Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Viet Nam

Internet Service Provider: FPT Telecom Company

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:
Type Details Datetime
attackbots
Unauthorized connection attempt from IP address 42.112.148.142 on Port 445(SMB)
2019-12-06 02:28:57
Comments on same subnet:
IP Type Details Datetime
42.112.148.201 attackbotsspam
Unauthorized connection attempt from IP address 42.112.148.201 on Port 445(SMB)
2020-07-16 22:44:21
42.112.148.33 attack
1583470493 - 03/06/2020 05:54:53 Host: 42.112.148.33/42.112.148.33 Port: 445 TCP Blocked
2020-03-06 16:21:58
42.112.148.28 attackbots
1580878332 - 02/05/2020 05:52:12 Host: 42.112.148.28/42.112.148.28 Port: 445 TCP Blocked
2020-02-05 15:25:37
42.112.148.127 attackspam
Unauthorized connection attempt from IP address 42.112.148.127 on Port 445(SMB)
2019-11-20 01:34:43
42.112.148.244 attackbotsspam
Attempt to attack host OS, exploiting network vulnerabilities, on 04-11-2019 14:35:23.
2019-11-04 23:32:58
42.112.148.67 attack
Honeypot attack, port: 445, PTR: PTR record not found
2019-10-31 16:22:36
42.112.148.124 attackbotsspam
445/tcp
[2019-10-28]1pkt
2019-10-28 14:30:41
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.112.148.142
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 50257
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.112.148.142.			IN	A

;; AUTHORITY SECTION:
.			433	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019120501 1800 900 604800 86400

;; Query time: 633 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Dec 06 02:28:52 CST 2019
;; MSG SIZE  rcvd: 118
Host info
Host 142.148.112.42.in-addr.arpa not found: 2(SERVFAIL)
Nslookup info:
;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 142.148.112.42.in-addr.arpa: SERVFAIL
Related IP info:
Related comments:
IP Type Details Datetime
137.74.132.171 attackbotsspam
May 26 19:53:14 pve1 sshd[2933]: Failed password for root from 137.74.132.171 port 58022 ssh2
...
2020-05-27 02:45:00
61.216.2.79 attack
May 26 19:48:38  sshd\[7929\]: User root from 61-216-2-79.hinet-ip.hinet.net not allowed because not listed in AllowUsersMay 26 19:48:40  sshd\[7929\]: Failed password for invalid user root from 61.216.2.79 port 54232 ssh2
...
2020-05-27 02:32:13
194.152.206.12 attackbots
May 26 19:53:31 Invalid user yjkwon from 194.152.206.12 port 50936
2020-05-27 02:20:10
188.166.58.29 attackbots
May 26 20:02:04 server sshd[25632]: Failed password for invalid user ian from 188.166.58.29 port 49754 ssh2
May 26 20:05:23 server sshd[29038]: Failed password for invalid user savelle from 188.166.58.29 port 55674 ssh2
May 26 20:08:40 server sshd[32280]: Failed password for root from 188.166.58.29 port 33364 ssh2
2020-05-27 02:40:15
201.151.216.252 attackspambots
May 26 18:56:48 sip sshd[416758]: Failed password for invalid user ftp from 201.151.216.252 port 44522 ssh2
May 26 18:59:26 sip sshd[416779]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.151.216.252  user=root
May 26 18:59:29 sip sshd[416779]: Failed password for root from 201.151.216.252 port 56056 ssh2
...
2020-05-27 02:31:09
185.234.219.113 attackbots
May 26 17:26:48 mail postfix/smtpd\[16061\]: warning: unknown\[185.234.219.113\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
May 26 17:29:18 mail postfix/smtpd\[16061\]: warning: unknown\[185.234.219.113\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
May 26 17:29:18 mail postfix/smtpd\[16403\]: warning: unknown\[185.234.219.113\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
May 26 18:42:28 mail postfix/smtpd\[18288\]: warning: unknown\[185.234.219.113\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
2020-05-27 02:09:25
173.213.85.186 attack
Wordpress site brute force
2020-05-27 02:14:15
114.67.90.149 attackbots
May 26 18:41:30 OPSO sshd\[18970\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.67.90.149  user=root
May 26 18:41:31 OPSO sshd\[18970\]: Failed password for root from 114.67.90.149 port 47066 ssh2
May 26 18:45:08 OPSO sshd\[19834\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.67.90.149  user=root
May 26 18:45:09 OPSO sshd\[19834\]: Failed password for root from 114.67.90.149 port 38676 ssh2
May 26 18:48:43 OPSO sshd\[20368\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.67.90.149  user=root
2020-05-27 02:09:03
51.75.122.213 attack
May 26 17:54:36 hell sshd[16112]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.122.213
May 26 17:54:38 hell sshd[16112]: Failed password for invalid user user from 51.75.122.213 port 51644 ssh2
...
2020-05-27 02:26:38
139.99.98.248 attackspam
May 26 18:45:27 cdc sshd[27171]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.99.98.248  user=root
May 26 18:45:29 cdc sshd[27171]: Failed password for invalid user root from 139.99.98.248 port 37328 ssh2
2020-05-27 02:06:50
116.247.81.99 attackbotsspam
May 26 17:07:48 sigma sshd\[23990\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.247.81.99  user=rootMay 26 17:14:40 sigma sshd\[24583\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.247.81.99  user=backup
...
2020-05-27 02:45:55
200.87.178.137 attack
May 26 17:43:38 roki-contabo sshd\[15331\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.87.178.137  user=bin
May 26 17:43:40 roki-contabo sshd\[15331\]: Failed password for bin from 200.87.178.137 port 51580 ssh2
May 26 17:50:06 roki-contabo sshd\[15417\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.87.178.137  user=root
May 26 17:50:09 roki-contabo sshd\[15417\]: Failed password for root from 200.87.178.137 port 36927 ssh2
May 26 17:54:25 roki-contabo sshd\[15546\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.87.178.137  user=root
...
2020-05-27 02:39:41
180.66.207.67 attackspambots
May 26 20:34:16 mail sshd[2736]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.66.207.67 
May 26 20:34:18 mail sshd[2736]: Failed password for invalid user testbox from 180.66.207.67 port 46582 ssh2
...
2020-05-27 02:42:12
111.231.225.162 attackbotsspam
May 26 21:04:14 lukav-desktop sshd\[11858\]: Invalid user mmuthuri from 111.231.225.162
May 26 21:04:14 lukav-desktop sshd\[11858\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.225.162
May 26 21:04:16 lukav-desktop sshd\[11858\]: Failed password for invalid user mmuthuri from 111.231.225.162 port 46276 ssh2
May 26 21:08:14 lukav-desktop sshd\[12137\]: Invalid user thomas from 111.231.225.162
May 26 21:08:14 lukav-desktop sshd\[12137\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.225.162
2020-05-27 02:23:00
101.71.251.204 attackspambots
bruteforce detected
2020-05-27 02:09:58

Recently Reported IPs

162.99.245.0 122.51.167.241 230.121.202.127 169.172.141.203
237.69.158.6 105.112.57.105 194.100.185.204 156.149.72.148
100.58.238.108 210.94.2.43 44.113.178.18 186.208.216.198
217.9.49.126 107.212.111.199 173.138.175.49 93.248.133.119
49.49.236.4 118.71.13.213 2.26.195.153 168.194.232.117