Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Viet Nam

Internet Service Provider: FPT Telecom Company

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:
Type Details Datetime
attackbotsspam
Dec 21 07:04:42 h2421860 postfix/postscreen[18786]: CONNECT from [42.112.149.142]:20028 to [85.214.119.52]:25
Dec 21 07:04:42 h2421860 postfix/dnsblog[18789]: addr 42.112.149.142 listed by domain ix.dnsbl.xxxxxx.net as 127.0.0.2
Dec 21 07:04:42 h2421860 postfix/dnsblog[18795]: addr 42.112.149.142 listed by domain zen.spamhaus.org as 127.0.0.11
Dec 21 07:04:42 h2421860 postfix/dnsblog[18795]: addr 42.112.149.142 listed by domain zen.spamhaus.org as 127.0.0.3
Dec 21 07:04:42 h2421860 postfix/dnsblog[18795]: addr 42.112.149.142 listed by domain zen.spamhaus.org as 127.0.0.4
Dec 21 07:04:43 h2421860 postfix/dnsblog[18796]: addr 42.112.149.142 listed by domain Unknown.trblspam.com as 185.53.179.7
Dec 21 07:04:48 h2421860 postfix/postscreen[18786]: DNSBL rank 5 for [42.112.149.142]:20028
Dec x@x
Dec 21 07:04:51 h2421860 postfix/postscreen[18786]: HANGUP after 3.2 from [42.112.149.142]:20028 in tests after SMTP handshake
Dec 21 07:04:51 h2421860 postfix/postscreen[18786]: DISC........
-------------------------------
2019-12-21 20:02:16
Comments on same subnet:
IP Type Details Datetime
42.112.149.45 attackbotsspam
Honeypot attack, port: 445, PTR: PTR record not found
2020-02-11 16:32:15
42.112.149.40 attackbotsspam
1580791926 - 02/04/2020 05:52:06 Host: 42.112.149.40/42.112.149.40 Port: 445 TCP Blocked
2020-02-04 21:51:15
42.112.149.253 attackbots
Unauthorized connection attempt from IP address 42.112.149.253 on Port 445(SMB)
2020-01-30 04:57:58
42.112.149.115 attackbots
1578950453 - 01/13/2020 22:20:53 Host: 42.112.149.115/42.112.149.115 Port: 445 TCP Blocked
2020-01-14 08:21:16
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.112.149.142
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 56007
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.112.149.142.			IN	A

;; AUTHORITY SECTION:
.			275	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019122100 1800 900 604800 86400

