Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Viet Nam

Internet Service Provider: FPT Telecom Company

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:
Type Details Datetime
attackbotsspam
Dec 21 07:04:42 h2421860 postfix/postscreen[18786]: CONNECT from [42.112.149.142]:20028 to [85.214.119.52]:25
Dec 21 07:04:42 h2421860 postfix/dnsblog[18789]: addr 42.112.149.142 listed by domain ix.dnsbl.xxxxxx.net as 127.0.0.2
Dec 21 07:04:42 h2421860 postfix/dnsblog[18795]: addr 42.112.149.142 listed by domain zen.spamhaus.org as 127.0.0.11
Dec 21 07:04:42 h2421860 postfix/dnsblog[18795]: addr 42.112.149.142 listed by domain zen.spamhaus.org as 127.0.0.3
Dec 21 07:04:42 h2421860 postfix/dnsblog[18795]: addr 42.112.149.142 listed by domain zen.spamhaus.org as 127.0.0.4
Dec 21 07:04:43 h2421860 postfix/dnsblog[18796]: addr 42.112.149.142 listed by domain Unknown.trblspam.com as 185.53.179.7
Dec 21 07:04:48 h2421860 postfix/postscreen[18786]: DNSBL rank 5 for [42.112.149.142]:20028
Dec x@x
Dec 21 07:04:51 h2421860 postfix/postscreen[18786]: HANGUP after 3.2 from [42.112.149.142]:20028 in tests after SMTP handshake
Dec 21 07:04:51 h2421860 postfix/postscreen[18786]: DISC........
-------------------------------
2019-12-21 20:02:16
Comments on same subnet:
IP Type Details Datetime
42.112.149.45 attackbotsspam
Honeypot attack, port: 445, PTR: PTR record not found
2020-02-11 16:32:15
42.112.149.40 attackbotsspam
1580791926 - 02/04/2020 05:52:06 Host: 42.112.149.40/42.112.149.40 Port: 445 TCP Blocked
2020-02-04 21:51:15
42.112.149.253 attackbots
Unauthorized connection attempt from IP address 42.112.149.253 on Port 445(SMB)
2020-01-30 04:57:58
42.112.149.115 attackbots
1578950453 - 01/13/2020 22:20:53 Host: 42.112.149.115/42.112.149.115 Port: 445 TCP Blocked
2020-01-14 08:21:16
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.112.149.142
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 56007
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.112.149.142.			IN	A

;; AUTHORITY SECTION:
.			275	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019122100 1800 900 604800 86400

;; Query time: 52 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Dec 21 20:02:05 CST 2019
;; MSG SIZE  rcvd: 118
Host info
Host 142.149.112.42.in-addr.arpa not found: 2(SERVFAIL)
Nslookup info:
;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 142.149.112.42.in-addr.arpa: SERVFAIL
Related IP info:
Related comments:
IP Type Details Datetime
218.104.225.140 attackspam
2020-07-12T10:07:28+0200 Failed SSH Authentication/Brute Force Attack.(Server 2)
2020-07-12 19:25:21
222.186.175.23 attackspambots
Unauthorized connection attempt detected from IP address 222.186.175.23 to port 22
2020-07-12 18:48:44
114.4.227.194 attack
Jul 12 11:17:59 eventyay sshd[2468]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.4.227.194
Jul 12 11:18:00 eventyay sshd[2468]: Failed password for invalid user info from 114.4.227.194 port 46356 ssh2
Jul 12 11:22:02 eventyay sshd[2728]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.4.227.194
...
2020-07-12 19:00:16
80.211.109.62 attackbotsspam
Invalid user ulrich from 80.211.109.62 port 55528
2020-07-12 18:57:42
60.167.177.40 attackbotsspam
Jul 12 02:53:00 marvibiene sshd[3097]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.167.177.40  user=games
Jul 12 02:53:02 marvibiene sshd[3097]: Failed password for games from 60.167.177.40 port 50578 ssh2
Jul 12 03:48:37 marvibiene sshd[3968]: Invalid user edmundo from 60.167.177.40 port 53340
...
2020-07-12 18:49:07
103.141.188.216 attackbotsspam
DATE:2020-07-12 13:19:55, IP:103.141.188.216, PORT:ssh SSH brute force auth (docker-dc)
2020-07-12 19:20:04
118.24.48.15 attackspam
Failed password for invalid user hysms from 118.24.48.15 port 47448 ssh2
2020-07-12 19:10:42
23.252.141.250 attack
Automatic report - Banned IP Access
2020-07-12 19:18:27
182.253.22.2 attackbotsspam
Unauthorised connection attempt detected at AUO MAIN. System is sshd. Protected by AUO Stack Web Application Firewall (WAF)
2020-07-12 19:08:23
110.143.104.38 attack
2020-07-12T11:01:08.232368ks3355764 sshd[6222]: Invalid user lc from 110.143.104.38 port 43648
2020-07-12T11:01:11.049016ks3355764 sshd[6222]: Failed password for invalid user lc from 110.143.104.38 port 43648 ssh2
...
2020-07-12 19:12:36
125.94.34.121 attackbots
Brute force SMTP login attempted.
...
2020-07-12 19:13:06
157.245.163.0 attack
TCP port : 11208
2020-07-12 19:08:49
2.226.157.66 attackspambots
2020-07-12T09:08:01.803592randservbullet-proofcloud-66.localdomain sshd[13670]: Invalid user pi from 2.226.157.66 port 54746
2020-07-12T09:08:02.070483randservbullet-proofcloud-66.localdomain sshd[13672]: Invalid user pi from 2.226.157.66 port 54750
...
2020-07-12 18:54:57
23.129.64.181 attack
Unauthorized connection attempt detected from IP address 23.129.64.181 to port 10001
2020-07-12 19:15:32
203.56.24.180 attackspambots
Triggered by Fail2Ban at Ares web server
2020-07-12 19:09:36

Recently Reported IPs

41.8.56.132 196.100.35.184 197.153.124.103 68.242.226.59
131.40.19.219 195.198.197.217 58.247.194.108 242.203.155.253
157.50.36.38 246.141.41.128 90.243.3.242 199.26.199.61
125.175.166.132 58.154.181.79 106.249.81.159 239.83.172.187
121.177.73.141 211.25.234.14 14.186.239.210 49.232.173.88