42.118.1.4 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Viet Nam

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
42.118.1.184	attackbotsspam	445/tcp 445/tcp [2020-10-11]2pkt	2020-10-12 20:45:21
42.118.1.184	attackspambots	445/tcp 445/tcp [2020-10-11]2pkt	2020-10-12 12:14:21
42.118.121.252	attackspambots	2020-09-14T20:08:24.373954hostname sshd[70063]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.118.121.252 user=root 2020-09-14T20:08:26.670612hostname sshd[70063]: Failed password for root from 42.118.121.252 port 22598 ssh2 ...	2020-09-14 22:23:05
42.118.121.252	attack	Sep 14 06:07:17 ns382633 sshd\[2233\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.118.121.252 user=root Sep 14 06:07:20 ns382633 sshd\[2233\]: Failed password for root from 42.118.121.252 port 20196 ssh2 Sep 14 06:18:27 ns382633 sshd\[4167\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.118.121.252 user=root Sep 14 06:18:29 ns382633 sshd\[4167\]: Failed password for root from 42.118.121.252 port 40642 ssh2 Sep 14 06:23:03 ns382633 sshd\[4993\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.118.121.252 user=root	2020-09-14 14:14:24
42.118.145.176	attackbotsspam	Honeypot attack, port: 445, PTR: PTR record not found	2020-09-07 22:35:22
42.118.145.176	attack	Honeypot attack, port: 445, PTR: PTR record not found	2020-09-07 14:16:20
42.118.145.176	attack	Honeypot attack, port: 445, PTR: PTR record not found	2020-09-07 06:49:10
42.118.129.58	attack	Automatic report - Port Scan Attack	2020-09-01 12:35:23
42.118.180.109	attack	Attempted connection to port 445.	2020-08-30 17:27:31
42.118.142.1	attack	2020-08-26 22:36:52.049113-0500 localhost smtpd[75750]: NOQUEUE: reject: RCPT from unknown[42.118.142.1]: 554 5.7.1 Service unavailable; Client host [42.118.142.1] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/42.118.142.1; from= to= proto=ESMTP helo=<[42.118.142.1]>	2020-08-27 15:43:35
42.118.141.198	attackbots	Unauthorized connection attempt from IP address 42.118.141.198 on Port 445(SMB)	2020-08-19 03:27:50
42.118.157.62	attackbotsspam	1597665897 - 08/17/2020 14:04:57 Host: 42.118.157.62/42.118.157.62 Port: 445 TCP Blocked	2020-08-17 22:29:19
42.118.16.3	attackspam	TCP (SYN) 42.118.16.3:8268 -> port 445, len 52	2020-08-13 03:08:36
42.118.100.2	attackbotsspam	MultiHost/MultiPort Probe, Scan, Hack -	2020-08-12 21:36:22
42.118.140.188	attackbotsspam	Unauthorized connection attempt from IP address 42.118.140.188 on Port 445(SMB)	2020-08-12 19:15:13

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.118.1.4
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 25677
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;42.118.1.4.			IN	A

;; AUTHORITY SECTION:
.			442	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022020700 1800 900 604800 86400

;; Query time: 15 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 07 22:49:47 CST 2022
;; MSG SIZE  rcvd: 103

