119.42.70.245 - IPInfo

Basic Info

City: Krathum Baen

Region: Samut Sakhon

Country: Thailand

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
119.42.70.236	attack	xmlrpc attack	2020-07-27 15:22:26
119.42.70.75	attack	IP 119.42.70.75 attacked honeypot on port: 8080 at 6/27/2020 8:56:37 PM	2020-06-28 12:29:38
119.42.70.174	attack	@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-09-16 17:02:31,574 INFO [amun_request_handler] PortScan Detected on Port: 445 (119.42.70.174)	2019-09-17 10:00:51

Type

Details

Datetime

119.42.70.236

attack

xmlrpc attack

2020-07-27 15:22:26

119.42.70.75

attack

IP 119.42.70.75 attacked honeypot on port: 8080 at 6/27/2020 8:56:37 PM

2020-06-28 12:29:38

119.42.70.174

attack

@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-09-16 17:02:31,574 INFO [amun_request_handler] PortScan Detected on Port: 445 (119.42.70.174)

2019-09-17 10:00:51

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 119.42.70.245
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 44685
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;119.42.70.245.			IN	A

;; AUTHORITY SECTION:
.			477	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022031201 1800 900 604800 86400

;; Query time: 55 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Mar 13 08:23:19 CST 2022
;; MSG SIZE  rcvd: 106

