Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Thailand

Internet Service Provider: CAT Telecom Public Company Ltd

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Type Details Datetime
attackspambots
Unauthorized connection attempt from IP address 119.42.72.49 on Port 445(SMB)
2019-11-27 00:38:07
Comments on same subnet:
IP Type Details Datetime
119.42.72.31 attack
1593742241 - 07/03/2020 04:10:41 Host: 119.42.72.31/119.42.72.31 Port: 445 TCP Blocked
2020-07-03 22:21:10
119.42.72.156 attack
lfd: (smtpauth) Failed SMTP AUTH login from 119.42.72.156 (-): 5 in the last 3600 secs - Sat Jun  2 13:31:37 2018
2020-04-30 18:58:16
119.42.72.226 attack
1584941832 - 03/23/2020 06:37:12 Host: 119.42.72.226/119.42.72.226 Port: 445 TCP Blocked
2020-03-23 14:34:39
119.42.72.209 attackbots
MultiHost/MultiPort Probe, Scan, Hack -
2020-02-14 16:23:02
119.42.72.202 attackspambots
unauthorized connection attempt
2020-01-09 15:48:01
119.42.72.172 attackspam
1577255112 - 12/25/2019 07:25:12 Host: 119.42.72.172/119.42.72.172 Port: 445 TCP Blocked
2019-12-25 18:12:48
119.42.72.57 attackspambots
Unauthorised access (Nov  1) SRC=119.42.72.57 LEN=52 TTL=114 ID=4071 DF TCP DPT=445 WINDOW=8192 SYN
2019-11-02 03:48:52
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 119.42.72.49
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 31810
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;119.42.72.49.			IN	A

;; AUTHORITY SECTION:
.			407	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019112600 1800 900 604800 86400

;; Query time: 89 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Nov 27 00:38:02 CST 2019
;; MSG SIZE  rcvd: 116
Host info
Host 49.72.42.119.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 49.72.42.119.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
180.152.140.181 attack
Unauthorized connection attempt from IP address 180.152.140.181 on Port 445(SMB)
2019-11-30 22:37:11
125.25.21.24 attackbots
" "
2019-11-30 22:29:19
45.180.148.217 attack
2019-11-30 07:09:57 plain_virtual_exim authenticator failed for ([127.0.0.1]) [45.180.148.217]: 535 Incorrect authentication data


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=45.180.148.217
2019-11-30 22:14:41
175.126.176.21 attackspambots
May 14 20:38:11 meumeu sshd[6432]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.126.176.21 
May 14 20:38:13 meumeu sshd[6432]: Failed password for invalid user braxton from 175.126.176.21 port 52178 ssh2
May 14 20:41:54 meumeu sshd[6935]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.126.176.21 
May 14 20:41:56 meumeu sshd[6935]: Failed password for invalid user gustave from 175.126.176.21 port 57808 ssh2
...
2019-11-30 22:27:13
159.65.4.86 attackspam
Nov 23 13:53:26 debian sshd\[23386\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.4.86  user=backup
Nov 23 13:53:28 debian sshd\[23386\]: Failed password for backup from 159.65.4.86 port 35662 ssh2
Nov 23 13:57:31 debian sshd\[23712\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.4.86  user=root
Nov 23 13:57:33 debian sshd\[23712\]: Failed password for root from 159.65.4.86 port 42732 ssh2
Nov 23 14:01:37 debian sshd\[24034\]: Invalid user xuj from 159.65.4.86 port 49784
Nov 23 14:01:37 debian sshd\[24034\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.4.86
Nov 23 14:01:39 debian sshd\[24034\]: Failed password for invalid user xuj from 159.65.4.86 port 49784 ssh2
Nov 23 14:05:34 debian sshd\[24309\]: Invalid user arlinda from 159.65.4.86 port 56834
Nov 23 14:05:34 debian sshd\[24309\]: pam_unix\(sshd:auth\): authentication failu
...
2019-11-30 22:09:02
68.183.142.240 attack
Invalid user soporte from 68.183.142.240 port 60996
2019-11-30 22:23:48
152.32.130.99 attack
DATE:2019-11-30 13:41:11,IP:152.32.130.99,MATCHES:10,PORT:ssh
2019-11-30 22:12:49
140.143.139.14 attack
Nov 30 10:18:44 srv01 sshd[15211]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.139.14  user=root
Nov 30 10:18:46 srv01 sshd[15211]: Failed password for root from 140.143.139.14 port 49344 ssh2
Nov 30 10:22:25 srv01 sshd[15597]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.139.14  user=root
Nov 30 10:22:27 srv01 sshd[15597]: Failed password for root from 140.143.139.14 port 54306 ssh2
Nov 30 10:26:05 srv01 sshd[15838]: Invalid user nilesh from 140.143.139.14 port 59272
...
2019-11-30 22:22:27
79.137.72.121 attack
Nov 30 13:44:14 ns382633 sshd\[24172\]: Invalid user bourez from 79.137.72.121 port 38012
Nov 30 13:44:14 ns382633 sshd\[24172\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.137.72.121
Nov 30 13:44:15 ns382633 sshd\[24172\]: Failed password for invalid user bourez from 79.137.72.121 port 38012 ssh2
Nov 30 14:03:19 ns382633 sshd\[27756\]: Invalid user basic from 79.137.72.121 port 56066
Nov 30 14:03:19 ns382633 sshd\[27756\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.137.72.121
2019-11-30 22:17:48
113.179.133.34 attackbots
Unauthorised access (Nov 30) SRC=113.179.133.34 LEN=52 TTL=116 ID=11270 DF TCP DPT=445 WINDOW=8192 SYN
2019-11-30 21:59:57
106.13.147.69 attack
Invalid user alister from 106.13.147.69 port 51678
2019-11-30 22:06:43
14.236.185.62 attackspam
2019-11-30T06:17:12.344Z CLOSE host=14.236.185.62 port=51245 fd=4 time=20.011 bytes=27
...
2019-11-30 22:31:26
173.212.204.184 attackspam
Unauthorized SSH login attempts
2019-11-30 21:57:33
107.170.20.247 attackbotsspam
Invalid user ibisate from 107.170.20.247 port 54755
2019-11-30 22:02:51
200.175.5.163 attackspambots
Unauthorised access (Nov 30) SRC=200.175.5.163 LEN=48 TOS=0x10 PREC=0x40 TTL=114 ID=14851 DF TCP DPT=445 WINDOW=8192 SYN 
Unauthorised access (Nov 30) SRC=200.175.5.163 LEN=48 TOS=0x10 PREC=0x40 TTL=114 ID=11038 DF TCP DPT=445 WINDOW=8192 SYN
2019-11-30 22:31:39

Recently Reported IPs

1.175.74.25 115.74.72.159 159.203.122.168 167.172.246.115
78.138.184.127 27.73.82.241 174.109.171.206 157.37.184.28
213.6.72.254 116.239.105.95 41.218.117.46 202.186.44.106
181.121.221.184 83.130.135.67 54.172.123.205 39.79.153.62
171.251.36.189 222.252.105.244 200.186.71.235 95.129.28.210