Host info

Host 4.1.118.42.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 4.1.118.42.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
182.253.86.10	attackspam	Unauthorized IMAP connection attempt	2020-02-12 13:36:13
173.245.203.224	attack	[2020-02-12 00:42:10] NOTICE[1148] chan_sip.c: Registration from '' failed for '173.245.203.224:59859' - Wrong password [2020-02-12 00:42:10] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-02-12T00:42:10.727-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="100",SessionID="0x7fd82c2348d8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/173.245.203.224/59859",Challenge="34b0a446",ReceivedChallenge="34b0a446",ReceivedHash="b52208bd19ba54d49523d6cb4f493efd" [2020-02-12 00:42:14] NOTICE[1148] chan_sip.c: Registration from '' failed for '173.245.203.224:63909' - Wrong password [2020-02-12 00:42:14] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-02-12T00:42:14.254-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="800",SessionID="0x7fd82c3c1c38",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/173.245.203 ...	2020-02-12 13:50:15
14.229.249.158	attack	1581483473 - 02/12/2020 05:57:53 Host: 14.229.249.158/14.229.249.158 Port: 445 TCP Blocked	2020-02-12 13:51:57
178.189.19.238	attackbotsspam	Honeypot attack, port: 445, PTR: PTR record not found	2020-02-12 13:53:46
34.213.87.129	attackbotsspam	02/12/2020-06:44:37.903402 34.213.87.129 Protocol: 6 SURICATA TLS invalid record/traffic	2020-02-12 13:57:36
220.158.148.132	attack	Feb 12 01:58:01 ws22vmsma01 sshd[99692]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.158.148.132 Feb 12 01:58:03 ws22vmsma01 sshd[99692]: Failed password for invalid user filpx from 220.158.148.132 port 57804 ssh2 ...	2020-02-12 13:44:11
222.186.30.76	attackbotsspam	Feb 12 06:35:38 MK-Soft-VM7 sshd[3424]: Failed password for root from 222.186.30.76 port 31919 ssh2 Feb 12 06:35:41 MK-Soft-VM7 sshd[3424]: Failed password for root from 222.186.30.76 port 31919 ssh2 ...	2020-02-12 13:37:09
118.89.161.136	attackbotsspam	Feb 12 05:52:55 pornomens sshd\[2468\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.89.161.136 user=root Feb 12 05:52:58 pornomens sshd\[2468\]: Failed password for root from 118.89.161.136 port 47308 ssh2 Feb 12 05:58:16 pornomens sshd\[2527\]: Invalid user rimsa from 118.89.161.136 port 48380 Feb 12 05:58:16 pornomens sshd\[2527\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.89.161.136 ...	2020-02-12 13:35:15
45.79.39.236	attack	firewall-block, port(s): 5683/udp	2020-02-12 13:57:05
27.78.14.83	attack	Feb 12 02:53:45 firewall sshd[26103]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.78.14.83 Feb 12 02:53:43 firewall sshd[26103]: Invalid user user from 27.78.14.83 Feb 12 02:53:47 firewall sshd[26103]: Failed password for invalid user user from 27.78.14.83 port 44074 ssh2 ...	2020-02-12 14:01:21
115.182.123.79	attackspam	Unauthorised access (Feb 12) SRC=115.182.123.79 LEN=40 TTL=241 ID=61684 TCP DPT=1433 WINDOW=1024 SYN	2020-02-12 13:27:15
101.96.113.50	attackspam	Feb 12 06:56:55 dedicated sshd[18902]: Invalid user 123456 from 101.96.113.50 port 50100	2020-02-12 14:05:33
182.23.36.131	attackbots	Feb 12 06:20:00 haigwepa sshd[28223]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.23.36.131 Feb 12 06:20:02 haigwepa sshd[28223]: Failed password for invalid user astra from 182.23.36.131 port 55002 ssh2 ...	2020-02-12 13:28:52
49.235.138.2	attackspambots	Feb 12 04:58:19 ws26vmsma01 sshd[206832]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.138.2 Feb 12 04:58:21 ws26vmsma01 sshd[206832]: Failed password for invalid user sahai from 49.235.138.2 port 32786 ssh2 ...	2020-02-12 13:29:54
222.186.42.155	attackspam	Feb 12 06:32:04 MK-Soft-VM7 sshd[3366]: Failed password for root from 222.186.42.155 port 42010 ssh2 Feb 12 06:32:06 MK-Soft-VM7 sshd[3366]: Failed password for root from 222.186.42.155 port 42010 ssh2 ...	2020-02-12 13:40:21

Recently Reported IPs

190.186.86.108	137.74.179.163	84.228.79.186	117.140.253.223
78.31.93.164	81.88.52.223	113.130.212.2	117.150.83.240
103.132.58.77	1.170.160.22	111.224.248.3	182.113.231.38
213.74.178.210	45.224.22.101	118.36.170.181	94.114.97.157
27.43.178.40	117.66.149.238	175.44.120.87	59.96.252.135