42.231.162.201

Basic Info

City: Zhengzhou

Region: Henan

Country: China

Internet Service Provider: China Unicom

Hostname: unknown

Organization: CHINA UNICOM China169 Backbone

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
42.231.162.216	attack	Feb 25 08:25:45 grey postfix/smtpd\[13777\]: NOQUEUE: reject: RCPT from unknown\[42.231.162.216\]: 554 5.7.1 Service unavailable\; Client host \[42.231.162.216\] blocked using bl.spamcop.net\; Blocked - see https://www.spamcop.net/bl.shtml\?42.231.162.216\; from=\ to=\ proto=SMTP helo=\ ...	2020-02-25 17:00:37
42.231.162.217	attackspambots	Feb 22 17:46:06 exim[22632]: [1\57] 1j5Xuk-0005t2-Fn H=(gmail.com) [42.231.162.217] F= rejected after DATA: This message scored 15.2 spam points.	2020-02-23 04:06:56
42.231.162.228	attackspam	Brute force attempt	2020-02-20 23:21:06
42.231.162.219	attackspambots	Feb 17 19:27:26 exim[2643]: [1\39] 1j3l78-0000gd-Du H=(gmail.com) [42.231.162.219] F= rejected after DATA: This message scored 104.8 spam points.	2020-02-18 05:53:31
42.231.162.14	attackspambots	Feb 2 05:56:58 grey postfix/smtpd\[22281\]: NOQUEUE: reject: RCPT from unknown\[42.231.162.14\]: 554 5.7.1 Service unavailable\; Client host \[42.231.162.14\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[42.231.162.14\]\; from=\ to=\ proto=ESMTP helo=\ ...	2020-02-02 14:23:22
42.231.162.224	attackspam	Jan 20 05:58:06 grey postfix/smtpd\[15217\]: NOQUEUE: reject: RCPT from unknown\[42.231.162.224\]: 554 5.7.1 Service unavailable\; Client host \[42.231.162.224\] blocked using bl.spamcop.net\; Blocked - see https://www.spamcop.net/bl.shtml\?42.231.162.224\; from=\ to=\ proto=SMTP helo=\ ...	2020-01-20 14:15:55
42.231.162.217	attackspam	Jan 16 14:04:47 grey postfix/smtpd\[28896\]: NOQUEUE: reject: RCPT from unknown\[42.231.162.217\]: 554 5.7.1 Service unavailable\; Client host \[42.231.162.217\] blocked using bl.spamcop.net\; Blocked - see https://www.spamcop.net/bl.shtml\?42.231.162.217\; from=\ to=\ proto=SMTP helo=\ ...	2020-01-16 21:44:40
42.231.162.228	attackspam	Jan 10 22:11:54 grey postfix/smtpd\[30284\]: NOQUEUE: reject: RCPT from unknown\[42.231.162.228\]: 554 5.7.1 Service unavailable\; Client host \[42.231.162.228\] blocked using bl.spamcop.net\; Blocked - see https://www.spamcop.net/bl.shtml\?42.231.162.228\; from=\ to=\ proto=SMTP helo=\ ...	2020-01-11 05:12:30
42.231.162.216	attack	Spamassassin_42.231.162.216	2019-11-11 09:02:24
42.231.162.190	attack	f2b trigger Multiple SASL failures	2019-09-29 04:17:15
42.231.162.208	attack	"SMTPD" 6184 83083 "2019-09-24 x@x "SMTPD" 6184 83083 "2019-09-24 14:30:54.432" "42.231.162.208" "SENT: 550 Delivery is not allowed to this address." IP Address: 42.231.162.208 Email x@x No MX record resolves to this server for domain: schoenenreus.nl ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=42.231.162.208	2019-09-24 20:59:43
42.231.162.205	attackbots	SASL Brute Force	2019-09-23 04:24:23
42.231.162.203	attackbotsspam	MagicSpam Rule: block_rbl_lists (b.barracudacentral.org); Spammer IP: 42.231.162.203	2019-08-31 13:19:47
42.231.162.202	attackbotsspam	originated or passed SPAM,UCE	2019-08-05 08:12:04
42.231.162.191	attackspam	Brute force attempt	2019-07-30 08:52:07

Whois info:

Dig info:


; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.231.162.201
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 27722
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.231.162.201.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019052400 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Fri May 24 21:04:20 CST 2019
;; MSG SIZE  rcvd: 118

Host info

201.162.231.42.in-addr.arpa domain name pointer hn.kd.ny.adsl.

