119.42.68.46 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Thailand

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
119.42.68.155	attackbots	Aug 26 04:52:54 shivevps sshd[3965]: Bad protocol version identification '\024' from 119.42.68.155 port 58134 Aug 26 04:53:01 shivevps sshd[4632]: Bad protocol version identification '\024' from 119.42.68.155 port 58443 Aug 26 04:54:44 shivevps sshd[7837]: Bad protocol version identification '\024' from 119.42.68.155 port 34088 ...	2020-08-26 13:15:13
119.42.68.15	attackspambots	Automatic report - Port Scan Attack	2020-03-01 00:54:15

Type

Details

Datetime

119.42.68.155

attackbots

Aug 26 04:52:54 shivevps sshd[3965]: Bad protocol version identification '\024' from 119.42.68.155 port 58134
Aug 26 04:53:01 shivevps sshd[4632]: Bad protocol version identification '\024' from 119.42.68.155 port 58443
Aug 26 04:54:44 shivevps sshd[7837]: Bad protocol version identification '\024' from 119.42.68.155 port 34088
...

2020-08-26 13:15:13

119.42.68.15

attackspambots

Automatic report - Port Scan Attack

2020-03-01 00:54:15

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 119.42.68.46
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 61090
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;119.42.68.46.			IN	A

;; AUTHORITY SECTION:
.			143	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030800 1800 900 604800 86400

;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Mar 08 18:42:07 CST 2022
;; MSG SIZE  rcvd: 105

