JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 42.1.65.214

42.1.65.214 was found in our database!

This IP was reported 706 times. Confidence of Abuse is 0%: ?

ISP	Mobifone Corporation
Usage Type	Fixed Line ISP
ASN	AS131429
Domain Name	mobifone.vn
Country	🇻🇳 Viet Nam
City	Hanoi, Hanoi

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 42.1.65.214

Whois 42.1.65.214

IP Abuse Reports for 42.1.65.214:

This IP address has been reported a total of 706 times from 326 distinct sources. 42.1.65.214 was first reported on August 17th 2025, and the most recent report was 8 months ago.

Old Reports: The most recent abuse report for this IP address is from 8 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 ACE-INFORMATIQUE.NC	2025-10-01 01:07:39 (8 months ago)	Fail2ban automated report	Brute-Force
🇹🇷 rtbh.com.tr	2025-09-18 20:08:52 (8 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇮🇳 Parth Maniar	2025-09-18 16:31:37 (8 months ago)	This IP address carried out 80 SSH credential attack (attempts) on 17-09-2025. For more information ... show more This IP address carried out 80 SSH credential attack (attempts) on 17-09-2025. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter. show less	Brute-Force SSH
🇹🇷 rtbh.com.tr	2025-09-17 20:08:51 (8 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇺🇸 octageeks.com	2025-09-17 04:07:00 (8 months ago)	Wordpress malicious attack:[sshd]	Web App Attack
🇺🇸 bigscoots.com	2025-09-17 02:58:47 (8 months ago)	(sshd) Failed SSH login from 42.1.65.214 (VN/Vietnam/-): 5 in the last 3600 secs; Ports: ; Directio ... show more (sshd) Failed SSH login from 42.1.65.214 (VN/Vietnam/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Sep 16 21:53:46 12820 sshd[9723]: Invalid user rlory from 42.1.65.214 port 38328 Sep 16 21:53:47 12820 sshd[9723]: Failed password for invalid user rlory from 42.1.65.214 port 38328 ssh2 Sep 16 21:57:21 12820 sshd[10020]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.1.65.214 user=root Sep 16 21:57:24 12820 sshd[10020]: Failed password for root from 42.1.65.214 port 54846 ssh2 Sep 16 21:58:38 12820 sshd[10100]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.1.65.214 user=root show less	Brute-Force SSH
🇺🇸 Ukn0w1t	2025-09-17 02:57:30 (8 months ago)	2025-09-17T02:54:05.136369+00:00 edge-mini sshd[1167218]: Failed password for invalid user rlory fro ... show more 2025-09-17T02:54:05.136369+00:00 edge-mini sshd[1167218]: Failed password for invalid user rlory from 42.1.65.214 port 44000 ssh2 2025-09-17T02:57:27.379129+00:00 edge-mini sshd[1167258]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.1.65.214 user=root 2025-09-17T02:57:29.909265+00:00 edge-mini sshd[1167258]: Failed password for root from 42.1.65.214 port 52942 ssh2 ... show less	Brute-Force SSH
🇫🇷 Phenix Info	2025-09-17 02:56:55 (8 months ago)	SmallGuard.fr/Prestashop SSH Login Failed	Brute-Force
Anonymous	2025-09-17 02:11:15 (8 months ago)	Sep 17 02:06:23 newbrook-two sshd[923730]: Invalid user ftpuser from 42.1.65.214 port 50806 Sep 17 0 ... show more Sep 17 02:06:23 newbrook-two sshd[923730]: Invalid user ftpuser from 42.1.65.214 port 50806 Sep 17 02:07:41 newbrook-two sshd[924088]: Invalid user ubuntu from 42.1.65.214 port 50886 Sep 17 02:08:56 newbrook-two sshd[924478]: Invalid user www from 42.1.65.214 port 35192 Sep 17 02:10:04 newbrook-two sshd[924730]: Invalid user django from 42.1.65.214 port 49268 Sep 17 02:11:15 newbrook-two sshd[925074]: Invalid user titu from 42.1.65.214 port 49670 ... show less	Brute-Force
