175.42.64.121 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: Ningde City Fujian Provincial Network of Unicom

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbotsspam	Invalid user teamspeak from 175.42.64.121 port 16161	2020-09-20 03:51:33
attackspam	Sep 19 12:34:50 mavik sshd[20286]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.42.64.121 user=root Sep 19 12:34:52 mavik sshd[20286]: Failed password for root from 175.42.64.121 port 18263 ssh2 Sep 19 12:38:45 mavik sshd[20453]: Invalid user git from 175.42.64.121 Sep 19 12:38:45 mavik sshd[20453]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.42.64.121 Sep 19 12:38:48 mavik sshd[20453]: Failed password for invalid user git from 175.42.64.121 port 59954 ssh2 ...	2020-09-19 19:56:53
attackbots	175.42.64.121 (CN/China/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep 14 14:13:28 jbs1 sshd[8445]: Failed password for root from 190.147.33.171 port 56658 ssh2 Sep 14 14:13:26 jbs1 sshd[8445]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.147.33.171 user=root Sep 14 14:12:01 jbs1 sshd[7935]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.4.3.172 user=root Sep 14 14:12:02 jbs1 sshd[7935]: Failed password for root from 189.4.3.172 port 44674 ssh2 Sep 14 14:14:59 jbs1 sshd[8999]: Failed password for root from 203.217.140.77 port 26590 ssh2 Sep 14 14:15:06 jbs1 sshd[9116]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.42.64.121 user=root IP Addresses Blocked: 190.147.33.171 (CO/Colombia/-) 189.4.3.172 (BR/Brazil/-) 203.217.140.77 (ID/Indonesia/-)	2020-09-15 02:28:09
attackbotsspam	Sep 14 09:26:09 santamaria sshd\[14441\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.42.64.121 user=root Sep 14 09:26:11 santamaria sshd\[14441\]: Failed password for root from 175.42.64.121 port 13360 ssh2 Sep 14 09:29:46 santamaria sshd\[14523\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.42.64.121 user=root ...	2020-09-14 18:14:26
attackbotsspam	Sep 9 03:38:32 web1 sshd\[4076\]: Invalid user anghelo from 175.42.64.121 Sep 9 03:38:32 web1 sshd\[4076\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.42.64.121 Sep 9 03:38:33 web1 sshd\[4076\]: Failed password for invalid user anghelo from 175.42.64.121 port 42409 ssh2 Sep 9 03:42:42 web1 sshd\[4474\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.42.64.121 user=root Sep 9 03:42:44 web1 sshd\[4474\]: Failed password for root from 175.42.64.121 port 21529 ssh2	2020-09-09 21:54:21
attackbots	Sep 9 09:06:00 root sshd[10134]: Failed password for root from 175.42.64.121 port 31435 ssh2 ...	2020-09-09 15:42:20
attackspambots	Sep 8 21:25:22 OPSO sshd\[16010\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.42.64.121 user=root Sep 8 21:25:24 OPSO sshd\[16010\]: Failed password for root from 175.42.64.121 port 62847 ssh2 Sep 8 21:27:36 OPSO sshd\[16540\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.42.64.121 user=root Sep 8 21:27:38 OPSO sshd\[16540\]: Failed password for root from 175.42.64.121 port 26109 ssh2 Sep 8 21:29:57 OPSO sshd\[16720\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.42.64.121 user=apache	2020-09-09 07:51:43
attackbots	SSH auth scanning - multiple failed logins	2020-08-16 16:34:31
attackbotsspam	Aug 4 00:58:58 journals sshd\[97525\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.42.64.121 user=root Aug 4 00:58:59 journals sshd\[97525\]: Failed password for root from 175.42.64.121 port 39657 ssh2 Aug 4 01:02:37 journals sshd\[97873\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.42.64.121 user=root Aug 4 01:02:39 journals sshd\[97873\]: Failed password for root from 175.42.64.121 port 19527 ssh2 Aug 4 01:06:23 journals sshd\[98239\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.42.64.121 user=root ...	2020-08-04 08:16:59
attack	Jun 12 18:39:23 vps687878 sshd\[8277\]: Failed password for root from 175.42.64.121 port 4546 ssh2 Jun 12 18:41:34 vps687878 sshd\[8738\]: Invalid user guoyifan from 175.42.64.121 port 18595 Jun 12 18:41:34 vps687878 sshd\[8738\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.42.64.121 Jun 12 18:41:36 vps687878 sshd\[8738\]: Failed password for invalid user guoyifan from 175.42.64.121 port 18595 ssh2 Jun 12 18:43:46 vps687878 sshd\[8948\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.42.64.121 user=root ...	2020-06-13 04:54:22
attackspam	Jun 8 15:08:48 plex sshd[22064]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.42.64.121 user=root Jun 8 15:08:50 plex sshd[22064]: Failed password for root from 175.42.64.121 port 21140 ssh2	2020-06-09 03:21:20
attackbots	May 25 21:40:22 lukav-desktop sshd\[21992\]: Invalid user cathyreis from 175.42.64.121 May 25 21:40:22 lukav-desktop sshd\[21992\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.42.64.121 May 25 21:40:24 lukav-desktop sshd\[21992\]: Failed password for invalid user cathyreis from 175.42.64.121 port 39447 ssh2 May 25 21:42:47 lukav-desktop sshd\[22001\]: Invalid user lex from 175.42.64.121 May 25 21:42:47 lukav-desktop sshd\[22001\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.42.64.121	2020-05-26 03:53:46
attackspambots	Apr 27 20:12:43 scw-6657dc sshd[28853]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.42.64.121 Apr 27 20:12:43 scw-6657dc sshd[28853]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.42.64.121 Apr 27 20:12:45 scw-6657dc sshd[28853]: Failed password for invalid user lilian from 175.42.64.121 port 30936 ssh2 ...	2020-04-28 04:35:55

