42.56.2.242 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: None

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
42.56.219.181	attackspam	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/42.56.219.181/ CN - 1H : (740) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : CN NAME ASN : ASN4837 IP : 42.56.219.181 CIDR : 42.56.0.0/14 PREFIX COUNT : 1262 UNIQUE IP COUNT : 56665856 ATTACKS DETECTED ASN4837 : 1H - 14 3H - 46 6H - 69 12H - 124 24H - 257 DateTime : 2019-10-29 04:53:35 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery	2019-10-29 15:09:02
42.56.236.201	attack	Automatic report - Port Scan Attack	2019-10-24 18:50:58
42.56.25.49	attackbotsspam	Sep 8 22:57:09 srv206 sshd[5615]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.56.25.49 user=root Sep 8 22:57:11 srv206 sshd[5615]: Failed password for root from 42.56.25.49 port 36786 ssh2 Sep 8 22:57:14 srv206 sshd[5615]: Failed password for root from 42.56.25.49 port 36786 ssh2 Sep 8 22:57:09 srv206 sshd[5615]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.56.25.49 user=root Sep 8 22:57:11 srv206 sshd[5615]: Failed password for root from 42.56.25.49 port 36786 ssh2 Sep 8 22:57:14 srv206 sshd[5615]: Failed password for root from 42.56.25.49 port 36786 ssh2 ...	2019-09-09 09:49:03

Type

Details

Datetime

42.56.219.181

attackspam

IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/42.56.219.181/ 
 
 CN - 1H : (740)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : CN 
 NAME ASN : ASN4837 
 
 IP : 42.56.219.181 
 
 CIDR : 42.56.0.0/14 
 
 PREFIX COUNT : 1262 
 
 UNIQUE IP COUNT : 56665856 
 
 
 ATTACKS DETECTED ASN4837 :  
  1H - 14 
  3H - 46 
  6H - 69 
 12H - 124 
 24H - 257 
 
 DateTime : 2019-10-29 04:53:35 
 
 INFO : Port Scan TELNET Detected and Blocked by ADMIN  - data recovery

2019-10-29 15:09:02

42.56.236.201

attack

Automatic report - Port Scan Attack

2019-10-24 18:50:58

42.56.25.49

attackbotsspam

Sep  8 22:57:09 srv206 sshd[5615]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.56.25.49  user=root
Sep  8 22:57:11 srv206 sshd[5615]: Failed password for root from 42.56.25.49 port 36786 ssh2
Sep  8 22:57:14 srv206 sshd[5615]: Failed password for root from 42.56.25.49 port 36786 ssh2
Sep  8 22:57:09 srv206 sshd[5615]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.56.25.49  user=root
Sep  8 22:57:11 srv206 sshd[5615]: Failed password for root from 42.56.25.49 port 36786 ssh2
Sep  8 22:57:14 srv206 sshd[5615]: Failed password for root from 42.56.25.49 port 36786 ssh2
...

2019-09-09 09:49:03

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.56.2.242
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 54350
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;42.56.2.242.			IN	A

;; AUTHORITY SECTION:
.			194	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021301 1800 900 604800 86400

;; Query time: 64 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 14 08:44:39 CST 2022
;; MSG SIZE  rcvd: 104

