Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Viet Nam

Internet Service Provider: FPT Telecom Company

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:
Make a comment on this IP
Type Details Datetime
attack 
Honeypot attack, port: 445, PTR: PTR record not found
 2020-02-11 02:40:02
Comments on same subnet:
IP Type Details Datetime
42.112.108.255 attack 
1598702863 - 08/29/2020 14:07:43 Host: 42.112.108.255/42.112.108.255 Port: 445 TCP Blocked
 2020-08-30 00:43:56
42.112.108.204 attackbotsspam 
03/20/2020-23:47:42.049216 42.112.108.204 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433
 2020-03-21 18:48:02
42.112.108.80 attackbotsspam 
Unauthorized connection attempt from IP address 42.112.108.80 on Port 445(SMB)
 2020-03-07 09:41:34
42.112.108.253 attack 
Unauthorized connection attempt from IP address 42.112.108.253 on Port 445(SMB)
 2020-01-13 20:20:17
42.112.108.14 attackbotsspam 
" "
 2020-01-13 16:34:08
42.112.108.51 attack 
Unauthorized connection attempt from IP address 42.112.108.51 on Port 445(SMB)
 2019-11-06 04:26:20
42.112.108.4 attack 
Unauthorized connection attempt from IP address 42.112.108.4 on Port 445(SMB)
 2019-10-30 06:31:58
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.112.108.68
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 9608
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.112.108.68.			IN	A

;; AUTHORITY SECTION:
.			445	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020021001 1800 900 604800 86400

