42.114.121.38 - IPInfo

Basic Info

City: Hanoi

Region: Hanoi

Country: Vietnam

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
42.114.121.152	attack	kidness.family 42.114.121.152 [04/Jun/2020:05:58:59 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4265 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.109 Safari/537.36" kidness.family 42.114.121.152 [04/Jun/2020:05:59:03 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4265 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.109 Safari/537.36"	2020-06-04 12:09:58
42.114.121.128	attackbotsspam	1589881561 - 05/19/2020 11:46:01 Host: 42.114.121.128/42.114.121.128 Port: 445 TCP Blocked	2020-05-20 01:56:34

Type

Details

Datetime

42.114.121.152

attack

kidness.family 42.114.121.152 [04/Jun/2020:05:58:59 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4265 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.109 Safari/537.36"
kidness.family 42.114.121.152 [04/Jun/2020:05:59:03 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4265 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.109 Safari/537.36"

2020-06-04 12:09:58

42.114.121.128

attackbotsspam

1589881561 - 05/19/2020 11:46:01 Host: 42.114.121.128/42.114.121.128 Port: 445 TCP Blocked

2020-05-20 01:56:34

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.114.121.38
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 34889
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;42.114.121.38.			IN	A

;; AUTHORITY SECTION:
.			128	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022011101 1800 900 604800 86400

;; Query time: 20 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jan 12 12:47:52 CST 2022
;; MSG SIZE  rcvd: 106

Host info

Host 38.121.114.42.in-addr.arpa not found: 2(SERVFAIL)

Nslookup info:

;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 38.121.114.42.in-addr.arpa: SERVFAIL

Related IP info:

Related comments:

