104.42.12.149 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States of America

Internet Service Provider: Microsoft Corporation

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	Apr 17 06:27:23 Ubuntu-1404-trusty-64-minimal sshd\[2516\]: Invalid user admin from 104.42.12.149 Apr 17 06:27:23 Ubuntu-1404-trusty-64-minimal sshd\[2516\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.42.12.149 Apr 17 06:27:25 Ubuntu-1404-trusty-64-minimal sshd\[2516\]: Failed password for invalid user admin from 104.42.12.149 port 56776 ssh2 Apr 17 06:38:19 Ubuntu-1404-trusty-64-minimal sshd\[10986\]: Invalid user k from 104.42.12.149 Apr 17 06:38:19 Ubuntu-1404-trusty-64-minimal sshd\[10986\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.42.12.149	2020-04-17 14:27:56

Type

Details

Datetime

attack

Apr 17 06:27:23 Ubuntu-1404-trusty-64-minimal sshd\[2516\]: Invalid user admin from 104.42.12.149
Apr 17 06:27:23 Ubuntu-1404-trusty-64-minimal sshd\[2516\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.42.12.149
Apr 17 06:27:25 Ubuntu-1404-trusty-64-minimal sshd\[2516\]: Failed password for invalid user admin from 104.42.12.149 port 56776 ssh2
Apr 17 06:38:19 Ubuntu-1404-trusty-64-minimal sshd\[10986\]: Invalid user k from 104.42.12.149
Apr 17 06:38:19 Ubuntu-1404-trusty-64-minimal sshd\[10986\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.42.12.149

2020-04-17 14:27:56

Comments on same subnet:

IP	Type	Details	Datetime
104.42.124.11	attack	Automatic report - Banned IP Access	2020-08-02 02:51:03
104.42.126.249	attackspam	[2020-06-22 10:08:16] NOTICE[1273] chan_sip.c: Registration from '' failed for '104.42.126.249:62692' - Wrong password [2020-06-22 10:08:16] SECURITY[1288] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-22T10:08:16.777-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="qwerty1234",SessionID="0x7f31c02ff098",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/104.42.126.249/62692",Challenge="1da7a42e",ReceivedChallenge="1da7a42e",ReceivedHash="d411429833e27710a85d651fc7024e56" [2020-06-22 10:10:23] NOTICE[1273] chan_sip.c: Registration from '' failed for '104.42.126.249:65365' - Wrong password [2020-06-22 10:10:23] SECURITY[1288] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-22T10:10:23.362-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="qwerty12345",SessionID="0x7f31c04ccc48",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAd ...	2020-06-22 22:21:15
104.42.126.249	attackspam	[2020-06-21 07:27:35] NOTICE[1273] chan_sip.c: Registration from '' failed for '104.42.126.249:52773' - Wrong password [2020-06-21 07:27:35] SECURITY[1288] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-21T07:27:35.296-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1001",SessionID="0x7f31c02f97a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/104.42.126.249/52773",Challenge="4287faf8",ReceivedChallenge="4287faf8",ReceivedHash="bee9ea31ad79495dc21591c3fb468bc5" [2020-06-21 07:29:21] NOTICE[1273] chan_sip.c: Registration from '' failed for '104.42.126.249:58206' - Wrong password [2020-06-21 07:29:21] SECURITY[1288] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-21T07:29:21.457-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1001",SessionID="0x7f31c0045328",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/104.42.126 ...	2020-06-21 19:29:26
104.42.125.45	attack	Unauthorized connection attempt detected from IP address 104.42.125.45 to port 23	2020-04-13 02:33:28

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.42.12.149
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 33831
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;104.42.12.149.			IN	A

;; AUTHORITY SECTION:
.			600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020041602 1800 900 604800 86400

;; Query time: 93 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Apr 17 14:27:44 CST 2020
;; MSG SIZE  rcvd: 117

Host info

Host 149.12.42.104.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 149.12.42.104.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
46.101.249.232	attackbotsspam	Unauthorized connection attempt detected from IP address 46.101.249.232 to port 2220 [J]	2020-02-05 21:03:07
45.231.31.109	attackspam	Unauthorized connection attempt detected from IP address 45.231.31.109 to port 23 [J]	2020-02-05 20:39:48
83.239.46.124	attack	Unauthorized connection attempt detected from IP address 83.239.46.124 to port 1433 [J]	2020-02-05 20:34:56
79.24.74.240	attack	Unauthorized connection attempt detected from IP address 79.24.74.240 to port 8080 [J]	2020-02-05 20:35:32
71.239.119.124	attackspam	detected by Fail2Ban	2020-02-05 20:59:40
138.36.7.44	attackbotsspam	Unauthorized connection attempt detected from IP address 138.36.7.44 to port 80 [J]	2020-02-05 20:49:01
94.74.143.133	attackspam	Unauthorized connection attempt detected from IP address 94.74.143.133 to port 23 [J]	2020-02-05 21:13:53
220.132.38.193	attack	Unauthorized connection attempt detected from IP address 220.132.38.193 to port 4567 [J]	2020-02-05 20:41:55
218.10.138.67	attack	Unauthorized connection attempt detected from IP address 218.10.138.67 to port 23 [J]	2020-02-05 20:42:43
179.228.236.184	attackspambots	Unauthorized connection attempt detected from IP address 179.228.236.184 to port 8080 [J]	2020-02-05 20:44:56
124.161.231.150	attackspambots	Unauthorized connection attempt detected from IP address 124.161.231.150 to port 2220 [J]	2020-02-05 20:50:18
106.13.127.238	attackspam	Unauthorized connection attempt detected from IP address 106.13.127.238 to port 2220 [J]	2020-02-05 20:52:46
121.213.118.115	attackbotsspam	Unauthorized connection attempt detected from IP address 121.213.118.115 to port 80 [J]	2020-02-05 21:11:39
41.76.246.38	attackspambots	Unauthorized connection attempt detected from IP address 41.76.246.38 to port 8080 [J]	2020-02-05 20:41:12
203.99.99.27	attackspambots	Unauthorized connection attempt detected from IP address 203.99.99.27 to port 23 [J]	2020-02-05 21:06:27

Recently Reported IPs

185.251.241.149	128.199.178.167	120.31.71.238	33.58.89.203
33.252.169.133	151.189.105.142	66.175.18.148	193.47.2.81
196.18.170.29	127.121.84.33	226.241.35.187	59.30.201.120
235.10.241.77	159.50.154.145	179.178.144.36	209.36.248.167
246.30.40.140	232.186.73.186	169.167.108.170	148.39.184.129