;; Query time: 52 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Dec 21 20:02:05 CST 2019
;; MSG SIZE  rcvd: 118
Host info
Host 142.149.112.42.in-addr.arpa not found: 2(SERVFAIL)
Nslookup info:
;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 142.149.112.42.in-addr.arpa: SERVFAIL
Related IP info:
Related comments:
IP Type Details Datetime
5.104.38.89 attackbotsspam
Attempt to attack host OS, exploiting network vulnerabilities, on 17-12-2019 22:25:09.
2019-12-18 08:51:39
49.88.112.63 attackbots
Dec 18 01:22:37 meumeu sshd[7989]: Failed password for root from 49.88.112.63 port 38812 ssh2
Dec 18 01:22:41 meumeu sshd[7989]: Failed password for root from 49.88.112.63 port 38812 ssh2
Dec 18 01:22:45 meumeu sshd[7989]: Failed password for root from 49.88.112.63 port 38812 ssh2
Dec 18 01:22:53 meumeu sshd[7989]: error: maximum authentication attempts exceeded for root from 49.88.112.63 port 38812 ssh2 [preauth]
...
2019-12-18 08:30:00
49.88.112.67 attackbotsspam
Dec 18 03:00:45 sauna sshd[6372]: Failed password for root from 49.88.112.67 port 61899 ssh2
...
2019-12-18 09:09:20
40.74.78.4 attackspam
Dec 18 07:06:52 webhost01 sshd[11944]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.74.78.4
Dec 18 07:06:54 webhost01 sshd[11944]: Failed password for invalid user hisayuki from 40.74.78.4 port 1024 ssh2
...
2019-12-18 08:34:39
80.0.24.49 attackbotsspam
Automatic report - Port Scan Attack
2019-12-18 08:41:57
142.93.15.179 attackspam
Dec 18 01:04:08 minden010 sshd[17511]: Failed password for backup from 142.93.15.179 port 47246 ssh2
Dec 18 01:08:39 minden010 sshd[19738]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.15.179
Dec 18 01:08:41 minden010 sshd[19738]: Failed password for invalid user gongwer from 142.93.15.179 port 52044 ssh2
...
2019-12-18 08:42:55
159.203.201.33 attackbots
firewall-block, port(s): 8088/tcp
2019-12-18 09:00:32
178.62.37.168 attack
Dec 18 01:31:56 minden010 sshd[27940]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.37.168
Dec 18 01:31:58 minden010 sshd[27940]: Failed password for invalid user carveiro from 178.62.37.168 port 45626 ssh2
Dec 18 01:36:39 minden010 sshd[29534]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.37.168
...
2019-12-18 08:39:35
115.159.185.71 attackbots
Dec 17 14:36:14 web9 sshd\[30138\]: Invalid user ragndi from 115.159.185.71
Dec 17 14:36:14 web9 sshd\[30138\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.159.185.71
Dec 17 14:36:16 web9 sshd\[30138\]: Failed password for invalid user ragndi from 115.159.185.71 port 50604 ssh2
Dec 17 14:42:28 web9 sshd\[31138\]: Invalid user test from 115.159.185.71
Dec 17 14:42:28 web9 sshd\[31138\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.159.185.71
2019-12-18 09:04:08
2408:825c:3281:e7c4:b010:feb4:51f8:b27b attack
Trying to sign in my hotmail
2019-12-18 09:12:27
137.74.53.155 attack
SSH Brute-Force reported by Fail2Ban
2019-12-18 09:08:23
218.92.0.184 attackspam
Dec 18 01:36:38 eventyay sshd[7848]: Failed password for root from 218.92.0.184 port 25511 ssh2
Dec 18 01:36:51 eventyay sshd[7848]: error: maximum authentication attempts exceeded for root from 218.92.0.184 port 25511 ssh2 [preauth]
Dec 18 01:36:56 eventyay sshd[7851]: Failed password for root from 218.92.0.184 port 55776 ssh2
...
2019-12-18 08:48:09
61.189.159.183 attack
firewall-block, port(s): 1433/tcp
2019-12-18 09:01:20
64.225.59.225 attackspam
Dec 18 00:55:36 www sshd[21387]: Failed password for r.r from 64.225.59.225 port 38584 ssh2
Dec 18 00:55:36 www sshd[21389]: Invalid user telnet from 64.225.59.225
Dec 18 00:55:38 www sshd[21389]: Failed password for invalid user telnet from 64.225.59.225 port 41248 ssh2
Dec 18 00:55:39 www sshd[21393]: Invalid user admin from 64.225.59.225
Dec 18 00:55:41 www sshd[21393]: Failed password for invalid user admin from 64.225.59.225 port 43450 ssh2
Dec 18 00:55:42 www sshd[21395]: Invalid user admin from 64.225.59.225
Dec 18 00:55:44 www sshd[21395]: Failed password for invalid user admin from 64.225.59.225 port 45764 ssh2
Dec 18 00:55:47 www sshd[21399]: Failed password for r.r from 64.225.59.225 port 48076 ssh2
Dec 18 00:55:49 www sshd[21401]: Failed password for r.r from 64.225.59.225 port 50718 ssh2
Dec 18 00:55:49 www sshd[21403]: Invalid user admin from 64.225.59.225
Dec 18 00:55:51 www sshd[21403]: Failed password for invalid user admin from 64.225.59.225 port 52482 ........
------------------------------
2019-12-18 08:43:42
51.161.12.231 attackbots
Dec 18 01:16:48 debian-2gb-nbg1-2 kernel: \[280984.587096\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=51.161.12.231 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=238 ID=10978 PROTO=TCP SPT=32767 DPT=8545 WINDOW=1024 RES=0x00 SYN URGP=0
2019-12-18 08:34:12

Recently Reported IPs

41.8.56.132 196.100.35.184 197.153.124.103 68.242.226.59
131.40.19.219 195.198.197.217 58.247.194.108 242.203.155.253
157.50.36.38 246.141.41.128 90.243.3.242 199.26.199.61
125.175.166.132 58.154.181.79 106.249.81.159 239.83.172.187
121.177.73.141 211.25.234.14 14.186.239.210 49.232.173.88