175.42.64.121 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: Ningde City Fujian Provincial Network of Unicom

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbotsspam	Invalid user teamspeak from 175.42.64.121 port 16161	2020-09-20 03:51:33
attackspam	Sep 19 12:34:50 mavik sshd[20286]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.42.64.121 user=root Sep 19 12:34:52 mavik sshd[20286]: Failed password for root from 175.42.64.121 port 18263 ssh2 Sep 19 12:38:45 mavik sshd[20453]: Invalid user git from 175.42.64.121 Sep 19 12:38:45 mavik sshd[20453]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.42.64.121 Sep 19 12:38:48 mavik sshd[20453]: Failed password for invalid user git from 175.42.64.121 port 59954 ssh2 ...	2020-09-19 19:56:53
attackbots	175.42.64.121 (CN/China/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep 14 14:13:28 jbs1 sshd[8445]: Failed password for root from 190.147.33.171 port 56658 ssh2 Sep 14 14:13:26 jbs1 sshd[8445]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.147.33.171 user=root Sep 14 14:12:01 jbs1 sshd[7935]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.4.3.172 user=root Sep 14 14:12:02 jbs1 sshd[7935]: Failed password for root from 189.4.3.172 port 44674 ssh2 Sep 14 14:14:59 jbs1 sshd[8999]: Failed password for root from 203.217.140.77 port 26590 ssh2 Sep 14 14:15:06 jbs1 sshd[9116]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.42.64.121 user=root IP Addresses Blocked: 190.147.33.171 (CO/Colombia/-) 189.4.3.172 (BR/Brazil/-) 203.217.140.77 (ID/Indonesia/-)	2020-09-15 02:28:09
attackbotsspam	Sep 14 09:26:09 santamaria sshd\[14441\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.42.64.121 user=root Sep 14 09:26:11 santamaria sshd\[14441\]: Failed password for root from 175.42.64.121 port 13360 ssh2 Sep 14 09:29:46 santamaria sshd\[14523\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.42.64.121 user=root ...	2020-09-14 18:14:26
attackbotsspam	Sep 9 03:38:32 web1 sshd\[4076\]: Invalid user anghelo from 175.42.64.121 Sep 9 03:38:32 web1 sshd\[4076\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.42.64.121 Sep 9 03:38:33 web1 sshd\[4076\]: Failed password for invalid user anghelo from 175.42.64.121 port 42409 ssh2 Sep 9 03:42:42 web1 sshd\[4474\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.42.64.121 user=root Sep 9 03:42:44 web1 sshd\[4474\]: Failed password for root from 175.42.64.121 port 21529 ssh2	2020-09-09 21:54:21
attackbots	Sep 9 09:06:00 root sshd[10134]: Failed password for root from 175.42.64.121 port 31435 ssh2 ...	2020-09-09 15:42:20
attackspambots	Sep 8 21:25:22 OPSO sshd\[16010\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.42.64.121 user=root Sep 8 21:25:24 OPSO sshd\[16010\]: Failed password for root from 175.42.64.121 port 62847 ssh2 Sep 8 21:27:36 OPSO sshd\[16540\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.42.64.121 user=root Sep 8 21:27:38 OPSO sshd\[16540\]: Failed password for root from 175.42.64.121 port 26109 ssh2 Sep 8 21:29:57 OPSO sshd\[16720\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.42.64.121 user=apache	2020-09-09 07:51:43
attackbots	SSH auth scanning - multiple failed logins	2020-08-16 16:34:31
attackbotsspam	Aug 4 00:58:58 journals sshd\[97525\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.42.64.121 user=root Aug 4 00:58:59 journals sshd\[97525\]: Failed password for root from 175.42.64.121 port 39657 ssh2 Aug 4 01:02:37 journals sshd\[97873\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.42.64.121 user=root Aug 4 01:02:39 journals sshd\[97873\]: Failed password for root from 175.42.64.121 port 19527 ssh2 Aug 4 01:06:23 journals sshd\[98239\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.42.64.121 user=root ...	2020-08-04 08:16:59
attack	Jun 12 18:39:23 vps687878 sshd\[8277\]: Failed password for root from 175.42.64.121 port 4546 ssh2 Jun 12 18:41:34 vps687878 sshd\[8738\]: Invalid user guoyifan from 175.42.64.121 port 18595 Jun 12 18:41:34 vps687878 sshd\[8738\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.42.64.121 Jun 12 18:41:36 vps687878 sshd\[8738\]: Failed password for invalid user guoyifan from 175.42.64.121 port 18595 ssh2 Jun 12 18:43:46 vps687878 sshd\[8948\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.42.64.121 user=root ...	2020-06-13 04:54:22
attackspam	Jun 8 15:08:48 plex sshd[22064]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.42.64.121 user=root Jun 8 15:08:50 plex sshd[22064]: Failed password for root from 175.42.64.121 port 21140 ssh2	2020-06-09 03:21:20
attackbots	May 25 21:40:22 lukav-desktop sshd\[21992\]: Invalid user cathyreis from 175.42.64.121 May 25 21:40:22 lukav-desktop sshd\[21992\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.42.64.121 May 25 21:40:24 lukav-desktop sshd\[21992\]: Failed password for invalid user cathyreis from 175.42.64.121 port 39447 ssh2 May 25 21:42:47 lukav-desktop sshd\[22001\]: Invalid user lex from 175.42.64.121 May 25 21:42:47 lukav-desktop sshd\[22001\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.42.64.121	2020-05-26 03:53:46
attackspambots	Apr 27 20:12:43 scw-6657dc sshd[28853]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.42.64.121 Apr 27 20:12:43 scw-6657dc sshd[28853]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.42.64.121 Apr 27 20:12:45 scw-6657dc sshd[28853]: Failed password for invalid user lilian from 175.42.64.121 port 30936 ssh2 ...	2020-04-28 04:35:55

