115.159.55.242

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
115.159.55.43	attack	Apr 8 04:01:59 gw1 sshd[17396]: Failed password for ubuntu from 115.159.55.43 port 56064 ssh2 ...	2020-04-08 09:14:13
115.159.55.43	attack	Apr 4 09:33:29 hosting sshd[29010]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.159.55.43 user=root Apr 4 09:33:30 hosting sshd[29010]: Failed password for root from 115.159.55.43 port 47937 ssh2 ...	2020-04-04 16:41:44
115.159.55.43	attackspam	Mar 30 07:12:09 vayu sshd[275065]: Invalid user be from 115.159.55.43 Mar 30 07:12:09 vayu sshd[275065]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.159.55.43 Mar 30 07:12:11 vayu sshd[275065]: Failed password for invalid user be from 115.159.55.43 port 47783 ssh2 Mar 30 07:12:12 vayu sshd[275065]: Received disconnect from 115.159.55.43: 11: Bye Bye [preauth] Mar 30 07:27:51 vayu sshd[281172]: Invalid user node from 115.159.55.43 Mar 30 07:27:51 vayu sshd[281172]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.159.55.43 Mar 30 07:27:53 vayu sshd[281172]: Failed password for invalid user node from 115.159.55.43 port 35732 ssh2 Mar 30 07:27:53 vayu sshd[281172]: Received disconnect from 115.159.55.43: 11: Bye Bye [preauth] Mar 30 07:29:33 vayu sshd[281998]: Invalid user fdj from 115.159.55.43 Mar 30 07:29:33 vayu sshd[281998]: pam_unix(sshd:auth): authentication failure; logname........ -------------------------------	2020-03-30 21:01:02

Type

Details

Datetime

115.159.55.43

attack

Apr  8 04:01:59 gw1 sshd[17396]: Failed password for ubuntu from 115.159.55.43 port 56064 ssh2
...

2020-04-08 09:14:13

115.159.55.43

attack

Apr  4 09:33:29 hosting sshd[29010]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.159.55.43  user=root
Apr  4 09:33:30 hosting sshd[29010]: Failed password for root from 115.159.55.43 port 47937 ssh2
...

2020-04-04 16:41:44

115.159.55.43

attackspam

Mar 30 07:12:09 vayu sshd[275065]: Invalid user be from 115.159.55.43
Mar 30 07:12:09 vayu sshd[275065]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.159.55.43 
Mar 30 07:12:11 vayu sshd[275065]: Failed password for invalid user be from 115.159.55.43 port 47783 ssh2
Mar 30 07:12:12 vayu sshd[275065]: Received disconnect from 115.159.55.43: 11: Bye Bye [preauth]
Mar 30 07:27:51 vayu sshd[281172]: Invalid user node from 115.159.55.43
Mar 30 07:27:51 vayu sshd[281172]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.159.55.43 
Mar 30 07:27:53 vayu sshd[281172]: Failed password for invalid user node from 115.159.55.43 port 35732 ssh2
Mar 30 07:27:53 vayu sshd[281172]: Received disconnect from 115.159.55.43: 11: Bye Bye [preauth]
Mar 30 07:29:33 vayu sshd[281998]: Invalid user fdj from 115.159.55.43
Mar 30 07:29:33 vayu sshd[281998]: pam_unix(sshd:auth): authentication failure; logname........
-------------------------------

2020-03-30 21:01:02

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 115.159.55.242
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 36598
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;115.159.55.242.			IN	A

;; AUTHORITY SECTION:
.			421	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022040201 1800 900 604800 86400

;; Query time: 73 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Apr 03 10:33:12 CST 2022
;; MSG SIZE  rcvd: 107

