49.68.75.142 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
49.68.75.121	attackspam	Brute force SMTP login attempts.	2019-10-13 17:35:44
49.68.75.159	attack	Brute force SMTP login attempts.	2019-09-27 15:01:21

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 49.68.75.142
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 46015
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;49.68.75.142.			IN	A

;; AUTHORITY SECTION:
.			599	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2023051600 1800 900 604800 86400

;; Query time: 27 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue May 16 16:16:43 CST 2023
;; MSG SIZE  rcvd: 105

Host info

Host 142.75.68.49.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 142.75.68.49.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
94.191.23.15	attackspam	Aug 13 23:36:53 mail sshd\[36631\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.23.15 user=root ...	2020-08-14 16:33:36
188.16.150.216	attack	TCP (SYN) 188.16.150.216:21929 -> port 23, len 40	2020-08-14 17:11:54
189.126.187.137	attackbotsspam	Brute force attempt	2020-08-14 16:56:01
185.220.102.249	attackspam	Aug 14 05:17:33 ws19vmsma01 sshd[38825]: Failed password for root from 185.220.102.249 port 22428 ssh2 Aug 14 05:17:40 ws19vmsma01 sshd[38825]: Failed password for root from 185.220.102.249 port 22428 ssh2 ...	2020-08-14 16:36:54
111.198.54.177	attackbots	2020-08-14T10:33:22.243561billing sshd[16428]: Failed password for root from 111.198.54.177 port 54432 ssh2 2020-08-14T10:36:13.678774billing sshd[20995]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.198.54.177 user=root 2020-08-14T10:36:16.257339billing sshd[20995]: Failed password for root from 111.198.54.177 port 9779 ssh2 ...	2020-08-14 16:57:36
51.141.83.27	attackspam	IDS multiserver	2020-08-14 16:46:55
165.22.101.100	attack	165.22.101.100 - - [14/Aug/2020:09:01:08 +0100] "POST /wp-login.php HTTP/1.1" 200 1875 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 165.22.101.100 - - [14/Aug/2020:09:01:10 +0100] "POST /wp-login.php HTTP/1.1" 200 1860 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 165.22.101.100 - - [14/Aug/2020:09:01:14 +0100] "POST /wp-login.php HTTP/1.1" 200 1857 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-08-14 17:06:50
158.69.35.227	attackspambots	Aug 14 10:00:42 mout sshd[14653]: Failed password for sshd from 158.69.35.227 port 34723 ssh2 Aug 14 10:00:45 mout sshd[14653]: Failed password for sshd from 158.69.35.227 port 34723 ssh2 Aug 14 10:00:48 mout sshd[14653]: Failed password for sshd from 158.69.35.227 port 34723 ssh2	2020-08-14 16:28:34
180.124.210.61	attack	Automatic report - Port Scan Attack	2020-08-14 16:50:53
172.96.193.253	attackspam	Aug 13 19:52:50 v11 sshd[4714]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.96.193.253 user=r.r Aug 13 19:52:52 v11 sshd[4714]: Failed password for r.r from 172.96.193.253 port 36988 ssh2 Aug 13 19:52:52 v11 sshd[4714]: Received disconnect from 172.96.193.253 port 36988:11: Bye Bye [preauth] Aug 13 19:52:52 v11 sshd[4714]: Disconnected from 172.96.193.253 port 36988 [preauth] Aug 13 19:58:21 v11 sshd[5208]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.96.193.253 user=r.r Aug 13 19:58:22 v11 sshd[5208]: Failed password for r.r from 172.96.193.253 port 49626 ssh2 Aug 13 19:58:23 v11 sshd[5208]: Received disconnect from 172.96.193.253 port 49626:11: Bye Bye [preauth] Aug 13 19:58:23 v11 sshd[5208]: Disconnected from 172.96.193.253 port 49626 [preauth] Aug 13 20:00:17 v11 sshd[5479]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.96.1........ -------------------------------	2020-08-14 16:52:29
61.177.172.142	attack	SSH Login Bruteforce	2020-08-14 17:09:57
191.234.176.158	attackbots	191.234.176.158 - - [14/Aug/2020:07:02:02 +0100] "POST /wp-login.php HTTP/1.1" 200 1996 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 191.234.176.158 - - [14/Aug/2020:07:02:04 +0100] "POST /wp-login.php HTTP/1.1" 200 2000 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 191.234.176.158 - - [14/Aug/2020:07:02:05 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-08-14 16:32:40
157.245.218.105	attackbots	SIP/5060 Probe, BF, Hack -	2020-08-14 17:06:12
178.62.0.215	attackbots	Aug 14 05:33:25 * sshd[30458]: Failed password for root from 178.62.0.215 port 58808 ssh2	2020-08-14 16:35:12
140.143.233.133	attackbots	Aug 14 05:35:57 mout sshd[24361]: Invalid user 8888888888 from 140.143.233.133 port 50516	2020-08-14 17:09:00

Recently Reported IPs

49.74.165.122	219.158.4.170	2409:8954:de20:41a5:dcfd:ec49:19ca:3db0	132.131.115.113
250.153.186.105	115.87.114.37	94.181.99.4	3.38.169.94
247.114.61.7	150.254.104.186	128.139.35.5	140.116.101.8
140.116.68.71	163.28.125.253	140.116.100.58	140.110.17.115
140.116.89.187	140.116.67.19	140.116.189.90	140.116.157.187