Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: China Mobile Communications Corporation

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Make a comment on this IP
Type Details Datetime
attack 
Automatic report - Port Scan Attack
 2020-01-29 16:06:39
Comments on same subnet:
IP Type Details Datetime
111.42.103.6 attackspambots 
 TCP (SYN) 111.42.103.6:39245 -> port 2323, len 40
 2020-05-20 05:45:18
111.42.103.37 attackspam 
Unauthorized connection attempt detected from IP address 111.42.103.37 to port 23 [T]
 2020-01-17 07:08:55
111.42.103.19 attackspam 
Mirai and Reaper Exploitation Traffic
 2019-12-10 01:51:06
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 111.42.103.78
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 61950
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;111.42.103.78.			IN	A

;; AUTHORITY SECTION:
.			558	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020012900 1800 900 604800 86400

;; Query time: 110 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jan 29 16:06:28 CST 2020
;; MSG SIZE  rcvd: 117
Host info
Host 78.103.42.111.in-addr.arpa not found: 2(SERVFAIL)
Nslookup info:
;; Got SERVFAIL reply from 100.100.2.136, trying next server
;; Got SERVFAIL reply from 100.100.2.138, trying next server
Server:		100.100.2.138
Address:	100.100.2.138#53

** server can't find 78.103.42.111.in-addr.arpa: SERVFAIL
Related IP info:
111.42.103.222
111.42.103.67
111.42.103.196
111.42.103.43
111.42.103.188
111.42.103.185
111.42.103.250
111.42.103.118
111.42.103.206
111.42.103.107
111.42.103.49
111.42.103.195
111.42.103.23
111.42.103.105
111.42.103.46
111.42.103.240
111.42.103.30
111.42.103.80
111.42.103.19
111.42.103.8
111.42.103.15
111.42.103.117
111.42.103.132
111.42.103.94
111.42.103.201
111.42.103.179
111.42.103.103
111.42.103.175
111.42.103.218
111.42.103.85
111.42.103.93
111.42.103.156
111.42.103.51
111.42.103.61
111.42.103.220
111.42.103.128
111.42.103.253
111.42.103.168
111.42.103.17
111.42.103.88
111.42.103.241
111.42.103.150
111.42.103.223
111.42.103.38
111.42.103.1
111.42.103.74
111.42.103.140
111.42.103.53
111.42.103.230
111.42.103.59
111.42.103.109
111.42.103.56
111.42.103.169
111.42.103.191
111.42.103.6
111.42.103.99
111.42.103.177
111.42.103.205
111.42.103.65
111.42.103.125
111.42.103.64
111.42.103.37
111.42.103.227
111.42.103.247
111.42.103.73
111.42.103.126
111.42.103.137
111.42.103.199
111.42.103.193
111.42.103.170
111.42.103.84
111.42.103.120
111.42.103.106
111.42.103.20
111.42.103.136
111.42.103.10
111.42.103.161
111.42.103.108
111.42.103.208
111.42.103.232
111.42.103.87
111.42.103.171
111.42.103.92
111.42.103.133
111.42.103.7
111.42.103.98
111.42.103.100
111.42.103.12
111.42.103.76
111.42.103.234
111.42.103.79
111.42.103.113
111.42.103.36
111.42.103.252
111.42.103.25
111.42.103.164
111.42.103.32
111.42.103.221
111.42.103.24
111.42.103.225
111.42.103.18
111.42.103.207
111.42.103.5
111.42.103.211
111.42.103.130
111.42.103.158
111.42.103.176
111.42.103.174
111.42.103.60
111.42.103.231
111.42.103.245
111.42.103.254
111.42.103.160
111.42.103.2
111.42.103.157
111.42.103.40
111.42.103.131
111.42.103.244
111.42.103.39
111.42.103.122
111.42.103.202
111.42.103.194
111.42.103.70
111.42.103.209
111.42.103.197
111.42.103.151
111.42.103.96
111.42.103.63
111.42.103.198
111.42.103.162
111.42.103.147
111.42.103.214
111.42.103.95
111.42.103.216
111.42.103.242
111.42.103.178
