Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Ho Chi Minh City

Region: Ho Chi Minh

Country: Vietnam

Internet Service Provider: FPT Telecom Company

Hostname: unknown

Organization: The Corporation for Financing & Promoting Technology

Usage Type: Fixed Line ISP

Comments:
Type Details Datetime
attackbots
Jul  7 09:27:01 www sshd\[17488\]: Invalid user andrei from 42.116.19.254 port 39376
...
2019-07-07 18:18:03
attackbots
Jul  1 03:34:17 sanyalnet-cloud-vps2 sshd[9034]: Connection from 42.116.19.254 port 46645 on 45.62.253.138 port 22
Jul  1 03:34:33 sanyalnet-cloud-vps2 sshd[9034]: Invalid user pian from 42.116.19.254 port 46645
Jul  1 03:34:33 sanyalnet-cloud-vps2 sshd[9034]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.116.19.254
Jul  1 03:34:35 sanyalnet-cloud-vps2 sshd[9034]: Failed password for invalid user pian from 42.116.19.254 port 46645 ssh2
Jul  1 03:34:35 sanyalnet-cloud-vps2 sshd[9034]: Received disconnect from 42.116.19.254 port 46645:11: Bye Bye [preauth]
Jul  1 03:34:35 sanyalnet-cloud-vps2 sshd[9034]: Disconnected from 42.116.19.254 port 46645 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=42.116.19.254
2019-07-01 18:27:37
attackbots
Jun 28 05:04:28 sshgateway sshd\[30157\]: Invalid user lost from 42.116.19.254
Jun 28 05:04:28 sshgateway sshd\[30157\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.116.19.254
Jun 28 05:04:30 sshgateway sshd\[30157\]: Failed password for invalid user lost from 42.116.19.254 port 36615 ssh2
2019-06-28 21:36:30
Comments on same subnet:
IP Type Details Datetime
42.116.195.146 attackbotsspam
Attempted connection to port 445.
2020-09-03 23:25:48
42.116.195.146 attackbotsspam
Attempted connection to port 445.
2020-09-03 14:58:30
42.116.195.146 attackspam
Attempted connection to port 445.
2020-09-03 07:11:22
42.116.19.78 attack
WordPress brute force
2020-06-26 06:01:40
42.116.190.55 attackbots
Unauthorized connection attempt detected from IP address 42.116.190.55 to port 23 [J]
2020-01-16 00:34:17
42.116.19.140 attackbots
Unauthorized connection attempt from IP address 42.116.19.140 on Port 445(SMB)
2019-11-02 02:38:45
42.116.19.140 attackbots
Unauthorized connection attempt from IP address 42.116.19.140 on Port 445(SMB)
2019-10-30 03:12:29
42.116.195.236 attackspam
port scan and connect, tcp 23 (telnet)
2019-09-15 00:41:58
Whois info:
b
Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.116.19.254
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 57460
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.116.19.254.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019041702 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Thu Apr 18 10:42:37 +08 2019
;; MSG SIZE  rcvd: 117

Host info
Host 254.19.116.42.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		67.207.67.3
Address:	67.207.67.3#53

** server can't find 254.19.116.42.in-addr.arpa: NXDOMAIN

Related IP info:
Related comments:
IP Type Details Datetime
37.217.153.98 attackspam
IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/37.217.153.98/ 
 
 SA - 1H : (19)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : SA 
 NAME ASN : ASN35819 
 
