42.51.12.20 - IPInfo

Basic Info

City: unknown

Region: Henan

Country: China

Internet Service Provider: Henan Telcom Union Technology Co. Ltd

Hostname: unknown

Organization: Zhengzhou Fastidc Technology Co.,Ltd.

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	Unauthorized access detected from black listed ip!	2020-04-05 07:11:45
attackspam	scanning for potential vulnerable apps (wordpress etc.) and database accesses. Requested URI: /wp-login.php	2020-03-17 04:07:31
attackbots	Attempts to probe for or exploit a Drupal site on url: /wp-login.php. Reported by the module https://www.drupal.org/project/abuseipdb.	2019-08-17 01:29:50

Type

Details

Datetime

attack

Unauthorized access detected from black listed ip!

2020-04-05 07:11:45

attackspam

scanning for potential vulnerable apps (wordpress etc.) and database accesses. Requested URI: /wp-login.php

2020-03-17 04:07:31

attackbots

Attempts to probe for or exploit a Drupal site on url: /wp-login.php. Reported by the module https://www.drupal.org/project/abuseipdb.

2019-08-17 01:29:50

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.51.12.20
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 41771
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.51.12.20.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019061901 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Thu Jun 20 16:39:01 CST 2019
;; MSG SIZE  rcvd: 115

Host info

Host 20.12.51.42.in-addr.arpa not found: 2(SERVFAIL)

Nslookup info:

;; Got SERVFAIL reply from 67.207.67.2, trying next server
Server:		67.207.67.3
Address:	67.207.67.3#53

** server can't find 20.12.51.42.in-addr.arpa: SERVFAIL

Related IP info:

Related comments:

IP	Type	Details	Datetime
112.85.42.185	attackbotsspam	Sep 1 10:27:51 localhost sshd[2494513]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.185 user=root Sep 1 10:27:54 localhost sshd[2494513]: Failed password for root from 112.85.42.185 port 20058 ssh2 Sep 1 10:27:51 localhost sshd[2494513]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.185 user=root Sep 1 10:27:54 localhost sshd[2494513]: Failed password for root from 112.85.42.185 port 20058 ssh2 Sep 1 10:27:58 localhost sshd[2494513]: Failed password for root from 112.85.42.185 port 20058 ssh2 ...	2020-09-01 18:34:36
139.99.125.231	attackspambots	TCP (SYN) 139.99.125.231:50637 -> port 22, len 48	2020-09-01 19:04:17
13.68.171.41	attack	Invalid user mcadmin from 13.68.171.41 port 53208	2020-09-01 18:33:19
157.50.215.195	attackspambots	SMB Server BruteForce Attack	2020-09-01 18:46:13
106.13.136.8	attack	Failed password for invalid user ubuntu from 106.13.136.8 port 57612 ssh2	2020-09-01 18:32:47
118.70.124.188	attackbots	Unauthorized connection attempt from IP address 118.70.124.188 on Port 445(SMB)	2020-09-01 18:52:25
81.120.65.55	attackbotsspam	21 attempts against mh_ha-misbehave-ban on lb	2020-09-01 18:30:14
134.119.45.69	attackbots	REQUESTED PAGE: /backup/wp-admin/	2020-09-01 18:36:54
51.38.127.227	attack	detected by Fail2Ban	2020-09-01 18:22:14
182.73.76.154	attackspam	sshd: Failed password for invalid user .... from 182.73.76.154 port 33052 ssh2	2020-09-01 18:31:17
117.205.7.202	attackspam	Unauthorized connection attempt detected from IP address 117.205.7.202 to port 445 [T]	2020-09-01 18:42:45
112.85.42.189	attackspam	Sep 1 10:01:46 localhost sshd[2440145]: Failed password for root from 112.85.42.189 port 31995 ssh2 Sep 1 10:02:26 localhost sshd[2441610]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.189 user=root Sep 1 10:02:29 localhost sshd[2441610]: Failed password for root from 112.85.42.189 port 48355 ssh2 Sep 1 10:03:09 localhost sshd[2443076]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.189 user=root Sep 1 10:03:11 localhost sshd[2443076]: Failed password for root from 112.85.42.189 port 60065 ssh2 ...	2020-09-01 18:27:05
139.99.125.230	attack	SmallBizIT.US 1 packets to tcp(22)	2020-09-01 18:25:28
190.211.162.66	attackbots	Unauthorized connection attempt from IP address 190.211.162.66 on Port 445(SMB)	2020-09-01 19:07:13
151.236.59.142	attackspam	TCP ports : 11162 / 31035	2020-09-01 18:28:05

Recently Reported IPs

178.137.17.11	198.216.233.114	114.67.56.71	39.69.71.200
20.166.90.200	122.252.250.250	37.94.238.164	114.230.122.43
119.53.211.64	197.3.7.157	66.158.210.171	129.120.110.245
49.86.196.153	157.230.178.246	220.78.222.139	123.143.245.224
143.146.145.187	113.161.186.193	197.136.180.126	32.204.241.255