202.137.142.102

Basic Info

City: unknown

Region: unknown

Country: Lao People's Democratic Republic

Internet Service Provider: Telecommunication Service

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspambots	Dovecot Invalid User Login Attempt.	2020-07-20 02:16:10
attack	'IP reached maximum auth failures for a one day block'	2020-05-28 23:55:29
attack	Sep 25 14:20:52 vpn01 sshd[27287]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.137.142.102 Sep 25 14:20:54 vpn01 sshd[27287]: Failed password for invalid user admin from 202.137.142.102 port 35514 ssh2	2019-09-25 23:15:38

Type

Details

Datetime

attackspambots

Dovecot Invalid User Login Attempt.

2020-07-20 02:16:10

attack

'IP reached maximum auth failures for a one day block'

2020-05-28 23:55:29

attack

Sep 25 14:20:52 vpn01 sshd[27287]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.137.142.102
Sep 25 14:20:54 vpn01 sshd[27287]: Failed password for invalid user admin from 202.137.142.102 port 35514 ssh2

2019-09-25 23:15:38

Comments on same subnet:

IP	Type	Details	Datetime
202.137.142.159	attackspambots	52869/tcp 52869/tcp 52869/tcp [2020-10-02/03]3pkt	2020-10-06 05:05:45
202.137.142.159	attack	52869/tcp 52869/tcp 52869/tcp [2020-10-02/03]3pkt	2020-10-05 21:09:08
202.137.142.159	attackspambots	52869/tcp 52869/tcp 52869/tcp [2020-10-02/03]3pkt	2020-10-05 12:59:32
202.137.142.159	attack	" "	2020-10-04 08:18:10
202.137.142.159	attackbotsspam	" "	2020-10-04 00:44:44
202.137.142.159	attackspam	Port probing on unauthorized port 2323	2020-10-03 16:33:24
202.137.142.40	attackbots	1600362075 - 09/17/2020 19:01:15 Host: 202.137.142.40/202.137.142.40 Port: 445 TCP Blocked	2020-09-18 21:22:36
202.137.142.40	attackspambots	1600362075 - 09/17/2020 19:01:15 Host: 202.137.142.40/202.137.142.40 Port: 445 TCP Blocked	2020-09-18 13:41:19
202.137.142.40	attackspambots	1600362075 - 09/17/2020 19:01:15 Host: 202.137.142.40/202.137.142.40 Port: 445 TCP Blocked	2020-09-18 03:56:41
202.137.142.28	attack	Dovecot Invalid User Login Attempt.	2020-07-31 08:19:58
202.137.142.28	attackspam	(imapd) Failed IMAP login from 202.137.142.28 (LA/Laos/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Jul 27 16:21:51 ir1 dovecot[3110802]: imap-login: Disconnected (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=202.137.142.28, lip=5.63.12.44, TLS, session=	2020-07-28 00:32:56
202.137.142.28	attack	202.137.142.28 - - \[17/Jul/2020:12:29:56 +0200\] "POST /wp-login.php HTTP/1.0" 200 6709 "http://die-netzialisten.de/wp-login.php" "Mozilla/5.0 \(Windows NT 6.1\; rv:60.0\) Gecko/20100101 Firefox/60.0" 202.137.142.28 - - \[17/Jul/2020:12:29:57 +0200\] "POST /wp-login.php HTTP/1.0" 200 6709 "http://die-netzialisten.de/wp-login.php" "Mozilla/5.0 \(Windows NT 6.1\; rv:60.0\) Gecko/20100101 Firefox/60.0" 202.137.142.28 - - \[17/Jul/2020:12:29:58 +0200\] "POST /wp-login.php HTTP/1.0" 200 6709 "http://die-netzialisten.de/wp-login.php" "Mozilla/5.0 \(Windows NT 6.1\; rv:60.0\) Gecko/20100101 Firefox/60.0"	2020-07-17 19:04:49
202.137.142.181	attackbotsspam	Dovecot Invalid User Login Attempt.	2020-07-07 15:24:25
202.137.142.28	attack	(imapd) Failed IMAP login from 202.137.142.28 (LA/Laos/-): 1 in the last 3600 secs	2020-06-27 23:08:23
202.137.142.28	attack	'IP reached maximum auth failures for a one day block'	2020-06-20 16:12:30

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 202.137.142.102
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 42152
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;202.137.142.102.		IN	A

;; AUTHORITY SECTION:
.			516	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019092500 1800 900 604800 86400

