129.213.42.20 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: Oracle Public Cloud

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbots	Jan 16 23:01:46 vpn01 sshd[27104]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.213.42.20 Jan 16 23:01:47 vpn01 sshd[27104]: Failed password for invalid user dye from 129.213.42.20 port 44614 ssh2 ...	2020-01-17 06:21:28
attackbotsspam	Invalid user tpmuser from 129.213.42.20 port 42606	2020-01-12 08:12:19
attackbots	SSH Brute Force, server-1 sshd[29465]: Failed password for invalid user hbs from 129.213.42.20 port 35456 ssh2	2020-01-12 01:46:58
attackbotsspam	2019-12-30T12:11:11.147659vps751288.ovh.net sshd\[31583\]: Invalid user appserver from 129.213.42.20 port 44702 2019-12-30T12:11:11.158117vps751288.ovh.net sshd\[31583\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.213.42.20 2019-12-30T12:11:13.544050vps751288.ovh.net sshd\[31583\]: Failed password for invalid user appserver from 129.213.42.20 port 44702 ssh2 2019-12-30T12:13:30.548155vps751288.ovh.net sshd\[31587\]: Invalid user backup from 129.213.42.20 port 44338 2019-12-30T12:13:30.555506vps751288.ovh.net sshd\[31587\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.213.42.20	2019-12-30 20:03:53
attackspam	"SSH brute force auth login attempt."	2019-12-29 20:18:57

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 129.213.42.20
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 51140
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;129.213.42.20.			IN	A

;; AUTHORITY SECTION:
.			576	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019122900 1800 900 604800 86400

;; Query time: 453 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Dec 29 20:18:53 CST 2019
;; MSG SIZE  rcvd: 117

Host info

Host 20.42.213.129.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 20.42.213.129.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
114.215.154.125	attack	/wp-login.php	2019-08-06 18:47:23
106.38.108.28	attackspam	Telnet Server BruteForce Attack	2019-08-06 19:09:20
185.220.101.49	attackspambots	Aug 6 12:44:38 tux-35-217 sshd\[12173\]: Invalid user localadmin from 185.220.101.49 port 34720 Aug 6 12:44:38 tux-35-217 sshd\[12173\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.220.101.49 Aug 6 12:44:39 tux-35-217 sshd\[12173\]: Failed password for invalid user localadmin from 185.220.101.49 port 34720 ssh2 Aug 6 12:44:42 tux-35-217 sshd\[12175\]: Invalid user fwupgrade from 185.220.101.49 port 40511 Aug 6 12:44:42 tux-35-217 sshd\[12175\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.220.101.49 ...	2019-08-06 18:57:09
10.154.242.8	attack	Original message Message ID <72.C3.13800.9AE884D5@smtp01.aqua.bos.sync.lan> Created on: 5 August 2019 at 21:15 (Delivered after -28700 seconds) From: Ding To: Lienabatnaa@windstream.net Subject: BE OUR COMPANY REPRESENTATIVE!! SPF: PASS with IP 69.168.106.36 Learn more DKIM: 'PASS' with domain windstream.net Mrs.Liena Ding Beauty Forth Garment & Accessories Co., Ltd (BFGA)	2019-08-06 18:44:31
211.229.34.218	attackspambots	2019-08-06T07:43:13.351384abusebot-5.cloudsearch.cf sshd\[3162\]: Invalid user yao from 211.229.34.218 port 42694	2019-08-06 19:12:45
51.15.245.7	attack	Aug 6 04:57:18 vpn01 sshd\[26947\]: Invalid user node from 51.15.245.7 Aug 6 04:57:18 vpn01 sshd\[26947\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.15.245.7 Aug 6 04:57:20 vpn01 sshd\[26947\]: Failed password for invalid user node from 51.15.245.7 port 59858 ssh2	2019-08-06 19:16:38
168.90.128.222	attackspambots	2019-08-06 08:31:53,611 [snip] proftpd[8066] [snip] (168.90.128.222[168.90.128.222]): USER root: no such user found from 168.90.128.222 [168.90.128.222] to ::ffff:[snip]:22 2019-08-06 08:31:53,871 [snip] proftpd[8066] [snip] (168.90.128.222[168.90.128.222]): USER root: no such user found from 168.90.128.222 [168.90.128.222] to ::ffff:[snip]:22 2019-08-06 08:31:54,137 [snip] proftpd[8066] [snip] (168.90.128.222[168.90.128.222]): USER root: no such user found from 168.90.128.222 [168.90.128.222] to ::ffff:[snip]:22[...]	2019-08-06 18:58:34
23.129.64.200	attackbotsspam	2019-08-06T08:19:54.623921abusebot-3.cloudsearch.cf sshd\[13485\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.emeraldonion.org user=root	2019-08-06 18:46:58
182.254.137.202	attackbots	19/8/6@07:26:32: FAIL: Alarm-Intrusion address from=182.254.137.202 ...	2019-08-06 19:28:57
104.206.128.62	attackbotsspam	firewall-block, port(s): 81/tcp	2019-08-06 18:48:40
76.235.79.12	attackspam	Unauthorised access (Aug 6) SRC=76.235.79.12 LEN=40 TTL=240 ID=11711 DF TCP DPT=23 WINDOW=14600 SYN	2019-08-06 18:53:48
110.249.212.46	attack	TCP 803	2019-08-06 18:58:56
41.208.68.28	attackspambots	RDPBruteGSL	2019-08-06 19:26:43
180.126.239.48	attackbots	Telnetd brute force attack detected by fail2ban	2019-08-06 19:35:22
89.248.172.85	attackspam	MultiHost/MultiPort Probe, Scan, Hack -	2019-08-06 19:22:22

Recently Reported IPs

185.124.87.169	185.73.108.222	192.3.255.141	51.38.140.17
78.175.136.29	64.140.127.175	170.210.60.230	181.189.192.18
185.43.209.207	45.12.213.114	115.55.22.218	120.0.233.169
47.113.64.77	109.202.17.37	14.250.58.100	188.208.57.30
198.211.110.178	112.199.76.196	197.246.3.106	9.104.191.198