42.114.242.79 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Viet Nam

Internet Service Provider: FPT Telecom Company

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspambots	1576421603 - 12/15/2019 15:53:23 Host: 42.114.242.79/42.114.242.79 Port: 445 TCP Blocked	2019-12-16 00:09:08

Comments on same subnet:

IP	Type	Details	Datetime
42.114.242.214	attack	Attempt to attack host OS, exploiting network vulnerabilities, on 14-04-2020 13:15:09.	2020-04-14 21:21:47
42.114.242.102	attack	Unauthorized connection attempt from IP address 42.114.242.102 on Port 445(SMB)	2020-03-27 23:00:57
42.114.242.40	attackbots	1578890811 - 01/13/2020 05:46:51 Host: 42.114.242.40/42.114.242.40 Port: 445 TCP Blocked	2020-01-13 19:57:52
42.114.242.111	attackspam	Jan 11 05:58:23 grey postfix/smtpd\[10798\]: NOQUEUE: reject: RCPT from unknown\[42.114.242.111\]: 554 5.7.1 Service unavailable\; Client host \[42.114.242.111\] blocked using dul.dnsbl.sorbs.net\; Dynamic IP Addresses See: http://www.sorbs.net/lookup.shtml\?42.114.242.111\; from=\ to=\ proto=ESMTP helo=\<\[42.114.242.111\]\> ...	2020-01-11 13:48:50
42.114.242.159	attack	1578632273 - 01/10/2020 05:57:53 Host: 42.114.242.159/42.114.242.159 Port: 445 TCP Blocked	2020-01-10 13:47:33
42.114.242.49	attackbots	Unauthorized connection attempt from IP address 42.114.242.49 on Port 445(SMB)	2019-11-16 20:11:49
42.114.242.129	attack	Unauthorised access (Oct 22) SRC=42.114.242.129 LEN=52 TTL=113 ID=28629 DF TCP DPT=445 WINDOW=8192 SYN	2019-10-23 06:58:02

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.114.242.79
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 40937
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.114.242.79.			IN	A

;; AUTHORITY SECTION:
.			515	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019121500 1800 900 604800 86400

;; Query time: 115 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Dec 16 00:09:03 CST 2019
;; MSG SIZE  rcvd: 117

Host info

Host 79.242.114.42.in-addr.arpa not found: 2(SERVFAIL)

Nslookup info:

;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 79.242.114.42.in-addr.arpa: SERVFAIL

Related IP info:

Related comments:

