019-08-28 17:34:26\] NOTICE\[1829\] chan_sip.c: Registration from '\' failed for '23.249.162.136:63450' - Wrong password \[2019-08-28 17:34:26\] SECURITY\[1837\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-08-28T17:34:26.770-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="9401",SessionID="0x7f7b30db7498",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/23.249.162.136/63450",Challenge="5b712fce",ReceivedChallenge="5b712fce",ReceivedHash="da9a2ae30a1d2ca785eaf0e9b83ff3d6" \[2019-08-28 17:37:12\] NOTICE\[1829\] chan_sip.c: Registration from '\' failed for '23.249.162.136:59474' - Wrong password \[2019-08-28 17:37:12\] SECURITY\[1837\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-08-28T17:37:12.386-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="9501",SessionID="0x7f7b3014d668",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/23.249	2019-08-29 06:01:37
81.241.235.191	attackbotsspam	Aug 28 17:33:34 TORMINT sshd\[7384\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.241.235.191 user=root Aug 28 17:33:36 TORMINT sshd\[7384\]: Failed password for root from 81.241.235.191 port 46246 ssh2 Aug 28 17:37:34 TORMINT sshd\[8068\]: Invalid user libuuid from 81.241.235.191 Aug 28 17:37:34 TORMINT sshd\[8068\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.241.235.191 ...	2019-08-29 05:46:14
121.7.194.71	attack	$f2bV_matches	2019-08-29 05:31:31
117.50.99.9	attack	Aug 28 09:33:17 hanapaa sshd\[27659\]: Invalid user osmc from 117.50.99.9 Aug 28 09:33:17 hanapaa sshd\[27659\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.99.9 Aug 28 09:33:19 hanapaa sshd\[27659\]: Failed password for invalid user osmc from 117.50.99.9 port 36968 ssh2 Aug 28 09:36:42 hanapaa sshd\[27968\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.99.9 user=root Aug 28 09:36:44 hanapaa sshd\[27968\]: Failed password for root from 117.50.99.9 port 36698 ssh2	2019-08-29 05:49:51
201.174.182.159	attackbots	Aug 28 21:13:23 XXX sshd[42621]: Invalid user strenesse from 201.174.182.159 port 38966	2019-08-29 05:34:46
121.223.172.133	attack	Automatic report - Port Scan Attack	2019-08-29 05:38:43
210.221.220.68	attackbotsspam	Aug 28 17:04:58 eventyay sshd[28140]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.221.220.68 Aug 28 17:05:00 eventyay sshd[28140]: Failed password for invalid user rds from 210.221.220.68 port 36560 ssh2 Aug 28 17:09:57 eventyay sshd[29394]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.221.220.68 ...	2019-08-29 06:07:58
142.93.116.168	attack	k+ssh-bruteforce	2019-08-29 05:52:51
112.83.227.124	attackbotsspam	23/tcp [2019-08-28]1pkt	2019-08-29 06:08:42
37.109.58.0	attackspam	Unauthorised access (Aug 28) SRC=37.109.58.0 LEN=44 TTL=54 ID=60262 TCP DPT=8080 WINDOW=24395 SYN Unauthorised access (Aug 28) SRC=37.109.58.0 LEN=44 TTL=54 ID=44895 TCP DPT=8080 WINDOW=45489 SYN	2019-08-29 05:39:03
180.222.68.197	attackbots	180.222.68.197 - - [28/Aug/2019:19:04:04 +0200] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 180.222.68.197 - - [28/Aug/2019:19:04:05 +0200] "POST /wp-login.php HTTP/1.1" 200 1503 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 180.222.68.197 - - [28/Aug/2019:19:04:06 +0200] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 180.222.68.197 - - [28/Aug/2019:19:04:07 +0200] "POST /wp-login.php HTTP/1.1" 200 1486 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 180.222.68.197 - - [28/Aug/2019:19:04:07 +0200] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 180.222.68.197 - - [28/Aug/2019:19:04:08 +0200] "POST /wp-login.php HTTP/1.1" 200 1486 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2019-08-29 05:33:14

Recently Reported IPs

110.40.254.244	110.42.130.67	110.42.140.56	110.42.178.239
110.42.186.244	110.42.188.208	110.42.192.254	110.42.192.29
110.42.193.155	110.42.196.62	110.42.211.248	110.42.227.183
110.42.229.130	110.42.233.75	110.42.234.233	110.42.239.53
110.42.4.90	110.42.6.45	110.42.64.231	110.42.64.79