162.13.42.147 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United Kingdom of Great Britain and Northern Ireland

Internet Service Provider: Rackspace Inc.

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbotsspam	Jan 30 04:07:03 odroid64 sshd\[2174\]: Invalid user taditprabha from 162.13.42.147 Jan 30 04:07:03 odroid64 sshd\[2174\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.13.42.147 ...	2020-03-06 04:42:30
attackspambots	Unauthorized connection attempt detected from IP address 162.13.42.147 to port 2220 [J]	2020-01-31 23:57:04
attack	Jan 20 06:59:09 vmanager6029 sshd\[6307\]: Invalid user phantombot from 162.13.42.147 port 58045 Jan 20 06:59:09 vmanager6029 sshd\[6307\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.13.42.147 Jan 20 06:59:11 vmanager6029 sshd\[6307\]: Failed password for invalid user phantombot from 162.13.42.147 port 58045 ssh2	2020-01-20 14:20:47

Type

Details

Datetime

attackbotsspam

Jan 30 04:07:03 odroid64 sshd\[2174\]: Invalid user taditprabha from 162.13.42.147
Jan 30 04:07:03 odroid64 sshd\[2174\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.13.42.147
...

2020-03-06 04:42:30

attackspambots

Unauthorized connection attempt detected from IP address 162.13.42.147 to port 2220 [J]

2020-01-31 23:57:04

attack

Jan 20 06:59:09 vmanager6029 sshd\[6307\]: Invalid user phantombot from 162.13.42.147 port 58045
Jan 20 06:59:09 vmanager6029 sshd\[6307\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.13.42.147
Jan 20 06:59:11 vmanager6029 sshd\[6307\]: Failed password for invalid user phantombot from 162.13.42.147 port 58045 ssh2

2020-01-20 14:20:47

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 162.13.42.147
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 60274
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;162.13.42.147.			IN	A

;; AUTHORITY SECTION:
.			539	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020012000 1800 900 604800 86400

;; Query time: 72 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jan 20 14:20:44 CST 2020
;; MSG SIZE  rcvd: 117

