119.42.122.4 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Thailand

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
119.42.122.239	attack	srvr1: (mod_security) mod_security (id:942100) triggered by 119.42.122.239 (TH/-/-): 1 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_MODSEC; Logs: 2020/08/21 12:03:52 [error] 482759#0: 840352 [client 119.42.122.239] ModSecurity: Access denied with code 406 (phase 2). [file "/etc/modsecurity.d/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "45"] [id "942100"] [rev ""] [msg ""] [redacted] [severity "0"] [ver "OWASP_CRS/3.3.0"] [maturity "0"] [accuracy "0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/152/248/66"] [tag "PCI/6.5.2"] [redacted] [uri "/forum/viewthread.php"] [unique_id "159801143266.523321"] [ref ""], client: 119.42.122.239, [redacted] request: "GET /forum/viewthread.php?thread_id=1122%27+AND+++9747+%3D+0 HTTP/1.1" [redacted]	2020-08-22 00:21:11
119.42.122.85	attackspambots	Unauthorized IMAP connection attempt	2020-06-10 19:09:26
119.42.122.151	attack	Unauthorized connection attempt detected from IP address 119.42.122.151 to port 445	2019-12-23 15:08:49
119.42.122.196	attackbots	119.42.122.196 has been banned from MailServer for Abuse ...	2019-10-12 20:16:45
119.42.122.244	attackbots	445/tcp [2019-06-27]1pkt	2019-06-27 21:22:50

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 119.42.122.4
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 17754
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;119.42.122.4.			IN	A

;; AUTHORITY SECTION:
.			558	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030900 1800 900 604800 86400

;; Query time: 57 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 14:37:57 CST 2022
;; MSG SIZE  rcvd: 105

Host info

Host 4.122.42.119.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 4.122.42.119.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
124.152.158.62	attackbotsspam	Unauthorised access (Nov 21) SRC=124.152.158.62 LEN=44 TTL=238 ID=26859 TCP DPT=1433 WINDOW=1024 SYN	2019-11-22 02:00:22
104.131.15.189	attackbots	frenzy	2019-11-22 01:50:24
218.92.0.155	attackbots	SSH authentication failure x 6 reported by Fail2Ban ...	2019-11-22 01:56:50
37.49.230.14	attack	\[2019-11-21 12:55:23\] NOTICE\[2754\] chan_sip.c: Registration from '"6660" \' failed for '37.49.230.14:5197' - Wrong password \[2019-11-21 12:55:23\] SECURITY\[2765\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-11-21T12:55:23.922-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="6660",SessionID="0x7f26c4b17ed8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/37.49.230.14/5197",Challenge="434a3abf",ReceivedChallenge="434a3abf",ReceivedHash="4e4973f2a09ad00cf68e6d486eac39bc" \[2019-11-21 12:56:21\] NOTICE\[2754\] chan_sip.c: Registration from '"7770" \' failed for '37.49.230.14:5157' - Wrong password \[2019-11-21 12:56:21\] SECURITY\[2765\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-11-21T12:56:21.599-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="7770",SessionID="0x7f26c40586f8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/3	2019-11-22 02:16:08
220.179.68.246	attackspambots	Nov 21 15:53:06 mout sshd[22963]: Invalid user natalie from 220.179.68.246 port 62192	2019-11-22 01:48:59
188.166.226.209	attackspam	Port Scan detected from 188.166.226.209 (SG/Singapore/-). 4 hits in the last 30 seconds	2019-11-22 01:59:35
63.88.23.229	attack	63.88.23.229 was recorded 16 times by 9 hosts attempting to connect to the following ports: 80,110. Incident counter (4h, 24h, all-time): 16, 82, 515	2019-11-22 01:43:34
115.112.176.198	attack	Nov 21 15:52:32 MK-Soft-VM5 sshd[26557]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.112.176.198 Nov 21 15:52:35 MK-Soft-VM5 sshd[26557]: Failed password for invalid user ndtigger from 115.112.176.198 port 39652 ssh2 ...	2019-11-22 02:08:35
121.175.88.104	attack	2019-11-21T16:28:49.904446scmdmz1 sshd\[1268\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.175.88.104 user=root 2019-11-21T16:28:51.677541scmdmz1 sshd\[1268\]: Failed password for root from 121.175.88.104 port 58693 ssh2 2019-11-21T16:28:54.067354scmdmz1 sshd\[1268\]: Failed password for root from 121.175.88.104 port 58693 ssh2 ...	2019-11-22 02:10:52
222.254.5.216	attackspambots	Automatic report - Banned IP Access	2019-11-22 01:48:27
222.186.175.169	attackspam	Nov 21 18:44:06 nextcloud sshd\[22315\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.169 user=root Nov 21 18:44:08 nextcloud sshd\[22315\]: Failed password for root from 222.186.175.169 port 46560 ssh2 Nov 21 18:44:11 nextcloud sshd\[22315\]: Failed password for root from 222.186.175.169 port 46560 ssh2 ...	2019-11-22 01:48:03
213.251.41.52	attack	Automatic report - Banned IP Access	2019-11-22 02:01:43
180.188.16.113	attackbots	Honeypot attack, port: 445, PTR: PTR record not found	2019-11-22 01:58:07
178.128.255.8	attackspam	Nov 21 20:35:43 server sshd\[28853\]: Invalid user hirakazu from 178.128.255.8 Nov 21 20:35:43 server sshd\[28853\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.255.8 Nov 21 20:35:45 server sshd\[28853\]: Failed password for invalid user hirakazu from 178.128.255.8 port 38300 ssh2 Nov 21 20:43:59 server sshd\[31071\]: Invalid user nfs from 178.128.255.8 Nov 21 20:43:59 server sshd\[31071\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.255.8 ...	2019-11-22 01:51:57
95.213.177.126	attackspambots	Port scan on 1 port(s): 8080	2019-11-22 01:43:12

Recently Reported IPs

119.42.122.38	119.42.122.40	119.42.122.42	119.42.122.44
119.42.122.46	119.42.122.48	119.42.122.50	119.42.122.51
119.42.124.179	119.42.124.18	119.42.124.182	119.42.124.192
119.42.124.194	119.42.124.196	119.42.124.204	119.42.124.215
119.42.124.216	119.42.124.221	119.42.124.228	119.42.124.233