124.42.66.22 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: Beijing Guanghuan Xinwang Digital Technology Co.Ltd

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbots	Unauthorized connection attempt detected from IP address 124.42.66.22 to port 1433 [J]	2020-01-07 20:23:02

Comments on same subnet:

IP	Type	Details	Datetime
124.42.66.35	attackbots	Unauthorized connection attempt detected from IP address 124.42.66.35 to port 1433 [J]	2020-03-02 15:32:13
124.42.66.31	attackspambots	Port 1433 Scan	2020-02-29 18:47:00
124.42.66.10	attack	unauthorized connection attempt	2020-02-26 14:32:46
124.42.66.26	attackspambots	port scan and connect, tcp 1433 (ms-sql-s)	2020-01-26 22:42:51
124.42.66.23	attackspam	Unauthorized connection attempt detected from IP address 124.42.66.23 to port 1433 [J]	2020-01-26 02:40:29

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 124.42.66.22
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 30317
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;124.42.66.22.			IN	A

;; AUTHORITY SECTION:
.			455	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020010700 1800 900 604800 86400

;; Query time: 67 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jan 07 20:22:57 CST 2020
;; MSG SIZE  rcvd: 116

Host info

Host 22.66.42.124.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 22.66.42.124.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
171.5.110.80	attack	May 2 21:25:59 mercury wordpress(lukegirvin.com)[22469]: XML-RPC authentication failure for luke from 171.5.110.80 ...	2019-09-10 20:09:10
51.254.118.237	attackspam	DATE:2019-09-10 13:30:26, IP:51.254.118.237, PORT:3306 - MySQL/MariaDB brute force auth on a honeypot server (epe-dc)	2019-09-10 20:16:54
27.14.44.163	attackspambots	" "	2019-09-10 19:54:37
200.175.104.103	attackspam	Aug 4 21:55:49 mercury auth[23539]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=info@lukegirvin.com rhost=200.175.104.103 ...	2019-09-10 19:49:17
196.219.81.225	attackspambots	Jun 2 12:40:40 mercury auth[14235]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=josh@learnargentinianspanish.com rhost=196.219.81.225 ...	2019-09-10 20:29:18
113.173.38.232	attack	2019-07-30T04:36:58.338Z CLOSE host=113.173.38.232 port=34751 fd=4 time=50.041 bytes=78 ...	2019-09-10 20:00:01
218.98.40.152	attack	2019-09-05T01:04:45.061Z CLOSE host=218.98.40.152 port=10884 fd=4 time=20.012 bytes=17 ...	2019-09-10 20:38:56
208.100.26.233	attackspam	Jun 18 17:56:27 mercury smtpd[1174]: 1aa6bb04ed698821 smtp event=bad-input address=208.100.26.233 host=ip233.208-100-26.static.steadfastdns.net result="500 5.5.1 Invalid command: Pipelining not supported" ...	2019-09-10 20:24:51
216.170.118.156	attackbotsspam	Jul 21 03:34:07 mercury smtpd[1220]: 7ad6d65a0e6e074b smtp event=failed-command address=216.170.118.156 host=216.170.118.156 command="RCPT to:" result="550 Invalid recipient" ...	2019-09-10 19:52:44
123.148.147.194	attackbotsspam	[Wed Jul 17 07:06:16.194976 2019] [access_compat:error] [pid 31788] [client 123.148.147.194:64663] AH01797: client denied by server configuration: /var/www/html/josh/wp-login.php ...	2019-09-10 20:09:41
162.243.142.154	attack	Aug 18 21:41:28 mercury kernel: [UFW ALLOW] IN=eth0 OUT= MAC=f2:3c:91:bc:4d:f8:84:78:ac:5a:1a:41:08:00 SRC=162.243.142.154 DST=109.74.200.221 LEN=76 TOS=0x00 PREC=0x00 TTL=245 ID=54321 PROTO=UDP SPT=60225 DPT=123 LEN=56 ...	2019-09-10 20:01:07
81.16.8.104	attackspambots	port scan and connect, tcp 23 (telnet)	2019-09-10 20:32:39
148.70.116.223	attack	Sep 10 01:23:10 php2 sshd\[4272\]: Invalid user ts3 from 148.70.116.223 Sep 10 01:23:10 php2 sshd\[4272\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.116.223 Sep 10 01:23:12 php2 sshd\[4272\]: Failed password for invalid user ts3 from 148.70.116.223 port 57858 ssh2 Sep 10 01:30:28 php2 sshd\[4878\]: Invalid user dev from 148.70.116.223 Sep 10 01:30:28 php2 sshd\[4878\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.116.223	2019-09-10 20:13:10
222.186.52.124	attackbots	Sep 10 08:10:32 ny01 sshd[16578]: Failed password for root from 222.186.52.124 port 11832 ssh2 Sep 10 08:10:32 ny01 sshd[16576]: Failed password for root from 222.186.52.124 port 41764 ssh2 Sep 10 08:10:34 ny01 sshd[16578]: Failed password for root from 222.186.52.124 port 11832 ssh2	2019-09-10 20:13:55
200.115.60.33	attackbotsspam	firewall-block, port(s): 8181/tcp, 60001/tcp	2019-09-10 20:31:25

Recently Reported IPs

218.89.222.16	201.171.5.62	201.146.194.84	193.42.110.124
190.204.182.208	185.183.243.163	181.118.82.169	180.252.245.36
159.89.200.118	133.233.252.17	177.139.202.231	177.91.80.240
176.252.227.251	171.247.205.232	148.55.150.136	169.38.93.100
185.84.224.74	174.253.15.193	143.202.24.182	138.118.241.73