119.42.122.16 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Thailand

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
119.42.122.239	attack	srvr1: (mod_security) mod_security (id:942100) triggered by 119.42.122.239 (TH/-/-): 1 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_MODSEC; Logs: 2020/08/21 12:03:52 [error] 482759#0: 840352 [client 119.42.122.239] ModSecurity: Access denied with code 406 (phase 2). [file "/etc/modsecurity.d/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "45"] [id "942100"] [rev ""] [msg ""] [redacted] [severity "0"] [ver "OWASP_CRS/3.3.0"] [maturity "0"] [accuracy "0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/152/248/66"] [tag "PCI/6.5.2"] [redacted] [uri "/forum/viewthread.php"] [unique_id "159801143266.523321"] [ref ""], client: 119.42.122.239, [redacted] request: "GET /forum/viewthread.php?thread_id=1122%27+AND+++9747+%3D+0 HTTP/1.1" [redacted]	2020-08-22 00:21:11
119.42.122.85	attackspambots	Unauthorized IMAP connection attempt	2020-06-10 19:09:26
119.42.122.151	attack	Unauthorized connection attempt detected from IP address 119.42.122.151 to port 445	2019-12-23 15:08:49
119.42.122.196	attackbots	119.42.122.196 has been banned from MailServer for Abuse ...	2019-10-12 20:16:45
119.42.122.244	attackbots	445/tcp [2019-06-27]1pkt	2019-06-27 21:22:50

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 119.42.122.16
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 50630
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;119.42.122.16.			IN	A

;; AUTHORITY SECTION:
.			301	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030800 1800 900 604800 86400

;; Query time: 15 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Mar 08 18:39:05 CST 2022
;; MSG SIZE  rcvd: 106