Host info

Host 147.42.13.162.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 147.42.13.162.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
175.24.72.167	attackbotsspam	Jun 3 16:06:42 cloud sshd[2952]: Failed password for root from 175.24.72.167 port 40145 ssh2 Jun 7 14:29:00 cloud sshd[7723]: Failed password for root from 175.24.72.167 port 42930 ssh2	2020-06-07 23:49:45
138.122.96.197	attackspambots	Jun 5 18:41:13 mail.srvfarm.net postfix/smtps/smtpd[3177594]: warning: unknown[138.122.96.197]: SASL PLAIN authentication failed: Jun 5 18:41:13 mail.srvfarm.net postfix/smtps/smtpd[3177594]: lost connection after AUTH from unknown[138.122.96.197] Jun 5 18:42:30 mail.srvfarm.net postfix/smtps/smtpd[3177596]: warning: unknown[138.122.96.197]: SASL PLAIN authentication failed: Jun 5 18:42:30 mail.srvfarm.net postfix/smtps/smtpd[3177596]: lost connection after AUTH from unknown[138.122.96.197] Jun 5 18:47:38 mail.srvfarm.net postfix/smtps/smtpd[3177596]: warning: unknown[138.122.96.197]: SASL PLAIN authentication failed:	2020-06-07 23:36:50
31.170.51.83	attack	Jun 5 22:09:55 mail.srvfarm.net postfix/smtps/smtpd[3238231]: warning: unknown[31.170.51.83]: SASL PLAIN authentication failed: Jun 5 22:09:56 mail.srvfarm.net postfix/smtps/smtpd[3238231]: lost connection after AUTH from unknown[31.170.51.83] Jun 5 22:11:08 mail.srvfarm.net postfix/smtpd[3236338]: warning: unknown[31.170.51.83]: SASL PLAIN authentication failed: Jun 5 22:11:08 mail.srvfarm.net postfix/smtpd[3236338]: lost connection after AUTH from unknown[31.170.51.83] Jun 5 22:15:55 mail.srvfarm.net postfix/smtps/smtpd[3238231]: warning: unknown[31.170.51.83]: SASL PLAIN authentication failed:	2020-06-07 23:48:20
14.98.213.14	attackbotsspam	Jun 7 11:57:50 vlre-nyc-1 sshd\[15387\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.98.213.14 user=root Jun 7 11:57:52 vlre-nyc-1 sshd\[15387\]: Failed password for root from 14.98.213.14 port 42676 ssh2 Jun 7 12:01:50 vlre-nyc-1 sshd\[15468\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.98.213.14 user=root Jun 7 12:01:52 vlre-nyc-1 sshd\[15468\]: Failed password for root from 14.98.213.14 port 45842 ssh2 Jun 7 12:05:54 vlre-nyc-1 sshd\[15547\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.98.213.14 user=root ...	2020-06-08 00:02:40
207.154.218.16	attackspam	Jun 7 17:13:16 sip sshd[574730]: Failed password for root from 207.154.218.16 port 46924 ssh2 Jun 7 17:16:59 sip sshd[574768]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.154.218.16 user=root Jun 7 17:17:02 sip sshd[574768]: Failed password for root from 207.154.218.16 port 50368 ssh2 ...	2020-06-08 00:04:20
186.216.69.156	attack	Jun 5 18:25:54 mail.srvfarm.net postfix/smtps/smtpd[3160259]: warning: unknown[186.216.69.156]: SASL PLAIN authentication failed: Jun 5 18:25:54 mail.srvfarm.net postfix/smtps/smtpd[3160259]: lost connection after AUTH from unknown[186.216.69.156] Jun 5 18:28:52 mail.srvfarm.net postfix/smtps/smtpd[3175256]: warning: unknown[186.216.69.156]: SASL PLAIN authentication failed: Jun 5 18:28:52 mail.srvfarm.net postfix/smtps/smtpd[3175256]: lost connection after AUTH from unknown[186.216.69.156] Jun 5 18:31:39 mail.srvfarm.net postfix/smtpd[3172177]: warning: unknown[186.216.69.156]: SASL PLAIN authentication failed:	2020-06-07 23:31:58
137.74.64.254	attackbots	Jun 7 08:06:04 Host-KEWR-E sshd[21831]: User root from 137.74.64.254 not allowed because not listed in AllowUsers ...	2020-06-07 23:57:48
