42.114.242.111

Basic Info

City: unknown

Region: unknown

Country: Viet Nam

Internet Service Provider: FPT Telecom Company

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspam	Jan 11 05:58:23 grey postfix/smtpd\[10798\]: NOQUEUE: reject: RCPT from unknown\[42.114.242.111\]: 554 5.7.1 Service unavailable\; Client host \[42.114.242.111\] blocked using dul.dnsbl.sorbs.net\; Dynamic IP Addresses See: http://www.sorbs.net/lookup.shtml\?42.114.242.111\; from=\ to=\ proto=ESMTP helo=\<\[42.114.242.111\]\> ...	2020-01-11 13:48:50

Type

Details

Datetime

attackspam

Jan 11 05:58:23 grey postfix/smtpd\[10798\]: NOQUEUE: reject: RCPT from unknown\[42.114.242.111\]: 554 5.7.1 Service unavailable\; Client host \[42.114.242.111\] blocked using dul.dnsbl.sorbs.net\; Dynamic IP Addresses See: http://www.sorbs.net/lookup.shtml\?42.114.242.111\; from=\ to=\ proto=ESMTP helo=\<\[42.114.242.111\]\>
...

2020-01-11 13:48:50

Comments on same subnet:

IP	Type	Details	Datetime
42.114.242.214	attack	Attempt to attack host OS, exploiting network vulnerabilities, on 14-04-2020 13:15:09.	2020-04-14 21:21:47
42.114.242.102	attack	Unauthorized connection attempt from IP address 42.114.242.102 on Port 445(SMB)	2020-03-27 23:00:57
42.114.242.40	attackbots	1578890811 - 01/13/2020 05:46:51 Host: 42.114.242.40/42.114.242.40 Port: 445 TCP Blocked	2020-01-13 19:57:52
42.114.242.159	attack	1578632273 - 01/10/2020 05:57:53 Host: 42.114.242.159/42.114.242.159 Port: 445 TCP Blocked	2020-01-10 13:47:33
42.114.242.79	attackspambots	1576421603 - 12/15/2019 15:53:23 Host: 42.114.242.79/42.114.242.79 Port: 445 TCP Blocked	2019-12-16 00:09:08
42.114.242.49	attackbots	Unauthorized connection attempt from IP address 42.114.242.49 on Port 445(SMB)	2019-11-16 20:11:49
42.114.242.129	attack	Unauthorised access (Oct 22) SRC=42.114.242.129 LEN=52 TTL=113 ID=28629 DF TCP DPT=445 WINDOW=8192 SYN	2019-10-23 06:58:02

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.114.242.111
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 13713
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.114.242.111.			IN	A

;; AUTHORITY SECTION:
.			529	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020011002 1800 900 604800 86400

;; Query time: 323 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jan 11 13:48:46 CST 2020
;; MSG SIZE  rcvd: 118

Host info

Host 111.242.114.42.in-addr.arpa not found: 2(SERVFAIL)

Nslookup info:

;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 111.242.114.42.in-addr.arpa: SERVFAIL

Related IP info:

Related comments:

