113.142.72.109

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: ChinaNet Shaanxi Province Network

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspambots	Jun 6 22:44:15 buvik sshd[30122]: Failed password for root from 113.142.72.109 port 50850 ssh2 Jun 6 22:45:48 buvik sshd[30357]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.142.72.109 user=root Jun 6 22:45:50 buvik sshd[30357]: Failed password for root from 113.142.72.109 port 58459 ssh2 ...	2020-06-07 05:00:15

Type

Details

Datetime

attackspambots

Jun  6 22:44:15 buvik sshd[30122]: Failed password for root from 113.142.72.109 port 50850 ssh2
Jun  6 22:45:48 buvik sshd[30357]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.142.72.109  user=root
Jun  6 22:45:50 buvik sshd[30357]: Failed password for root from 113.142.72.109 port 58459 ssh2
...

2020-06-07 05:00:15

Comments on same subnet:

IP	Type	Details	Datetime
113.142.72.2	attack	20/10/9@16:48:25: FAIL: Alarm-Network address from=113.142.72.2 20/10/9@16:48:25: FAIL: Alarm-Network address from=113.142.72.2 ...	2020-10-10 23:04:46
113.142.72.2	attack	20/10/9@16:48:25: FAIL: Alarm-Network address from=113.142.72.2 20/10/9@16:48:25: FAIL: Alarm-Network address from=113.142.72.2 ...	2020-10-10 14:55:33
113.142.72.2	attack	Icarus honeypot on github	2020-08-25 02:04:54
113.142.72.107	attackbotsspam	Unauthorized connection attempt detected from IP address 113.142.72.107 to port 23	2020-06-16 00:07:03
113.142.72.107	attackbots	TCP (SYN) 113.142.72.107:21213 -> port 23, len 44	2020-06-14 05:02:57
113.142.72.107	attackspambots	Lines containing failures of 113.142.72.107 Jun 3 21:48:13 shared04 sshd[29515]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.142.72.107 user=r.r Jun 3 21:48:15 shared04 sshd[29515]: Failed password for r.r from 113.142.72.107 port 60339 ssh2 Jun 3 21:48:15 shared04 sshd[29515]: Received disconnect from 113.142.72.107 port 60339:11: Bye Bye [preauth] Jun 3 21:48:15 shared04 sshd[29515]: Disconnected from authenticating user r.r 113.142.72.107 port 60339 [preauth] Jun 3 22:03:49 shared04 sshd[2691]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.142.72.107 user=r.r Jun 3 22:03:51 shared04 sshd[2691]: Failed password for r.r from 113.142.72.107 port 34165 ssh2 Jun 3 22:03:51 shared04 sshd[2691]: Received disconnect from 113.142.72.107 port 34165:11: Bye Bye [preauth] Jun 3 22:03:51 shared04 sshd[2691]: Disconnected from authenticating user r.r 113.142.72.107 port 34165 [pr........ ------------------------------	2020-06-07 08:02:31
113.142.72.220	attack	...	2020-05-04 07:21:49
113.142.72.210	attackbotsspam	Unauthorized connection attempt from IP address 113.142.72.210 on Port 445(SMB)	2020-02-24 19:18:56

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 113.142.72.109
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 33716
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;113.142.72.109.			IN	A

;; AUTHORITY SECTION:
.			220	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020060601 1800 900 604800 86400

;; Query time: 58 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jun 07 05:00:12 CST 2020
;; MSG SIZE  rcvd: 118

Host info

Host 109.72.142.113.in-addr.arpa not found: 2(SERVFAIL)

Nslookup info:

;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 109.72.142.113.in-addr.arpa: SERVFAIL

Related IP info:

Related comments:

IP	Type	Details	Datetime
124.88.181.242	attackspam	badbot	2019-11-20 18:58:36
45.64.9.214	attack	Scanning random ports - tries to find possible vulnerable services	2019-11-20 18:49:33
137.74.152.239	attack	2019-11-20 07:24:03 auth_login authenticator failed for ip239.ip-137-74-152.eu (pPYAb0t) [137.74.152.239]: 535 Incorrect authentication data (set_id=canberra) 2019-11-20 07:24:09 auth_login authenticator failed for ip239.ip-137-74-152.eu (qHDogLQCvz) [137.74.152.239]: 535 Incorrect authentication data (set_id=canberra) ...	2019-11-20 19:21:00
45.238.121.173	attack	Fail2Ban Ban Triggered SMTP Bruteforce Attempt	2019-11-20 19:01:38
114.105.185.19	attackbotsspam	badbot	2019-11-20 18:51:22
185.176.27.254	attackspambots	11/20/2019-05:38:59.570106 185.176.27.254 Protocol: 6 ET DROP Dshield Block Listed Source group 1	2019-11-20 18:50:06
1.192.177.12	attack	badbot	2019-11-20 19:22:17
121.232.154.107	attack	badbot	2019-11-20 18:57:06
104.236.176.175	attack	$f2bV_matches	2019-11-20 19:13:31
139.59.123.163	attack	firewall-block, port(s): 8545/tcp	2019-11-20 19:28:44
121.17.85.116	attackspambots	badbot	2019-11-20 19:17:02
182.140.140.2	attack	Nov 20 06:43:21 firewall sshd[30281]: Invalid user guyen from 182.140.140.2 Nov 20 06:43:23 firewall sshd[30281]: Failed password for invalid user guyen from 182.140.140.2 port 55182 ssh2 Nov 20 06:48:14 firewall sshd[30401]: Invalid user dekait from 182.140.140.2 ...	2019-11-20 18:55:37
193.111.79.34	attackspambots	from denyforge.best (host-193.111.79.34.routergate.com [193.111.79.34]) by cauvin.org with ESMTP ; Wed, 20 Nov 2019 00:24:24 -0600	2019-11-20 19:00:18
91.121.110.97	attackspam	Nov 20 09:50:52 SilenceServices sshd[17552]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.121.110.97 Nov 20 09:50:54 SilenceServices sshd[17552]: Failed password for invalid user harli from 91.121.110.97 port 46176 ssh2 Nov 20 09:54:22 SilenceServices sshd[18538]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.121.110.97	2019-11-20 19:14:12
220.177.3.10	attack	badbot	2019-11-20 18:48:56

Recently Reported IPs

111.137.220.209	72.32.174.209	175.134.158.9	107.72.150.164
174.40.22.73	139.138.9.250	135.244.85.184	170.105.126.183
251.155.44.15	103.225.221.122	47.234.128.26	37.172.124.89
65.55.13.167	63.63.165.145	156.172.193.4	195.29.53.14
110.232.95.199	89.143.38.145	51.195.6.74	189.235.225.176