🇬🇧 benji07	2025-09-17 02:07:54 (8 months ago)	2025-09-17T03:06:29.822272+01:00 testpi sshd[134317]: pam_unix(sshd:auth): authentication failure; l ... show more 2025-09-17T03:06:29.822272+01:00 testpi sshd[134317]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.1.65.214 2025-09-17T03:06:31.208658+01:00 testpi sshd[134317]: Failed password for invalid user ftpuser from 42.1.65.214 port 55394 ssh2 2025-09-17T03:07:46.909220+01:00 testpi sshd[134336]: Invalid user ubuntu from 42.1.65.214 port 60948 2025-09-17T03:07:46.914843+01:00 testpi sshd[134336]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.1.65.214 2025-09-17T03:07:48.537047+01:00 testpi sshd[134336]: Failed password for invalid user ubuntu from 42.1.65.214 port 60948 ssh2 ... show less	DNS Compromise DNS Poisoning Fraud Orders DDoS Attack FTP Brute-Force Ping of Death Phishing Fraud VoIP Open Proxy Web Spam Email Spam Blog Spam VPN IP Port Scan Hacking SQL Injection Spoofing Brute-Force Bad Web Bot Exploited Host Web App Attack SSH IoT Targeted
🇺🇸 bigscoots.com	2025-09-17 02:06:31 (8 months ago)	42.1.65.214 (VN/Vietnam/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Port ... show more 42.1.65.214 (VN/Vietnam/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Sep 16 21:04:19 15851 sshd[8956]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.1.65.214 user=root Sep 16 21:04:21 15851 sshd[8956]: Failed password for root from 42.1.65.214 port 32808 ssh2 Sep 16 21:04:56 15851 sshd[9018]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.194.132 user=root Sep 16 21:06:15 15851 sshd[9304]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.116.245.2 user=root Sep 16 21:06:17 15851 sshd[9304]: Failed password for root from 103.116.245.2 port 55168 ssh2 IP Addresses Blocked: show less	Brute-Force SSH
🇫🇷 LRob.fr	2025-09-17 01:30:07 (8 months ago)	SSH abuse or brute-force attack detected by Fail2Ban in ssh jail	Brute-Force SSH
🇺🇸 bigscoots.com	2025-09-17 01:11:34 (8 months ago)	42.1.65.214 (VN/Vietnam/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Port ... show more 42.1.65.214 (VN/Vietnam/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Sep 16 20:10:48 15600 sshd[14297]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.1.65.214 user=root Sep 16 20:10:50 15600 sshd[14297]: Failed password for root from 42.1.65.214 port 48256 ssh2 Sep 16 20:11:29 15600 sshd[14365]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.32.254.21 user=root Sep 16 20:10:27 15600 sshd[14294]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.103.111.167 user=root Sep 16 20:10:29 15600 sshd[14294]: Failed password for root from 14.103.111.167 port 39884 ssh2 IP Addresses Blocked: show less	Brute-Force SSH
🇧🇬 MazenHost	2025-09-17 00:23:16 (8 months ago)	Sep 17 03:19:37 SuspectRP sshd[64406]: Failed password for invalid user cacti from 42.1.65.214 port ... show more Sep 17 03:19:37 SuspectRP sshd[64406]: Failed password for invalid user cacti from 42.1.65.214 port 41702 ssh2 Sep 17 03:20:47 SuspectRP sshd[64414]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.1.65.214 user=root Sep 17 03:20:49 SuspectRP sshd[64414]: Failed password for root from 42.1.65.214 port 41546 ssh2 Sep 17 03:22:00 SuspectRP sshd[64431]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.1.65.214 user=root Sep 17 03:22:02 SuspectRP sshd[64431]: Failed password for root from 42.1.65.214 port 43322 ssh2 Sep 17 03:23:13 SuspectRP sshd[64435]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.1.65.214 user=root Sep 17 03:23:16 SuspectRP sshd[64435]: Failed password for root from 42.1.65.214 port 57326 ssh2 ... show less	Brute-Force SSH
🇩🇪 alexgn	2025-09-17 00:21:01 (8 months ago)	SSH Bruteforcing Attempt from 42.1.65.214	Brute-Force SSH

Showing 1 to 15 of 706 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 193.163.125.42

🇮🇳 125.16.27.190

🇩🇪 91.92.240.42

🇧🇷 45.205.1.241

🇳🇱 31.14.32.4

🇻🇳 171.244.141.86

🇺🇸 162.243.160.109

🇺🇸 162.216.18.78

🇺🇸 147.185.132.33

🇨🇳 120.48.174.36

🇨🇳 115.230.250.243

🇨🇳 113.77.155.33

🇨🇳 81.70.96.204

🇺🇸 65.49.20.114

🇻🇳 27.76.91.46

🇮🇳 14.195.24.147

🇨🇱 190.110.124.48

🇮🇳 182.95.111.46

🇫🇷 173.249.12.38

🇻🇪 166.1.88.225