42.54.161.213 - IPInfo

Basic Info

City: unknown

Region: Liaoning

Country: China

Internet Service Provider: Unicom Liaoning Province Network

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	Telnet/23 MH Probe, BF, Hack -	2019-12-16 08:55:58

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.54.161.213
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 20819
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.54.161.213.			IN	A

;; AUTHORITY SECTION:
.			209	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019121501 1800 900 604800 86400

;; Query time: 105 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Dec 16 08:55:52 CST 2019
;; MSG SIZE  rcvd: 117

Host info

Host 213.161.54.42.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 213.161.54.42.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
115.76.25.170	attack	TCP (SYN) 115.76.25.170:51119 -> port 23, len 40	2020-10-08 13:25:28
187.58.65.21	attackbots	Oct 8 04:22:55 h2865660 sshd[1558]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.58.65.21 user=root Oct 8 04:22:57 h2865660 sshd[1558]: Failed password for root from 187.58.65.21 port 32169 ssh2 Oct 8 04:26:46 h2865660 sshd[1705]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.58.65.21 user=root Oct 8 04:26:48 h2865660 sshd[1705]: Failed password for root from 187.58.65.21 port 28390 ssh2 Oct 8 04:29:35 h2865660 sshd[1826]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.58.65.21 user=root Oct 8 04:29:37 h2865660 sshd[1826]: Failed password for root from 187.58.65.21 port 14726 ssh2 ...	2020-10-08 13:21:39
62.171.162.136	attack	Oct 8 06:31:57 sip sshd[1859990]: Invalid user huangxuanxuan from 62.171.162.136 port 43332 Oct 8 06:31:59 sip sshd[1859990]: Failed password for invalid user huangxuanxuan from 62.171.162.136 port 43332 ssh2 Oct 8 06:36:09 sip sshd[1860022]: Invalid user hwanggs from 62.171.162.136 port 48858 ...	2020-10-08 13:05:01
24.38.150.130	attack	Unauthorized admin access - /admin/css/datepicker.css?v=913-new-social-icons033bdff474ed2c72	2020-10-08 13:13:15
187.180.102.108	attack	Oct 8 06:03:44 sip sshd[1859560]: Failed password for root from 187.180.102.108 port 50854 ssh2 Oct 8 06:05:55 sip sshd[1859634]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.180.102.108 user=root Oct 8 06:05:58 sip sshd[1859634]: Failed password for root from 187.180.102.108 port 34419 ssh2 ...	2020-10-08 12:43:31
117.220.5.49	attack	Port Scan ...	2020-10-08 13:03:44
106.12.60.40	attackspambots	Banned for a week because repeated abuses, for example SSH, but not only	2020-10-08 13:05:59
112.85.42.200	attackspam	Oct 8 06:50:32 santamaria sshd\[20297\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.200 user=root Oct 8 06:50:34 santamaria sshd\[20297\]: Failed password for root from 112.85.42.200 port 18468 ssh2 Oct 8 06:50:43 santamaria sshd\[20297\]: Failed password for root from 112.85.42.200 port 18468 ssh2 ...	2020-10-08 13:09:15
103.110.89.148	attack	DATE:2020-10-08 03:58:15, IP:103.110.89.148, PORT:ssh SSH brute force auth (docker-dc)	2020-10-08 12:57:13
182.151.2.98	attackspambots	Oct 8 06:36:32 OPSO sshd\[3090\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.151.2.98 user=root Oct 8 06:36:33 OPSO sshd\[3090\]: Failed password for root from 182.151.2.98 port 57765 ssh2 Oct 8 06:38:23 OPSO sshd\[3463\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.151.2.98 user=root Oct 8 06:38:25 OPSO sshd\[3463\]: Failed password for root from 182.151.2.98 port 40153 ssh2 Oct 8 06:40:14 OPSO sshd\[4030\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.151.2.98 user=root	2020-10-08 12:47:42
164.132.205.107	attack	TCP (SYN,ACK) 164.132.205.107:25565 -> port 41700, len 44	2020-10-08 13:08:18
92.239.13.99	attack	Oct 7 22:47:11 pve1 sshd[24575]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.239.13.99 ...	2020-10-08 12:43:59
46.146.136.8	attackspambots	Oct 8 06:45:52 vpn01 sshd[5902]: Failed password for root from 46.146.136.8 port 49902 ssh2 ...	2020-10-08 12:49:21
37.120.198.197	attack	2020-10-07 23:07:11 dovecot_login authenticator failed for \(WIN-25FFVSIPLS1\) \[37.120.198.197\]: 535 Incorrect authentication data \(set_id=infoeozo\) 2020-10-07 23:07:11 H=\(WIN-25FFVSIPLS1\) \[37.120.198.197\] sender verify fail for \: Unrouteable address 2020-10-07 23:07:11 H=\(WIN-25FFVSIPLS1\) \[37.120.198.197\] F=\ rejected RCPT \: Sender verify failed 2020-10-07 23:07:23 dovecot_login authenticator failed for \(WIN-25FFVSIPLS1\) \[37.120.198.197\]: 535 Incorrect authentication data \(set_id=info\) 2020-10-07 23:07:23 H=\(WIN-25FFVSIPLS1\) \[37.120.198.197\] F=\ rejected RCPT \: relay not permitted	2020-10-08 13:14:28
115.76.97.191	attackspambots	TCP (SYN) 115.76.97.191:22774 -> port 23, len 44	2020-10-08 12:54:00

Recently Reported IPs

68.83.255.243	179.141.90.200	187.209.232.219	152.181.72.75
12.152.186.101	132.248.96.3	122.51.147.181	220.111.144.75
176.34.76.249	94.69.228.219	213.157.160.56	2600:3c00::f03c:92ff:fe3b:ba45
219.102.46.238	178.75.65.4	200.189.118.123	40.92.5.105
40.92.5.35	54.72.141.83	13.36.158.242	85.157.99.84