119.42.122.6 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Thailand

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
119.42.122.239	attack	srvr1: (mod_security) mod_security (id:942100) triggered by 119.42.122.239 (TH/-/-): 1 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_MODSEC; Logs: 2020/08/21 12:03:52 [error] 482759#0: 840352 [client 119.42.122.239] ModSecurity: Access denied with code 406 (phase 2). [file "/etc/modsecurity.d/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "45"] [id "942100"] [rev ""] [msg ""] [redacted] [severity "0"] [ver "OWASP_CRS/3.3.0"] [maturity "0"] [accuracy "0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/152/248/66"] [tag "PCI/6.5.2"] [redacted] [uri "/forum/viewthread.php"] [unique_id "159801143266.523321"] [ref ""], client: 119.42.122.239, [redacted] request: "GET /forum/viewthread.php?thread_id=1122%27+AND+++9747+%3D+0 HTTP/1.1" [redacted]	2020-08-22 00:21:11
119.42.122.85	attackspambots	Unauthorized IMAP connection attempt	2020-06-10 19:09:26
119.42.122.151	attack	Unauthorized connection attempt detected from IP address 119.42.122.151 to port 445	2019-12-23 15:08:49
119.42.122.196	attackbots	119.42.122.196 has been banned from MailServer for Abuse ...	2019-10-12 20:16:45
119.42.122.244	attackbots	445/tcp [2019-06-27]1pkt	2019-06-27 21:22:50

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 119.42.122.6
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 38768
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;119.42.122.6.			IN	A

;; AUTHORITY SECTION:
.			187	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022031201 1800 900 604800 86400

;; Query time: 65 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Mar 13 08:01:23 CST 2022
;; MSG SIZE  rcvd: 105

Host info

Host 6.122.42.119.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 6.122.42.119.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
162.243.128.11	attack	firewall-block, port(s): 5632/udp	2020-02-01 15:49:43
35.180.232.167	attack	B: Abusive content scan (301)	2020-02-01 15:41:57
78.56.201.0	attackspam	Unauthorized connection attempt detected from IP address 78.56.201.0 to port 2220 [J]	2020-02-01 15:50:17
54.233.151.70	attackspam	Unauthorized connection attempt detected, IP banned.	2020-02-01 15:31:08
54.180.24.143	attackspambots	404 NOT FOUND	2020-02-01 15:34:16
186.122.149.144	attackbots	Feb 1 07:19:23 cp sshd[21620]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.122.149.144	2020-02-01 15:11:30
200.62.99.13	attackbots	(imapd) Failed IMAP login from 200.62.99.13 (NI/Nicaragua/13-99-62-200.enitel.net.ni): 1 in the last 3600 secs	2020-02-01 15:43:22
14.250.100.98	attackspambots	Attempt to attack host OS, exploiting network vulnerabilities, on 01-02-2020 04:55:09.	2020-02-01 15:35:19
203.196.24.22	attackspam	Unauthorized connection attempt detected from IP address 203.196.24.22 to port 2220 [J]	2020-02-01 15:36:10
222.186.30.209	attackbotsspam	01.02.2020 07:48:53 SSH access blocked by firewall	2020-02-01 15:52:11
134.209.39.98	attackbots	134.209.39.98 - - \[01/Feb/2020:05:55:09 +0100\] "POST /wp-login.php HTTP/1.0" 200 6673 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 134.209.39.98 - - \[01/Feb/2020:05:55:15 +0100\] "POST /wp-login.php HTTP/1.0" 200 6673 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 134.209.39.98 - - \[01/Feb/2020:05:55:21 +0100\] "POST /wp-login.php HTTP/1.0" 200 6671 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"	2020-02-01 15:24:14
140.143.236.53	attack	Feb 1 08:08:04 pkdns2 sshd\[47819\]: Invalid user test from 140.143.236.53Feb 1 08:08:06 pkdns2 sshd\[47819\]: Failed password for invalid user test from 140.143.236.53 port 35025 ssh2Feb 1 08:12:55 pkdns2 sshd\[48010\]: Invalid user minecraft from 140.143.236.53Feb 1 08:12:57 pkdns2 sshd\[48010\]: Failed password for invalid user minecraft from 140.143.236.53 port 49901 ssh2Feb 1 08:17:55 pkdns2 sshd\[48213\]: Invalid user melissa from 140.143.236.53Feb 1 08:17:57 pkdns2 sshd\[48213\]: Failed password for invalid user melissa from 140.143.236.53 port 36548 ssh2 ...	2020-02-01 15:51:45
222.120.253.22	attack	Feb 1 05:55:40 grey postfix/smtpd\[11461\]: NOQUEUE: reject: RCPT from unknown\[222.120.253.22\]: 554 5.7.1 Service unavailable\; Client host \[222.120.253.22\] blocked using bl.spamcop.net\; Blocked - see https://www.spamcop.net/bl.shtml\?222.120.253.22\; from=\ to=\ proto=ESMTP helo=\<\[222.120.253.22\]\> ...	2020-02-01 15:14:19
193.26.21.113	attackspam	spam	2020-02-01 15:23:05
37.120.203.71	attackspambots	fell into ViewStateTrap:stockholm	2020-02-01 15:47:18

Recently Reported IPs

119.42.123.84	119.41.136.39	119.42.70.20	119.42.76.213
119.42.70.150	119.41.166.210	119.42.115.190	119.36.21.70
119.41.202.136	119.42.110.123	119.42.115.248	119.42.76.20
119.42.123.78	119.42.70.144	119.42.70.202	119.41.137.105
119.41.201.162	119.41.200.225	119.42.70.154	119.42.110.131