42.114.12.208 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Viet Nam

Internet Service Provider: FPT Telecom Company

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	IP blocked	2020-02-14 21:50:43

Comments on same subnet:

IP	Type	Details	Datetime
42.114.12.225	attack	Unauthorized connection attempt from IP address 42.114.12.225 on Port 445(SMB)	2020-09-01 18:47:23
42.114.126.120	attackbots	Port probing on unauthorized port 23	2020-08-13 01:48:07
42.114.12.86	attackbots	Unauthorized connection attempt from IP address 42.114.12.86 on Port 445(SMB)	2020-06-17 01:02:57
42.114.121.152	attack	kidness.family 42.114.121.152 [04/Jun/2020:05:58:59 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4265 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.109 Safari/537.36" kidness.family 42.114.121.152 [04/Jun/2020:05:59:03 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4265 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.109 Safari/537.36"	2020-06-04 12:09:58
42.114.12.159	attackspambots	Unauthorised access (Jun 3) SRC=42.114.12.159 LEN=52 TTL=106 ID=28409 DF TCP DPT=445 WINDOW=8192 SYN	2020-06-03 14:10:09
42.114.12.1	attack	1590983371 - 06/01/2020 05:49:31 Host: 42.114.12.1/42.114.12.1 Port: 445 TCP Blocked	2020-06-01 16:15:04
42.114.121.128	attackbotsspam	1589881561 - 05/19/2020 11:46:01 Host: 42.114.121.128/42.114.121.128 Port: 445 TCP Blocked	2020-05-20 01:56:34
42.114.12.240	attack	1586520216 - 04/10/2020 14:03:36 Host: 42.114.12.240/42.114.12.240 Port: 445 TCP Blocked	2020-04-11 04:08:58
42.114.12.119	attackbots	20/2/19@23:48:09: FAIL: Alarm-Network address from=42.114.12.119 20/2/19@23:48:09: FAIL: Alarm-Network address from=42.114.12.119 ...	2020-02-20 21:32:02
42.114.125.53	attackbots	Feb 7 18:55:17 sip sshd[12222]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.114.125.53 Feb 7 18:55:17 sip sshd[12224]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.114.125.53 Feb 7 18:55:19 sip sshd[12222]: Failed password for invalid user pi from 42.114.125.53 port 60210 ssh2 Feb 7 18:55:19 sip sshd[12224]: Failed password for invalid user pi from 42.114.125.53 port 60218 ssh2	2020-02-08 05:16:07
42.114.12.172	attack	unauthorized connection attempt	2020-02-04 16:50:21
42.114.120.250	attackspam	Unauthorized connection attempt detected from IP address 42.114.120.250 to port 23 [J]	2020-01-07 04:17:37
42.114.12.206	attack	1578026989 - 01/03/2020 05:49:49 Host: 42.114.12.206/42.114.12.206 Port: 445 TCP Blocked	2020-01-03 16:13:21
42.114.12.91	attack	1576592404 - 12/17/2019 15:20:04 Host: 42.114.12.91/42.114.12.91 Port: 445 TCP Blocked	2019-12-18 05:18:18
42.114.12.124	attack	Attempt to attack host OS, exploiting network vulnerabilities, on 29-10-2019 11:40:31.	2019-10-29 21:03:59

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.114.12.208
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 53371
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.114.12.208.			IN	A

;; AUTHORITY SECTION:
.			534	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020021400 1800 900 604800 86400

;; Query time: 219 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 14 21:50:32 CST 2020
;; MSG SIZE  rcvd: 117

Host info

Host 208.12.114.42.in-addr.arpa not found: 2(SERVFAIL)

Nslookup info:

;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 208.12.114.42.in-addr.arpa: SERVFAIL

Related IP info:

Related comments:

