180.123.42.189

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: ChinaNet Jiangsu Province Network

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	Feb 15 05:56:04 grey postfix/smtpd\[19852\]: NOQUEUE: reject: RCPT from unknown\[180.123.42.189\]: 554 5.7.1 Service unavailable\; Client host \[180.123.42.189\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[180.123.42.189\]\; from=\ to=\ proto=ESMTP helo=\ ...	2020-02-15 13:17:53

Type

Details

Datetime

attack

Feb 15 05:56:04 grey postfix/smtpd\[19852\]: NOQUEUE: reject: RCPT from unknown\[180.123.42.189\]: 554 5.7.1 Service unavailable\; Client host \[180.123.42.189\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[180.123.42.189\]\; from=\ to=\ proto=ESMTP helo=\
...

2020-02-15 13:17:53

Comments on same subnet:

IP	Type	Details	Datetime
180.123.42.68	attack	Email rejected due to spam filtering	2020-08-22 04:12:47

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 180.123.42.189
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 866
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;180.123.42.189.			IN	A

;; AUTHORITY SECTION:
.			276	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020021401 1800 900 604800 86400

;; Query time: 51 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 15 13:17:50 CST 2020
;; MSG SIZE  rcvd: 118

Host info

Host 189.42.123.180.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 189.42.123.180.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
187.157.167.34	attackspam	445/tcp 445/tcp 445/tcp... [2019-05-28/07-24]15pkt,1pt.(tcp)	2019-07-25 02:33:43
216.245.197.254	attackbots	Honeypot attack, port: 81, PTR: 254-197-245-216.static.reverse.lstn.net.	2019-07-25 02:08:00
125.40.199.8	attack	Honeypot attack, port: 23, PTR: hn.kd.ny.adsl.	2019-07-25 02:07:19
185.220.101.28	attackspam	Wed, 24 Jul 2019 18:19:35 +0000 likely compromised host or open proxy. ddos rate spidering	2019-07-25 02:43:01
109.65.9.190	attackspambots	161/udp 161/udp 161/udp... [2019-07-03/24]4pkt,1pt.(udp)	2019-07-25 02:39:50
202.62.81.99	attackspam	445/tcp 445/tcp 445/tcp... [2019-05-27/07-24]6pkt,1pt.(tcp)	2019-07-25 02:40:24
113.191.41.3	attackspambots	445/tcp 445/tcp 445/tcp... [2019-05-28/07-24]5pkt,1pt.(tcp)	2019-07-25 01:54:25
51.75.195.222	attack	24.07.2019 17:58:01 Connection to port 5971 blocked by firewall	2019-07-25 02:16:35
77.247.109.5	attackbotsspam	Automatic report - Port Scan Attack	2019-07-25 02:18:23
64.31.33.66	attack	CloudCIX Reconnaissance Scan Detected, PTR: 66-33-31-64.static.reverse.lstn.net.	2019-07-25 02:26:55
92.53.65.201	attackspambots	Splunk® : port scan detected: Jul 24 12:45:47 testbed kernel: Firewall: TCP_IN Blocked IN=eth0 OUT= MAC=82:c6:52:d1:6e:53:64:c3:d6:0b:ef:f0:08:00 SRC=92.53.65.201 DST=104.248.11.191 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=20250 PROTO=TCP SPT=44880 DPT=4122 WINDOW=1024 RES=0x00 SYN URGP=0	2019-07-25 02:45:29
109.227.196.32	attackspambots	445/tcp 445/tcp [2019-06-04/07-24]2pkt	2019-07-25 01:44:11
62.210.151.21	attack	\[2019-07-24 14:30:03\] SECURITY\[20812\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-07-24T14:30:03.950-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="0013054404227",SessionID="0x7f06f823f758",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/62.210.151.21/57911",ACLName="no_extension_match" \[2019-07-24 14:30:11\] SECURITY\[20812\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-07-24T14:30:11.175-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="01113054404227",SessionID="0x7f06f8009f28",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/62.210.151.21/63997",ACLName="no_extension_match" \[2019-07-24 14:30:18\] SECURITY\[20812\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-07-24T14:30:18.599-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="90013054404227",SessionID="0x7f06f804c2c8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/62.210.151.21/54799",ACLName="no_exte	2019-07-25 02:34:01
218.92.0.207	attackspambots	Jul 24 16:46:02 *** sshd[20867]: User root from 218.92.0.207 not allowed because not listed in AllowUsers	2019-07-25 02:32:31
218.92.1.156	attackbotsspam	Jul 24 19:47:55 s64-1 sshd[24579]: Failed password for root from 218.92.1.156 port 59865 ssh2 Jul 24 19:50:08 s64-1 sshd[24585]: Failed password for root from 218.92.1.156 port 41892 ssh2 ...	2019-07-25 02:11:55

Recently Reported IPs

152.249.122.91	111.35.154.116	46.100.46.194	118.68.15.101
36.75.141.3	111.35.149.97	31.208.115.219	111.35.146.89
182.113.225.109	220.132.37.80	111.35.146.148	111.35.144.128
188.210.224.32	111.34.79.40	34.66.119.89	84.26.22.225
111.61.41.133	45.125.117.98	192.241.227.178	111.34.70.230