Host info

Host 245.70.42.119.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 245.70.42.119.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
222.186.175.183	attackspam	Sep 17 21:15:39 dignus sshd[32743]: Failed password for root from 222.186.175.183 port 59626 ssh2 Sep 17 21:15:42 dignus sshd[32743]: Failed password for root from 222.186.175.183 port 59626 ssh2 Sep 17 21:15:46 dignus sshd[32743]: Failed password for root from 222.186.175.183 port 59626 ssh2 Sep 17 21:15:50 dignus sshd[32743]: Failed password for root from 222.186.175.183 port 59626 ssh2 Sep 17 21:15:53 dignus sshd[32743]: Failed password for root from 222.186.175.183 port 59626 ssh2 ...	2020-09-18 12:17:09
45.142.120.83	attackbots	Brute forcing email accounts	2020-09-18 08:08:23
80.113.12.34	attackbots	Sep 17 13:02:04 bilbo sshd[22693]: Invalid user admin from 80.113.12.34 Sep 17 13:02:15 bilbo sshd[22738]: User root from ip-80-113-12-34.ip.prioritytelecom.net not allowed because not listed in AllowUsers Sep 17 13:02:24 bilbo sshd[22740]: Invalid user admin from 80.113.12.34 Sep 17 13:02:34 bilbo sshd[22742]: Invalid user admin from 80.113.12.34 ...	2020-09-18 12:03:56
170.83.188.205	attackspam	Sep 17 18:37:09 mail.srvfarm.net postfix/smtpd[157369]: warning: unknown[170.83.188.205]: SASL PLAIN authentication failed: Sep 17 18:37:09 mail.srvfarm.net postfix/smtpd[157369]: lost connection after AUTH from unknown[170.83.188.205] Sep 17 18:38:36 mail.srvfarm.net postfix/smtps/smtpd[159172]: warning: unknown[170.83.188.205]: SASL PLAIN authentication failed: Sep 17 18:38:37 mail.srvfarm.net postfix/smtps/smtpd[159172]: lost connection after AUTH from unknown[170.83.188.205] Sep 17 18:39:39 mail.srvfarm.net postfix/smtps/smtpd[157154]: warning: unknown[170.83.188.205]: SASL PLAIN authentication failed:	2020-09-18 08:16:15
69.70.68.42	attack	frenzy	2020-09-18 12:15:49
31.142.61.155	attack	1600362142 - 09/17/2020 19:02:22 Host: 31.142.61.155/31.142.61.155 Port: 445 TCP Blocked	2020-09-18 12:16:41
39.108.135.63	attack	20 attempts against mh-ssh on milky	2020-09-18 08:00:42
143.255.1.174	attackbots	Sep 17 18:28:22 mail.srvfarm.net postfix/smtpd[157368]: warning: unknown[143.255.1.174]: SASL PLAIN authentication failed: Sep 17 18:28:23 mail.srvfarm.net postfix/smtpd[157368]: lost connection after AUTH from unknown[143.255.1.174] Sep 17 18:32:11 mail.srvfarm.net postfix/smtps/smtpd[157154]: warning: unknown[143.255.1.174]: SASL PLAIN authentication failed: Sep 17 18:32:11 mail.srvfarm.net postfix/smtps/smtpd[157154]: lost connection after AUTH from unknown[143.255.1.174] Sep 17 18:37:39 mail.srvfarm.net postfix/smtpd[161688]: warning: unknown[143.255.1.174]: SASL PLAIN authentication failed:	2020-09-18 08:17:18
148.203.151.248	attackbots	Sep 17 20:10:41 mail.srvfarm.net postfix/smtpd[200753]: NOQUEUE: reject: RCPT from mailrelay5.vw.com.mx[148.203.151.248]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo= Sep 17 20:10:42 mail.srvfarm.net postfix/smtpd[200753]: NOQUEUE: reject: RCPT from mailrelay5.vw.com.mx[148.203.151.248]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo= Sep 17 20:10:43 mail.srvfarm.net postfix/smtpd[200753]: NOQUEUE: reject: RCPT from mailrelay5.vw.com.mx[148.203.151.248]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo= Sep 17 20:10:44 mail.srvfarm.net postfix/smtpd[200753]: NOQUEUE: reject:	2020-09-18 08:03:13
116.193.217.139	attackbots	Unauthorized connection attempt from IP address 116.193.217.139 on Port 445(SMB)	2020-09-18 12:12:50
158.69.192.35	attack	Bruteforce detected by fail2ban	2020-09-18 12:08:38
195.8.192.212	attackspambots	prod6 ...	2020-09-18 07:59:29
191.37.131.97	attackspambots	Sep 17 18:25:04 mail.srvfarm.net postfix/smtps/smtpd[155677]: warning: unknown[191.37.131.97]: SASL PLAIN authentication failed: Sep 17 18:25:04 mail.srvfarm.net postfix/smtps/smtpd[155677]: lost connection after AUTH from unknown[191.37.131.97] Sep 17 18:29:52 mail.srvfarm.net postfix/smtps/smtpd[155678]: warning: unknown[191.37.131.97]: SASL PLAIN authentication failed: Sep 17 18:29:53 mail.srvfarm.net postfix/smtps/smtpd[155678]: lost connection after AUTH from unknown[191.37.131.97] Sep 17 18:32:43 mail.srvfarm.net postfix/smtps/smtpd[159171]: warning: unknown[191.37.131.97]: SASL PLAIN authentication failed:	2020-09-18 08:11:29
78.25.112.115	attack	Unauthorized connection attempt from IP address 78.25.112.115 on Port 445(SMB)	2020-09-18 12:06:19
183.89.188.28	attackbots	Sep 17 18:02:14 shivevps sshd[43617]: Invalid user guest from 183.89.188.28 port 60232 Sep 17 18:02:19 shivevps sshd[43617]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.89.188.28 Sep 17 18:02:21 shivevps sshd[43617]: Failed password for invalid user guest from 183.89.188.28 port 60232 ssh2 ...	2020-09-18 12:17:54

Recently Reported IPs

189.241.136.180	119.42.110.137	119.42.70.116	119.42.123.145
119.42.123.73	119.42.67.4	240.197.216.102	119.42.76.206
119.41.201.161	119.41.203.159	119.42.123.40	188.191.249.105
31.233.32.85	119.42.113.83	64.180.19.55	192.184.124.117
247.76.246.122	119.41.201.90	119.42.109.46	119.42.71.84