IP	Type	Details	Datetime
51.91.255.147	attackspam	"fail2ban match"	2020-06-21 20:46:22
222.186.180.17	attackbots	Jun 21 12:16:27 localhost sshd[58936]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.17 user=root Jun 21 12:16:29 localhost sshd[58936]: Failed password for root from 222.186.180.17 port 20728 ssh2 Jun 21 12:16:33 localhost sshd[58936]: Failed password for root from 222.186.180.17 port 20728 ssh2 Jun 21 12:16:27 localhost sshd[58936]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.17 user=root Jun 21 12:16:29 localhost sshd[58936]: Failed password for root from 222.186.180.17 port 20728 ssh2 Jun 21 12:16:33 localhost sshd[58936]: Failed password for root from 222.186.180.17 port 20728 ssh2 Jun 21 12:16:27 localhost sshd[58936]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.17 user=root Jun 21 12:16:29 localhost sshd[58936]: Failed password for root from 222.186.180.17 port 20728 ssh2 Jun 21 12:16:33 localhost sshd[58936]: Fa ...	2020-06-21 20:24:10
162.243.144.210	attack	scans once in preceeding hours on the ports (in chronological order) 5432 resulting in total of 51 scans from 162.243.0.0/16 block.	2020-06-21 20:42:49
121.58.233.35	attackbotsspam	Jun 19 11:47:53 WHD8 dovecot: pop3-login: Aborted login $auth failed, 1 attempts in 2 secs$: user=\, method=PLAIN, rip=121.58.233.35, lip=10.64.89.208, session=\<74RTyWyodo95Oukj\> Jun 19 11:48:00 WHD8 dovecot: pop3-login: Aborted login $auth failed, 1 attempts in 6 secs$: user=\, method=PLAIN, rip=121.58.233.35, lip=10.64.89.208, session=\ Jun 19 11:48:11 WHD8 dovecot: pop3-login: Aborted login $auth failed, 1 attempts in 10 secs$: user=\, method=PLAIN, rip=121.58.233.35, lip=10.64.89.208, session=\ Jun 20 04:39:34 WHD8 dovecot: pop3-login: Aborted login $auth failed, 1 attempts in 2 secs$: user=\, method=PLAIN, rip=121.58.233.35, lip=10.64.89.208, session=\ Jun 20 04:39:41 WHD8 dovecot: pop3-login: Aborted login $auth failed, 1 attempts in 6 secs$: user=\, method=PLAIN, rip=121.58.233.35, lip=10.64.89.208, session=\ Jun 20 04:39:52 WHD8 dove ...	2020-06-21 20:22:28
64.225.115.188	attack	scans once in preceeding hours on the ports (in chronological order) 22982 resulting in total of 5 scans from 64.225.0.0/17 block.	2020-06-21 20:32:09
46.38.150.191	attackbots	2020-06-21 15:25:39 auth_plain authenticator failed for (User) [46.38.150.191]: 535 Incorrect authentication data (set_id=cta@lavrinenko.info) 2020-06-21 15:26:07 auth_plain authenticator failed for (User) [46.38.150.191]: 535 Incorrect authentication data (set_id=u19@lavrinenko.info) ...	2020-06-21 20:26:23
3.230.143.72	attackbots	Jun 21 13:13:18 xeon sshd[29903]: Failed password for invalid user ubuntu from 3.230.143.72 port 55124 ssh2	2020-06-21 20:13:52
45.156.186.188	attackspam	Jun 21 15:12:26 journals sshd\[29328\]: Invalid user yap from 45.156.186.188 Jun 21 15:12:26 journals sshd\[29328\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.156.186.188 Jun 21 15:12:28 journals sshd\[29328\]: Failed password for invalid user yap from 45.156.186.188 port 35288 ssh2 Jun 21 15:16:35 journals sshd\[29661\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.156.186.188 user=root Jun 21 15:16:37 journals sshd\[29661\]: Failed password for root from 45.156.186.188 port 33792 ssh2 ...	2020-06-21 20:22:50
111.231.93.35	attackspam	Jun 21 11:50:52 Ubuntu-1404-trusty-64-minimal sshd\[20825\]: Invalid user developer from 111.231.93.35 Jun 21 11:50:52 Ubuntu-1404-trusty-64-minimal sshd\[20825\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.93.35 Jun 21 11:50:54 Ubuntu-1404-trusty-64-minimal sshd\[20825\]: Failed password for invalid user developer from 111.231.93.35 port 50514 ssh2 Jun 21 12:08:51 Ubuntu-1404-trusty-64-minimal sshd\[3988\]: Invalid user kav from 111.231.93.35 Jun 21 12:08:51 Ubuntu-1404-trusty-64-minimal sshd\[3988\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.93.35	2020-06-21 20:15:38
162.243.141.142	attack	scans once in preceeding hours on the ports (in chronological order) 20547 resulting in total of 51 scans from 162.243.0.0/16 block.	2020-06-21 20:47:50
64.225.106.89	attackspambots	scans once in preceeding hours on the ports (in chronological order) 18375 resulting in total of 5 scans from 64.225.0.0/17 block.	2020-06-21 20:32:43
162.243.144.29	attackspambots	scans once in preceeding hours on the ports (in chronological order) 8983 resulting in total of 51 scans from 162.243.0.0/16 block.	2020-06-21 20:44:11
192.241.192.66	attackspam	scans once in preceeding hours on the ports (in chronological order) 2078 resulting in total of 1 scans from 192.241.128.0/17 block.	2020-06-21 20:40:38
185.107.165.133	attackbots	Honeypot attack, port: 445, PTR: PTR record not found	2020-06-21 20:20:41
118.25.44.66	attackbotsspam	$f2bV_matches	2020-06-21 20:36:18

Recently Reported IPs

91.74.28.96	255.87.54.14	24.24.84.112	216.141.165.159
46.56.72.200	177.186.244.63	115.44.99.166	24.22.234.81
27.174.85.10	125.227.98.195	90.237.89.162	105.50.91.115
191.251.79.206	164.29.128.82	251.12.125.127	38.211.255.140
55.106.167.160	84.70.142.128	217.175.123.38	98.212.153.166