111.42.103.124
111.42.103.145
111.42.103.55
111.42.103.29
111.42.103.159
111.42.103.14
111.42.103.143
111.42.103.34
111.42.103.246
111.42.103.75
111.42.103.213
111.42.103.142
111.42.103.210
111.42.103.251
111.42.103.44
111.42.103.183
111.42.103.116
111.42.103.200
111.42.103.121
111.42.103.41
111.42.103.184
111.42.103.141
111.42.103.236
111.42.103.3
111.42.103.33
111.42.103.112
111.42.103.119
111.42.103.228
111.42.103.114
111.42.103.226
111.42.103.243
111.42.103.45
111.42.103.153
111.42.103.129
111.42.103.115
111.42.103.27
111.42.103.77
111.42.103.135
111.42.103.154
111.42.103.165
111.42.103.68
111.42.103.91
111.42.103.233
111.42.103.139
111.42.103.4
111.42.103.235
111.42.103.62
111.42.103.167
111.42.103.249
111.42.103.172
111.42.103.186
111.42.103.72
111.42.103.66
111.42.103.101
111.42.103.189
111.42.103.83
111.42.103.219
111.42.103.187
111.42.103.71
111.42.103.82
111.42.103.238
111.42.103.146
111.42.103.102
111.42.103.86
111.42.103.248
111.42.103.111
111.42.103.203
111.42.103.54
111.42.103.16
111.42.103.50
111.42.103.181
111.42.103.149
111.42.103.229
111.42.103.127
111.42.103.123
111.42.103.192
111.42.103.58
111.42.103.180
111.42.103.42
111.42.103.104
111.42.103.35
111.42.103.11
111.42.103.204
111.42.103.163
111.42.103.13
111.42.103.31
111.42.103.215
111.42.103.26
111.42.103.89
111.42.103.81
111.42.103.217
111.42.103.28
111.42.103.237
111.42.103.155
111.42.103.224
111.42.103.52
111.42.103.69
111.42.103.22
111.42.103.239
111.42.103.90
111.42.103.148
111.42.103.21
111.42.103.212
111.42.103.138
111.42.103.97
111.42.103.78
111.42.103.152
111.42.103.144
111.42.103.48
111.42.103.173
111.42.103.190
111.42.103.110
111.42.103.166
111.42.103.182
111.42.103.47
111.42.103.9
111.42.103.57
111.42.103.134
Related comments:
IP Type Details Datetime
46.38.150.37 attackspam 
Jul 16 09:48:36 websrv1.derweidener.de postfix/smtpd[1661296]: warning: unknown[46.38.150.37]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jul 16 09:49:35 websrv1.derweidener.de postfix/smtpd[1661296]: warning: unknown[46.38.150.37]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jul 16 09:50:33 websrv1.derweidener.de postfix/smtpd[1663017]: warning: unknown[46.38.150.37]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jul 16 09:51:33 websrv1.derweidener.de postfix/smtpd[1663017]: warning: unknown[46.38.150.37]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jul 16 09:52:31 websrv1.derweidener.de postfix/smtpd[1663017]: warning: unknown[46.38.150.37]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
 2020-07-16 16:05:59
94.102.49.65 attack 
Jul 16 09:41:24 mail.srvfarm.net dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=94.102.49.65, lip=185.118.197.126, session=
Jul 16 09:41:37 mail.srvfarm.net dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=94.102.49.65, lip=185.118.197.126, session=
Jul 16 09:41:45 mail.srvfarm.net dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 10 secs): user=, method=PLAIN, rip=94.102.49.65, lip=185.118.197.126, session=
Jul 16 09:41:51 mail.srvfarm.net dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 10 secs): user=, method=PLAIN, rip=94.102.49.65, lip=185.118.197.126, session=
Jul 16 09:42:00 mail.srvfarm.net dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 17 secs): user=, meth
 2020-07-16 16:03:05
113.161.218.118 attack 
20/7/16@00:12:37: FAIL: Alarm-Network address from=113.161.218.118
...
