42.157.192.132

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: Weiyi Network Technology Co. Ltd

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	[N10.H2.VM2] Port Scanner Detected Blocked by UFW	2020-10-14 05:30:55
attack	Port scan on 6 port(s): 144 4133 6017 6023 6400 47624	2020-06-07 01:39:21
attack	Port scan detected on ports: 7013[TCP], 4143[TCP], 7789[TCP]	2020-05-30 13:55:01
attack	Fail2Ban Ban Triggered	2020-05-28 14:23:19
attackbots	Honeypot attack, port: 23, PTR: PTR record not found	2019-12-28 18:07:50
attackbotsspam	12/08/2019-00:23:25.420180 42.157.192.132 Protocol: 6 ET SCAN NMAP -sS window 1024	2019-12-08 13:50:54
attack	42.157.192.132 was recorded 5 times by 5 hosts attempting to connect to the following ports: 2000. Incident counter (4h, 24h, all-time): 5, 5, 5	2019-11-22 03:34:07

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.157.192.132
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 19175
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.157.192.132.			IN	A

;; AUTHORITY SECTION:
.			198	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019112101 1800 900 604800 86400

;; Query time: 463 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Nov 22 03:34:04 CST 2019
;; MSG SIZE  rcvd: 118

Host info

Host 132.192.157.42.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 132.192.157.42.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
180.76.190.251	attack	Jun 10 05:41:30 h2779839 sshd[3401]: Invalid user adella from 180.76.190.251 port 60362 Jun 10 05:41:30 h2779839 sshd[3401]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.190.251 Jun 10 05:41:30 h2779839 sshd[3401]: Invalid user adella from 180.76.190.251 port 60362 Jun 10 05:41:32 h2779839 sshd[3401]: Failed password for invalid user adella from 180.76.190.251 port 60362 ssh2 Jun 10 05:46:03 h2779839 sshd[3506]: Invalid user admin from 180.76.190.251 port 53048 Jun 10 05:46:03 h2779839 sshd[3506]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.190.251 Jun 10 05:46:03 h2779839 sshd[3506]: Invalid user admin from 180.76.190.251 port 53048 Jun 10 05:46:05 h2779839 sshd[3506]: Failed password for invalid user admin from 180.76.190.251 port 53048 ssh2 Jun 10 05:50:30 h2779839 sshd[9570]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.190.251 user ...	2020-06-10 16:07:35
192.35.168.212	attack	Unauthorized connection attempt detected from IP address 192.35.168.212 to port 8767	2020-06-10 16:39:40
117.158.175.167	attack	Jun 10 05:46:37 xeon sshd[28724]: Failed password for root from 117.158.175.167 port 48510 ssh2	2020-06-10 16:33:03
103.145.12.54	attackspambots	Port scan denied	2020-06-10 16:40:56
2.47.91.234	attackspambots	Unauthorized connection attempt detected from IP address 2.47.91.234 to port 88	2020-06-10 16:40:13
171.103.43.150	attackspam	Jun 8 15:09:33 WHD8 dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 6 secs\): user=\, method=PLAIN, rip=171.103.43.150, lip=10.64.89.208, TLS: Disconnected, session=\ Jun 9 17:42:59 WHD8 dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 15 secs\): user=\, method=PLAIN, rip=171.103.43.150, lip=10.64.89.208, TLS, session=\ Jun 10 05:50:15 WHD8 dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 6 secs\): user=\, method=PLAIN, rip=171.103.43.150, lip=10.64.89.208, TLS, session=\ ...	2020-06-10 16:20:30
188.165.169.238	attackbots	Jun 10 04:31:08 NPSTNNYC01T sshd[8565]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.165.169.238 Jun 10 04:31:10 NPSTNNYC01T sshd[8565]: Failed password for invalid user admin from 188.165.169.238 port 44198 ssh2 Jun 10 04:34:23 NPSTNNYC01T sshd[8834]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.165.169.238 ...	2020-06-10 16:40:25