Host info

Host 46.68.42.119.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 46.68.42.119.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
77.247.109.72	attackspam	\[2019-10-07 17:20:32\] NOTICE\[1887\] chan_sip.c: Registration from '"5006" \' failed for '77.247.109.72:6045' - Wrong password \[2019-10-07 17:20:32\] SECURITY\[1898\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-07T17:20:32.771-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="5006",SessionID="0x7fc3aca55248",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.109.72/6045",Challenge="701395c1",ReceivedChallenge="701395c1",ReceivedHash="d2c74f489b578399ea4eaeaac10a3a07" \[2019-10-07 17:20:32\] NOTICE\[1887\] chan_sip.c: Registration from '"5006" \' failed for '77.247.109.72:6045' - Wrong password \[2019-10-07 17:20:32\] SECURITY\[1898\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-07T17:20:32.884-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="5006",SessionID="0x7fc3ac5226d8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UD	2019-10-08 05:37:07
187.142.109.131	attackspambots	Automatic report - Port Scan Attack	2019-10-08 05:17:28
106.13.136.238	attack	Oct 7 11:37:34 php1 sshd\[5233\]: Invalid user Losenord! from 106.13.136.238 Oct 7 11:37:34 php1 sshd\[5233\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.136.238 Oct 7 11:37:36 php1 sshd\[5233\]: Failed password for invalid user Losenord! from 106.13.136.238 port 37590 ssh2 Oct 7 11:40:20 php1 sshd\[5729\]: Invalid user Qwerty1234 from 106.13.136.238 Oct 7 11:40:20 php1 sshd\[5729\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.136.238	2019-10-08 05:53:17
147.139.135.52	attackspam	Oct 7 21:32:53 venus sshd\[28790\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=147.139.135.52 user=root Oct 7 21:32:56 venus sshd\[28790\]: Failed password for root from 147.139.135.52 port 47144 ssh2 Oct 7 21:42:03 venus sshd\[28989\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=147.139.135.52 user=root ...	2019-10-08 05:48:53
106.13.217.93	attackbotsspam	Oct 6 08:04:41 uapps sshd[14145]: User r.r from 106.13.217.93 not allowed because not listed in AllowUsers Oct 6 08:04:41 uapps sshd[14145]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.217.93 user=r.r Oct 6 08:04:43 uapps sshd[14145]: Failed password for invalid user r.r from 106.13.217.93 port 43594 ssh2 Oct 6 08:04:45 uapps sshd[14145]: Received disconnect from 106.13.217.93: 11: Bye Bye [preauth] Oct 6 08:14:46 uapps sshd[14220]: User r.r from 106.13.217.93 not allowed because not listed in AllowUsers Oct 6 08:14:46 uapps sshd[14220]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.217.93 user=r.r Oct 6 08:14:48 uapps sshd[14220]: Failed password for invalid user r.r from 106.13.217.93 port 45258 ssh2 Oct 6 08:14:49 uapps sshd[14220]: Received disconnect from 106.13.217.93: 11: Bye Bye [preauth] Oct 6 08:19:31 uapps sshd[14244]: User r.r from 106.13.217.93 not........ -------------------------------	2019-10-08 05:23:55
186.5.109.211	attack	Oct 7 11:36:08 web9 sshd\[28239\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.5.109.211 user=root Oct 7 11:36:10 web9 sshd\[28239\]: Failed password for root from 186.5.109.211 port 40550 ssh2 Oct 7 11:40:05 web9 sshd\[28838\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.5.109.211 user=root Oct 7 11:40:07 web9 sshd\[28838\]: Failed password for root from 186.5.109.211 port 60694 ssh2 Oct 7 11:44:04 web9 sshd\[29329\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.5.109.211 user=root	2019-10-08 05:44:40
222.127.97.91	attackspambots	Oct 7 23:08:34 mail sshd[14337]: Failed password for root from 222.127.97.91 port 54685 ssh2 Oct 7 23:13:12 mail sshd[15089]: Failed password for root from 222.127.97.91 port 54964 ssh2	2019-10-08 05:30:45
106.12.127.183	attack	Automatic report - SSH Brute-Force Attack	2019-10-08 05:39:29
187.162.78.90	attackbots	Automatic report - Port Scan Attack	2019-10-08 05:53:04
106.12.105.10	attackbots	2019-10-07T22:53:34.871679 sshd[18315]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.105.10 user=root 2019-10-07T22:53:36.913607 sshd[18315]: Failed password for root from 106.12.105.10 port 55132 ssh2 2019-10-07T22:58:46.199967 sshd[18348]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.105.10 user=root 2019-10-07T22:58:48.075846 sshd[18348]: Failed password for root from 106.12.105.10 port 44612 ssh2 2019-10-07T23:03:59.039661 sshd[18425]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.105.10 user=root 2019-10-07T23:04:01.216826 sshd[18425]: Failed password for root from 106.12.105.10 port 33394 ssh2 ...	2019-10-08 05:45:05
46.38.144.17	attackspambots	Oct 7 23:40:45 relay postfix/smtpd\[22299\]: warning: unknown\[46.38.144.17\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 7 23:41:49 relay postfix/smtpd\[28908\]: warning: unknown\[46.38.144.17\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 7 23:42:08 relay postfix/smtpd\[30159\]: warning: unknown\[46.38.144.17\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 7 23:43:13 relay postfix/smtpd\[25377\]: warning: unknown\[46.38.144.17\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 7 23:43:32 relay postfix/smtpd\[22299\]: warning: unknown\[46.38.144.17\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2019-10-08 05:43:51
117.50.12.10	attackspam	Port Scan detected from 117.50.12.10 (CN/China/-). 4 hits in the last 290 seconds	2019-10-08 05:29:43
112.85.42.232	attackspambots	2019-10-07T20:55:05.938828abusebot-2.cloudsearch.cf sshd\[29606\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.232 user=root	2019-10-08 05:18:12
27.106.45.6	attack	$f2bV_matches	2019-10-08 05:26:34
222.186.180.223	attackspam	Oct 7 11:37:08 web1 sshd\[12416\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.223 user=root Oct 7 11:37:09 web1 sshd\[12416\]: Failed password for root from 222.186.180.223 port 52584 ssh2 Oct 7 11:37:14 web1 sshd\[12416\]: Failed password for root from 222.186.180.223 port 52584 ssh2 Oct 7 11:37:18 web1 sshd\[12416\]: Failed password for root from 222.186.180.223 port 52584 ssh2 Oct 7 11:37:33 web1 sshd\[12451\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.223 user=root	2019-10-08 05:46:52

Recently Reported IPs

119.42.68.26	119.42.68.50	119.42.68.52	119.42.68.44
119.42.68.57	119.42.68.49	119.42.68.60	119.42.68.58
119.42.68.66	119.42.68.64	119.42.68.7	119.42.68.63
117.152.40.77	119.42.68.74	119.42.68.76	119.42.68.73
119.42.68.79	119.42.68.8	119.42.68.82	119.42.68.87