42.114.23.52 - IPInfo

Basic Info

City: Ho Chi Minh City

Region: Ho Chi Minh

Country: Vietnam

Internet Service Provider: unknown

Hostname: unknown

Organization: The Corporation for Financing & Promoting Technology

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
42.114.234.61	attackbots	20/2/27@09:23:27: FAIL: Alarm-Intrusion address from=42.114.234.61 ...	2020-02-28 02:43:36
42.114.234.205	attack	1582519851 - 02/24/2020 05:50:51 Host: 42.114.234.205/42.114.234.205 Port: 445 TCP Blocked	2020-02-24 17:00:01
42.114.234.166	attackbotsspam	Attempt to attack host OS, exploiting network vulnerabilities, on 15-02-2020 05:10:59.	2020-02-15 19:46:56
42.114.234.186	attackbotsspam	Unauthorized connection attempt from IP address 42.114.234.186 on Port 445(SMB)	2020-01-04 03:14:04
42.114.234.158	attack	1576765942 - 12/19/2019 15:32:22 Host: 42.114.234.158/42.114.234.158 Port: 445 TCP Blocked	2019-12-20 04:56:24
42.114.23.138	attackspambots	1576766051 - 12/19/2019 15:34:11 Host: 42.114.23.138/42.114.23.138 Port: 445 TCP Blocked	2019-12-20 03:35:56
42.114.23.1	attack	1576650223 - 12/18/2019 07:23:43 Host: 42.114.23.1/42.114.23.1 Port: 445 TCP Blocked	2019-12-18 21:30:02
42.114.234.97	attack	Unauthorised access (Dec 6) SRC=42.114.234.97 LEN=52 TTL=108 ID=6958 DF TCP DPT=445 WINDOW=8192 SYN	2019-12-07 06:10:48
42.114.234.112	attackbotsspam	Unauthorised access (Nov 23) SRC=42.114.234.112 LEN=52 TTL=107 ID=15405 DF TCP DPT=445 WINDOW=8192 SYN Unauthorised access (Nov 23) SRC=42.114.234.112 LEN=52 TTL=107 ID=13459 DF TCP DPT=445 WINDOW=8192 SYN	2019-11-23 20:26:37

Whois info:

Dig info:


; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.114.23.52
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 0
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.114.23.52.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019071300 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sun Jul 14 00:09:09 CST 2019
;; MSG SIZE  rcvd: 116

Host info

Host 52.23.114.42.in-addr.arpa not found: 2(SERVFAIL)

Nslookup info:

;; Got SERVFAIL reply from 67.207.67.3, trying next server
Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 52.23.114.42.in-addr.arpa: SERVFAIL

Related IP info:

Related comments:

IP	Type	Details	Datetime
5.148.3.212	attackbotsspam	Feb 12 06:27:28 silence02 sshd[4426]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.148.3.212 Feb 12 06:27:30 silence02 sshd[4426]: Failed password for invalid user verda from 5.148.3.212 port 48653 ssh2 Feb 12 06:30:46 silence02 sshd[4710]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.148.3.212	2020-02-12 13:43:37
49.146.32.92	attackbotsspam	port scan and connect, tcp 22 (ssh)	2020-02-12 13:58:51
14.0.19.159	attackspam	20/2/11@23:57:52: FAIL: Alarm-Network address from=14.0.19.159 ...	2020-02-12 13:52:27
47.94.102.174	attackbots	False form completion	2020-02-12 13:39:10
129.204.111.107	attackspam	$f2bV_matches	2020-02-12 14:03:03
34.84.101.187	attackspam	Feb 12 06:44:04 silence02 sshd[6065]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.84.101.187 Feb 12 06:44:05 silence02 sshd[6065]: Failed password for invalid user millers from 34.84.101.187 port 60090 ssh2 Feb 12 06:47:21 silence02 sshd[6314]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.84.101.187	2020-02-12 14:13:36
39.61.45.47	attackspambots	1581485873 - 02/12/2020 06:37:53 Host: 39.61.45.47/39.61.45.47 Port: 445 TCP Blocked	2020-02-12 13:42:35
196.52.43.129	attack	" "	2020-02-12 13:35:45
173.245.203.224	attack	[2020-02-12 00:42:10] NOTICE[1148] chan_sip.c: Registration from '' failed for '173.245.203.224:59859' - Wrong password [2020-02-12 00:42:10] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-02-12T00:42:10.727-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="100",SessionID="0x7fd82c2348d8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/173.245.203.224/59859",Challenge="34b0a446",ReceivedChallenge="34b0a446",ReceivedHash="b52208bd19ba54d49523d6cb4f493efd" [2020-02-12 00:42:14] NOTICE[1148] chan_sip.c: Registration from '' failed for '173.245.203.224:63909' - Wrong password [2020-02-12 00:42:14] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-02-12T00:42:14.254-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="800",SessionID="0x7fd82c3c1c38",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/173.245.203 ...	2020-02-12 13:50:15
112.85.42.176	attack	Feb 12 06:54:06 h2779839 sshd[14027]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.176 user=root Feb 12 06:54:08 h2779839 sshd[14027]: Failed password for root from 112.85.42.176 port 43316 ssh2 Feb 12 06:54:18 h2779839 sshd[14027]: Failed password for root from 112.85.42.176 port 43316 ssh2 Feb 12 06:54:06 h2779839 sshd[14027]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.176 user=root Feb 12 06:54:08 h2779839 sshd[14027]: Failed password for root from 112.85.42.176 port 43316 ssh2 Feb 12 06:54:18 h2779839 sshd[14027]: Failed password for root from 112.85.42.176 port 43316 ssh2 Feb 12 06:54:06 h2779839 sshd[14027]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.176 user=root Feb 12 06:54:08 h2779839 sshd[14027]: Failed password for root from 112.85.42.176 port 43316 ssh2 Feb 12 06:54:18 h2779839 sshd[14027]: Failed password for ...	2020-02-12 13:56:15
67.176.183.132	attackspambots	Honeypot attack, port: 81, PTR: c-67-176-183-132.hsd1.il.comcast.net.	2020-02-12 13:43:56
14.229.249.158	attack	1581483473 - 02/12/2020 05:57:53 Host: 14.229.249.158/14.229.249.158 Port: 445 TCP Blocked	2020-02-12 13:51:57
185.175.93.3	attackspambots	ET DROP Dshield Block Listed Source group 1 - port: 3390 proto: TCP cat: Misc Attack	2020-02-12 14:10:02
195.154.92.15	attackspam	RDP Bruteforce	2020-02-12 14:08:54
47.89.247.10	attackbotsspam	Automatic report - XMLRPC Attack	2020-02-12 14:13:19

Recently Reported IPs

193.170.250.12	73.125.62.217	80.23.248.243	12.49.137.77
154.215.125.141	98.178.183.222	2003:dd:af01:9783:7811:ccf9:2557:34ef	130.133.221.43
166.159.125.121	96.30.72.68	35.192.107.248	171.242.145.135
208.93.153.63	112.229.19.172	74.112.46.5	79.249.75.145
222.136.60.195	55.50.97.85	186.159.112.226	2003:d1:7f48:6800:dce1:9775:d82f:40f1