Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: ChinaNet Shaanxi Province Network

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Type Details Datetime
attack
Jul 27 23:25:18 vps sshd[419702]: Failed password for invalid user aflueg from 113.134.211.242 port 42086 ssh2
Jul 27 23:29:23 vps sshd[435491]: Invalid user wangwentao from 113.134.211.242 port 50082
Jul 27 23:29:23 vps sshd[435491]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.134.211.242
Jul 27 23:29:25 vps sshd[435491]: Failed password for invalid user wangwentao from 113.134.211.242 port 50082 ssh2
Jul 27 23:33:44 vps sshd[456556]: Invalid user zhai from 113.134.211.242 port 58082
...
2020-07-28 07:25:55
attackspam
Jul 23 12:12:12 * sshd[20567]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.134.211.242
Jul 23 12:12:14 * sshd[20567]: Failed password for invalid user juhi from 113.134.211.242 port 33292 ssh2
2020-07-23 18:18:46
attack
Jul 16 14:28:09 meumeu sshd[780691]: Invalid user nick from 113.134.211.242 port 54274
Jul 16 14:28:09 meumeu sshd[780691]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.134.211.242 
Jul 16 14:28:09 meumeu sshd[780691]: Invalid user nick from 113.134.211.242 port 54274
Jul 16 14:28:11 meumeu sshd[780691]: Failed password for invalid user nick from 113.134.211.242 port 54274 ssh2
Jul 16 14:32:33 meumeu sshd[781054]: Invalid user wilfried from 113.134.211.242 port 44572
Jul 16 14:32:33 meumeu sshd[781054]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.134.211.242 
Jul 16 14:32:33 meumeu sshd[781054]: Invalid user wilfried from 113.134.211.242 port 44572
Jul 16 14:32:35 meumeu sshd[781054]: Failed password for invalid user wilfried from 113.134.211.242 port 44572 ssh2
Jul 16 14:36:55 meumeu sshd[781300]: Invalid user ubuntu from 113.134.211.242 port 34866
...
2020-07-16 20:41:17
attackspam
DATE:2020-06-25 01:16:02, IP:113.134.211.242, PORT:ssh SSH brute force auth (docker-dc)
2020-06-25 07:44:27
attackspam
Invalid user ladev from 113.134.211.242 port 40154
2020-06-18 06:28:27
attackspambots
$f2bV_matches
2020-05-28 15:36:16
attackbots
Invalid user zch from 113.134.211.242 port 47798
2020-05-12 15:10:29
Comments on same subnet:
IP Type Details Datetime
113.134.211.42 attackspambots
Port Scan
...
2020-09-01 03:32:45
113.134.211.42 attackspambots
Aug 28 16:16:28 vpn01 sshd[22841]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.134.211.42
Aug 28 16:16:30 vpn01 sshd[22841]: Failed password for invalid user lpf from 113.134.211.42 port 59342 ssh2
...
2020-08-28 22:16:50
113.134.211.42 attack
Invalid user wanz from 113.134.211.42 port 43032
2020-07-30 12:06:54
113.134.211.28 attackspam
Jul 30 02:35:22 itv-usvr-01 sshd[31277]: Invalid user sunqian from 113.134.211.28
Jul 30 02:35:22 itv-usvr-01 sshd[31277]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.134.211.28
Jul 30 02:35:22 itv-usvr-01 sshd[31277]: Invalid user sunqian from 113.134.211.28
Jul 30 02:35:24 itv-usvr-01 sshd[31277]: Failed password for invalid user sunqian from 113.134.211.28 port 49658 ssh2
2020-07-30 04:13:18
113.134.211.42 attack
Jul 26 06:20:22 fhem-rasp sshd[2080]: Invalid user work from 113.134.211.42 port 40632
...
2020-07-26 16:47:11
113.134.211.28 attackspambots
2020-07-26T07:55:51.494903lavrinenko.info sshd[28754]: Invalid user melvin from 113.134.211.28 port 36660
2020-07-26T07:55:51.499805lavrinenko.info sshd[28754]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.134.211.28
2020-07-26T07:55:51.494903lavrinenko.info sshd[28754]: Invalid user melvin from 113.134.211.28 port 36660
2020-07-26T07:55:53.256270lavrinenko.info sshd[28754]: Failed password for invalid user melvin from 113.134.211.28 port 36660 ssh2
2020-07-26T08:00:30.662153lavrinenko.info sshd[29054]: Invalid user pdfbox from 113.134.211.28 port 33902
...
2020-07-26 14:42:01
113.134.211.28 attackbots
Jul  6 23:02:35 pve1 sshd[15082]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.134.211.28 
Jul  6 23:02:37 pve1 sshd[15082]: Failed password for invalid user growth from 113.134.211.28 port 33718 ssh2
...
2020-07-07 05:45:37
113.134.211.42 attack
portscan
2020-07-02 07:17:53
113.134.211.42 attack
portscan
2020-07-01 19:32:19
113.134.211.28 attackspambots
$f2bV_matches
2020-06-30 08:02:18
113.134.211.28 attackspambots
Jun 29 06:49:41 journals sshd\[78992\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.134.211.28  user=root
Jun 29 06:49:44 journals sshd\[78992\]: Failed password for root from 113.134.211.28 port 44050 ssh2
Jun 29 06:51:26 journals sshd\[79215\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.134.211.28  user=support
Jun 29 06:51:28 journals sshd\[79215\]: Failed password for support from 113.134.211.28 port 38970 ssh2
Jun 29 06:53:10 journals sshd\[79405\]: Invalid user king from 113.134.211.28
...
2020-06-29 16:49:48
113.134.211.42 attackspambots
 TCP (SYN) 113.134.211.42:58640 -> port 31749, len 44
2020-06-28 04:37:37
113.134.211.42 attackspambots
Jun 25 14:05:35 dignus sshd[28500]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.134.211.42  user=ubuntu
Jun 25 14:05:38 dignus sshd[28500]: Failed password for ubuntu from 113.134.211.42 port 45068 ssh2
Jun 25 14:09:23 dignus sshd[28819]: Invalid user girish from 113.134.211.42 port 58314
Jun 25 14:09:23 dignus sshd[28819]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.134.211.42
Jun 25 14:09:25 dignus sshd[28819]: Failed password for invalid user girish from 113.134.211.42 port 58314 ssh2
...
2020-06-26 05:09:59
113.134.211.42 attackbotsspam
Jun 25 05:53:01 debian-2gb-nbg1-2 kernel: \[15315844.268286\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=113.134.211.42 DST=195.201.40.59 LEN=44 TOS=0x00 PREC=0x00 TTL=232 ID=45173 PROTO=TCP SPT=57398 DPT=25253 WINDOW=1024 RES=0x00 SYN URGP=0
2020-06-25 15:35:29
113.134.211.28 attackbotsspam
2020-06-11T15:02:30.919441Z 9ac29f78d0cf New connection: 113.134.211.28:59598 (172.17.0.3:2222) [session: 9ac29f78d0cf]
2020-06-11T15:30:43.421316Z c47b371c5537 New connection: 113.134.211.28:60666 (172.17.0.3:2222) [session: c47b371c5537]
2020-06-12 02:04:23
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 113.134.211.242
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 45904
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;113.134.211.242.		IN	A

