42.112.21.207 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Viet Nam

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
42.112.211.52	attackspam	Invalid user erp from 42.112.211.52 port 39306	2020-09-03 20:28:56
42.112.211.52	attack	Invalid user erp from 42.112.211.52 port 39306	2020-09-03 12:14:01
42.112.211.52	attack	Invalid user erp from 42.112.211.52 port 39306	2020-09-03 04:33:21
42.112.211.52	attackbotsspam	Aug 28 16:21:24 v22019038103785759 sshd\[19113\]: Invalid user asterisk from 42.112.211.52 port 57889 Aug 28 16:21:24 v22019038103785759 sshd\[19113\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.112.211.52 Aug 28 16:21:26 v22019038103785759 sshd\[19113\]: Failed password for invalid user asterisk from 42.112.211.52 port 57889 ssh2 Aug 28 16:30:24 v22019038103785759 sshd\[19889\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.112.211.52 user=root Aug 28 16:30:26 v22019038103785759 sshd\[19889\]: Failed password for root from 42.112.211.52 port 11869 ssh2 ...	2020-08-29 00:08:50
42.112.211.52	attack	Lines containing failures of 42.112.211.52 Aug 24 04:26:29 kmh-vmh-003-fsn07 sshd[10353]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.112.211.52 user=r.r Aug 24 04:26:31 kmh-vmh-003-fsn07 sshd[10353]: Failed password for r.r from 42.112.211.52 port 35634 ssh2 Aug 24 04:26:32 kmh-vmh-003-fsn07 sshd[10353]: Received disconnect from 42.112.211.52 port 35634:11: Bye Bye [preauth] Aug 24 04:26:32 kmh-vmh-003-fsn07 sshd[10353]: Disconnected from authenticating user r.r 42.112.211.52 port 35634 [preauth] Aug 24 04:44:55 kmh-vmh-003-fsn07 sshd[12890]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.112.211.52 user=r.r Aug 24 04:44:57 kmh-vmh-003-fsn07 sshd[12890]: Failed password for r.r from 42.112.211.52 port 23324 ssh2 Aug 24 04:44:58 kmh-vmh-003-fsn07 sshd[12890]: Received disconnect from 42.112.211.52 port 23324:11: Bye Bye [preauth] Aug 24 04:44:58 kmh-vmh-003-fsn07 sshd[12890]: Dis........ ------------------------------	2020-08-24 14:38:32
42.112.211.52	attackbotsspam	Aug 23 23:01:18 game-panel sshd[11087]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.112.211.52 Aug 23 23:01:20 game-panel sshd[11087]: Failed password for invalid user webmaster from 42.112.211.52 port 34336 ssh2 Aug 23 23:03:11 game-panel sshd[11166]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.112.211.52	2020-08-24 09:14:33
42.112.211.52	attack	Aug 17 10:30:27 gw1 sshd[6484]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.112.211.52 Aug 17 10:30:29 gw1 sshd[6484]: Failed password for invalid user nci from 42.112.211.52 port 62658 ssh2 ...	2020-08-17 14:03:33
42.112.216.167	attackbotsspam	Unauthorized connection attempt from IP address 42.112.216.167 on Port 445(SMB)	2020-08-13 19:52:55
42.112.211.52	attackspambots	Aug 12 14:39:24 ip106 sshd[30954]: Failed password for root from 42.112.211.52 port 31125 ssh2 ...	2020-08-12 20:53:18
42.112.211.52	attackspambots	Failed password for root from 42.112.211.52 port 60136 ssh2	2020-08-08 18:58:52
42.112.211.52	attackbotsspam	Aug 5 22:37:25 ip40 sshd[15013]: Failed password for root from 42.112.211.52 port 40777 ssh2 ...	2020-08-06 05:08:04
42.112.211.52	attackbots	detected by Fail2Ban	2020-08-05 04:51:22
42.112.211.52	attackspambots	Invalid user chenjiaze from 42.112.211.52 port 61923	2020-07-31 19:14:51
42.112.211.52	attackspambots	Invalid user shan from 42.112.211.52 port 48449	2020-07-27 01:10:25
42.112.211.52	attack	Jul 22 19:46:31 our-server-hostname sshd[20260]: Invalid user tester from 42.112.211.52 Jul 22 19:46:31 our-server-hostname sshd[20260]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.112.211.52 Jul 22 19:46:34 our-server-hostname sshd[20260]: Failed password for invalid user tester from 42.112.211.52 port 40514 ssh2 Jul 22 19:58:25 our-server-hostname sshd[22003]: Invalid user testadmin from 42.112.211.52 Jul 22 19:58:25 our-server-hostname sshd[22003]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.112.211.52 Jul 22 19:58:27 our-server-hostname sshd[22003]: Failed password for invalid user testadmin from 42.112.211.52 port 44529 ssh2 Jul 22 20:00:50 our-server-hostname sshd[22307]: Invalid user postgre from 42.112.211.52 Jul 22 20:00:51 our-server-hostname sshd[22307]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.112.211.52 Jul 22 20........ -------------------------------	2020-07-26 13:14:13

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.112.21.207
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 45575
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;42.112.21.207.			IN	A

