175.42.64.121 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: Ningde City Fujian Provincial Network of Unicom

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbotsspam	Invalid user teamspeak from 175.42.64.121 port 16161	2020-09-20 03:51:33
attackspam	Sep 19 12:34:50 mavik sshd[20286]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.42.64.121 user=root Sep 19 12:34:52 mavik sshd[20286]: Failed password for root from 175.42.64.121 port 18263 ssh2 Sep 19 12:38:45 mavik sshd[20453]: Invalid user git from 175.42.64.121 Sep 19 12:38:45 mavik sshd[20453]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.42.64.121 Sep 19 12:38:48 mavik sshd[20453]: Failed password for invalid user git from 175.42.64.121 port 59954 ssh2 ...	2020-09-19 19:56:53
attackbots	175.42.64.121 (CN/China/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep 14 14:13:28 jbs1 sshd[8445]: Failed password for root from 190.147.33.171 port 56658 ssh2 Sep 14 14:13:26 jbs1 sshd[8445]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.147.33.171 user=root Sep 14 14:12:01 jbs1 sshd[7935]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.4.3.172 user=root Sep 14 14:12:02 jbs1 sshd[7935]: Failed password for root from 189.4.3.172 port 44674 ssh2 Sep 14 14:14:59 jbs1 sshd[8999]: Failed password for root from 203.217.140.77 port 26590 ssh2 Sep 14 14:15:06 jbs1 sshd[9116]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.42.64.121 user=root IP Addresses Blocked: 190.147.33.171 (CO/Colombia/-) 189.4.3.172 (BR/Brazil/-) 203.217.140.77 (ID/Indonesia/-)	2020-09-15 02:28:09
attackbotsspam	Sep 14 09:26:09 santamaria sshd\[14441\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.42.64.121 user=root Sep 14 09:26:11 santamaria sshd\[14441\]: Failed password for root from 175.42.64.121 port 13360 ssh2 Sep 14 09:29:46 santamaria sshd\[14523\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.42.64.121 user=root ...	2020-09-14 18:14:26
attackbotsspam	Sep 9 03:38:32 web1 sshd\[4076\]: Invalid user anghelo from 175.42.64.121 Sep 9 03:38:32 web1 sshd\[4076\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.42.64.121 Sep 9 03:38:33 web1 sshd\[4076\]: Failed password for invalid user anghelo from 175.42.64.121 port 42409 ssh2 Sep 9 03:42:42 web1 sshd\[4474\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.42.64.121 user=root Sep 9 03:42:44 web1 sshd\[4474\]: Failed password for root from 175.42.64.121 port 21529 ssh2	2020-09-09 21:54:21
attackbots	Sep 9 09:06:00 root sshd[10134]: Failed password for root from 175.42.64.121 port 31435 ssh2 ...	2020-09-09 15:42:20
attackspambots	Sep 8 21:25:22 OPSO sshd\[16010\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.42.64.121 user=root Sep 8 21:25:24 OPSO sshd\[16010\]: Failed password for root from 175.42.64.121 port 62847 ssh2 Sep 8 21:27:36 OPSO sshd\[16540\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.42.64.121 user=root Sep 8 21:27:38 OPSO sshd\[16540\]: Failed password for root from 175.42.64.121 port 26109 ssh2 Sep 8 21:29:57 OPSO sshd\[16720\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.42.64.121 user=apache	2020-09-09 07:51:43
attackbots	SSH auth scanning - multiple failed logins	2020-08-16 16:34:31
attackbotsspam	Aug 4 00:58:58 journals sshd\[97525\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.42.64.121 user=root Aug 4 00:58:59 journals sshd\[97525\]: Failed password for root from 175.42.64.121 port 39657 ssh2 Aug 4 01:02:37 journals sshd\[97873\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.42.64.121 user=root Aug 4 01:02:39 journals sshd\[97873\]: Failed password for root from 175.42.64.121 port 19527 ssh2 Aug 4 01:06:23 journals sshd\[98239\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.42.64.121 user=root ...	2020-08-04 08:16:59
attack	Jun 12 18:39:23 vps687878 sshd\[8277\]: Failed password for root from 175.42.64.121 port 4546 ssh2 Jun 12 18:41:34 vps687878 sshd\[8738\]: Invalid user guoyifan from 175.42.64.121 port 18595 Jun 12 18:41:34 vps687878 sshd\[8738\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.42.64.121 Jun 12 18:41:36 vps687878 sshd\[8738\]: Failed password for invalid user guoyifan from 175.42.64.121 port 18595 ssh2 Jun 12 18:43:46 vps687878 sshd\[8948\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.42.64.121 user=root ...	2020-06-13 04:54:22
attackspam	Jun 8 15:08:48 plex sshd[22064]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.42.64.121 user=root Jun 8 15:08:50 plex sshd[22064]: Failed password for root from 175.42.64.121 port 21140 ssh2	2020-06-09 03:21:20
attackbots	May 25 21:40:22 lukav-desktop sshd\[21992\]: Invalid user cathyreis from 175.42.64.121 May 25 21:40:22 lukav-desktop sshd\[21992\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.42.64.121 May 25 21:40:24 lukav-desktop sshd\[21992\]: Failed password for invalid user cathyreis from 175.42.64.121 port 39447 ssh2 May 25 21:42:47 lukav-desktop sshd\[22001\]: Invalid user lex from 175.42.64.121 May 25 21:42:47 lukav-desktop sshd\[22001\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.42.64.121	2020-05-26 03:53:46
attackspambots	Apr 27 20:12:43 scw-6657dc sshd[28853]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.42.64.121 Apr 27 20:12:43 scw-6657dc sshd[28853]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.42.64.121 Apr 27 20:12:45 scw-6657dc sshd[28853]: Failed password for invalid user lilian from 175.42.64.121 port 30936 ssh2 ...	2020-04-28 04:35:55