;; AUTHORITY SECTION:
.			253	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020051200 1800 900 604800 86400

;; Query time: 90 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue May 12 15:10:25 CST 2020
;; MSG SIZE  rcvd: 119
Host info
Host 242.211.134.113.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 242.211.134.113.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
177.185.159.95 attack
Unauthorized connection attempt detected from IP address 177.185.159.95 to port 80 [J]
2020-01-16 08:51:56
221.158.253.33 attackspambots
Unauthorized connection attempt detected from IP address 221.158.253.33 to port 81 [J]
2020-01-16 09:05:17
111.78.196.88 attackspambots
Unauthorized connection attempt detected from IP address 111.78.196.88 to port 5555 [J]
2020-01-16 08:57:27
93.126.22.237 attackspam
Unauthorized connection attempt detected from IP address 93.126.22.237 to port 23 [J]
2020-01-16 09:00:25
186.182.106.3 attackspam
Unauthorized connection attempt detected from IP address 186.182.106.3 to port 81 [J]
2020-01-16 09:09:19
108.162.155.172 attack
Unauthorized connection attempt detected from IP address 108.162.155.172 to port 2220 [J]
2020-01-16 08:57:52
185.237.56.119 attack
Unauthorized connection attempt detected from IP address 185.237.56.119 to port 80 [J]
2020-01-16 08:49:09
1.202.114.146 attackspambots
Unauthorized connection attempt detected from IP address 1.202.114.146 to port 88 [J]
2020-01-16 09:04:22
106.104.115.213 attackbotsspam
Unauthorized connection attempt detected from IP address 106.104.115.213 to port 23 [J]
2020-01-16 08:58:31
167.172.119.104 attackspambots
Unauthorized connection attempt detected from IP address 167.172.119.104 to port 2220 [J]
2020-01-16 08:53:15
93.89.240.105 attackbotsspam
Unauthorized connection attempt detected from IP address 93.89.240.105 to port 80 [J]
2020-01-16 09:13:36
36.91.81.67 attackspambots
Unauthorized connection attempt from IP address 36.91.81.67 on Port 445(SMB)
2020-01-16 09:03:56
5.135.181.11 attack
Invalid user amuel from 5.135.181.11 port 43836
2020-01-16 09:19:58
186.228.98.109 attackspambots
Unauthorized connection attempt detected from IP address 186.228.98.109 to port 4567 [J]
2020-01-16 08:48:30
85.109.190.224 attack
Unauthorized connection attempt detected from IP address 85.109.190.224 to port 23 [J]
2020-01-16 09:01:11

Recently Reported IPs

27.79.133.171 115.72.236.25 78.182.39.101 36.27.30.10
59.124.69.46 177.17.0.225 193.31.40.37 184.82.104.52
80.240.72.90 59.115.157.209 158.140.171.20 115.132.73.97
68.183.234.6 124.228.223.7 58.59.194.65 67.205.137.32
52.38.62.179 174.197.195.231 59.10.5.97 36.73.221.240