Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Daejeon

Region: Daejeon Metropolitan City

Country: South Korea

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
118.42.232.33 attackbots
Port Scan: TCP/443
2020-10-12 03:15:39
118.42.232.33 attackbots
Port Scan: TCP/443
2020-10-11 19:08:18
118.42.254.103 attack
Telnet Honeypot -> Telnet Bruteforce / Login
2020-06-16 13:45:08
118.42.208.62 attackspambots
Unauthorized connection attempt detected from IP address 118.42.208.62 to port 81
2020-05-13 03:26:05
118.42.232.140 attackbots
Telnet/23 MH Probe, Scan, BF, Hack -
2020-04-23 22:27:25
118.42.220.29 attackspambots
unauthorized connection attempt
2020-02-26 18:26:26
118.42.208.62 attackbotsspam
MultiHost/MultiPort Probe, Scan, Hack -
2020-02-16 00:44:47
118.42.22.144 attack
MultiHost/MultiPort Probe, Scan, Hack -
2020-02-16 00:41:14
118.42.226.24 attack
MultiHost/MultiPort Probe, Scan, Hack -
2020-02-16 00:33:33
118.42.231.42 attack
MultiHost/MultiPort Probe, Scan, Hack -
2020-02-16 00:28:53
118.42.232.140 attackspambots
MultiHost/MultiPort Probe, Scan, Hack -
2020-02-16 00:24:58
118.42.241.132 attack
MultiHost/MultiPort Probe, Scan, Hack -
2020-02-16 00:22:25
118.42.254.103 attackspambots
MultiHost/MultiPort Probe, Scan, Hack -
2020-02-16 00:15:49
118.42.232.140 attackbotsspam
23/tcp 23/tcp 23/tcp...
[2019-12-28/2020-02-10]4pkt,1pt.(tcp)
2020-02-11 05:29:41
118.42.241.132 attackbotsspam
Honeypot attack, port: 81, PTR: PTR record not found
2020-02-10 09:27:32
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 118.42.2.72
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 48914
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;118.42.2.72.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025022000 1800 900 604800 86400