Host info

Host 242.2.56.42.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 242.2.56.42.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
213.128.67.212	attackbots	Oct 11 14:35:28 game-panel sshd[25997]: Failed password for root from 213.128.67.212 port 56204 ssh2 Oct 11 14:40:15 game-panel sshd[26223]: Failed password for root from 213.128.67.212 port 40144 ssh2	2019-10-11 23:08:06
193.31.210.44	attackbotsspam	Oct 11 16:13:17 h2177944 kernel: \[3679238.214221\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=193.31.210.44 DST=85.214.117.9 LEN=40 TOS=0x08 PREC=0x20 TTL=74 ID=29852 DF PROTO=TCP SPT=62690 DPT=443 WINDOW=29200 RES=0x00 SYN URGP=0 Oct 11 16:13:38 h2177944 kernel: \[3679258.968308\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=193.31.210.44 DST=85.214.117.9 LEN=40 TOS=0x08 PREC=0x20 TTL=73 ID=33540 DF PROTO=TCP SPT=54354 DPT=53 WINDOW=29200 RES=0x00 SYN URGP=0 Oct 11 16:14:42 h2177944 kernel: \[3679322.934671\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=193.31.210.44 DST=85.214.117.9 LEN=40 TOS=0x08 PREC=0x20 TTL=54 ID=40079 DF PROTO=TCP SPT=59113 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 Oct 11 16:15:25 h2177944 kernel: \[3679365.977745\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=193.31.210.44 DST=85.214.117.9 LEN=40 TOS=0x08 PREC=0x20 TTL=60 ID=44615 DF PROTO=TCP SPT=62535 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 Oct 11 16:21:37 h2177944 kernel: \[3679738.080877\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=193.31.210.44 DST=85.214.	2019-10-11 23:12:30
202.45.147.125	attackspambots	Oct 11 04:44:05 wbs sshd\[19067\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.45.147.125 user=root Oct 11 04:44:07 wbs sshd\[19067\]: Failed password for root from 202.45.147.125 port 45838 ssh2 Oct 11 04:48:16 wbs sshd\[19412\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.45.147.125 user=root Oct 11 04:48:17 wbs sshd\[19412\]: Failed password for root from 202.45.147.125 port 36290 ssh2 Oct 11 04:52:32 wbs sshd\[19797\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.45.147.125 user=root	2019-10-11 23:12:14
45.67.14.152	attack	Invalid user test from 45.67.14.152 port 40178	2019-10-11 22:37:35
178.128.202.35	attackbots	Oct 11 04:54:59 friendsofhawaii sshd\[16122\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.202.35 user=root Oct 11 04:55:01 friendsofhawaii sshd\[16122\]: Failed password for root from 178.128.202.35 port 35586 ssh2 Oct 11 04:59:16 friendsofhawaii sshd\[16478\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.202.35 user=root Oct 11 04:59:18 friendsofhawaii sshd\[16478\]: Failed password for root from 178.128.202.35 port 47484 ssh2 Oct 11 05:03:22 friendsofhawaii sshd\[16802\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.202.35 user=root	2019-10-11 23:14:13
185.148.241.86	attackbots	[Fri Oct 11 00:58:09 2019 GMT] "Choice HOME Warranty" [URIBL_INV], Subject: Choice home warranty - protection, repair & more ..	2019-10-11 23:13:25
51.254.205.6	attackbots	Invalid user abhishek from 51.254.205.6 port 54262	2019-10-11 22:35:17
222.186.31.136	attackbots	Oct 11 10:58:56 TORMINT sshd\[17475\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.31.136 user=root Oct 11 10:58:58 TORMINT sshd\[17475\]: Failed password for root from 222.186.31.136 port 11206 ssh2 Oct 11 10:59:00 TORMINT sshd\[17475\]: Failed password for root from 222.186.31.136 port 11206 ssh2 ...	2019-10-11 23:04:08
113.162.172.211	attackspam	Invalid user admin from 113.162.172.211 port 56573	2019-10-11 22:31:36
51.15.99.106	attack	Oct 11 15:54:43 microserver sshd[27830]: Invalid user P@$$wort@2016 from 51.15.99.106 port 56382 Oct 11 15:54:43 microserver sshd[27830]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.15.99.106 Oct 11 15:54:44 microserver sshd[27830]: Failed password for invalid user P@$$wort@2016 from 51.15.99.106 port 56382 ssh2 Oct 11 15:58:42 microserver sshd[28467]: Invalid user P@$$w0rt!qaz from 51.15.99.106 port 40232 Oct 11 15:58:42 microserver sshd[28467]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.15.99.106 Oct 11 16:10:25 microserver sshd[30326]: Invalid user Tour@2017 from 51.15.99.106 port 48236 Oct 11 16:10:25 microserver sshd[30326]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.15.99.106 Oct 11 16:10:27 microserver sshd[30326]: Failed password for invalid user Tour@2017 from 51.15.99.106 port 48236 ssh2 Oct 11 16:14:31 microserver sshd[30596]: Invalid user 123Junior from 51.	2019-10-11 22:46:59
114.108.175.184	attackbots	Oct 11 05:07:47 hpm sshd\[8248\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.108.175.184 user=root Oct 11 05:07:49 hpm sshd\[8248\]: Failed password for root from 114.108.175.184 port 40510 ssh2 Oct 11 05:12:13 hpm sshd\[8735\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.108.175.184 user=root Oct 11 05:12:14 hpm sshd\[8735\]: Failed password for root from 114.108.175.184 port 35748 ssh2 Oct 11 05:16:42 hpm sshd\[9109\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.108.175.184 user=root	2019-10-11 23:17:23
159.89.155.148	attack	Oct 11 14:27:42 meumeu sshd[2482]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.155.148 Oct 11 14:27:45 meumeu sshd[2482]: Failed password for invalid user Ant@123 from 159.89.155.148 port 39278 ssh2 Oct 11 14:31:54 meumeu sshd[3217]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.155.148 ...	2019-10-11 23:05:33
76.27.163.60	attackspam	2019-10-11T15:18:02.4159221240 sshd\[31020\]: Invalid user usuario from 76.27.163.60 port 35762 2019-10-11T15:18:02.4185831240 sshd\[31020\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=76.27.163.60 2019-10-11T15:18:04.4461601240 sshd\[31020\]: Failed password for invalid user usuario from 76.27.163.60 port 35762 ssh2 ...	2019-10-11 22:33:34
58.242.68.178	attackbots	Invalid user user from 58.242.68.178 port 53264	2019-10-11 22:34:54
175.23.74.147	attackbotsspam	Unauthorised access (Oct 11) SRC=175.23.74.147 LEN=40 TTL=49 ID=26884 TCP DPT=8080 WINDOW=53657 SYN Unauthorised access (Oct 11) SRC=175.23.74.147 LEN=40 TTL=49 ID=17601 TCP DPT=8080 WINDOW=53192 SYN Unauthorised access (Oct 10) SRC=175.23.74.147 LEN=40 TTL=49 ID=55895 TCP DPT=8080 WINDOW=53192 SYN Unauthorised access (Oct 9) SRC=175.23.74.147 LEN=40 TTL=49 ID=3809 TCP DPT=8080 WINDOW=53192 SYN Unauthorised access (Oct 8) SRC=175.23.74.147 LEN=40 TTL=49 ID=64117 TCP DPT=8080 WINDOW=40145 SYN	2019-10-11 23:08:27

Recently Reported IPs

42.53.193.62	42.6.125.224	42.6.125.97	42.57.195.230
42.6.124.204	42.58.24.70	42.59.178.249	42.58.123.247
42.6.12.28	42.63.124.36	42.63.207.235	42.6.248.166
42.63.207.31	42.7.38.9	42.63.226.95	42.82.224.82
42.80.217.32	42.72.87.44	42.82.237.140	42.84.39.149