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 175.42.64.121
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 31403
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;175.42.64.121.			IN	A

;; AUTHORITY SECTION:
.			489	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020042701 1800 900 604800 86400

;; Query time: 129 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Apr 28 04:35:52 CST 2020
;; MSG SIZE  rcvd: 117

Host info

Host 121.64.42.175.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 121.64.42.175.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
92.246.84.185	attackspambots	[2020-06-12 15:13:16] NOTICE[1273][C-000003b7] chan_sip.c: Call from '' (92.246.84.185:50686) to extension '0001146812111513' rejected because extension not found in context 'public'. [2020-06-12 15:13:16] SECURITY[1288] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-06-12T15:13:16.577-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="0001146812111513",SessionID="0x7f31c02f7128",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/92.246.84.185/50686",ACLName="no_extension_match" [2020-06-12 15:22:40] NOTICE[1273][C-000003be] chan_sip.c: Call from '' (92.246.84.185:62926) to extension '9001146812111513' rejected because extension not found in context 'public'. [2020-06-12 15:22:40] SECURITY[1288] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-06-12T15:22:40.161-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="9001146812111513",SessionID="0x7f31c0334138",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/ ...	2020-06-13 05:32:57
80.82.64.106	attackbots	Jun 12 22:56:48 debian-2gb-nbg1-2 kernel: \[14254128.639010\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=80.82.64.106 DST=195.201.40.59 LEN=49 TOS=0x00 PREC=0x00 TTL=247 ID=54321 PROTO=UDP SPT=57136 DPT=11211 LEN=29	2020-06-13 05:26:06
189.146.152.216	attack	Unauthorized connection attempt detected from IP address 189.146.152.216 to port 8000	2020-06-13 05:41:32
175.139.202.201	attack	Jun 12 20:42:44 vps687878 sshd\[25032\]: Invalid user gitlab-psql from 175.139.202.201 port 41242 Jun 12 20:42:44 vps687878 sshd\[25032\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.139.202.201 Jun 12 20:42:46 vps687878 sshd\[25032\]: Failed password for invalid user gitlab-psql from 175.139.202.201 port 41242 ssh2 Jun 12 20:45:22 vps687878 sshd\[25273\]: Invalid user admin from 175.139.202.201 port 51108 Jun 12 20:45:22 vps687878 sshd\[25273\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.139.202.201 ...	2020-06-13 05:27:40
216.244.66.242	attack	The IP has triggered Cloudflare WAF. CF-Ray: 5a1ebd443ede0905 \| WAF_Rule_ID: 1bd9f7863d3d4d8faf68c16295216fb5 \| WAF_Kind: firewall \| CF_Action: allow \| Country: US \| CF_IPClass: monitoringService \| Protocol: HTTP/1.1 \| Method: GET \| Host: www.wevg.org \| User-Agent: Mozilla/5.0 (compatible; DotBot/1.1; http://www.opensiteexplorer.org/dotbot, help@moz.com) \| CF_DC: SEA. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2020-06-13 05:22:45
151.197.194.78	attack	Unauthorized connection attempt detected from IP address 151.197.194.78 to port 5555	2020-06-13 05:46:44
190.153.221.157	attackbotsspam	TCP (SYN) 190.153.221.157:33784 -> port 23, len 40	2020-06-13 05:41:06
180.164.180.120	attackspambots	$f2bV_matches	2020-06-13 05:28:43
213.226.145.1	attack	Unauthorized connection attempt detected from IP address 213.226.145.1 to port 88	2020-06-13 05:39:11
93.29.187.145	attackbots	Jun 12 18:44:07 rush sshd[11161]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.29.187.145 Jun 12 18:44:10 rush sshd[11161]: Failed password for invalid user zhucm from 93.29.187.145 port 40132 ssh2 Jun 12 18:47:53 rush sshd[11213]: Failed password for root from 93.29.187.145 port 34254 ssh2 ...	2020-06-13 05:35:59
176.90.229.253	attack	Unauthorized connection attempt detected from IP address 176.90.229.253 to port 2323	2020-06-13 05:46:03
200.150.82.106	attack	Unauthorized connection attempt detected from IP address 200.150.82.106 to port 23	2020-06-13 05:40:26
79.59.254.158	attackspambots	DATE:2020-06-12 20:12:32, IP:79.59.254.158, PORT:telnet Telnet brute force auth on honeypot server (epe-honey1-hq)	2020-06-13 05:58:12
128.199.204.164	attackbots	Jun 12 19:59:48 prox sshd[21926]: Failed password for root from 128.199.204.164 port 34882 ssh2 Jun 12 20:13:54 prox sshd[12060]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.204.164	2020-06-13 05:29:25
79.10.86.203	attackspam	firewall-block, port(s): 8000/tcp	2020-06-13 05:59:13

Recently Reported IPs

14.169.107.75	62.171.189.242	112.17.173.204	161.35.32.101
222.252.11.10	66.150.223.111	121.149.104.197	212.52.164.33
85.26.165.216	64.225.116.97	139.162.158.15	118.171.236.22
103.31.178.235	46.98.169.145	180.76.178.46	159.65.152.232
103.26.204.189	14.248.84.195	138.197.212.58	52.114.75.71