AbuseIPDB » 42.230.143.249

42.230.143.249 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 25%: ?

25%

ISP	China Unicom Henan province network
Usage Type	Fixed Line ISP
ASN	AS4837
Hostname(s)	hn.kd.ny.adsl
Domain Name	chinaunicom.cn
Country	China
City	Ningbo, Zhejiang

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 42.230.143.249

Whois 42.230.143.249

IP Abuse Reports for 42.230.143.249:

This IP address has been reported a total of 20 times from 15 distinct sources. 42.230.143.249 was first reported on July 3rd 2022, and the most recent report was 4 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 4 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
MPL	2024-12-14 02:59:38 (4 weeks ago)	tcp/23 (2 or more attempts)	Port Scan
MPL	2024-12-14 02:59:38 (4 weeks ago)	tcp/23	Port Scan
EGP Abuse Dept	2024-12-14 01:11:27 (4 weeks ago)	Unauthorized connection to Telnet port 23	Port Scan Hacking
ThreatBook.io	2024-12-13 23:58:46 (4 weeks ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/42.230.143.249<b ... show moreThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/42.230.143.249 2024-12-13 21:29:56 ["sh","shell","enable","system","ping ;sh","/bin/busybox cat /proc/self/exe \|\| cat /proc/self/exe"] 2024-12-13 21:30:24 ["sh","shell","enable","system","ping ;sh","/bin/busybox cat /proc/self/exe \|\| cat /proc/self/exe"] show less	SSH
TimmiORG	2024-12-13 17:01:14 (4 weeks ago)	Unauthorized connection to Telnet port 23	Port Scan
security.rdmc.fr	2024-12-13 14:01:53 (4 weeks ago)	Port Scan Attack proto:TCP src:39472 dst:23	Port Scan
Anonymous	2024-12-13 13:02:54 (4 weeks ago)	Unauthorized connection attempt on Port 23	Port Scan Hacking Exploited Host
dwmp	2022-07-04 12:16:31 (2 years ago)	Jul 4 18:16:23 webcore sshd[2788120]: Failed password for invalid user user from 42.230.143.249 por ... show moreJul 4 18:16:23 webcore sshd[2788120]: Failed password for invalid user user from 42.230.143.249 port 51035 ssh2 Jul 4 18:16:25 webcore sshd[2788120]: Disconnecting invalid user user 42.230.143.249 port 51035: Change of username or service not allowed: (user,ssh-connection) -> (root,ssh-connection) [preauth] Jul 4 18:16:29 webcore sshd[2788137]: Invalid user nagios from 42.230.143.249 port 51082 Jul 4 18:16:29 webcore sshd[2788137]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.230.143.249 Jul 4 18:16:30 webcore sshd[2788137]: Failed password for invalid user nagios from 42.230.143.249 port 51082 ssh2 ... show less	Brute-Force SSH
webstracthosting.com	2022-07-04 11:41:08 (2 years ago)	(sshd) Failed SSH login from 42.230.143.249 (CN/China/hn.kd.ny.adsl)	Brute-Force SSH
IrisFlower	2022-07-04 05:17:16 (2 years ago)	Unauthorized connection attempt detected from IP address 42.230.143.249 to port 22 [J]	Port Scan Hacking
www.blocklist.de	2022-07-04 04:40:50 (2 years ago)	Jul 4 08:46:50 HOST sshd[20936]: reveeclipse mapping checking getaddrinfo for hn.kd.ny.adsl [42.230 ... show moreJul 4 08:46:50 HOST sshd[20936]: reveeclipse mapping checking getaddrinfo for hn.kd.ny.adsl [42.230.143.249] failed - POSSIBLE BREAK-IN ATTEMPT! Jul 4 08:46:50 HOST sshd[20936]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.230.143.249 user=r.r Jul 4 08:46:52 HOST sshd[20936]: Failed password for r.r from 42.230.143.249 port 37648 ssh2 Jul 4 08:46:55 HOST sshd[20942]: reveeclipse mapping checking getaddrinfo for hn.kd.ny.adsl [42.230.143.249] failed - POSSIBLE BREAK-IN ATTEMPT! Jul 4 08:46:57 HOST sshd[20942]: Failed password for AD user test from 42.230.143.249 port 37681 ssh2 Jul 4 08:46:59 HOST sshd[20942]: Failed password for AD user test from 42.230.143.249 port 37681 ssh2 Jul 4 08:47:04 HOST sshd[20950]: reveeclipse mapping checking getaddrinfo for hn.kd.ny.adsl [42.230.143.249] failed - POSSIBLE BREAK-IN ATTEMPT! Jul 4 08:47:04 HOST sshd[20950]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=........ ------------------------------- show less	FTP Brute-Force Hacking
www.blocklist.de	2022-07-04 03:00:32 (2 years ago)	Jul 4 08:46:50 HOST sshd[20936]: reveeclipse mapping checking getaddrinfo for hn.kd.ny.adsl [42.230 ... show moreJul 4 08:46:50 HOST sshd[20936]: reveeclipse mapping checking getaddrinfo for hn.kd.ny.adsl [42.230.143.249] failed - POSSIBLE BREAK-IN ATTEMPT! Jul 4 08:46:50 HOST sshd[20936]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.230.143.249 user=r.r Jul 4 08:46:52 HOST sshd[20936]: Failed password for r.r from 42.230.143.249 port 37648 ssh2 Jul 4 08:46:55 HOST sshd[20942]: reveeclipse mapping checking getaddrinfo for hn.kd.ny.adsl [42.230.143.249] failed - POSSIBLE BREAK-IN ATTEMPT! Jul 4 08:46:57 HOST sshd[20942]: Failed password for AD user test from 42.230.143.249 port 37681 ssh2 Jul 4 08:46:59 HOST sshd[20942]: Failed password for AD user test from 42.230.143.249 port 37681 ssh2 Jul 4 08:47:04 HOST sshd[20950]: reveeclipse mapping checking getaddrinfo for hn.kd.ny.adsl [42.230.143.249] failed - POSSIBLE BREAK-IN ATTEMPT! Jul 4 08:47:04 HOST sshd[20950]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=........ ------------------------------- show less	FTP Brute-Force Hacking
Anonymous	2022-07-04 02:34:32 (2 years ago)	Jul 4 08:34:31 ns3130050 sshd[1429]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eu ... show moreJul 4 08:34:31 ns3130050 sshd[1429]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.230.143.249 ... show less	Brute-Force SSH
IrisFlower	2022-07-04 00:35:54 (2 years ago)	Unauthorized connection attempt detected from IP address 42.230.143.249 to port 23 [J]	Port Scan Hacking
Hirte	2022-07-04 00:12:59 (2 years ago)	SS1-W: TCP-Scanner. Port: 23	Port Scan