104.195.42.12 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.195.42.12
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 14017
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.195.42.12.			IN	A

;; AUTHORITY SECTION:
.			195	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022500 1800 900 604800 86400

;; Query time: 16 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 26 00:53:07 CST 2022
;; MSG SIZE  rcvd: 106

Host info

Host 12.42.195.104.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 12.42.195.104.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
49.234.116.74	attack	2020-09-08T09:59:01+0000 Failed SSH Authentication/Brute Force Attack. (Server 6)	2020-09-08 18:52:25
103.254.107.170	attack	Automatic report - Port Scan Attack	2020-09-08 19:01:23
106.12.175.86	attackbotsspam	Sep 8 09:44:25 home sshd[1241152]: Failed password for root from 106.12.175.86 port 42978 ssh2 Sep 8 09:48:42 home sshd[1241604]: Invalid user smmsp from 106.12.175.86 port 38395 Sep 8 09:48:42 home sshd[1241604]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.175.86 Sep 8 09:48:42 home sshd[1241604]: Invalid user smmsp from 106.12.175.86 port 38395 Sep 8 09:48:43 home sshd[1241604]: Failed password for invalid user smmsp from 106.12.175.86 port 38395 ssh2 ...	2020-09-08 19:23:35
201.11.159.50	attack	Portscan detected	2020-09-08 18:53:45
185.65.206.171	attackbotsspam	[2020-09-08 07:17:53] NOTICE[1194] chan_sip.c: Registration from '"660"' failed for '185.65.206.171:19486' - Wrong password [2020-09-08 07:17:53] SECURITY[1233] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-08T07:17:53.841-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="660",SessionID="0x7f2ddc181df8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.65.206.171/19486",Challenge="67a4851a",ReceivedChallenge="67a4851a",ReceivedHash="81e7581d39f81f623958af4a6f2ac661" [2020-09-08 07:17:54] NOTICE[1194] chan_sip.c: Registration from '"662"' failed for '185.65.206.171:7550' - Wrong password [2020-09-08 07:17:54] SECURITY[1233] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-08T07:17:54.960-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="662",SessionID="0x7f2ddc7349e8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.6 ...	2020-09-08 19:30:28
218.92.0.168	attackspam	(sshd) Failed SSH login from 218.92.0.168 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 8 06:59:55 optimus sshd[7273]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.168 user=root Sep 8 06:59:56 optimus sshd[7275]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.168 user=root Sep 8 06:59:57 optimus sshd[7273]: Failed password for root from 218.92.0.168 port 64970 ssh2 Sep 8 06:59:59 optimus sshd[7275]: Failed password for root from 218.92.0.168 port 32704 ssh2 Sep 8 06:59:59 optimus sshd[7283]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.168 user=root	2020-09-08 19:06:56
151.28.220.28	attack	SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: ppp-28-220.28-151.wind.it.	2020-09-08 18:56:17
95.167.225.85	attack	Sep 8 11:25:11 ajax sshd[18177]: Failed password for root from 95.167.225.85 port 48418 ssh2 Sep 8 11:28:20 ajax sshd[19267]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.167.225.85	2020-09-08 18:48:43
157.245.252.225	attack	TCP (SYN) 157.245.252.225:32767 -> port 8545, len 44	2020-09-08 19:03:29
45.61.136.146	attack	TCP (SYN) 45.61.136.146:50918 -> port 13389, len 44	2020-09-08 18:50:42
188.166.5.84	attackspam	" "	2020-09-08 19:06:23
167.71.233.203	attackspam	"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:	2020-09-08 19:21:14
104.223.143.101	attack	Sep 8 07:45:59 root sshd[4038]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.223.143.101 Sep 8 07:57:09 root sshd[14687]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.223.143.101 ...	2020-09-08 18:59:29
151.224.96.135	attackspambots	Wordpress File Manager Plugin Remote Code Execution Vulnerability, PTR: 97e06087.skybroadband.com.	2020-09-08 19:29:16
54.201.195.166	attack	Suspicious WordPress-related activity, accessed by IP not domain: 54.201.195.166 - - [07/Sep/2020:14:03:54 +0100] "GET /wp-json/ HTTP/1.1" 403 244 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36"	2020-09-08 18:55:15

Recently Reported IPs

104.195.42.2	104.195.43.34	104.195.42.4	103.209.80.18
103.209.80.214	103.209.80.238	103.209.80.38	103.209.80.46
103.209.81.114	104.196.0.253	65.71.89.45	104.195.8.242
104.195.8.248	104.195.5.142	104.195.8.254	103.209.81.124
104.195.8.252	104.195.8.251	104.195.5.140	104.195.8.246