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 175.42.64.121
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 31403
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;175.42.64.121.			IN	A

;; AUTHORITY SECTION:
.			489	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020042701 1800 900 604800 86400

;; Query time: 129 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Apr 28 04:35:52 CST 2020
;; MSG SIZE  rcvd: 117

Host info

Host 121.64.42.175.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 121.64.42.175.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
36.68.143.85	attackspam	Unauthorized connection attempt from IP address 36.68.143.85 on Port 445(SMB)	2020-02-25 23:05:43
185.216.140.17	attackbotsspam	Feb 25 15:35:05 host3 dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=185.216.140.17, lip=207.180.241.50, session= Feb 25 15:35:19 host3 dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=185.216.140.17, lip=207.180.241.50, session= Feb 25 15:36:03 host3 dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=185.216.140.17, lip=207.180.241.50, session= Feb 25 15:36:29 host3 dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=185.216.140.17, lip=207.180.241.50, session= Feb 25 15:36:44 host3 dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=185.216.140.17, lip=207.180.241.50, sessi ...	2020-02-25 22:51:20
116.98.62.22	spamattack	This asshole with this ip address is being trying to get into my Yahoo mail.	2020-02-26 00:27:13
182.77.126.128	attackbots	Unauthorized connection attempt from IP address 182.77.126.128 on Port 445(SMB)	2020-02-25 22:58:22
120.29.77.125	attackspambots	$f2bV_matches	2020-02-25 23:05:11
37.220.156.115	attack	1582615065 - 02/25/2020 08:17:45 Host: 37.220.156.115/37.220.156.115 Port: 445 TCP Blocked	2020-02-25 22:50:35
95.107.53.155	attackbotsspam	Automatic report - Banned IP Access	2020-02-25 23:28:03
106.13.77.243	attack	Feb 24 22:30:38 hpm sshd\[6168\]: Invalid user oracle from 106.13.77.243 Feb 24 22:30:38 hpm sshd\[6168\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.77.243 Feb 24 22:30:40 hpm sshd\[6168\]: Failed password for invalid user oracle from 106.13.77.243 port 38886 ssh2 Feb 24 22:37:28 hpm sshd\[6777\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.77.243 user=root Feb 24 22:37:30 hpm sshd\[6777\]: Failed password for root from 106.13.77.243 port 50848 ssh2	2020-02-25 23:17:53
182.23.8.114	attackspambots	Unauthorized connection attempt from IP address 182.23.8.114 on Port 445(SMB)	2020-02-25 23:04:48
58.64.164.111	attackspam	slow and persistent scanner	2020-02-25 22:56:42
200.222.44.196	attackbots	Invalid user hl2dmserver from 200.222.44.196 port 52758	2020-02-25 23:19:06
110.164.77.46	attackspambots	Unauthorized connection attempt from IP address 110.164.77.46 on Port 445(SMB)	2020-02-25 22:53:28
80.232.246.116	attackspambots	Feb 25 15:48:57 localhost sshd\[9827\]: Invalid user ronjones from 80.232.246.116 Feb 25 15:48:57 localhost sshd\[9827\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.232.246.116 Feb 25 15:49:00 localhost sshd\[9827\]: Failed password for invalid user ronjones from 80.232.246.116 port 55904 ssh2 Feb 25 15:58:48 localhost sshd\[10365\]: Invalid user tomcat from 80.232.246.116 Feb 25 15:58:48 localhost sshd\[10365\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.232.246.116 ...	2020-02-25 23:08:44
1.80.217.179	attackspambots	Feb 25 09:07:32 sd-53420 sshd\[10856\]: Invalid user ubuntu from 1.80.217.179 Feb 25 09:07:32 sd-53420 sshd\[10856\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.80.217.179 Feb 25 09:07:34 sd-53420 sshd\[10856\]: Failed password for invalid user ubuntu from 1.80.217.179 port 3993 ssh2 Feb 25 09:15:24 sd-53420 sshd\[11686\]: Invalid user themegen.codedotspectra from 1.80.217.179 Feb 25 09:15:24 sd-53420 sshd\[11686\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.80.217.179 ...	2020-02-25 22:59:15
2001:19f0:6401:19b6:5400:2ff:fe67:3124	attack	SS5,WP GET /wp-login.php	2020-02-25 23:27:30

Recently Reported IPs

14.169.107.75	62.171.189.242	112.17.173.204	161.35.32.101
222.252.11.10	66.150.223.111	121.149.104.197	212.52.164.33
85.26.165.216	64.225.116.97	139.162.158.15	118.171.236.22
103.31.178.235	46.98.169.145	180.76.178.46	159.65.152.232
103.26.204.189	14.248.84.195	138.197.212.58	52.114.75.71