;; Query time: 36 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 20 15:26:12 CST 2025
;; MSG SIZE  rcvd: 104
Host info
Host 72.2.42.118.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 72.2.42.118.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
159.65.216.161 attackbots
Invalid user itsupport from 159.65.216.161 port 46914
2020-08-31 18:59:50
47.8.189.166 attackbotsspam
Aug 31 05:47:23 debian64 sshd[14525]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.8.189.166 
Aug 31 05:47:25 debian64 sshd[14525]: Failed password for invalid user sniffer from 47.8.189.166 port 51200 ssh2
...
2020-08-31 19:37:25
111.93.235.74 attackbots
Aug 31 13:17:46 melroy-server sshd[29930]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.93.235.74 
Aug 31 13:17:48 melroy-server sshd[29930]: Failed password for invalid user terry from 111.93.235.74 port 44713 ssh2
...
2020-08-31 19:17:53
117.220.203.181 attackbotsspam
Aug 31 07:52:40 mout sshd[3142]: Invalid user x from 117.220.203.181 port 58602
2020-08-31 19:07:39
45.119.82.132 attack
45.119.82.132 - - \[31/Aug/2020:12:46:43 +0300\] "POST /WORDPRESS/xmlrpc.php HTTP/1.1" 404 564 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/60.0.3112.113 Safari/537.36" "-"
45.119.82.132 - - \[31/Aug/2020:12:46:43 +0300\] "POST /wordpress/xmlrpc.php HTTP/1.1" 200 443 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/60.0.3112.113 Safari/537.36" "-"
...
2020-08-31 19:32:15
149.56.129.68 attack
SSH Bruteforce attack
2020-08-31 19:11:33
192.99.12.24 attackbots
Aug 31 05:30:38 h2646465 sshd[27239]: Invalid user lighttpd from 192.99.12.24
Aug 31 05:30:38 h2646465 sshd[27239]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.99.12.24
Aug 31 05:30:38 h2646465 sshd[27239]: Invalid user lighttpd from 192.99.12.24
Aug 31 05:30:41 h2646465 sshd[27239]: Failed password for invalid user lighttpd from 192.99.12.24 port 35912 ssh2
Aug 31 05:45:02 h2646465 sshd[28909]: Invalid user es from 192.99.12.24
Aug 31 05:45:02 h2646465 sshd[28909]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.99.12.24
Aug 31 05:45:02 h2646465 sshd[28909]: Invalid user es from 192.99.12.24
Aug 31 05:45:04 h2646465 sshd[28909]: Failed password for invalid user es from 192.99.12.24 port 39688 ssh2
Aug 31 05:47:41 h2646465 sshd[29416]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.99.12.24  user=root
Aug 31 05:47:43 h2646465 sshd[29416]: Failed password for root from 192.99
2020-08-31 19:29:50
218.92.0.171 attack
2020-08-31T05:25:10.497491server.espacesoutien.com sshd[4574]: Failed password for root from 218.92.0.171 port 59612 ssh2
2020-08-31T05:25:13.609504server.espacesoutien.com sshd[4574]: Failed password for root from 218.92.0.171 port 59612 ssh2
2020-08-31T05:25:17.792155server.espacesoutien.com sshd[4574]: Failed password for root from 218.92.0.171 port 59612 ssh2
2020-08-31T05:25:21.323857server.espacesoutien.com sshd[4574]: Failed password for root from 218.92.0.171 port 59612 ssh2
...
2020-08-31 19:31:01
45.232.177.109 attackbots
2020-08-30 22:33:07.626278-0500  localhost smtpd[33712]: NOQUEUE: reject: RCPT from unknown[45.232.177.109]: 554 5.7.1 Service unavailable; Client host [45.232.177.109] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/45.232.177.109; from= to= proto=ESMTP helo=
2020-08-31 19:20:51
196.206.254.241 attackbots
(sshd) Failed SSH login from 196.206.254.241 (MA/Morocco/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Aug 31 04:15:41 server2 sshd[10393]: Invalid user user01 from 196.206.254.241
Aug 31 04:15:43 server2 sshd[10393]: Failed password for invalid user user01 from 196.206.254.241 port 50988 ssh2
Aug 31 04:20:43 server2 sshd[14725]: Invalid user sinusbot from 196.206.254.241
Aug 31 04:20:47 server2 sshd[14725]: Failed password for invalid user sinusbot from 196.206.254.241 port 58408 ssh2
Aug 31 04:25:38 server2 sshd[20180]: Invalid user elastic from 196.206.254.241
2020-08-31 19:26:17
122.3.105.11 attacknormal
chek
2020-08-31 19:33:19
45.14.150.86 attack
Invalid user trainee from 45.14.150.86 port 59320
2020-08-31 19:32:48
121.201.76.119 attack
Invalid user sjen from 121.201.76.119 port 43618
2020-08-31 19:16:02
36.255.156.126 attackspambots
Brute-force attempt banned
2020-08-31 19:00:15
186.12.194.36 attackspam
2020-08-30 22:34:18.100158-0500  localhost smtpd[33856]: NOQUEUE: reject: RCPT from unknown[186.12.194.36]: 554 5.7.1 Service unavailable; Client host [186.12.194.36] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/186.12.194.36; from= to= proto=ESMTP helo=
2020-08-31 19:20:08

Recently Reported IPs

233.168.120.142 202.155.242.13 120.43.36.253 225.168.207.163
203.246.100.221 41.246.185.198 237.45.80.103 195.84.207.251
115.143.85.46 27.185.211.50 205.104.53.243 251.189.130.107
238.232.119.177 154.118.92.199 61.47.127.82 189.154.9.255
143.60.97.108 18.55.213.41 53.245.32.229 212.70.149.64