JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 42.1.65.204

42.1.65.204 was found in our database!

This IP was reported 44 times. Confidence of Abuse is 100%: ?

100%

ISP	Mobifone Corporation
Usage Type	Fixed Line ISP
ASN	AS131429
Domain Name	mobifone.vn
Country	🇻🇳 Viet Nam
City	Hanoi, Hanoi

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 42.1.65.204

Whois 42.1.65.204

IP Abuse Reports for 42.1.65.204:

This IP address has been reported a total of 44 times from 34 distinct sources. 42.1.65.204 was first reported on July 2nd 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇭🇺 szasa	2026-07-19 07:23:24 (1 hour ago)	Jul 19 09:23:25 fw03 sshd[328250]: Invalid user admin from 42.1.65.204 port 61093 ...	Brute-Force SSH
🇵🇹 WebTejo	2026-07-19 06:38:30 (1 hour ago)	Detected multiple authentication failures and invalid user attempts from IP address 42.1.65.204.	Brute-Force SSH
🇮🇳 evicky2002	2026-07-19 06:00:00 (2 hours ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇩🇪 Silly Development	2026-07-19 05:59:53 (2 hours ago)	Jul 19 05:56:50 mail sshd[1756648]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid ... show more Jul 19 05:56:50 mail sshd[1756648]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.1.65.204 Jul 19 05:56:52 mail sshd[1756648]: Failed password for invalid user user from 42.1.65.204 port 49444 ssh2 Jul 19 05:59:53 mail sshd[1758373]: Invalid user user from 42.1.65.204 port 58669 ... show less	Brute-Force SSH
🇭🇺 szasa	2026-07-19 04:29:08 (4 hours ago)	Jul 19 06:29:07 fw03 sshd[317067]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid= ... show more Jul 19 06:29:07 fw03 sshd[317067]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.1.65.204 user=root Jul 19 06:29:09 fw03 sshd[317067]: Failed password for root from 42.1.65.204 port 51728 ssh2 ... show less	Brute-Force SSH
🇩🇪 ghostwarriors	2026-07-19 03:20:35 (5 hours ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
🇫🇮 diego021	2026-07-19 03:09:25 (5 hours ago)	2026-07-18T21:59:37.520830-05:00 debian-hel1 sshd-session[344636]: pam_unix(sshd:auth): authenticati ... show more 2026-07-18T21:59:37.520830-05:00 debian-hel1 sshd-session[344636]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.1.65.204 2026-07-18T21:59:39.604551-05:00 debian-hel1 sshd-session[344636]: Failed password for invalid user guest from 42.1.65.204 port 63466 ssh2 2026-07-18T22:09:24.247947-05:00 debian-hel1 sshd-session[344844]: Invalid user guest from 42.1.65.204 port 64529 ... show less	Brute-Force SSH
🇬🇧 andypiper	2026-07-19 01:01:00 (7 hours ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
🇮🇹 alph44	2026-07-19 00:43:41 (7 hours ago)	SSH brute force attack detected: 5 failed attempts	Brute-Force
🇩🇪 Rechenzentrum Winterthur	2026-07-19 00:15:44 (8 hours ago)	2026-07-18T23:17:49.811223+00:00 de-ffm-lim02-mt01 sshd[81338]: pam_unix(sshd:auth): authentication ... show more 2026-07-18T23:17:49.811223+00:00 de-ffm-lim02-mt01 sshd[81338]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.1.65.204 2026-07-18T23:17:51.532087+00:00 de-ffm-lim02-mt01 sshd[81338]: Failed password for invalid user de-ffm-lim02-mt01 from 42.1.65.204 port 58698 ssh2 2026-07-19T00:15:43.498851+00:00 de-ffm-lim02-mt01 sshd[83547]: Invalid user de-ffm-lim02-mt01 from 42.1.65.204 port 54169 ... show less	Brute-Force SSH
🇩🇪 XICTRON	2026-07-19 00:00:11 (8 hours ago)	SSH brute-force attempt detected by Fail2Ban	SSH
🇭🇺 szasa	2026-07-18 23:14:56 (9 hours ago)	Jul 19 01:14:57 fw03 sshd[296918]: Invalid user test from 42.1.65.204 port 58508 ...	Brute-Force SSH
Anonymous	2026-07-18 22:33:19 (9 hours ago)	Jul 19 01:33:16 community sshd[587966]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ... show more Jul 19 01:33:16 community sshd[587966]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.1.65.204 Jul 19 01:33:18 community sshd[587966]: Failed password for invalid user debian from 42.1.65.204 port 61309 ssh2 ... show less	Brute-Force SSH
🇪🇸 tutaim.com	2026-07-18 21:02:20 (11 hours ago)	👿 42.1.65.204 has been involved in malicious and brute-force activity. Reported by umarmohammad.xyz	Brute-Force SSH
Anonymous	2026-07-18 20:37:38 (11 hours ago)	sshd	Brute-Force SSH

Showing 1 to 15 of 44 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 210.212.136.3

🇫🇮 147.185.133.33

🇨🇳 222.90.233.165

🇳🇱 176.65.148.158

🇺🇸 162.216.150.140

🇨🇳 115.231.78.11

🇺🇸 91.230.168.173

🇫🇷 85.217.140.44

🇧🇪 35.190.221.154

🇬🇧 216.226.76.10

🇻🇳 160.22.170.38

🇸🇬 145.223.131.179

🇸🇪 90.228.229.182

🇹🇷 78.173.80.22

🇫🇮 62.238.59.237

🇮🇳 49.37.117.94

🇺🇸 20.169.107.239

🇨🇦 20.151.225.23

🇺🇸 216.25.89.154

🇵🇱 176.53.159.198