42.118.80.44 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Viet Nam

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
42.118.80.102	attackbotsspam	Unauthorized connection attempt detected from IP address 42.118.80.102 to port 85 [T]	2020-05-13 16:38:49
42.118.80.123	attackbotsspam	Honeypot attack, port: 81, PTR: PTR record not found	2020-02-28 21:25:02

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.118.80.44
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 33456
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;42.118.80.44.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025012600 1800 900 604800 86400

;; Query time: 11 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jan 26 14:32:10 CST 2025
;; MSG SIZE  rcvd: 105

Host info

Host 44.80.118.42.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 44.80.118.42.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
120.29.85.189	attack	php WP PHPmyadamin ABUSE blocked for 12h	2020-08-07 18:36:22
54.38.190.48	attackspambots	Port Scan detected from 54.38.190.48 (FR/France/Grand Est/Strasbourg/48.ip-54-38-190.eu). 4 hits in the last 100 seconds	2020-08-07 18:04:59
58.210.64.98	attackbotsspam	firewall-block, port(s): 1433/tcp	2020-08-07 18:31:38
154.0.175.211	attackbotsspam	Automatic report - Banned IP Access	2020-08-07 18:35:48
154.0.57.187	attackspambots	www.goldgier.de 154.0.57.187 [07/Aug/2020:05:49:58 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4563 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.109 Safari/537.36" www.goldgier.de 154.0.57.187 [07/Aug/2020:05:50:02 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4563 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.109 Safari/537.36"	2020-08-07 18:33:35
121.122.81.195	attackbotsspam	Aug 6 12:54:41 scivo sshd[2914]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.122.81.195 user=r.r Aug 6 12:54:43 scivo sshd[2914]: Failed password for r.r from 121.122.81.195 port 27290 ssh2 Aug 6 12:54:43 scivo sshd[2914]: Received disconnect from 121.122.81.195: 11: Bye Bye [preauth] Aug 6 12:59:17 scivo sshd[3171]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.122.81.195 user=r.r Aug 6 12:59:19 scivo sshd[3171]: Failed password for r.r from 121.122.81.195 port 21425 ssh2 Aug 6 12:59:19 scivo sshd[3171]: Received disconnect from 121.122.81.195: 11: Bye Bye [preauth] Aug 6 13:03:54 scivo sshd[3398]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.122.81.195 user=r.r Aug 6 13:03:57 scivo sshd[3398]: Failed password for r.r from 121.122.81.195 port 54912 ssh2 Aug 6 13:03:57 scivo sshd[3398]: Received disconnect from 121.122......... -------------------------------	2020-08-07 18:07:24
116.196.106.169	attack	Aug 7 07:58:34 vpn01 sshd[24687]: Failed password for root from 116.196.106.169 port 57724 ssh2 ...	2020-08-07 18:19:39
149.202.76.77	attackbotsspam	[2020-08-07 06:09:07] NOTICE[1248] chan_sip.c: Registration from '' failed for '149.202.76.77:57345' - Wrong password [2020-08-07 06:09:07] SECURITY[1275] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-08-07T06:09:07.905-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="8999",SessionID="0x7f2720161a78",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/149.202.76.77/57345",Challenge="3bead5c0",ReceivedChallenge="3bead5c0",ReceivedHash="a81c0882e8dfeb39329c2165e953e269" [2020-08-07 06:09:38] NOTICE[1248] chan_sip.c: Registration from '' failed for '149.202.76.77:53509' - Wrong password [2020-08-07 06:09:38] SECURITY[1275] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-08-07T06:09:38.767-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="8001",SessionID="0x7f272021cc58",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/149.202.76.77 ...	2020-08-07 18:09:56
185.204.3.36	attackspam	Aug 7 11:33:10 host sshd[16866]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=gis.as-kair.ru user=root Aug 7 11:33:11 host sshd[16866]: Failed password for root from 185.204.3.36 port 41422 ssh2 ...	2020-08-07 18:30:12
103.98.17.23	attack	Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-08-07T09:47:46Z and 2020-08-07T09:57:10Z	2020-08-07 18:12:14
59.149.68.33	attackbots	2020-08-07T05:38:51.293591mail.broermann.family sshd[14065]: Failed password for root from 59.149.68.33 port 43230 ssh2 2020-08-07T05:44:28.293679mail.broermann.family sshd[14294]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=059149068033.ctinets.com user=root 2020-08-07T05:44:29.653247mail.broermann.family sshd[14294]: Failed password for root from 59.149.68.33 port 54742 ssh2 2020-08-07T05:50:10.325231mail.broermann.family sshd[14590]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=059149068033.ctinets.com user=root 2020-08-07T05:50:12.637732mail.broermann.family sshd[14590]: Failed password for root from 59.149.68.33 port 38026 ssh2 ...	2020-08-07 18:27:18
125.26.108.70	attackbots	Dovecot Invalid User Login Attempt.	2020-08-07 18:43:19
178.72.65.66	attackbotsspam	Unauthorized connection attempt detected from IP address 178.72.65.66 to port 445 [T]	2020-08-07 18:38:41
123.16.236.0	attack	Icarus honeypot on github	2020-08-07 18:29:56
222.186.180.147	attack	Aug 7 10:08:02 scw-6657dc sshd[3153]: Failed password for root from 222.186.180.147 port 4520 ssh2 Aug 7 10:08:02 scw-6657dc sshd[3153]: Failed password for root from 222.186.180.147 port 4520 ssh2 Aug 7 10:08:06 scw-6657dc sshd[3153]: Failed password for root from 222.186.180.147 port 4520 ssh2 ...	2020-08-07 18:11:01

Recently Reported IPs

234.22.113.182	142.57.50.187	115.111.194.203	47.120.56.233
176.21.71.15	155.243.173.171	61.44.206.234	148.156.132.75
188.59.96.124	67.248.161.192	162.8.28.156	122.108.193.61
50.182.44.121	194.47.80.140	167.243.14.32	252.167.4.145
164.123.125.172	147.238.190.168	186.39.92.45	108.35.175.121