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 175.42.64.121
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 31403
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;175.42.64.121.			IN	A

;; AUTHORITY SECTION:
.			489	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020042701 1800 900 604800 86400

;; Query time: 129 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Apr 28 04:35:52 CST 2020
;; MSG SIZE  rcvd: 117

Host info

Host 121.64.42.175.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 121.64.42.175.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
92.63.194.25	attackspambots	2020-03-10T01:07:53.500511shield sshd\[1518\]: Invalid user Administrator from 92.63.194.25 port 45131 2020-03-10T01:07:53.505186shield sshd\[1518\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.63.194.25 2020-03-10T01:07:56.147537shield sshd\[1518\]: Failed password for invalid user Administrator from 92.63.194.25 port 45131 ssh2 2020-03-10T01:09:09.984421shield sshd\[1742\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.63.194.25 user=root 2020-03-10T01:09:12.059699shield sshd\[1742\]: Failed password for root from 92.63.194.25 port 43783 ssh2	2020-03-10 09:22:01
74.208.120.26	attack	[2020-03-10 00:06:39] NOTICE[1148] chan_sip.c: Registration from '100 ' failed for '74.208.120.26:5060' - Wrong password [2020-03-10 00:06:39] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-03-10T00:06:39.096-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="100",SessionID="0x7fd82c40d3d8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/74.208.120.26/5060",Challenge="21e1de2f",ReceivedChallenge="21e1de2f",ReceivedHash="7513370d5aa4e77433123e4d5b31fd25" [2020-03-10 00:14:07] NOTICE[1148] chan_sip.c: Registration from '24 ' failed for '74.208.120.26:5060' - Wrong password [2020-03-10 00:14:07] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-03-10T00:14:07.152-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="24",SessionID="0x7fd82c530768",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/74.208.120.26/5 ...	2020-03-10 12:20:45
182.61.178.45	attack	Mar 10 04:56:36 jane sshd[23798]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.178.45 Mar 10 04:56:38 jane sshd[23798]: Failed password for invalid user mailman from 182.61.178.45 port 36526 ssh2 ...	2020-03-10 12:02:54
111.225.223.45	attack	Dec 9 18:09:29 woltan sshd[26029]: Failed password for root from 111.225.223.45 port 39792 ssh2	2020-03-10 09:25:13
85.243.128.8	attack	SSH Invalid Login	2020-03-10 09:23:33
197.227.108.200	attack	May 31 11:39:13 ms-srv sshd[8574]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.227.108.200 May 31 11:39:15 ms-srv sshd[8575]: Failed password for invalid user pi from 197.227.108.200 port 38676 ssh2 May 31 11:39:16 ms-srv sshd[8574]: Failed password for invalid user pi from 197.227.108.200 port 38672 ssh2	2020-03-10 09:14:06
134.175.133.74	attackspam	Mar 10 04:56:15 163-172-32-151 sshd[16556]: Invalid user zhaojp from 134.175.133.74 port 42510 ...	2020-03-10 12:15:19
116.99.251.131	attackspam	1583812571 - 03/10/2020 04:56:11 Host: 116.99.251.131/116.99.251.131 Port: 445 TCP Blocked	2020-03-10 12:20:22
93.170.36.2	attackspambots	$f2bV_matches	2020-03-10 12:15:54
198.54.126.140	attack	Attempt to hack Wordpress Login, XMLRPC or other login	2020-03-10 12:11:12
216.201.199.114	attack	IDS multiserver	2020-03-10 09:16:23
197.220.6.90	attackbots	Mar 1 08:55:33 ms-srv sshd[42610]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.220.6.90 Mar 1 08:55:35 ms-srv sshd[42610]: Failed password for invalid user admin from 197.220.6.90 port 54395 ssh2	2020-03-10 09:17:18
197.149.121.115	attackspambots	firewall-block, port(s): 445/tcp	2020-03-10 12:26:13
111.229.246.61	attack	Jan 31 19:02:33 woltan sshd[17986]: Failed password for invalid user ftp from 111.229.246.61 port 41204 ssh2	2020-03-10 09:13:45
192.241.219.194	attackspam	Honeypot hit: [2020-03-10 06:56:20 +0300] Connected from 192.241.219.194 to (HoneypotIP):993	2020-03-10 12:12:54

Recently Reported IPs

14.169.107.75	62.171.189.242	112.17.173.204	161.35.32.101
222.252.11.10	66.150.223.111	121.149.104.197	212.52.164.33
85.26.165.216	64.225.116.97	139.162.158.15	118.171.236.22
103.31.178.235	46.98.169.145	180.76.178.46	159.65.152.232
103.26.204.189	14.248.84.195	138.197.212.58	52.114.75.71