;; AUTHORITY SECTION:
.			304	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022020700 1800 900 604800 86400

;; Query time: 1 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 08 00:43:22 CST 2022
;; MSG SIZE  rcvd: 106

Host info

Host 207.21.112.42.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 207.21.112.42.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
60.220.185.22	attack	Oct 8 08:00:09 jumpserver sshd[576270]: Failed password for root from 60.220.185.22 port 32792 ssh2 Oct 8 08:02:54 jumpserver sshd[576447]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.220.185.22 user=root Oct 8 08:02:56 jumpserver sshd[576447]: Failed password for root from 60.220.185.22 port 44946 ssh2 ...	2020-10-08 16:45:19
5.188.219.13	attackbots	C1,Magento Bruteforce Login Attack POST /index.php/admin/	2020-10-08 16:24:41
140.143.13.177	attackbots	(sshd) Failed SSH login from 140.143.13.177 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct 8 00:06:29 optimus sshd[9804]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.13.177 user=root Oct 8 00:06:31 optimus sshd[9804]: Failed password for root from 140.143.13.177 port 36018 ssh2 Oct 8 00:08:46 optimus sshd[10568]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.13.177 user=root Oct 8 00:08:48 optimus sshd[10568]: Failed password for root from 140.143.13.177 port 38200 ssh2 Oct 8 00:10:59 optimus sshd[11324]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.13.177 user=root	2020-10-08 16:38:15
2.7.45.17	attackbots	2020-10-08T14:44:30.164601hostname sshd[27210]: Failed password for root from 2.7.45.17 port 45340 ssh2 2020-10-08T14:48:05.127576hostname sshd[28606]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=lfbn-lyo-1-453-17.w2-7.abo.wanadoo.fr user=root 2020-10-08T14:48:06.829277hostname sshd[28606]: Failed password for root from 2.7.45.17 port 51834 ssh2 ...	2020-10-08 16:11:15
37.187.154.33	attackspambots	[2020-10-08 03:58:31] NOTICE[1182] chan_sip.c: Registration from '' failed for '37.187.154.33:58237' - Wrong password [2020-10-08 03:58:31] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-08T03:58:31.612-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1865",SessionID="0x7f22f8572958",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/37.187.154.33/58237",Challenge="59bb625a",ReceivedChallenge="59bb625a",ReceivedHash="43251ce289bbfe99f14e9b73f564b2b9" [2020-10-08 03:59:46] NOTICE[1182] chan_sip.c: Registration from '' failed for '37.187.154.33:60465' - Wrong password [2020-10-08 03:59:46] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-08T03:59:46.847-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1867",SessionID="0x7f22f840cf98",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/37.187.154.33 ...	2020-10-08 16:10:57
190.129.49.62	attackbotsspam	2020-10-07 22:44:02,246 fail2ban.actions: WARNING [ssh] Ban 190.129.49.62	2020-10-08 16:27:25
171.229.143.112	attackspambots	Telnet/23 MH Probe, Scan, BF, Hack -	2020-10-08 16:27:56
115.76.16.95	attack	TCP (SYN) 115.76.16.95:30880 -> port 23, len 44	2020-10-08 16:33:45
167.114.103.140	attack	$f2bV_matches	2020-10-08 16:22:37
23.97.65.219	attackspambots	Connection to SSH Honeypot - Detected by HoneypotDB	2020-10-08 16:39:49
120.92.107.97	attackbotsspam	fail2ban: brute force SSH detected	2020-10-08 16:16:16
121.204.208.43	attackspam	$f2bV_matches	2020-10-08 16:09:38
106.54.47.171	attackspambots	2020-10-07T23:58:10.609936ollin.zadara.org sshd[279637]: User root from 106.54.47.171 not allowed because not listed in AllowUsers 2020-10-07T23:58:13.020521ollin.zadara.org sshd[279637]: Failed password for invalid user root from 106.54.47.171 port 60554 ssh2 ...	2020-10-08 16:20:26
202.158.62.240	attackspambots	Oct 8 13:15:18 dhoomketu sshd[3658928]: Failed password for root from 202.158.62.240 port 48527 ssh2 Oct 8 13:16:55 dhoomketu sshd[3658939]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.158.62.240 user=root Oct 8 13:16:57 dhoomketu sshd[3658939]: Failed password for root from 202.158.62.240 port 60397 ssh2 Oct 8 13:18:37 dhoomketu sshd[3658956]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.158.62.240 user=root Oct 8 13:18:39 dhoomketu sshd[3658956]: Failed password for root from 202.158.62.240 port 44035 ssh2 ...	2020-10-08 16:11:30
46.185.125.201	attackbotsspam	Probing sign-up form.	2020-10-08 16:09:00

Recently Reported IPs

31.59.231.235	20.71.171.197	177.87.68.139	177.221.206.222
51.75.142.156	193.189.100.195	49.230.166.231	171.38.246.117
175.143.93.146	42.115.17.184	200.29.15.186	120.48.23.59
154.114.57.143	103.110.22.170	87.117.62.191	171.100.139.99
177.54.226.54	140.83.62.163	211.36.141.118	27.40.89.141