IP	Type	Details	Datetime
179.183.226.163	attackspam	DATE:2020-02-12 14:38:51, IP:179.183.226.163, PORT:telnet Telnet brute force auth on honeypot server (epe-honey1-hq)	2020-02-13 04:45:13
113.255.13.102	attackbots	23/tcp 5555/tcp [2020-01-11/02-12]2pkt	2020-02-13 04:38:45
27.78.203.172	attackspambots	Automatic report - Port Scan Attack	2020-02-13 04:38:11
134.209.181.90	attackbotsspam	As always with digital ocean	2020-02-13 04:48:26
5.135.161.7	attackspam	Feb 12 21:29:39 server sshd\[6629\]: Invalid user franci from 5.135.161.7 Feb 12 21:29:39 server sshd\[6629\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns329327.ip-5-135-161.eu Feb 12 21:29:40 server sshd\[6629\]: Failed password for invalid user franci from 5.135.161.7 port 57211 ssh2 Feb 12 21:34:57 server sshd\[7312\]: Invalid user goober from 5.135.161.7 Feb 12 21:34:57 server sshd\[7312\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns329327.ip-5-135-161.eu Feb 12 21:35:04 server sshd\[7312\]: Failed password for invalid user goober from 5.135.161.7 port 45938 ssh2 ...	2020-02-13 04:50:57
103.5.63.10	attackspambots	SSH/22 MH Probe, BF, Hack -	2020-02-13 04:59:42
51.178.52.245	attack	Feb 12 10:40:05 ws24vmsma01 sshd[27316]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.178.52.245 Feb 12 10:40:08 ws24vmsma01 sshd[27316]: Failed password for invalid user admin from 51.178.52.245 port 41124 ssh2 ...	2020-02-13 04:56:49
112.217.207.130	attackspam	Feb 12 14:39:10 sd-53420 sshd\[5306\]: Invalid user wvlpadmin from 112.217.207.130 Feb 12 14:39:10 sd-53420 sshd\[5306\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.217.207.130 Feb 12 14:39:12 sd-53420 sshd\[5306\]: Failed password for invalid user wvlpadmin from 112.217.207.130 port 51438 ssh2 Feb 12 14:40:38 sd-53420 sshd\[5457\]: Invalid user psycho from 112.217.207.130 Feb 12 14:40:38 sd-53420 sshd\[5457\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.217.207.130 ...	2020-02-13 04:25:35
151.237.94.16	attackbots	23/tcp 23/tcp 23/tcp... [2020-01-05/02-12]4pkt,1pt.(tcp)	2020-02-13 04:26:34
173.245.203.224	attack	[2020-02-12 14:55:18] NOTICE[1148] chan_sip.c: Registration from '' failed for '173.245.203.224:50059' - Wrong password [2020-02-12 14:55:18] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-02-12T14:55:18.197-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="1000",SessionID="0x7fd82c5547b8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/173.245.203.224/50059",Challenge="7212a920",ReceivedChallenge="7212a920",ReceivedHash="ee1c3557f818495bdc2e82834b05a602" [2020-02-12 14:56:05] NOTICE[1148] chan_sip.c: Registration from '' failed for '173.245.203.224:53722' - Wrong password [2020-02-12 14:56:05] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-02-12T14:56:05.430-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="7001",SessionID="0x7fd82c5547b8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/173.245 ...	2020-02-13 04:16:50
46.97.34.210	attackspambots	23/tcp 9000/tcp [2019-12-30/2020-02-12]2pkt	2020-02-13 04:46:19
217.211.149.4	attackspam	firewall-block, port(s): 23/tcp	2020-02-13 04:57:08
27.66.124.110	attackspam	23/tcp 23/tcp 23/tcp... [2020-01-13/02-12]5pkt,1pt.(tcp)	2020-02-13 04:34:50
221.202.203.192	attack	Feb 12 05:33:07 hpm sshd\[25654\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.202.203.192 user=root Feb 12 05:33:09 hpm sshd\[25654\]: Failed password for root from 221.202.203.192 port 42632 ssh2 Feb 12 05:38:03 hpm sshd\[26231\]: Invalid user rlm from 221.202.203.192 Feb 12 05:38:03 hpm sshd\[26231\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.202.203.192 Feb 12 05:38:04 hpm sshd\[26231\]: Failed password for invalid user rlm from 221.202.203.192 port 55563 ssh2	2020-02-13 04:35:34
171.100.17.30	attackspambots	Port probing on unauthorized port 23	2020-02-13 04:26:10

Recently Reported IPs

103.87.93.20	154.152.95.215	113.56.31.148	179.13.63.41
41.38.141.6	161.87.16.184	40.192.142.209	75.96.63.97
49.186.241.12	125.219.172.133	137.74.199.250	132.148.82.204
5.189.206.209	91.219.35.246	23.94.53.226	119.155.20.182
61.216.131.31	136.136.15.116	177.69.213.198	182.74.214.226