IP	Type	Details	Datetime
220.134.89.118	attackbots	Found on CINS badguys / proto=6 . srcport=65507 . dstport=23 . (805)	2020-09-11 05:19:41
89.187.178.104	attackspambots	[2020-09-10 12:55:46] NOTICE[1239][C-00000d04] chan_sip.c: Call from '' (89.187.178.104:59083) to extension '9006011972595725668' rejected because extension not found in context 'public'. [2020-09-10 12:55:46] SECURITY[1264] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-09-10T12:55:46.730-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="9006011972595725668",SessionID="0x7f4d48115e28",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/89.187.178.104/59083",ACLName="no_extension_match" [2020-09-10 12:58:05] NOTICE[1239][C-00000d05] chan_sip.c: Call from '' (89.187.178.104:52435) to extension '9007011972595725668' rejected because extension not found in context 'public'. [2020-09-10 12:58:05] SECURITY[1264] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-09-10T12:58:05.330-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="9007011972595725668",SessionID="0x7f4d481284c8",LocalAddress="IPV4/UDP/192.168.244.6/5060",Remot ...	2020-09-11 05:37:05
195.54.160.180	attack	SSH Invalid Login	2020-09-11 05:47:05
175.125.95.160	attackbotsspam	Time: Thu Sep 10 16:56:06 2020 +0000 IP: 175.125.95.160 (KR/South Korea/-) Failures: 5 (sshd) Interval: 3600 seconds Blocked: Permanent Block [LF_SSHD] Log entries: Sep 10 16:48:37 vps1 sshd[20787]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.125.95.160 user=root Sep 10 16:48:38 vps1 sshd[20787]: Failed password for root from 175.125.95.160 port 54214 ssh2 Sep 10 16:53:50 vps1 sshd[20912]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.125.95.160 user=root Sep 10 16:53:52 vps1 sshd[20912]: Failed password for root from 175.125.95.160 port 59776 ssh2 Sep 10 16:56:02 vps1 sshd[20975]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.125.95.160 user=root	2020-09-11 05:35:18
79.129.29.237	attackspambots	bruteforce detected	2020-09-11 05:59:48
62.234.17.74	attackbots	2020-09-10T17:10:48.066369shield sshd\[8118\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.17.74 user=root 2020-09-10T17:10:50.142915shield sshd\[8118\]: Failed password for root from 62.234.17.74 port 49278 ssh2 2020-09-10T17:13:55.909482shield sshd\[8916\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.17.74 user=root 2020-09-10T17:13:57.323822shield sshd\[8916\]: Failed password for root from 62.234.17.74 port 59128 ssh2 2020-09-10T17:17:01.162341shield sshd\[9570\]: Invalid user hama from 62.234.17.74 port 40746	2020-09-11 05:40:56
158.69.35.227	attack	Sep 10 23:12:47 vpn01 sshd[14892]: Failed password for root from 158.69.35.227 port 43221 ssh2 Sep 10 23:12:50 vpn01 sshd[14892]: Failed password for root from 158.69.35.227 port 43221 ssh2 ...	2020-09-11 05:21:04
104.51.161.162	attackbotsspam	Sep 10 21:01:35 ssh2 sshd[17414]: User root from 104-51-161-162.lightspeed.miamfl.sbcglobal.net not allowed because not listed in AllowUsers Sep 10 21:01:36 ssh2 sshd[17414]: Failed password for invalid user root from 104.51.161.162 port 33066 ssh2 Sep 10 21:01:36 ssh2 sshd[17414]: Connection closed by invalid user root 104.51.161.162 port 33066 [preauth] ...	2020-09-11 05:27:56
164.132.41.67	attackspam	Sep 10 20:17:31 rancher-0 sshd[1526253]: Invalid user ftpuser from 164.132.41.67 port 40913 Sep 10 20:17:33 rancher-0 sshd[1526253]: Failed password for invalid user ftpuser from 164.132.41.67 port 40913 ssh2 ...	2020-09-11 05:36:46
54.36.165.34	attackbotsspam	Sep 10 21:21:40 game-panel sshd[17374]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.36.165.34 Sep 10 21:21:42 game-panel sshd[17374]: Failed password for invalid user zhangzhenjin from 54.36.165.34 port 47482 ssh2 Sep 10 21:22:23 game-panel sshd[17393]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.36.165.34	2020-09-11 05:29:35
118.89.108.37	attackspambots	Sep 10 18:19:40 firewall sshd[26292]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.89.108.37 user=root Sep 10 18:19:42 firewall sshd[26292]: Failed password for root from 118.89.108.37 port 33892 ssh2 Sep 10 18:22:58 firewall sshd[26368]: Invalid user john from 118.89.108.37 ...	2020-09-11 05:47:47
113.253.82.121	attackspam	Sep 10 21:00:48 ssh2 sshd[17317]: User root from 113.253.82.121 not allowed because not listed in AllowUsers Sep 10 21:00:48 ssh2 sshd[17317]: Failed password for invalid user root from 113.253.82.121 port 59292 ssh2 Sep 10 21:00:48 ssh2 sshd[17317]: Connection closed by invalid user root 113.253.82.121 port 59292 [preauth] ...	2020-09-11 05:34:47
222.186.180.130	attackbots	Sep 10 23:36:41 dev0-dcde-rnet sshd[25110]: Failed password for root from 222.186.180.130 port 51658 ssh2 Sep 10 23:36:43 dev0-dcde-rnet sshd[25110]: Failed password for root from 222.186.180.130 port 51658 ssh2 Sep 10 23:36:45 dev0-dcde-rnet sshd[25110]: Failed password for root from 222.186.180.130 port 51658 ssh2	2020-09-11 05:39:51
120.92.10.24	attackspambots	(sshd) Failed SSH login from 120.92.10.24 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 10 15:17:40 server2 sshd[3800]: Invalid user nick from 120.92.10.24 Sep 10 15:17:40 server2 sshd[3800]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.92.10.24 Sep 10 15:17:43 server2 sshd[3800]: Failed password for invalid user nick from 120.92.10.24 port 40808 ssh2 Sep 10 15:22:30 server2 sshd[8208]: Invalid user bollman from 120.92.10.24 Sep 10 15:22:30 server2 sshd[8208]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.92.10.24	2020-09-11 05:33:10
220.132.123.13	attackspam	Port Scan detected! ...	2020-09-11 05:23:24

Recently Reported IPs

119.182.141.31	122.142.90.16	179.151.197.34	252.134.164.10
187.145.255.230	76.40.254.253	111.90.150.42	78.178.8.152
197.51.236.207	29.172.250.22	81.177.6.164	12.235.16.157
98.208.171.159	49.110.120.240	136.89.12.169	21.47.84.226
94.233.31.230	210.180.164.220	94.159.69.229	21.237.182.88