87.246.7.125	attackbots	Jun 5 18:23:24 mail.srvfarm.net postfix/smtpd[3172177]: warning: unknown[87.246.7.125]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jun 5 18:23:24 mail.srvfarm.net postfix/smtpd[3172177]: lost connection after AUTH from unknown[87.246.7.125] Jun 5 18:23:39 mail.srvfarm.net postfix/smtpd[3172177]: warning: unknown[87.246.7.125]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jun 5 18:23:39 mail.srvfarm.net postfix/smtpd[3172177]: lost connection after AUTH from unknown[87.246.7.125] Jun 5 18:23:59 mail.srvfarm.net postfix/smtpd[3159444]: warning: unknown[87.246.7.125]: SASL LOGIN authentication failed: UGFzc3dvcmQ6	2020-06-07 23:42:48
193.70.86.108	attackbots	Jun 7 09:06:23 nlmail01.srvfarm.net webmin[1210169]: Non-existent login as oracle from 193.70.86.108 Jun 7 09:06:24 nlmail01.srvfarm.net webmin[1210172]: Non-existent login as oracle from 193.70.86.108 Jun 7 09:06:26 nlmail01.srvfarm.net webmin[1210175]: Non-existent login as oracle from 193.70.86.108 Jun 7 09:06:30 nlmail01.srvfarm.net webmin[1210178]: Non-existent login as oracle from 193.70.86.108 Jun 7 09:06:34 nlmail01.srvfarm.net webmin[1210181]: Non-existent login as oracle from 193.70.86.108	2020-06-08 00:08:49
150.109.181.161	attack	[Sun Jun 07 04:35:23 2020] - DDoS Attack From IP: 150.109.181.161 Port: 49536	2020-06-07 23:54:14
131.161.185.106	attackspam	Jun 5 18:20:51 mail.srvfarm.net postfix/smtpd[3159446]: warning: unknown[131.161.185.106]: SASL PLAIN authentication failed: Jun 5 18:20:52 mail.srvfarm.net postfix/smtpd[3159446]: lost connection after AUTH from unknown[131.161.185.106] Jun 5 18:23:03 mail.srvfarm.net postfix/smtps/smtpd[3174569]: warning: unknown[131.161.185.106]: SASL PLAIN authentication failed: Jun 5 18:23:04 mail.srvfarm.net postfix/smtps/smtpd[3174569]: lost connection after AUTH from unknown[131.161.185.106] Jun 5 18:23:56 mail.srvfarm.net postfix/smtps/smtpd[3172533]: warning: unknown[131.161.185.106]: SASL PLAIN authentication failed:	2020-06-07 23:37:28
217.112.142.76	attackspambots	Jun 5 16:44:13 mail.srvfarm.net postfix/smtpd[3135525]: NOQUEUE: reject: RCPT from unknown[217.112.142.76]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Jun 5 16:44:14 mail.srvfarm.net postfix/smtpd[3129250]: NOQUEUE: reject: RCPT from unknown[217.112.142.76]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Jun 5 16:44:14 mail.srvfarm.net postfix/smtpd[3135526]: NOQUEUE: reject: RCPT from unknown[217.112.142.76]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Jun 5 16:44:19 mail.srvfarm.net postfix/smtpd[3131409]: NOQUEUE: reject: RCPT from unknown[217.112.142.76]: 450 4.1.8	2020-06-08 00:06:19
38.99.5.194	attackspambots	SMB Server BruteForce Attack	2020-06-08 00:05:58
89.186.11.16	attackbots	Jun 5 19:15:41 mail.srvfarm.net postfix/smtps/smtpd[3191653]: warning: ip-89-186-11-16.static.vip-net.pl[89.186.11.16]: SASL PLAIN authentication failed: Jun 5 19:15:41 mail.srvfarm.net postfix/smtps/smtpd[3191653]: lost connection after AUTH from ip-89-186-11-16.static.vip-net.pl[89.186.11.16] Jun 5 19:18:15 mail.srvfarm.net postfix/smtps/smtpd[3191656]: warning: ip-89-186-11-16.static.vip-net.pl[89.186.11.16]: SASL PLAIN authentication failed: Jun 5 19:18:15 mail.srvfarm.net postfix/smtps/smtpd[3191656]: lost connection after AUTH from ip-89-186-11-16.static.vip-net.pl[89.186.11.16] Jun 5 19:19:33 mail.srvfarm.net postfix/smtps/smtpd[3191640]: warning: ip-89-186-11-16.static.vip-net.pl[89.186.11.16]: SASL PLAIN authentication failed:	2020-06-07 23:42:22
89.248.167.141	attackspambots	TCP (SYN) 89.248.167.141:8080 -> port 5128, len 44	2020-06-07 23:58:10

Recently Reported IPs

43.248.125.101	81.171.71.71	42.247.30.150	160.19.244.168
98.195.217.61	45.136.108.111	167.249.44.118	101.51.223.125
94.67.104.229	140.249.20.167	159.203.188.165	106.12.46.181
99.83.30.219	110.78.23.133	36.71.114.181	49.255.173.110
195.228.45.176	84.17.50.214	183.213.26.26	180.242.72.238