;; Query time: 53 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Sep 25 23:15:28 CST 2019
;; MSG SIZE  rcvd: 119

Host info

Host 102.142.137.202.in-addr.arpa not found: 2(SERVFAIL)

Nslookup info:

;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 102.142.137.202.in-addr.arpa: SERVFAIL

Related IP info:

Related comments:

IP	Type	Details	Datetime
52.163.214.31	attackspambots	Many RDP login attempts detected by IDS script	2019-06-24 05:31:24
91.151.178.206	attackbots	[portscan] Port scan	2019-06-24 05:27:18
194.36.173.109	attackspambots	firewall-block, port(s): 22/tcp	2019-06-24 05:20:06
201.150.89.9	attackspambots	23.06.2019 22:10:43 - Login Fail on hMailserver Detected by ELinOX-hMail-A2F	2019-06-24 05:00:53
68.183.207.1	attackspambots	Jun 23 04:12:20 XXX sshd[20099]: Invalid user fake from 68.183.207.1 Jun 23 04:12:21 XXX sshd[20099]: Received disconnect from 68.183.207.1: 11: Bye Bye [preauth] Jun 23 04:12:22 XXX sshd[20101]: Invalid user ubnt from 68.183.207.1 Jun 23 04:12:22 XXX sshd[20101]: Received disconnect from 68.183.207.1: 11: Bye Bye [preauth] Jun 23 04:12:23 XXX sshd[20103]: User r.r from 68.183.207.1 not allowed because none of user's groups are listed in AllowGroups Jun 23 04:12:23 XXX sshd[20103]: Received disconnect from 68.183.207.1: 11: Bye Bye [preauth] Jun 23 04:12:24 XXX sshd[20105]: Invalid user admin from 68.183.207.1 Jun 23 04:12:24 XXX sshd[20105]: Received disconnect from 68.183.207.1: 11: Bye Bye [preauth] Jun 23 04:12:26 XXX sshd[20107]: Invalid user user from 68.183.207.1 Jun 23 04:12:26 XXX sshd[20107]: Received disconnect from 68.183.207.1: 11: Bye Bye [preauth] Jun 23 04:12:27 XXX sshd[20109]: Invalid user admin from 68.183.207.1 Jun 23 04:12:27 XXX sshd[20109]: Receiv........ -------------------------------	2019-06-24 05:18:28
209.97.176.152	attackspam	2019-06-23T21:18:57.014381abusebot-5.cloudsearch.cf sshd\[9536\]: Invalid user transoft from 209.97.176.152 port 45808	2019-06-24 05:20:48
192.160.102.166	attackbots	Jun 23 22:10:27 cvbmail sshd\[18904\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.160.102.166 user=root Jun 23 22:10:28 cvbmail sshd\[18904\]: Failed password for root from 192.160.102.166 port 40949 ssh2 Jun 23 22:10:31 cvbmail sshd\[18904\]: Failed password for root from 192.160.102.166 port 40949 ssh2	2019-06-24 05:02:58
37.133.120.8	attackbotsspam	firewall-block, port(s): 23/tcp	2019-06-24 05:24:31
189.120.150.115	attackspambots	23.06.2019 22:09:37 - Login Fail on hMailserver Detected by ELinOX-hMail-A2F	2019-06-24 05:35:37
45.5.164.193	attackspambots	20 attempts against mh-ssh on sonic.magehost.pro	2019-06-24 05:16:41
170.100.8.254	attackbots	On mail server	2019-06-24 05:13:08
95.84.19.121	attackbots	Unauthorized connection attempt from IP address 95.84.19.121 on Port 445(SMB)	2019-06-24 05:28:48
212.83.181.143	attackspambots	¯\_(ツ)_/¯	2019-06-24 05:32:45
171.245.206.134	attackspambots	23/tcp [2019-06-23]1pkt	2019-06-24 05:15:59
147.188.13.219	attackspam	6380/tcp [2019-06-23]1pkt	2019-06-24 04:58:11

Recently Reported IPs

41.14.161.142	230.187.197.23	169.196.95.147	41.50.232.154
94.143.114.219	184.114.3.62	184.87.106.49	49.248.66.14
68.136.75.32	179.21.65.118	51.219.157.183	20.210.185.84
41.47.74.201	54.2.13.99	253.29.77.120	178.131.145.54
180.17.98.41	30.88.110.161	222.140.48.100	79.131.211.153