AbuseIPDB » 42.51.41.163

42.51.41.163 was found in our database!

This IP was reported 5,468 times. Confidence of Abuse is 0%: ?

0%

ISP	Henan Telcom Union Technology Co., LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS56005
Domain Name	htu.cc
Country	China
City	Zhengzhou, Henan

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 42.51.41.163

Whois 42.51.41.163

IP Abuse Reports for 42.51.41.163:

This IP address has been reported a total of 5,468 times from 980 distinct sources. 42.51.41.163 was first reported on December 17th 2023, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
luftwurzel	2024-12-16 13:08:11 (6 months ago)	2024-12-16T14:08:10.857163+01:00 mail sshd[3891661]: User root from 42.51.41.163 not allowed because ... show more2024-12-16T14:08:10.857163+01:00 mail sshd[3891661]: User root from 42.51.41.163 not allowed because not listed in AllowUsers ... show less	Brute-Force SSH
RAP	2024-12-16 06:14:40 (6 months ago)	2024-12-16 06:14:40 UTC Unauthorized activity to TCP port 22. SSH	SSH
security.rdmc.fr	2024-12-16 01:47:18 (6 months ago)	IP in Malicious Database	Web App Attack
urnilxfgbez	2024-12-15 23:45:00 (6 months ago)	Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)	Port Scan
diego	2024-12-15 20:07:19 (6 months ago)	[rede-164-29] 12/15/2024-17:07:14.683037, 42.51.41.163, Protocol: 6, ET COMPROMISED Known Compromise ... show more[rede-164-29] 12/15/2024-17:07:14.683037, 42.51.41.163, Protocol: 6, ET COMPROMISED Known Compromised or Hostile Host Traffic group 21 show less	Hacking
bret.dk	2024-12-15 12:25:01 (6 months ago)	Dec 15 12:24:58 es-mirror sshd[4193746]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ... show moreDec 15 12:24:58 es-mirror sshd[4193746]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.51.41.163 user=root Dec 15 12:25:01 es-mirror sshd[4193746]: Failed password for root from 42.51.41.163 port 54214 ssh2 ... show less	Brute-Force SSH
ps-center	2024-12-15 07:09:05 (6 months ago)	DIS-W: TCP-Scanner. Port: 22	Port Scan
cma.pl	2024-12-15 04:30:35 (6 months ago)	Dec 15 05:30:33 serv248043 sshd[1248207]: pam_unix(sshd:auth): authentication failure; logname= uid= ... show moreDec 15 05:30:33 serv248043 sshd[1248207]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.51.41.163 user=root Dec 15 05:30:34 serv248043 sshd[1248207]: Failed password for root from 42.51.41.163 port 36450 ssh2 ... show less	Brute-Force SSH
LXGaming	2024-12-14 23:48:34 (6 months ago)	sshd banned 42.51.41.163 for 3 failure(s)	Brute-Force SSH
urnilxfgbez	2024-12-14 23:45:00 (6 months ago)	Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)	Port Scan
MPL	2024-12-14 20:56:51 (6 months ago)	tcp/22 (3 or more attempts)	Port Scan
MPL	2024-12-14 20:56:51 (6 months ago)	tcp/22 (3 or more attempts)	Port Scan
rtbh.com.tr	2024-12-14 20:52:43 (6 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
qtland Cloud Inc.	2024-12-14 19:37:42 (6 months ago)	2024-12-14T19:37:38.135636+00:00 eu-central-vie1 sshd[2790928]: pam_unix(sshd:auth): authentication ... show more2024-12-14T19:37:38.135636+00:00 eu-central-vie1 sshd[2790928]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.51.41.163 user=root 2024-12-14T19:37:40.183520+00:00 eu-central-vie1 sshd[2790928]: Failed password for root from 42.51.41.163 port 35960 ssh2 2024-12-14T19:37:41.310390+00:00 eu-central-vie1 sshd[2790928]: Connection closed by authenticating user root 42.51.41.163 port 35960 [preauth] ... show less	Brute-Force SSH
LoNET	2024-12-14 19:00:43 (6 months ago)	Report 1505909 with IP 2023303 for SSH brute-force attack by source 2359983 via ssh-honeypot/0.2.0+h ... show moreReport 1505909 with IP 2023303 for SSH brute-force attack by source 2359983 via ssh-honeypot/0.2.0+http show less	Brute-Force SSH

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