 2020-07-16 15:29:52
177.87.220.164 attackbots 
Jul 16 05:24:11 mail.srvfarm.net postfix/smtpd[699494]: warning: unknown[177.87.220.164]: SASL PLAIN authentication failed: 
Jul 16 05:24:11 mail.srvfarm.net postfix/smtpd[699494]: lost connection after AUTH from unknown[177.87.220.164]
Jul 16 05:25:34 mail.srvfarm.net postfix/smtps/smtpd[701896]: warning: unknown[177.87.220.164]: SASL PLAIN authentication failed: 
Jul 16 05:25:34 mail.srvfarm.net postfix/smtps/smtpd[701896]: lost connection after AUTH from unknown[177.87.220.164]
Jul 16 05:31:23 mail.srvfarm.net postfix/smtps/smtpd[702659]: warning: unknown[177.87.220.164]: SASL PLAIN authentication failed:
 2020-07-16 15:57:57
186.216.69.72 attackbotsspam 
Jul 16 05:32:23 mail.srvfarm.net postfix/smtpd[699495]: warning: unknown[186.216.69.72]: SASL PLAIN authentication failed: 
Jul 16 05:32:23 mail.srvfarm.net postfix/smtpd[699495]: lost connection after AUTH from unknown[186.216.69.72]
Jul 16 05:33:15 mail.srvfarm.net postfix/smtps/smtpd[701932]: warning: unknown[186.216.69.72]: SASL PLAIN authentication failed: 
Jul 16 05:33:15 mail.srvfarm.net postfix/smtps/smtpd[701932]: lost connection after AUTH from unknown[186.216.69.72]
Jul 16 05:34:29 mail.srvfarm.net postfix/smtps/smtpd[702670]: warning: unknown[186.216.69.72]: SASL PLAIN authentication failed:
 2020-07-16 15:55:48
34.72.148.13 attackspam 
Invalid user administrator from 34.72.148.13 port 48556
 2020-07-16 15:39:41
46.38.150.191 attack 
Jul 16 10:02:27 relay postfix/smtpd\[13488\]: warning: unknown\[46.38.150.191\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jul 16 10:02:46 relay postfix/smtpd\[14582\]: warning: unknown\[46.38.150.191\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jul 16 10:03:23 relay postfix/smtpd\[13488\]: warning: unknown\[46.38.150.191\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jul 16 10:03:45 relay postfix/smtpd\[14582\]: warning: unknown\[46.38.150.191\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jul 16 10:04:25 relay postfix/smtpd\[11198\]: warning: unknown\[46.38.150.191\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...
 2020-07-16 16:04:37
138.36.200.87 attackbots 
Jul 16 05:19:57 mail.srvfarm.net postfix/smtps/smtpd[702660]: warning: unknown[138.36.200.87]: SASL PLAIN authentication failed: 
Jul 16 05:19:57 mail.srvfarm.net postfix/smtps/smtpd[702660]: lost connection after AUTH from unknown[138.36.200.87]
Jul 16 05:26:14 mail.srvfarm.net postfix/smtps/smtpd[703164]: warning: unknown[138.36.200.87]: SASL PLAIN authentication failed: 
Jul 16 05:26:14 mail.srvfarm.net postfix/smtps/smtpd[703164]: lost connection after AUTH from unknown[138.36.200.87]
Jul 16 05:28:26 mail.srvfarm.net postfix/smtpd[699401]: warning: unknown[138.36.200.87]: SASL PLAIN authentication failed:
 2020-07-16 16:01:12
171.244.139.236 attack 
Invalid user lydie from 171.244.139.236 port 21254
 2020-07-16 15:36:37
137.59.57.68 attack 
Jul 16 05:22:47 mail.srvfarm.net postfix/smtps/smtpd[701931]: warning: unknown[137.59.57.68]: SASL PLAIN authentication failed: 
Jul 16 05:22:47 mail.srvfarm.net postfix/smtps/smtpd[701931]: lost connection after AUTH from unknown[137.59.57.68]
Jul 16 05:27:12 mail.srvfarm.net postfix/smtps/smtpd[703163]: warning: unknown[137.59.57.68]: SASL PLAIN authentication failed: 
Jul 16 05:27:13 mail.srvfarm.net postfix/smtps/smtpd[703163]: lost connection after AUTH from unknown[137.59.57.68]
Jul 16 05:28:16 mail.srvfarm.net postfix/smtps/smtpd[702670]: warning: unknown[137.59.57.68]: SASL PLAIN authentication failed:
 2020-07-16 16:01:35
46.101.157.11 attack 
Jul 16 10:25:51 ift sshd\[64923\]: Invalid user jira from 46.101.157.11Jul 16 10:25:54 ift sshd\[64923\]: Failed password for invalid user jira from 46.101.157.11 port 44460 ssh2Jul 16 10:30:15 ift sshd\[828\]: Invalid user liuziyuan from 46.101.157.11Jul 16 10:30:17 ift sshd\[828\]: Failed password for invalid user liuziyuan from 46.101.157.11 port 34130 ssh2Jul 16 10:34:41 ift sshd\[1613\]: Invalid user team from 46.101.157.11
...
