42.120.161.13 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
42.120.161.43	attackbots	The IP has triggered Cloudflare WAF. CF-Ray: 54356e01cb6fe7c5 \| WAF_Rule_ID: f6705d4933894b0583ba1042603083f6 \| WAF_Kind: firewall \| CF_Action: drop \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/2 \| Method: GET \| Host: disqus.skk.moe \| User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.81 YisouSpider/5.0 Safari/537.36 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-12 00:16:20
42.120.161.37	attack	The IP has triggered Cloudflare WAF. CF-Ray: 54137e915f02d376 \| WAF_Rule_ID: f6705d4933894b0583ba1042603083f6 \| WAF_Kind: firewall \| CF_Action: drop \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/2 \| Method: GET \| Host: disqus.skk.moe \| User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.81 YisouSpider/5.0 Safari/537.36 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 04:20:56

Type

Details

Datetime

42.120.161.43

attackbots

The IP has triggered Cloudflare WAF. CF-Ray: 54356e01cb6fe7c5 | WAF_Rule_ID: f6705d4933894b0583ba1042603083f6 | WAF_Kind: firewall | CF_Action: drop | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/2 | Method: GET | Host: disqus.skk.moe | User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.81 YisouSpider/5.0 Safari/537.36 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).

2019-12-12 00:16:20

42.120.161.37

attack

The IP has triggered Cloudflare WAF. CF-Ray: 54137e915f02d376 | WAF_Rule_ID: f6705d4933894b0583ba1042603083f6 | WAF_Kind: firewall | CF_Action: drop | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/2 | Method: GET | Host: disqus.skk.moe | User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.81 YisouSpider/5.0 Safari/537.36 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).

2019-12-08 04:20:56

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.120.161.13
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 4170
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;42.120.161.13.			IN	A

;; AUTHORITY SECTION:
.			488	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022062600 1800 900 604800 86400

;; Query time: 63 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jun 26 21:40:52 CST 2022
;; MSG SIZE  rcvd: 106

Host info

13.161.120.42.in-addr.arpa domain name pointer shenmaspider-42-120-161-13.crawl.sm.cn.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
13.161.120.42.in-addr.arpa	name = shenmaspider-42-120-161-13.crawl.sm.cn.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
138.197.94.57	attack	Sep 29 15:16:06 host sshd[18668]: Invalid user wwwdata1 from 138.197.94.57 port 35364 ...	2020-09-30 00:26:34
187.189.43.142	attackspambots	uvcm 187.189.43.142 [29/Sep/2020:03:29:10 "-" "GET /wp-login.php?redirect_to=https%3A%2F%2Fwww.techinexpert.com%2Fwp-admin%2F&reauth=1 200 7214 187.189.43.142 [29/Sep/2020:03:29:30 "https://www.techinexpert.com/wp-login.php?redirect_to=https%3A%2F%2Fwww.techinexpert.com%2Fwp-admin%2F&reauth=1" "POST /wp-login.php?redirect_to=https%3A%2F%2Fwww.techinexpert.com%2Fwp-admin%2F&reauth=1 200 7223 187.189.43.142 [29/Sep/2020:03:29:48 "https://www.techinexpert.com/wp-login.php?redirect_to=https%3A%2F%2Fwww.techinexpert.com%2Fwp-admin%2F&reauth=1" "POST /wp-login.php?redirect_to=https%3A%2F%2Fwww.techinexpert.com%2Fwp-admin%2F&reauth=1 200 7223	2020-09-30 00:27:18
197.255.160.225	attackbots	(sshd) Failed SSH login from 197.255.160.225 (NG/Nigeria/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 29 10:59:08 server2 sshd[4618]: Invalid user stats from 197.255.160.225 Sep 29 10:59:08 server2 sshd[4618]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.255.160.225 Sep 29 10:59:10 server2 sshd[4618]: Failed password for invalid user stats from 197.255.160.225 port 53188 ssh2 Sep 29 11:00:27 server2 sshd[7294]: Invalid user info from 197.255.160.225 Sep 29 11:00:27 server2 sshd[7294]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.255.160.225	2020-09-30 00:07:41
192.144.187.153	attackbotsspam	Invalid user laravel from 192.144.187.153 port 51286	2020-09-30 00:42:09
185.234.219.11	attack	24 times SMTP brute-force	2020-09-30 00:39:34
116.213.52.205	attack	Invalid user oracle from 116.213.52.205 port 60374	2020-09-30 00:30:25
185.162.235.64	attack	[Tue Sep 29 15:18:46 2020] 185.162.235.64 ...	2020-09-30 00:45:05
27.223.99.130	attackspam	Invalid user test001 from 27.223.99.130 port 45398	2020-09-30 00:26:56
203.192.219.7	attackspambots	(sshd) Failed SSH login from 203.192.219.7 (IN/India/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 29 11:20:01 server5 sshd[23665]: Invalid user tester from 203.192.219.7 Sep 29 11:20:01 server5 sshd[23665]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.192.219.7 Sep 29 11:20:03 server5 sshd[23665]: Failed password for invalid user tester from 203.192.219.7 port 33850 ssh2 Sep 29 11:30:02 server5 sshd[28097]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.192.219.7 user=root Sep 29 11:30:04 server5 sshd[28097]: Failed password for root from 203.192.219.7 port 51446 ssh2	2020-09-30 00:47:48
185.220.84.226	attackbotsspam	Automatic report - Port Scan Attack	2020-09-30 00:37:41
161.35.138.131	attackspam	$f2bV_matches	2020-09-30 00:46:44
105.71.24.9	attack	Sep 28 22:36:21 mellenthin postfix/smtpd[7480]: NOQUEUE: reject: RCPT from dynggrab-9-24-71-105.inwitelecom.net[105.71.24.9]: 554 5.7.1 Service unavailable; Client host [105.71.24.9] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS / https://www.spamhaus.org/query/ip/105.71.24.9; from= to= proto=ESMTP helo=	2020-09-30 00:09:02
221.121.152.221	attack	Invalid user marcel from 221.121.152.221 port 37164	2020-09-30 00:36:29
51.77.150.203	attack	Sep 29 14:27:21 vm1 sshd[27898]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.150.203 Sep 29 14:27:22 vm1 sshd[27898]: Failed password for invalid user apache from 51.77.150.203 port 58278 ssh2 ...	2020-09-30 00:24:25
192.99.168.9	attackspambots	Invalid user vagrant from 192.99.168.9 port 38706	2020-09-30 00:10:41

Recently Reported IPs

42.120.160.136	180.76.32.159	49.26.1.206	180.76.32.252
180.76.33.55	180.76.33.64	180.76.33.95	180.76.33.150
180.76.34.4	180.76.34.64	180.76.35.6	180.76.34.220
180.76.35.163	180.76.35.44	169.229.254.89	42.156.138.199
111.206.221.163	180.76.56.63	137.226.144.178	137.226.87.18