42.117.213.125

Basic Info

City: unknown

Region: unknown

Country: Viet Nam

Internet Service Provider: FPT Telecom Company

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspam	23/tcp [2019-12-27]1pkt	2019-12-27 15:53:55

Comments on same subnet:

IP	Type	Details	Datetime
42.117.213.42	attack	Telnet Server BruteForce Attack	2020-08-02 18:03:25
42.117.213.113	attackbots	Tried our host z.	2020-08-02 03:09:28
42.117.213.0	attackspam	Telnet/23 MH Probe, Scan, BF, Hack -	2020-08-02 01:48:26
42.117.213.31	attack	Auto Detect Rule! proto TCP (SYN), 42.117.213.31:64695->gjan.info:23, len 40	2020-08-01 07:49:29
42.117.213.73	attackbotsspam	Telnet Honeypot -> Telnet Bruteforce / Login	2020-07-23 17:26:16
42.117.213.105	attack	" "	2020-07-07 19:27:27
42.117.213.61	attack	Telnet/23 MH Probe, Scan, BF, Hack -	2020-05-26 17:01:40
42.117.213.87	attackspam	port scan and connect, tcp 23 (telnet)	2020-05-24 15:38:30
42.117.213.60	attackbotsspam	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-29 13:02:09
42.117.213.111	attack	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-28 23:25:47
42.117.213.14	attackspambots	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-28 23:23:31
42.117.213.16	attackbots	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-28 23:18:31
42.117.213.39	attackspam	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-28 23:13:40
42.117.213.8	attack	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-28 23:03:28
42.117.213.127	attackspam	Port probing on unauthorized port 23	2020-02-24 06:08:52

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.117.213.125
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11902
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.117.213.125.			IN	A

;; AUTHORITY SECTION:
.			539	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019122700 1800 900 604800 86400

;; Query time: 63 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Dec 27 15:53:52 CST 2019
;; MSG SIZE  rcvd: 118

Host info

Host 125.213.117.42.in-addr.arpa not found: 2(SERVFAIL)

Nslookup info:

;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 125.213.117.42.in-addr.arpa: SERVFAIL

Related IP info:

Related comments:

IP	Type	Details	Datetime
139.59.59.102	attack	firewall-block, port(s): 448/tcp	2020-06-27 17:37:15
49.233.148.2	attackspam	Jun 27 15:59:34 webhost01 sshd[32594]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.148.2 Jun 27 15:59:35 webhost01 sshd[32594]: Failed password for invalid user max from 49.233.148.2 port 36398 ssh2 ...	2020-06-27 17:25:14
45.118.151.85	attack	2020-06-26T23:44:05.337480hostname sshd[3397]: Invalid user mayan from 45.118.151.85 port 51877 2020-06-26T23:44:07.529784hostname sshd[3397]: Failed password for invalid user mayan from 45.118.151.85 port 51877 ssh2 2020-06-26T23:48:11.507965hostname sshd[6979]: Invalid user lds from 45.118.151.85 port 51918 ...	2020-06-27 17:27:10
77.42.124.193	attackbotsspam	Automatic report - Port Scan Attack	2020-06-27 17:37:34
62.234.2.59	attackspambots	Jun 27 07:54:36 pve1 sshd[2636]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.2.59 Jun 27 07:54:38 pve1 sshd[2636]: Failed password for invalid user lyy from 62.234.2.59 port 52176 ssh2 ...	2020-06-27 17:41:33
64.202.189.187	attack	64.202.189.187 - - [27/Jun/2020:09:39:45 +0100] "POST /wp-login.php HTTP/1.1" 200 1949 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 64.202.189.187 - - [27/Jun/2020:09:39:48 +0100] "POST /wp-login.php HTTP/1.1" 200 1970 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 64.202.189.187 - - [27/Jun/2020:09:39:49 +0100] "POST /xmlrpc.php HTTP/1.1" 200 247 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-06-27 17:06:17
208.109.10.252	attackspambots	WordPress wp-login brute force :: 208.109.10.252 0.092 - [27/Jun/2020:06:40:28 0000] [censored_1] "POST /wp-login.php HTTP/1.1" 200 1837 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "HTTP/1.1"	2020-06-27 17:37:51
121.229.0.154	attackbots	Invalid user start from 121.229.0.154 port 36426	2020-06-27 17:23:44
84.242.176.138	attackspambots	Jun 27 11:11:20 debian-2gb-nbg1-2 kernel: \[15507733.609456\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=84.242.176.138 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=19068 PROTO=TCP SPT=56722 DPT=2450 WINDOW=1024 RES=0x00 SYN URGP=0	2020-06-27 17:36:07
181.126.83.125	attackbots	Jun 27 11:03:52 abendstille sshd\[19959\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.126.83.125 user=root Jun 27 11:03:53 abendstille sshd\[19959\]: Failed password for root from 181.126.83.125 port 60246 ssh2 Jun 27 11:08:46 abendstille sshd\[24638\]: Invalid user user from 181.126.83.125 Jun 27 11:08:46 abendstille sshd\[24638\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.126.83.125 Jun 27 11:08:47 abendstille sshd\[24638\]: Failed password for invalid user user from 181.126.83.125 port 32958 ssh2 ...	2020-06-27 17:24:15
43.254.220.207	attack	frenzy	2020-06-27 17:39:21
118.130.153.101	attack	$f2bV_matches	2020-06-27 17:29:51
5.196.218.152	attackbots	2020-06-27T08:08:29.122663galaxy.wi.uni-potsdam.de sshd[17901]: Invalid user vnc from 5.196.218.152 port 42693 2020-06-27T08:08:29.124547galaxy.wi.uni-potsdam.de sshd[17901]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip152.ip-5-196-218.eu 2020-06-27T08:08:29.122663galaxy.wi.uni-potsdam.de sshd[17901]: Invalid user vnc from 5.196.218.152 port 42693 2020-06-27T08:08:31.253184galaxy.wi.uni-potsdam.de sshd[17901]: Failed password for invalid user vnc from 5.196.218.152 port 42693 ssh2 2020-06-27T08:11:45.342546galaxy.wi.uni-potsdam.de sshd[18288]: Invalid user upload from 5.196.218.152 port 42764 2020-06-27T08:11:45.344398galaxy.wi.uni-potsdam.de sshd[18288]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip152.ip-5-196-218.eu 2020-06-27T08:11:45.342546galaxy.wi.uni-potsdam.de sshd[18288]: Invalid user upload from 5.196.218.152 port 42764 2020-06-27T08:11:47.411930galaxy.wi.uni-potsdam.de sshd[18288]: Fa ...	2020-06-27 17:17:01
89.248.160.150	attackbotsspam	Fail2Ban Ban Triggered	2020-06-27 17:43:40
84.54.95.142	attackspambots	Jun 27 05:50:58 smtp postfix/smtpd[95617]: NOQUEUE: reject: RCPT from unknown[84.54.95.142]: 554 5.7.1 Service unavailable; Client host [84.54.95.142] blocked using cbl.abuseat.org; Blocked - see http://www.abuseat.org/lookup.cgi?ip=84.54.95.142; from= to= proto=ESMTP helo=<[213.230.113.52]> ...	2020-06-27 17:31:15

Recently Reported IPs

178.176.167.195	121.229.1.13	185.172.110.204	42.114.191.63
175.4.250.44	114.237.134.247	58.21.66.21	34.76.139.67
14.163.136.227	121.229.49.33	116.206.8.16	103.255.7.8
115.221.127.103	113.23.99.31	188.166.60.138	85.96.2.14
89.103.144.140	182.53.85.25	119.54.115.221	14.226.43.181