 2020-07-16 15:48:33
93.174.93.123 attackspam 
Jul 16 09:33:34 debian-2gb-nbg1-2 kernel: \[17143374.886648\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=93.174.93.123 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=43413 PROTO=TCP SPT=43411 DPT=39766 WINDOW=1024 RES=0x00 SYN URGP=0
 2020-07-16 15:49:35
80.82.77.139 attackspambots 
 TCP (SYN) 80.82.77.139:28693 -> port 70, len 44
 2020-07-16 15:31:31
187.63.34.60 attackspambots 
Jul 16 05:31:02 mail.srvfarm.net postfix/smtps/smtpd[703163]: warning: unknown[187.63.34.60]: SASL PLAIN authentication failed: 
Jul 16 05:31:03 mail.srvfarm.net postfix/smtps/smtpd[703163]: lost connection after AUTH from unknown[187.63.34.60]
Jul 16 05:36:52 mail.srvfarm.net postfix/smtps/smtpd[703163]: warning: unknown[187.63.34.60]: SASL PLAIN authentication failed: 
Jul 16 05:36:52 mail.srvfarm.net postfix/smtps/smtpd[703163]: lost connection after AUTH from unknown[187.63.34.60]
Jul 16 05:38:34 mail.srvfarm.net postfix/smtps/smtpd[701924]: warning: unknown[187.63.34.60]: SASL PLAIN authentication failed:
 2020-07-16 15:55:13
219.250.188.143 attackbots 
Jul 16 08:55:04 h2646465 sshd[32583]: Invalid user pst from 219.250.188.143
Jul 16 08:55:04 h2646465 sshd[32583]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.250.188.143
Jul 16 08:55:04 h2646465 sshd[32583]: Invalid user pst from 219.250.188.143
Jul 16 08:55:06 h2646465 sshd[32583]: Failed password for invalid user pst from 219.250.188.143 port 43648 ssh2
Jul 16 09:05:43 h2646465 sshd[2222]: Invalid user sz from 219.250.188.143
Jul 16 09:05:43 h2646465 sshd[2222]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.250.188.143
Jul 16 09:05:43 h2646465 sshd[2222]: Invalid user sz from 219.250.188.143
Jul 16 09:05:45 h2646465 sshd[2222]: Failed password for invalid user sz from 219.250.188.143 port 57978 ssh2
Jul 16 09:09:33 h2646465 sshd[2393]: Invalid user ladev from 219.250.188.143
...
 2020-07-16 15:35:42

Recently Reported IPs

175.127.240.54 182.74.69.251 180.123.81.155 41.34.165.30
163.53.75.18 36.68.53.80 118.200.5.94 114.119.134.190
27.79.147.179 118.232.131.23 113.135.87.247 13.69.153.106
2.35.181.162 177.2.73.147 188.22.36.75 8.218.15.66
11.69.118.223 50.61.194.83 201.226.146.114 171.237.252.35