119.42.102.56 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: unknown

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
119.42.102.173	attack	119.42.102.173 - - [22/Apr/2020:05:48:48 +0200] "POST /wp-login.php HTTP/1.1" 200 6458 "http://entreprendre.univ-lyon3.fr/wp-login.php" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:40.0) Gecko/20100101 Firefox/40.1" 119.42.102.173 - - [22/Apr/2020:05:48:51 +0200] "POST /wp-login.php HTTP/1.1" 200 6458 "http://entreprendre.univ-lyon3.fr/wp-login.php" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:40.0) Gecko/20100101 Firefox/40.1" 119.42.102.173 - - [22/Apr/2020:05:48:54 +0200] "POST /wp-login.php HTTP/1.1" 200 6458 "http://entreprendre.univ-lyon3.fr/wp-login.php" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:40.0) Gecko/20100101 Firefox/40.1" 119.42.102.173 - - [22/Apr/2020:05:48:57 +0200] "POST /wp-login.php HTTP/1.1" 200 6458 "http://entreprendre.univ-lyon3.fr/wp-login.php" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:40.0) Gecko/20100101 Firefox/40.1" 119.42.102.173 - - [22/Apr/2020:05:48:59 +0200] "POST /wp-login.php HTTP/1.1" 200 6458 "http://entreprendre.univ-lyon3.fr/wp-login.php" "Mozilla/5.0 (Window ...	2020-04-22 18:26:11

Type

Details

Datetime

119.42.102.173

attack

119.42.102.173 - - [22/Apr/2020:05:48:48 +0200] "POST /wp-login.php HTTP/1.1" 200 6458 "http://entreprendre.univ-lyon3.fr/wp-login.php" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:40.0) Gecko/20100101 Firefox/40.1"
119.42.102.173 - - [22/Apr/2020:05:48:51 +0200] "POST /wp-login.php HTTP/1.1" 200 6458 "http://entreprendre.univ-lyon3.fr/wp-login.php" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:40.0) Gecko/20100101 Firefox/40.1"
119.42.102.173 - - [22/Apr/2020:05:48:54 +0200] "POST /wp-login.php HTTP/1.1" 200 6458 "http://entreprendre.univ-lyon3.fr/wp-login.php" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:40.0) Gecko/20100101 Firefox/40.1"
119.42.102.173 - - [22/Apr/2020:05:48:57 +0200] "POST /wp-login.php HTTP/1.1" 200 6458 "http://entreprendre.univ-lyon3.fr/wp-login.php" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:40.0) Gecko/20100101 Firefox/40.1"
119.42.102.173 - - [22/Apr/2020:05:48:59 +0200] "POST /wp-login.php HTTP/1.1" 200 6458 "http://entreprendre.univ-lyon3.fr/wp-login.php" "Mozilla/5.0 (Window
...

2020-04-22 18:26:11

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 119.42.102.56
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 50161
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;119.42.102.56.			IN	A

;; AUTHORITY SECTION:
.			598	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030900 1800 900 604800 86400

;; Query time: 19 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 14:15:06 CST 2022
;; MSG SIZE  rcvd: 106

Host info

Host 56.102.42.119.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 56.102.42.119.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
129.205.118.115	attackbots	20/9/3@07:23:48: FAIL: Alarm-Intrusion address from=129.205.118.115 ...	2020-09-03 19:58:34
138.246.253.15	attack	Unauthorized connection attempt detected from IP address 138.246.253.15 to port 443 [T]	2020-09-03 20:03:51
114.67.108.60	attackbots	$f2bV_matches	2020-09-03 20:30:07
188.166.244.121	attackbotsspam	Invalid user es from 188.166.244.121 port 51504	2020-09-03 20:20:14
200.85.172.242	attackspam	1599065382 - 09/02/2020 18:49:42 Host: 200.85.172.242/200.85.172.242 Port: 445 TCP Blocked	2020-09-03 20:31:44
222.186.173.142	attack	Sep 3 14:30:17 abendstille sshd\[1873\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.142 user=root Sep 3 14:30:19 abendstille sshd\[1873\]: Failed password for root from 222.186.173.142 port 63976 ssh2 Sep 3 14:30:22 abendstille sshd\[1873\]: Failed password for root from 222.186.173.142 port 63976 ssh2 Sep 3 14:30:25 abendstille sshd\[1873\]: Failed password for root from 222.186.173.142 port 63976 ssh2 Sep 3 14:30:29 abendstille sshd\[1873\]: Failed password for root from 222.186.173.142 port 63976 ssh2 ...	2020-09-03 20:32:03
220.164.226.212	attackbotsspam	TCP (SYN) 220.164.226.212:65307 -> port 1433, len 48	2020-09-03 20:00:45
49.236.192.13	attackbots	TCP (SYN) 49.236.192.13:49717 -> port 445, len 40	2020-09-03 20:08:20
85.106.190.46	attackbots	TCP (SYN) 85.106.190.46:49953 -> port 445, len 52	2020-09-03 19:53:10
62.14.242.34	attack	Multiple SSH authentication failures from 62.14.242.34	2020-09-03 19:53:27
5.125.73.250	attackspambots	TCP (SYN) 5.125.73.250:61597 -> port 445, len 52	2020-09-03 20:00:17
42.112.211.52	attackspam	Invalid user erp from 42.112.211.52 port 39306	2020-09-03 20:28:56
189.148.6.36	attackspambots	Icarus honeypot on github	2020-09-03 20:29:40
178.19.166.228	attackspam	TCP (SYN) 178.19.166.228:20602 -> port 23, len 44	2020-09-03 19:51:51
60.249.4.218	attack	Honeypot attack, port: 445, PTR: 60-249-4-218.HINET-IP.hinet.net.	2020-09-03 19:59:23

Recently Reported IPs

119.42.102.28	119.42.102.59	119.42.102.73	119.42.102.94
119.42.102.98	119.42.103.110	119.42.103.126	119.42.103.13
119.42.103.138	119.42.103.152	119.42.103.16	21.1.230.16
119.42.103.161	119.42.103.163	119.42.103.173	9.95.125.67
119.42.103.193	119.42.103.204	119.42.103.233	119.42.103.235