Host info

Host 16.122.42.119.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 16.122.42.119.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
106.12.114.26	attackspam	Aug 30 17:31:16 ip-172-31-1-72 sshd\[6843\]: Invalid user debian from 106.12.114.26 Aug 30 17:31:16 ip-172-31-1-72 sshd\[6843\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.114.26 Aug 30 17:31:18 ip-172-31-1-72 sshd\[6843\]: Failed password for invalid user debian from 106.12.114.26 port 37066 ssh2 Aug 30 17:34:58 ip-172-31-1-72 sshd\[6937\]: Invalid user lian from 106.12.114.26 Aug 30 17:34:58 ip-172-31-1-72 sshd\[6937\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.114.26	2019-08-31 02:32:43
14.205.31.124	attack	Aug 30 14:55:52 wildwolf ssh-honeypotd[26164]: Failed password for r.r from 14.205.31.124 port 49407 ssh2 (target: 158.69.100.139:22, password: anko) Aug 30 14:55:53 wildwolf ssh-honeypotd[26164]: Failed password for r.r from 14.205.31.124 port 49407 ssh2 (target: 158.69.100.139:22, password: 111111) Aug 30 14:55:53 wildwolf ssh-honeypotd[26164]: Failed password for r.r from 14.205.31.124 port 49407 ssh2 (target: 158.69.100.139:22, password: 111111) Aug 30 14:55:53 wildwolf ssh-honeypotd[26164]: Failed password for r.r from 14.205.31.124 port 49407 ssh2 (target: 158.69.100.139:22, password: 123456) Aug 30 14:55:53 wildwolf ssh-honeypotd[26164]: Failed password for r.r from 14.205.31.124 port 49407 ssh2 (target: 158.69.100.139:22, password: 123456) Aug 30 14:55:54 wildwolf ssh-honeypotd[26164]: Failed password for r.r from 14.205.31.124 port 49407 ssh2 (target: 158.69.100.139:22, password: waldo) Aug 30 14:55:54 wildwolf ssh-honeypotd[26164]: Failed password for r.r from ........ ------------------------------	2019-08-31 03:03:09
132.232.99.16	attackspam	Aug 30 20:38:54 rpi sshd[8237]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.99.16 Aug 30 20:38:57 rpi sshd[8237]: Failed password for invalid user sunu from 132.232.99.16 port 51228 ssh2	2019-08-31 03:04:28
152.32.98.179	attack	Trying to penetrate through my connected accounts	2019-08-31 02:50:36
104.248.185.25	attackspam	08/30/2019-12:26:57.071258 104.248.185.25 Protocol: 6 ET SCAN NMAP -sS window 1024	2019-08-31 03:09:49
193.32.160.145	attackbotsspam	2019-08-30T18:27:07.238839MailD postfix/smtpd[24160]: NOQUEUE: reject: RCPT from unknown[193.32.160.145]: 554 5.7.1 : Client host rejected: # stellar-cloud.net spam from dynamic IPs; from= to= proto=ESMTP helo=<[193.32.160.139]> 2019-08-30T18:27:07.240625MailD postfix/smtpd[24160]: NOQUEUE: reject: RCPT from unknown[193.32.160.145]: 554 5.7.1 : Client host rejected: # stellar-cloud.net spam from dynamic IPs; from= to= proto=ESMTP helo=<[193.32.160.139]> 2019-08-30T18:27:07.242306MailD postfix/smtpd[24160]: NOQUEUE: reject: RCPT from unknown[193.32.160.145]: 554 5.7.1 : Client host rejected: # stellar-cloud.net spam from dynamic IPs; from= to= proto=ESMTP helo=<[193.32.160.139]> 2019-08-30T18:27:07.243942MailD postfix/smtpd[24160]: NOQUEUE: reject: RCPT from unknown[193.32.160.14	2019-08-31 03:01:03
200.111.175.252	attack	2019-08-30T17:29:02.904410abusebot-7.cloudsearch.cf sshd\[31784\]: Invalid user teamspeak2 from 200.111.175.252 port 44914	2019-08-31 02:48:41
123.152.186.15	attack	Telnet Server BruteForce Attack	2019-08-31 03:03:39
5.196.7.123	attackspambots	2019-08-30T18:40:14.981486abusebot-8.cloudsearch.cf sshd\[19705\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.ip-5-196-7.eu user=root	2019-08-31 03:10:49
103.248.120.2	attackbotsspam	2019-08-31T01:02:28.587802enmeeting.mahidol.ac.th sshd\[21784\]: Invalid user car from 103.248.120.2 port 59338 2019-08-31T01:02:28.601988enmeeting.mahidol.ac.th sshd\[21784\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.248.120.2 2019-08-31T01:02:30.124021enmeeting.mahidol.ac.th sshd\[21784\]: Failed password for invalid user car from 103.248.120.2 port 59338 ssh2 ...	2019-08-31 02:38:16
125.227.236.60	attackspam	Aug 30 18:27:08 herz-der-gamer sshd[11344]: Invalid user tiles from 125.227.236.60 port 52962 Aug 30 18:27:08 herz-der-gamer sshd[11344]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.227.236.60 Aug 30 18:27:08 herz-der-gamer sshd[11344]: Invalid user tiles from 125.227.236.60 port 52962 Aug 30 18:27:10 herz-der-gamer sshd[11344]: Failed password for invalid user tiles from 125.227.236.60 port 52962 ssh2 ...	2019-08-31 02:58:20
92.118.37.74	attackbots	Aug 30 18:49:27 mail kernel: [2272582.945989] [UFW BLOCK] IN=eth0 OUT= MAC=fa:16:3e:d3:64:42:4c:5e:0c:c9:30:5f:08:00 SRC=92.118.37.74 DST=185.101.93.72 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=62339 PROTO=TCP SPT=46525 DPT=12982 WINDOW=1024 RES=0x00 SYN URGP=0 Aug 30 18:49:30 mail kernel: [2272586.587587] [UFW BLOCK] IN=eth0 OUT= MAC=fa:16:3e:d3:64:42:4c:5e:0c:c9:30:5f:08:00 SRC=92.118.37.74 DST=185.101.93.72 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=34656 PROTO=TCP SPT=46525 DPT=61814 WINDOW=1024 RES=0x00 SYN URGP=0 Aug 30 18:50:30 mail kernel: [2272646.091559] [UFW BLOCK] IN=eth0 OUT= MAC=fa:16:3e:d3:64:42:4c:5e:0c:c9:30:5f:08:00 SRC=92.118.37.74 DST=185.101.93.72 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=47770 PROTO=TCP SPT=46525 DPT=39549 WINDOW=1024 RES=0x00 SYN URGP=0 Aug 30 18:53:44 mail kernel: [2272840.678384] [UFW BLOCK] IN=eth0 OUT= MAC=fa:16:3e:d3:64:42:4c:5e:0c:c9:30:5f:08:00 SRC=92.118.37.74 DST=185.101.93.72 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=4384 PROTO=TCP SPT=46525 DPT=41567 WINDOW=1024 RES=0x00 SYN U	2019-08-31 03:05:50
112.85.42.89	attackspam	Aug 30 12:53:48 aat-srv002 sshd[20985]: Failed password for root from 112.85.42.89 port 42795 ssh2 Aug 30 13:11:26 aat-srv002 sshd[21363]: Failed password for root from 112.85.42.89 port 34181 ssh2 Aug 30 13:12:01 aat-srv002 sshd[21368]: Failed password for root from 112.85.42.89 port 37822 ssh2 ...	2019-08-31 02:29:18
120.1.177.170	attackspambots	Aug 30 18:27:00 host sshd\[3548\]: Invalid user alexandru from 120.1.177.170 port 54926 Aug 30 18:27:00 host sshd\[3548\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.1.177.170 ...	2019-08-31 03:06:24
51.91.248.56	attackspambots	2019-08-30T18:07:20.396487abusebot-3.cloudsearch.cf sshd\[11383\]: Invalid user alison from 51.91.248.56 port 39530	2019-08-31 02:30:24

Recently Reported IPs

119.42.122.152	119.42.122.155	119.42.122.161	117.150.109.21
119.42.122.158	170.71.149.207	117.150.119.56	117.150.13.66
119.42.123.116	119.42.123.115	119.42.123.125	119.42.123.122
119.42.123.12	119.42.123.118	119.42.123.117	119.42.123.128
119.42.123.124	119.42.123.126	119.42.123.121	119.42.123.120