Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
114.231.42.212 attack
Sep  2 12:30:34 sshgateway sshd\[9695\]: Invalid user francis from 114.231.42.212
Sep  2 12:30:34 sshgateway sshd\[9695\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.231.42.212
Sep  2 12:30:36 sshgateway sshd\[9695\]: Failed password for invalid user francis from 114.231.42.212 port 60911 ssh2
2020-09-02 20:32:16
114.231.42.212 attackspam
reported through recidive - multiple failed attempts(SSH)
2020-09-02 12:27:22
114.231.42.212 attackbots
malicious Brute-Force reported by https://www.patrick-binder.de
...
2020-09-02 05:37:15
114.231.42.212 attack
Aug 31 14:16:34 ns382633 sshd\[7394\]: Invalid user gpx from 114.231.42.212 port 56198
Aug 31 14:16:34 ns382633 sshd\[7394\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.231.42.212
Aug 31 14:16:36 ns382633 sshd\[7394\]: Failed password for invalid user gpx from 114.231.42.212 port 56198 ssh2
Aug 31 14:37:16 ns382633 sshd\[10861\]: Invalid user sander from 114.231.42.212 port 55769
Aug 31 14:37:16 ns382633 sshd\[10861\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.231.42.212
2020-08-31 20:56:04
114.231.42.212 attackspam
Aug 29 20:24:03 *** sshd[14788]: Invalid user postgres from 114.231.42.212
2020-08-30 06:54:30
114.231.42.74 attackbotsspam
Brute force attempt
2020-08-27 12:32:04
114.231.42.30 attackspam
Attempted Brute Force (dovecot)
2020-08-15 06:46:49
114.231.42.126 attackbots
Aug  6 07:44:53 pixelmemory postfix/smtpd[3311769]: warning: unknown[114.231.42.126]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug  6 07:45:03 pixelmemory postfix/smtpd[3311769]: warning: unknown[114.231.42.126]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug  6 07:45:17 pixelmemory postfix/smtpd[3311769]: warning: unknown[114.231.42.126]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug  6 07:45:35 pixelmemory postfix/smtpd[3311769]: warning: unknown[114.231.42.126]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug  6 07:45:48 pixelmemory postfix/smtpd[3311769]: warning: unknown[114.231.42.126]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...
2020-08-06 23:34:38
114.231.42.231 attack
Unauthorized SSH login attempts
2020-08-05 13:49:58
114.231.42.42 attackspambots
2020-07-31T22:11:57.129282suse-nuc sshd[12106]: User root from 114.231.42.42 not allowed because listed in DenyUsers
...
2020-08-01 13:45:12
114.231.42.171 attackspambots
Jun 27 05:18:25 pixelmemory postfix/smtpd[2115191]: warning: unknown[114.231.42.171]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 27 05:18:37 pixelmemory postfix/smtpd[2115191]: warning: unknown[114.231.42.171]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 27 05:19:00 pixelmemory postfix/smtpd[2120007]: warning: unknown[114.231.42.171]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 27 05:19:35 pixelmemory postfix/smtpd[2120007]: warning: unknown[114.231.42.171]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 27 05:19:47 pixelmemory postfix/smtpd[2115191]: warning: unknown[114.231.42.171]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...
2020-06-27 23:29:48
114.231.42.52 attackbotsspam
$f2bV_matches
2020-06-24 20:37:47
114.231.42.236 attackspam
(smtpauth) Failed SMTP AUTH login from 114.231.42.236 (CN/China/236.42.231.114.broad.nt.js.dynamic.163data.com.cn): 5 in the last 3600 secs
2020-06-24 17:32:03
114.231.42.209 attack
(smtpauth) Failed SMTP AUTH login from 114.231.42.209 (CN/China/209.42.231.114.broad.nt.js.dynamic.163data.com.cn): 5 in the last 3600 secs
2020-06-23 21:14:18
114.231.42.9 attackbotsspam
Jun  8 08:26:02 Host-KEWR-E postfix/smtpd[7713]: lost connection after AUTH from unknown[114.231.42.9]
...
2020-06-08 21:18:25
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 114.231.42.129
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 39494
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;114.231.42.129.			IN	A

;; AUTHORITY SECTION:
.			538	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030400 1800 900 604800 86400