Nslookup info:

Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
201.162.231.42.in-addr.arpa	name = hn.kd.ny.adsl.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
188.166.5.84	attackspambots	"fail2ban match"	2020-09-11 07:25:22
222.221.91.153	attackspam	SP-Scan 45000:23 detected 2020.09.10 05:45:55 blocked until 2020.10.29 21:48:42	2020-09-11 07:34:25
37.187.21.81	attack	SSH Brute Force	2020-09-11 07:31:34
125.142.190.126	attack	Lines containing failures of 125.142.190.126 Sep 10 19:24:46 mellenthin sshd[13175]: Invalid user admin from 125.142.190.126 port 40642 Sep 10 19:24:46 mellenthin sshd[13175]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.142.190.126 Sep 10 19:24:48 mellenthin sshd[13175]: Failed password for invalid user admin from 125.142.190.126 port 40642 ssh2 Sep 10 19:24:48 mellenthin sshd[13175]: Connection closed by invalid user admin 125.142.190.126 port 40642 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=125.142.190.126	2020-09-11 07:28:50
182.61.10.28	attackspambots	SSH Invalid Login	2020-09-11 07:37:30
5.62.62.54	attackbots	Brute force attack stopped by firewall	2020-09-11 07:45:48
185.220.101.134	attackbots	2020-09-10 17:32:18.291418-0500 localhost sshd[40294]: Failed password for root from 185.220.101.134 port 9494 ssh2	2020-09-11 07:43:56
191.223.18.45	attackbotsspam	(sshd) Failed SSH login from 191.223.18.45 (BR/Brazil/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 10 18:55:23 grace sshd[24623]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.223.18.45 user=root Sep 10 18:55:25 grace sshd[24623]: Failed password for root from 191.223.18.45 port 45312 ssh2 Sep 10 18:55:39 grace sshd[24712]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.223.18.45 user=root Sep 10 18:55:41 grace sshd[24712]: Failed password for root from 191.223.18.45 port 45393 ssh2 Sep 10 18:55:43 grace sshd[24715]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.223.18.45 user=root	2020-09-11 07:31:02
134.209.96.131	attackbots	Sep 10 16:03:02 vps46666688 sshd[30880]: Failed password for root from 134.209.96.131 port 53422 ssh2 Sep 10 16:06:59 vps46666688 sshd[31040]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.96.131 ...	2020-09-11 07:38:48
34.126.76.8	attackbotsspam	Sep 10 18:55:27 db sshd[26689]: Invalid user pi from 34.126.76.8 port 41438 ...	2020-09-11 07:46:38
71.6.146.130	attackspam	22/tcp 179/tcp 5025/tcp... [2020-07-12/09-10]152pkt,104pt.(tcp),21pt.(udp)	2020-09-11 07:25:58
92.62.246.21	attackbots	SSH Bruteforce Attempt on Honeypot	2020-09-11 07:20:59
203.212.228.130	attack	Port Scan detected! ...	2020-09-11 07:49:11
212.225.132.103	attackbots	Sep 10 18:55:57 andromeda sshd\[5840\]: Invalid user admin from 212.225.132.103 port 41740 Sep 10 18:55:57 andromeda sshd\[5840\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.225.132.103 Sep 10 18:55:59 andromeda sshd\[5840\]: Failed password for invalid user admin from 212.225.132.103 port 41740 ssh2	2020-09-11 07:21:46
149.202.160.188	attack	2020-09-10T23:02:47+0200 Failed SSH Authentication/Brute Force Attack. (Server 5)	2020-09-11 07:34:44

Recently Reported IPs

173.49.120.100	109.141.53.255	157.50.198.55	11.70.242.183
220.217.195.34	85.113.160.217	183.46.77.62	193.2.103.231
79.138.37.5	90.126.81.228	187.255.134.70	188.252.137.81
105.202.85.78	204.140.150.180	148.222.27.12	129.213.49.56
198.87.211.28	36.72.17.97	35.155.54.255	81.7.166.154