208.109.8.97	attackbotsspam	Jun 10 10:52:15 dhoomketu sshd[621860]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=208.109.8.97 Jun 10 10:52:15 dhoomketu sshd[621860]: Invalid user guest from 208.109.8.97 port 48786 Jun 10 10:52:17 dhoomketu sshd[621860]: Failed password for invalid user guest from 208.109.8.97 port 48786 ssh2 Jun 10 10:56:26 dhoomketu sshd[621957]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=208.109.8.97 user=root Jun 10 10:56:27 dhoomketu sshd[621957]: Failed password for root from 208.109.8.97 port 51238 ssh2 ...	2020-06-10 16:16:51
46.218.7.227	attackspambots	Jun 10 08:06:51 localhost sshd\[24263\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.218.7.227 user=root Jun 10 08:06:53 localhost sshd\[24263\]: Failed password for root from 46.218.7.227 port 49576 ssh2 Jun 10 08:14:19 localhost sshd\[24360\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.218.7.227 user=root ...	2020-06-10 16:16:25
51.255.101.8	attackbots	Automatic report - Banned IP Access	2020-06-10 16:37:45
134.122.69.18	attackbotsspam	TCP (SYN) 134.122.69.18:50737 -> port 8162, len 44	2020-06-10 16:22:37
134.209.63.140	attackbotsspam	Jun 10 08:06:56 debian-2gb-nbg1-2 kernel: \[14027948.083591\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=134.209.63.140 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=59219 PROTO=TCP SPT=51544 DPT=31587 WINDOW=1024 RES=0x00 SYN URGP=0	2020-06-10 16:20:53
14.29.255.9	attackspam	2020-06-10T06:51:31.320311sd-86998 sshd[21541]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.29.255.9 user=root 2020-06-10T06:51:32.819127sd-86998 sshd[21541]: Failed password for root from 14.29.255.9 port 55396 ssh2 2020-06-10T06:54:28.364728sd-86998 sshd[21977]: Invalid user students from 14.29.255.9 port 36002 2020-06-10T06:54:28.367017sd-86998 sshd[21977]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.29.255.9 2020-06-10T06:54:28.364728sd-86998 sshd[21977]: Invalid user students from 14.29.255.9 port 36002 2020-06-10T06:54:29.832248sd-86998 sshd[21977]: Failed password for invalid user students from 14.29.255.9 port 36002 ssh2 ...	2020-06-10 16:36:11
76.185.1.251	attackspambots	Jun 9 19:28:37 eddieflores sshd\[18619\]: Invalid user monitor from 76.185.1.251 Jun 9 19:28:37 eddieflores sshd\[18619\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=cpe-76-185-1-251.tx.res.rr.com Jun 9 19:28:38 eddieflores sshd\[18619\]: Failed password for invalid user monitor from 76.185.1.251 port 54808 ssh2 Jun 9 19:35:09 eddieflores sshd\[19173\]: Invalid user sossina from 76.185.1.251 Jun 9 19:35:09 eddieflores sshd\[19173\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=cpe-76-185-1-251.tx.res.rr.com	2020-06-10 16:21:14
85.186.38.228	attackbotsspam	Jun 10 07:42:48 ip-172-31-61-156 sshd[12059]: Invalid user shiyanlou from 85.186.38.228 Jun 10 07:42:48 ip-172-31-61-156 sshd[12059]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.186.38.228 Jun 10 07:42:48 ip-172-31-61-156 sshd[12059]: Invalid user shiyanlou from 85.186.38.228 Jun 10 07:42:50 ip-172-31-61-156 sshd[12059]: Failed password for invalid user shiyanlou from 85.186.38.228 port 38964 ssh2 Jun 10 07:50:59 ip-172-31-61-156 sshd[12416]: Invalid user user from 85.186.38.228 ...	2020-06-10 16:14:12

Recently Reported IPs

105.112.16.231	151.4.203.87	56.196.131.73	36.249.95.85
187.227.214.100	1.163.162.161	173.220.131.254	104.198.54.129
194.156.124.163	92.10.73.116	89.208.117.106	202.105.51.221
173.147.96.13	31.243.241.223	92.89.112.150	126.78.90.43
170.199.190.158	46.55.163.130	189.112.152.58	176.174.216.153