;; Query time: 95 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 11 02:39:55 CST 2020
;; MSG SIZE  rcvd: 117
Host info
Host 68.108.112.42.in-addr.arpa not found: 2(SERVFAIL)
Nslookup info:
;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 68.108.112.42.in-addr.arpa: SERVFAIL
Related IP info:
42.112.108.30
42.112.108.66
42.112.108.53
42.112.108.122
42.112.108.97
42.112.108.28
42.112.108.250
42.112.108.155
42.112.108.176
42.112.108.187
42.112.108.190
42.112.108.181
42.112.108.227
42.112.108.98
42.112.108.142
42.112.108.118
42.112.108.240
42.112.108.17
42.112.108.237
42.112.108.27
42.112.108.64
42.112.108.167
42.112.108.221
42.112.108.1
42.112.108.147
42.112.108.12
42.112.108.172
42.112.108.31
42.112.108.92
42.112.108.169
42.112.108.49
42.112.108.71
42.112.108.201
42.112.108.214
42.112.108.159
42.112.108.238
42.112.108.138
42.112.108.105
42.112.108.179
42.112.108.163
42.112.108.205
42.112.108.18
42.112.108.34
42.112.108.72
42.112.108.11
42.112.108.136
42.112.108.95
42.112.108.82
42.112.108.198
42.112.108.222
42.112.108.76
42.112.108.251
42.112.108.110
42.112.108.106
42.112.108.247
42.112.108.121
42.112.108.88
42.112.108.113
42.112.108.131
42.112.108.91
42.112.108.195
42.112.108.150
42.112.108.253
42.112.108.193
42.112.108.180
42.112.108.252
42.112.108.208
42.112.108.196
42.112.108.139
42.112.108.199
42.112.108.39
42.112.108.171
42.112.108.59
42.112.108.137
42.112.108.94
42.112.108.210
42.112.108.25
42.112.108.16
42.112.108.57
42.112.108.60
42.112.108.102
42.112.108.241
42.112.108.99
42.112.108.69
42.112.108.154
42.112.108.235
42.112.108.42
42.112.108.15
42.112.108.56
42.112.108.189
42.112.108.13
42.112.108.232
42.112.108.148
42.112.108.220
42.112.108.8
42.112.108.83
42.112.108.226
42.112.108.126
42.112.108.194
42.112.108.123
42.112.108.43
42.112.108.47
42.112.108.174
42.112.108.80
42.112.108.191
42.112.108.90
42.112.108.156
42.112.108.188
42.112.108.65
42.112.108.51
42.112.108.178
42.112.108.185
42.112.108.146
42.112.108.14
42.112.108.246
42.112.108.67
42.112.108.73
42.112.108.173
42.112.108.224
42.112.108.55
42.112.108.86
42.112.108.4
42.112.108.125
42.112.108.127
42.112.108.26
42.112.108.29
42.112.108.233
42.112.108.107
42.112.108.184
42.112.108.44
42.112.108.124
42.112.108.96
42.112.108.33
42.112.108.111
42.112.108.170
42.112.108.62
42.112.108.89
42.112.108.211
42.112.108.77
42.112.108.228
42.112.108.230
42.112.108.204
42.112.108.145
42.112.108.35
42.112.108.132
42.112.108.108
42.112.108.152
42.112.108.116
42.112.108.119
42.112.108.231
42.112.108.68
42.112.108.164
42.112.108.165
42.112.108.244
42.112.108.48
42.112.108.38
42.112.108.46
42.112.108.20
42.112.108.109
42.112.108.7
42.112.108.245
42.112.108.183
42.112.108.223
42.112.108.9
42.112.108.5
42.112.108.140
42.112.108.50
42.112.108.112
42.112.108.207
42.112.108.32
42.112.108.168
42.112.108.161
42.112.108.162
42.112.108.93
42.112.108.2
42.112.108.37
42.112.108.144
42.112.108.84
42.112.108.177
42.112.108.202
42.112.108.134
42.112.108.217
42.112.108.36
42.112.108.78
42.112.108.61
42.112.108.135
42.112.108.166
42.112.108.115
42.112.108.157
42.112.108.70
42.112.108.182
42.112.108.160
42.112.108.75
42.112.108.63
42.112.108.129
42.112.108.197
42.112.108.41
42.112.108.186
42.112.108.128
42.112.108.215
42.112.108.74
42.112.108.213
42.112.108.40
42.112.108.192
42.112.108.104
42.112.108.58
42.112.108.130
42.112.108.218
42.112.108.85
42.112.108.143
42.112.108.87
42.112.108.242
42.112.108.243
42.112.108.45
42.112.108.120
42.112.108.206
42.112.108.6
42.112.108.101
42.112.108.229
42.112.108.52
42.112.108.239
42.112.108.151
42.112.108.3
42.112.108.10
42.112.108.103
42.112.108.216
42.112.108.200
42.112.108.209
42.112.108.133
42.112.108.22
42.112.108.248
42.112.108.158
42.112.108.149
42.112.108.100
42.112.108.54
42.112.108.21
42.112.108.234
42.112.108.236
42.112.108.23
42.112.108.225
42.112.108.254
42.112.108.114
42.112.108.117
42.112.108.141
42.112.108.19
42.112.108.249
42.112.108.153
42.112.108.24
42.112.108.219
42.112.108.175
42.112.108.81
42.112.108.212
42.112.108.203
42.112.108.79
Related comments:
IP Type Details Datetime
116.52.1.211 attack 
SSH Invalid Login
 2020-09-29 06:11:32
195.161.162.46 attackbots 
2020-09-28T21:58:52.273022shield sshd\[17845\]: Invalid user news from 195.161.162.46 port 40251
2020-09-28T21:58:52.281110shield sshd\[17845\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.161.162.46
2020-09-28T21:58:54.687204shield sshd\[17845\]: Failed password for invalid user news from 195.161.162.46 port 40251 ssh2
2020-09-28T22:03:15.585592shield sshd\[18890\]: Invalid user git from 195.161.162.46 port 43995
2020-09-28T22:03:15.594090shield sshd\[18890\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.161.162.46
 2020-09-29 06:38:31
103.26.136.173 attack 
2020-09-27T17:36:12.565848morrigan.ad5gb.com sshd[1555290]: Failed password for invalid user alex from 103.26.136.173 port 50752 ssh2
 2020-09-29 06:04:39
177.129.40.117 attackspam 
 TCP (SYN) 177.129.40.117:11279 -> port 23, len 44
 2020-09-29 06:06:15
218.92.0.210 attackspam 
Sep 28 23:59:48 * sshd[21422]: Failed password for root from 218.92.0.210 port 43464 ssh2
Sep 28 23:59:50 * sshd[21422]: Failed password for root from 218.92.0.210 port 43464 ssh2
 2020-09-29 06:16:51
58.33.107.221 attackspam 
Sep 28 23:17:09 mail sshd[15884]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.33.107.221 
Sep 28 23:17:11 mail sshd[15884]: Failed password for invalid user 221.171.197.84 from 58.33.107.221 port 37315 ssh2
...
 2020-09-29 06:02:30
216.218.206.74 attack 
 TCP (SYN) 216.218.206.74:56446 -> port 2323, len 44
 2020-09-29 06:31:47
64.227.126.134 attack 
Sep 28 23:56:10 minden010 sshd[4441]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.227.126.134
Sep 28 23:56:12 minden010 sshd[4441]: Failed password for invalid user hadoop from 64.227.126.134 port 56478 ssh2
Sep 28 23:59:59 minden010 sshd[5677]: Failed password for nagios from 64.227.126.134 port 38170 ssh2
...
 2020-09-29 06:15:29
64.227.90.107 attackbots 
(sshd) Failed SSH login from 64.227.90.107 (US/United States/-): 5 in the last 3600 secs
 2020-09-29 06:35:49
193.31.26.140 attackspambots 
SSH Invalid Login
 2020-09-29 06:28:31
192.241.239.175 attackbotsspam 
Port scan denied
 2020-09-29 06:25:25
157.245.69.97 attack 
firewall-block, port(s): 15/tcp
 2020-09-29 06:13:07
192.35.168.89 attackspam 
[N1.H1.VM1] Port Scanner Detected Blocked by UFW
 2020-09-29 06:11:45
142.93.127.173 attackbotsspam 
DATE:2020-09-28 23:58:52, IP:142.93.127.173, PORT:ssh SSH brute force auth (docker-dc)
 2020-09-29 06:24:31
64.225.11.59 attackspam 
Sep 29 00:13:22 rotator sshd\[3791\]: Failed password for root from 64.225.11.59 port 52802 ssh2Sep 29 00:13:25 rotator sshd\[3794\]: Failed password for root from 64.225.11.59 port 58390 ssh2Sep 29 00:13:28 rotator sshd\[3796\]: Failed password for root from 64.225.11.59 port 35998 ssh2Sep 29 00:13:29 rotator sshd\[3800\]: Invalid user admin from 64.225.11.59Sep 29 00:13:30 rotator sshd\[3800\]: Failed password for invalid user admin from 64.225.11.59 port 41372 ssh2Sep 29 00:13:31 rotator sshd\[3802\]: Invalid user admin from 64.225.11.59
...
 2020-09-29 06:27:02

Recently Reported IPs

121.151.214.102 200.46.172.54 183.200.10.132 178.69.128.30
213.183.62.133 19.159.11.108 176.9.190.40 187.200.138.8
178.157.251.180 36.68.32.229 10.253.231.21 212.92.111.165
80.211.84.100 221.127.10.104 80.211.5.61 182.73.13.22
80.180.97.204 175.153.115.94 79.140.228.108 59.9.46.7