 IP : 37.217.153.98 
 
 CIDR : 37.217.128.0/17 
 
 PREFIX COUNT : 446 
 
 UNIQUE IP COUNT : 2353408 
 
 
 ATTACKS DETECTED ASN35819 :  
  1H - 1 
  3H - 1 
  6H - 1 
 12H - 1 
 24H - 1 
 
 DateTime : 2019-11-07 15:43:24 
 
 INFO : Port Scan TELNET Detected and Blocked by ADMIN  - data recovery
2019-11-08 03:44:18
157.230.179.102 attackspambots
Nov  7 20:38:23 server sshd\[25078\]: Invalid user adrian from 157.230.179.102
Nov  7 20:38:23 server sshd\[25078\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=container.aws3.net 
Nov  7 20:38:25 server sshd\[25078\]: Failed password for invalid user adrian from 157.230.179.102 port 49416 ssh2
Nov  7 22:46:06 server sshd\[27644\]: Invalid user adrian from 157.230.179.102
Nov  7 22:46:06 server sshd\[27644\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=container.aws3.net 
...
2019-11-08 03:56:09
191.251.203.137 attackbotsspam
Automatic report - Port Scan Attack
2019-11-08 03:35:12
147.135.255.107 attackspam
Nov  7 19:44:31 vmanager6029 sshd\[15569\]: Invalid user nipa from 147.135.255.107 port 56236
Nov  7 19:44:31 vmanager6029 sshd\[15569\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=147.135.255.107
Nov  7 19:44:33 vmanager6029 sshd\[15569\]: Failed password for invalid user nipa from 147.135.255.107 port 56236 ssh2
2019-11-08 03:33:48
3.85.185.56 attack
2019-11-07T18:24:29.374576shield sshd\[7543\]: Invalid user git from 3.85.185.56 port 34282
2019-11-07T18:24:29.379214shield sshd\[7543\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ec2-3-85-185-56.compute-1.amazonaws.com
2019-11-07T18:24:31.769865shield sshd\[7543\]: Failed password for invalid user git from 3.85.185.56 port 34282 ssh2
2019-11-07T18:25:42.230438shield sshd\[7661\]: Invalid user git from 3.85.185.56 port 47841
2019-11-07T18:25:42.234541shield sshd\[7661\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ec2-3-85-185-56.compute-1.amazonaws.com
2019-11-08 04:04:15
111.181.67.99 attackspam
Web app attack attempt
2019-11-08 03:45:51
51.83.71.72 attackspambots
Nov  7 20:37:51 mail postfix/smtpd[9780]: warning: 72.ip-51-83-71.eu[51.83.71.72]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Nov  7 20:38:20 mail postfix/smtpd[9751]: warning: 72.ip-51-83-71.eu[51.83.71.72]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Nov  7 20:43:09 mail postfix/smtpd[13256]: warning: 72.ip-51-83-71.eu[51.83.71.72]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
2019-11-08 03:54:58
157.245.12.150 attackbotsspam
Nov  7 17:04:48 XXX sshd[3186]: Invalid user fake from 157.245.12.150 port 34080
2019-11-08 03:47:25
177.101.1.165 attackspam
Automatic report - Port Scan Attack
2019-11-08 03:49:48
45.55.224.209 attackspam
Nov  7 17:26:17 mail sshd[15612]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.224.209  user=root
Nov  7 17:26:19 mail sshd[15612]: Failed password for root from 45.55.224.209 port 49619 ssh2
...
2019-11-08 03:30:43
81.133.73.161 attackspambots
Nov  7 11:39:21 firewall sshd[14933]: Invalid user gorilla from 81.133.73.161
Nov  7 11:39:23 firewall sshd[14933]: Failed password for invalid user gorilla from 81.133.73.161 port 36729 ssh2
Nov  7 11:43:00 firewall sshd[15009]: Invalid user zaq1xsw2g from 81.133.73.161
...
2019-11-08 04:00:09
149.56.131.73 attack
Automatic report - Banned IP Access
2019-11-08 03:27:40
185.53.88.33 attackbots
\[2019-11-07 14:17:04\] NOTICE\[2601\] chan_sip.c: Registration from '"401" \' failed for '185.53.88.33:5628' - Wrong password
\[2019-11-07 14:17:04\] SECURITY\[2634\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-11-07T14:17:04.166-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="401",SessionID="0x7fdf2c7cd048",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.53.88.33/5628",Challenge="23d76077",ReceivedChallenge="23d76077",ReceivedHash="ff2e0e1e9022ddd07c1da08268830e33"
\[2019-11-07 14:17:04\] NOTICE\[2601\] chan_sip.c: Registration from '"401" \' failed for '185.53.88.33:5628' - Wrong password
\[2019-11-07 14:17:04\] SECURITY\[2634\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-11-07T14:17:04.270-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="401",SessionID="0x7fdf2c3f5928",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.53.
2019-11-08 03:49:05
112.85.42.195 attackspam
Nov  7 19:23:19 game-panel sshd[30975]: Failed password for root from 112.85.42.195 port 10502 ssh2
Nov  7 19:25:12 game-panel sshd[31063]: Failed password for root from 112.85.42.195 port 63109 ssh2
Nov  7 19:25:15 game-panel sshd[31063]: Failed password for root from 112.85.42.195 port 63109 ssh2
2019-11-08 03:36:21
158.69.25.36 attack
Nov  7 20:29:00 SilenceServices sshd[28751]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=158.69.25.36
Nov  7 20:29:02 SilenceServices sshd[28751]: Failed password for invalid user thomas from 158.69.25.36 port 50050 ssh2
Nov  7 20:32:29 SilenceServices sshd[31010]: Failed password for root from 158.69.25.36 port 58462 ssh2
2019-11-08 03:38:36

Recently Reported IPs

61.118.35.94 188.52.111.127 60.243.246.94 5.252.176.20
47.74.186.195 42.86.95.59 46.231.12.250 46.191.170.206
87.98.161.56 46.191.168.34 46.191.168.142 46.173.214.3
46.148.39.156 46.100.250.99 43.252.25.117 43.239.69.135
39.36.132.105 181.229.204.13 36.74.185.53 196.202.80.167