Host info

Host 242.55.159.115.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 242.55.159.115.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
103.199.16.139	attack	Jun 10 06:34:56 firewall sshd[10295]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.199.16.139 Jun 10 06:34:56 firewall sshd[10295]: Invalid user admin from 103.199.16.139 Jun 10 06:34:58 firewall sshd[10295]: Failed password for invalid user admin from 103.199.16.139 port 55166 ssh2 ...	2020-06-10 18:07:16
88.218.16.43	attackspambots	TCP (SYN) 88.218.16.43:18796 -> port 22, len 48	2020-06-10 18:16:16
31.129.68.164	attack	Jun 10 13:32:40 itv-usvr-01 sshd[18565]: Invalid user alert from 31.129.68.164 Jun 10 13:32:40 itv-usvr-01 sshd[18565]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.129.68.164 Jun 10 13:32:40 itv-usvr-01 sshd[18565]: Invalid user alert from 31.129.68.164 Jun 10 13:32:42 itv-usvr-01 sshd[18565]: Failed password for invalid user alert from 31.129.68.164 port 59548 ssh2 Jun 10 13:36:06 itv-usvr-01 sshd[18733]: Invalid user yunji from 31.129.68.164	2020-06-10 18:13:48
120.31.143.209	attackbotsspam	SSH/22 MH Probe, BF, Hack -	2020-06-10 18:31:24
187.56.60.91	attackbots	Automatic report - Port Scan Attack	2020-06-10 18:38:19
59.80.34.110	attackspam	Jun 10 07:24:45 fhem-rasp sshd[14071]: Invalid user oota from 59.80.34.110 port 54376 ...	2020-06-10 18:12:15
103.143.208.102	attackbotsspam	spam (f2b h1)	2020-06-10 18:15:47
46.105.149.168	attackspam	2020-06-10T06:14:15.176813shield sshd\[23715\]: Invalid user admin from 46.105.149.168 port 50372 2020-06-10T06:14:15.180515shield sshd\[23715\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip168.ip-46-105-149.eu 2020-06-10T06:14:17.159169shield sshd\[23715\]: Failed password for invalid user admin from 46.105.149.168 port 50372 ssh2 2020-06-10T06:17:33.729940shield sshd\[25153\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip168.ip-46-105-149.eu user=root 2020-06-10T06:17:35.216957shield sshd\[25153\]: Failed password for root from 46.105.149.168 port 52898 ssh2	2020-06-10 17:52:07
209.95.51.11	attack	(sshd) Failed SSH login from 209.95.51.11 (US/United States/nyc-exit.privateinternetaccess.com): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jun 10 05:47:55 ubnt-55d23 sshd[26611]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.95.51.11 user=root Jun 10 05:47:57 ubnt-55d23 sshd[26611]: Failed password for root from 209.95.51.11 port 39810 ssh2	2020-06-10 18:14:53
54.37.225.48	attack	xmlrpc attack	2020-06-10 18:21:17
184.105.139.84	attack	TCP (SYN) 184.105.139.84:39948 -> port 445, len 40	2020-06-10 18:02:13
49.159.94.173	attack	Port Scan detected! ...	2020-06-10 18:04:25
222.239.124.19	attackspam	Bruteforce detected by fail2ban	2020-06-10 18:17:19
49.234.43.224	attack	$f2bV_matches	2020-06-10 18:24:24
34.92.120.142	attack	Jun 10 10:41:57 MainVPS sshd[20222]: Invalid user 123456 from 34.92.120.142 port 42188 Jun 10 10:41:57 MainVPS sshd[20222]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.92.120.142 Jun 10 10:41:57 MainVPS sshd[20222]: Invalid user 123456 from 34.92.120.142 port 42188 Jun 10 10:41:59 MainVPS sshd[20222]: Failed password for invalid user 123456 from 34.92.120.142 port 42188 ssh2 Jun 10 10:51:53 MainVPS sshd[28567]: Invalid user 123pass123 from 34.92.120.142 port 43698 ...	2020-06-10 18:24:54

Recently Reported IPs

115.159.223.34	115.159.56.172	115.159.58.86	115.159.72.182
115.159.88.186	115.160.145.106	115.160.150.186	115.160.176.86
115.160.182.178	115.160.71.13	115.161.83.59	115.164.188.118
115.164.189.129	115.164.209.176	115.164.40.14	115.164.40.227
115.164.41.174	115.164.42.109	115.164.52.255	115.164.58.126