;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Mar 04 15:15:59 CST 2022
;; MSG SIZE  rcvd: 107
Host info
Host 129.42.231.114.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 129.42.231.114.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
185.130.154.43 attack
Mar 16 02:30:07 ny01 sshd[6367]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.130.154.43
Mar 16 02:30:09 ny01 sshd[6367]: Failed password for invalid user oracle from 185.130.154.43 port 42470 ssh2
Mar 16 02:34:01 ny01 sshd[7885]: Failed password for root from 185.130.154.43 port 48806 ssh2
2020-03-16 18:15:42
94.191.82.144 attack
Mar 16 07:56:26 server sshd\[18740\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.82.144  user=root
Mar 16 07:56:28 server sshd\[18740\]: Failed password for root from 94.191.82.144 port 55257 ssh2
Mar 16 08:13:56 server sshd\[22856\]: Invalid user ts3user from 94.191.82.144
Mar 16 08:13:56 server sshd\[22856\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.82.144 
Mar 16 08:13:58 server sshd\[22856\]: Failed password for invalid user ts3user from 94.191.82.144 port 38384 ssh2
...
2020-03-16 17:01:48
197.159.68.239 attack
Honeypot attack, port: 445, PTR: PTR record not found
2020-03-16 18:17:57
49.231.222.2 attackbotsspam
Honeypot attack, port: 445, PTR: PTR record not found
2020-03-16 18:01:15
175.24.16.238 attackspam
Mar 16 09:41:03 MainVPS sshd[28650]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.24.16.238  user=root
Mar 16 09:41:05 MainVPS sshd[28650]: Failed password for root from 175.24.16.238 port 53992 ssh2
Mar 16 09:44:33 MainVPS sshd[3225]: Invalid user vmadmin from 175.24.16.238 port 47320
Mar 16 09:44:33 MainVPS sshd[3225]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.24.16.238
Mar 16 09:44:33 MainVPS sshd[3225]: Invalid user vmadmin from 175.24.16.238 port 47320
Mar 16 09:44:35 MainVPS sshd[3225]: Failed password for invalid user vmadmin from 175.24.16.238 port 47320 ssh2
...
2020-03-16 18:13:08
49.234.52.176 attackbots
$f2bV_matches
2020-03-16 17:52:25
188.170.243.195 attackspam
Honeypot attack, port: 81, PTR: PTR record not found
2020-03-16 17:08:28
194.247.173.123 attackbots
20 attempts against mh-misbehave-ban on pluto
2020-03-16 18:05:59
89.38.221.228 attackbotsspam
Port scan on 1 port(s): 8080
2020-03-16 17:59:45
157.51.239.247 attack
20/3/16@01:13:59: FAIL: Alarm-Network address from=157.51.239.247
20/3/16@01:13:59: FAIL: Alarm-Network address from=157.51.239.247
...
2020-03-16 16:59:35
82.102.119.205 attackspam
Honeypot attack, port: 5555, PTR: PTR record not found
2020-03-16 17:54:32
222.186.175.23 attack
Unauthorized connection attempt detected from IP address 222.186.175.23 to port 22 [T]
2020-03-16 18:02:33
87.103.131.124 attackspambots
Mar 14 06:17:13 mail.srvfarm.net postfix/smtpd[2957893]: NOQUEUE: reject: RCPT from unknown[87.103.131.124]: 554 5.7.1 Service unavailable; Client host [87.103.131.124] blocked using bl.spamcop.net; Blocked - see https://www.spamcop.net/bl.shtml?87.103.131.124; from= to= proto=ESMTP helo=<124.131.103.87.dial.irtel.ru>
Mar 14 06:17:14 mail.srvfarm.net postfix/smtpd[2957893]: NOQUEUE: reject: RCPT from unknown[87.103.131.124]: 554 5.7.1 Service unavailable; Client host [87.103.131.124] blocked using bl.spamcop.net; Blocked - see https://www.spamcop.net/bl.shtml?87.103.131.124; from= to= proto=ESMTP helo=<124.131.103.87.dial.irtel.ru>
Mar 14 06:17:14 mail.srvfarm.net postfix/smtpd[2957893]: NOQUEUE: reject: RCPT from unknown[87.103.131.124]: 554 5.7.1 Service unavailable; Client host [87.103.131.124] blocked using bl.spamcop.net; Blocked - see https://www.spamcop.net/bl.shtml?87.103.131.124; from=
2020-03-14 14:09:42
180.76.149.79 attackspambots
$f2bV_matches
2020-03-16 18:09:45
203.177.145.81 attackspam
Honeypot attack, port: 445, PTR: PTR record not found
2020-03-16 16:59:13

Recently Reported IPs

114.231.42.118 114.231.42.120 114.231.42.140 114.231.42.117
114.231.42.137 114.231.42.143 114.231.42.127 114.231.42.146
114.231.42.145 114.231.42.16 114.231.42.15 114.231.42.152
113.53.192.56 114.231.42.164 114.231.42.155 114.231.42.166
114.231.42.162 114.231.42.159 114.231.42.147 114.231.42.149