42.116.68.18 - IPInfo

Basic Info

City: Da Nang

Region: Da Nang

Country: Vietnam

Internet Service Provider: FPT Telecom Company

Hostname: unknown

Organization: The Corporation for Financing & Promoting Technology

Usage Type: Fixed Line ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	Aug 16 16:17:39 thevastnessof sshd[16462]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.116.68.18 ...	2019-08-17 00:41:09

Comments on same subnet:

IP	Type	Details	Datetime
42.116.68.34	attackspam	Honeypot attack, port: 445, PTR: PTR record not found	2019-12-30 21:45:54
42.116.68.142	attackspambots	Unauthorized connection attempt from IP address 42.116.68.142 on Port 445(SMB)	2019-10-26 01:34:08
42.116.68.133	attackspambots	Unauthorized connection attempt from IP address 42.116.68.133 on Port 445(SMB)	2019-08-20 01:30:05

Type

Details

Datetime

42.116.68.34

attackspam

Honeypot attack, port: 445, PTR: PTR record not found

2019-12-30 21:45:54

42.116.68.142

attackspambots

Unauthorized connection attempt from IP address 42.116.68.142 on Port 445(SMB)

2019-10-26 01:34:08

42.116.68.133

attackspambots

Unauthorized connection attempt from IP address 42.116.68.133 on Port 445(SMB)

2019-08-20 01:30:05

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.116.68.18
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 8002
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.116.68.18.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019081600 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sat Aug 17 00:40:57 CST 2019
;; MSG SIZE  rcvd: 116

Host info

Host 18.68.116.42.in-addr.arpa not found: 2(SERVFAIL)

Nslookup info:

;; Got SERVFAIL reply from 67.207.67.2, trying next server
Server:		67.207.67.3
Address:	67.207.67.3#53

** server can't find 18.68.116.42.in-addr.arpa: SERVFAIL

Related IP info:

Related comments:

IP	Type	Details	Datetime
95.111.59.210	attack	DATE:2020-03-06 23:01:59, IP:95.111.59.210, PORT:ssh SSH brute force auth on honeypot server (epe-honey1-hq)	2020-03-07 07:35:44
177.35.73.137	attackspam	Automatic report - Port Scan Attack	2020-03-07 07:32:05
187.163.112.205	attack	Automatic report - Port Scan Attack	2020-03-07 07:32:51
221.176.134.36	attack	Brute force attempt	2020-03-07 07:24:10
54.37.157.88	attackbotsspam	Mar 7 00:27:33 sshd\[9204\]: Invalid user gordon from 54.37.157.88Mar 7 00:27:35 sshd\[9204\]: Failed password for invalid user gordon from 54.37.157.88 port 37160 ssh2 ...	2020-03-07 07:32:31
174.221.143.39	attackspam	Brute forcing email accounts	2020-03-07 07:33:20
104.129.8.222	attack	Email rejected due to spam filtering	2020-03-07 07:27:04
217.88.121.9	attackbots	Lines containing failures of 217.88.121.9 Mar 5 18:33:11 shared11 sshd[27618]: Invalid user pi from 217.88.121.9 port 34134 Mar 5 18:33:11 shared11 sshd[27618]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.88.121.9 Mar 5 18:33:11 shared11 sshd[27619]: Invalid user pi from 217.88.121.9 port 34144 Mar 5 18:33:11 shared11 sshd[27619]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.88.121.9 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=217.88.121.9	2020-03-07 07:34:31
45.82.33.240	attackbots	Mar 6 23:06:23 mail.srvfarm.net postfix/smtpd[2295108]: NOQUEUE: reject: RCPT from unknown[45.82.33.240]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Mar 6 23:08:03 mail.srvfarm.net postfix/smtpd[2298191]: NOQUEUE: reject: RCPT from unknown[45.82.33.240]: 554 5.7.1 Service unavailable; Client host [45.82.33.240] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo= Mar 6 23:08:43 mail.srvfarm.net postfix/smtpd[2311379]: NOQUEUE: reject: RCPT from unknown[45.82.33.240]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Mar 6 23:13:09 mail.srvfarm.net postfix/smtpd[2310694]: NOQUEUE: reject: R	2020-03-07 07:02:24
134.3.15.111	attackbots	" "	2020-03-07 07:18:29
167.71.57.61	attackspambots	Lines containing failures of 167.71.57.61 Mar 3 17:40:56 neweola sshd[21459]: Did not receive identification string from 167.71.57.61 port 50468 Mar 3 17:41:00 neweola sshd[21467]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.57.61 user=r.r Mar 3 17:41:02 neweola sshd[21467]: Failed password for r.r from 167.71.57.61 port 45056 ssh2 Mar 3 17:41:02 neweola sshd[21467]: Received disconnect from 167.71.57.61 port 45056:11: Normal Shutdown, Thank you for playing [preauth] Mar 3 17:41:02 neweola sshd[21467]: Disconnected from authenticating user r.r 167.71.57.61 port 45056 [preauth] Mar 3 17:41:12 neweola sshd[21494]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.57.61 user=r.r Mar 3 17:41:13 neweola sshd[21494]: Failed password for r.r from 167.71.57.61 port 41286 ssh2 Mar 3 17:41:14 neweola sshd[21494]: Received disconnect from 167.71.57.61 port 41286:11: Normal Shut........ ------------------------------	2020-03-07 07:03:34
116.230.48.59	attack	Mar 6 12:26:16 tdfoods sshd\[2566\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.230.48.59 user=tdportal Mar 6 12:26:17 tdfoods sshd\[2566\]: Failed password for tdportal from 116.230.48.59 port 51354 ssh2 Mar 6 12:30:50 tdfoods sshd\[2891\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.230.48.59 user=tdportal Mar 6 12:30:52 tdfoods sshd\[2891\]: Failed password for tdportal from 116.230.48.59 port 49220 ssh2 Mar 6 12:35:22 tdfoods sshd\[3254\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.230.48.59 user=mysql	2020-03-07 07:10:08
66.150.67.29	attackbotsspam	Mar 6 23:04:10 exim[10155]: [1\53] 1jAL4j-0002dn-J2 H=(rightwing.tititeam.com) [66.150.67.29] F= rejected after DATA: This message scored 104.5 spam points.	2020-03-07 07:22:33
172.104.92.168	attackbots	firewall-block, port(s): 4567/tcp	2020-03-07 07:26:16
140.143.127.179	attackbots	Mar 6 23:05:20 lnxded64 sshd[27071]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.127.179	2020-03-07 07:09:11

Recently Reported IPs

41.32.76.58	185.195.65.95	95.79.143.170	121.148.213.87
104.20.77.100	81.13.105.64	163.29.159.68	135.120.246.240
49.69.244.191	85.18.9.39	143.253.90.36	218.69.115.36
203.87.193.47	151.31.28.40	4.145.54.178	150.138.164.244
210.77.149.209	182.48.66.114	77.14.145.227	190.196.128.247