IP	Type	Details	Datetime
154.66.110.247	attackbots	445/tcp 445/tcp 445/tcp... [2019-11-28/12-08]5pkt,1pt.(tcp)	2019-12-09 06:56:36
125.77.30.71	attackspam	22/tcp 22/tcp 22/tcp... [2019-11-20/12-08]5pkt,1pt.(tcp)	2019-12-09 06:52:54
193.70.85.206	attack	Dec 6 23:05:05 mail sshd[1760]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.70.85.206 Dec 6 23:05:07 mail sshd[1760]: Failed password for invalid user hdpuser from 193.70.85.206 port 46238 ssh2 Dec 6 23:10:10 mail sshd[3131]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.70.85.206	2019-12-09 07:15:46
51.75.19.45	attackspam	Dec 8 13:10:57 wbs sshd\[14744\]: Invalid user admin from 51.75.19.45 Dec 8 13:10:57 wbs sshd\[14744\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.ip-51-75-19.eu Dec 8 13:11:00 wbs sshd\[14744\]: Failed password for invalid user admin from 51.75.19.45 port 48126 ssh2 Dec 8 13:16:31 wbs sshd\[15340\]: Invalid user manica from 51.75.19.45 Dec 8 13:16:31 wbs sshd\[15340\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.ip-51-75-19.eu	2019-12-09 07:18:13
210.92.105.120	attackbotsspam	Dec 6 23:05:37 mail sshd[1851]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.92.105.120 Dec 6 23:05:39 mail sshd[1851]: Failed password for invalid user edelstein from 210.92.105.120 port 35092 ssh2 Dec 6 23:12:49 mail sshd[3604]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.92.105.120	2019-12-09 07:14:20
193.188.22.188	attackspam	2019-12-08T22:08:45.894862abusebot-5.cloudsearch.cf sshd\[31317\]: Invalid user installer from 193.188.22.188 port 15387	2019-12-09 06:44:25
217.182.74.96	attackspambots	2019-12-08T22:34:10.874446abusebot-6.cloudsearch.cf sshd\[3573\]: Invalid user system from 217.182.74.96 port 48078	2019-12-09 06:55:11
59.16.198.74	attack	23/tcp 23/tcp 23/tcp [2019-11-24/12-08]3pkt	2019-12-09 06:51:41
112.6.231.114	attack	Dec 8 23:16:59 v22018086721571380 sshd[30857]: Failed password for invalid user skarke from 112.6.231.114 port 9406 ssh2	2019-12-09 06:54:59
181.41.216.140	attackbotsspam	Dec 8 23:48:27 grey postfix/smtpd\[28132\]: NOQUEUE: reject: RCPT from unknown\[181.41.216.140\]: 554 5.7.1 Service unavailable\; Client host \[181.41.216.140\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[181.41.216.140\]\; from=\ to=\ proto=ESMTP helo=\<\[181.41.216.131\]\>Dec 8 23:48:27 grey postfix/smtpd\[28132\]: NOQUEUE: reject: RCPT from unknown\[181.41.216.140\]: 554 5.7.1 Service unavailable\; Client host \[181.41.216.140\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[181.41.216.140\]\; from=\ to=\ proto=ESMTP helo=\<\[181.41.216.131\]\> ...	2019-12-09 06:48:34
37.114.167.12	attackspambots	Dec 8 15:49:53 v22018076622670303 sshd\[12032\]: Invalid user admin from 37.114.167.12 port 39783 Dec 8 15:49:53 v22018076622670303 sshd\[12032\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.114.167.12 Dec 8 15:49:55 v22018076622670303 sshd\[12032\]: Failed password for invalid user admin from 37.114.167.12 port 39783 ssh2 ...	2019-12-09 06:56:02
68.183.124.53	attackbots	Dec 8 18:39:22 Ubuntu-1404-trusty-64-minimal sshd\[16441\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.124.53 user=root Dec 8 18:39:24 Ubuntu-1404-trusty-64-minimal sshd\[16441\]: Failed password for root from 68.183.124.53 port 34502 ssh2 Dec 8 18:46:37 Ubuntu-1404-trusty-64-minimal sshd\[20324\]: Invalid user kf from 68.183.124.53 Dec 8 18:46:37 Ubuntu-1404-trusty-64-minimal sshd\[20324\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.124.53 Dec 8 18:46:40 Ubuntu-1404-trusty-64-minimal sshd\[20324\]: Failed password for invalid user kf from 68.183.124.53 port 54144 ssh2	2019-12-09 06:53:42
167.250.132.18	attackspambots	19/12/8@10:52:03: FAIL: Alarm-Intrusion address from=167.250.132.18 ...	2019-12-09 06:58:48
219.93.20.155	attackbots	2019-12-08T22:46:46.110794abusebot-2.cloudsearch.cf sshd\[9987\]: Invalid user nakagama from 219.93.20.155 port 43848	2019-12-09 06:48:10
86.56.83.166	attackbots	Dec 9 01:15:09 pkdns2 sshd\[8556\]: Invalid user play from 86.56.83.166Dec 9 01:15:11 pkdns2 sshd\[8556\]: Failed password for invalid user play from 86.56.83.166 port 53722 ssh2Dec 9 01:15:42 pkdns2 sshd\[8579\]: Invalid user melissa from 86.56.83.166Dec 9 01:15:44 pkdns2 sshd\[8579\]: Failed password for invalid user melissa from 86.56.83.166 port 55822 ssh2Dec 9 01:16:15 pkdns2 sshd\[8612\]: Invalid user luat from 86.56.83.166Dec 9 01:16:17 pkdns2 sshd\[8612\]: Failed password for invalid user luat from 86.56.83.166 port 57922 ssh2 ...	2019-12-09 07:22:08

Recently Reported IPs

180.104.202.168	14.226.240.20	59.4.217.134	52.16.203.202
51.158.27.21	106.212.108.200	180.104.183.234	195.96.230.35
185.57.228.75	185.97.209.168	179.198.168.166	73.244.164.125
78.128.113.91	180.104.177.245	176.113.115.201	177.206.65.59
123.20.124.159	180.101.41.214	71.88.252.88	35.200.191.251