Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Hong Kong

Internet Service Provider: Hong Kong Telecommunications (HKT) Limited

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Type Details Datetime
attackbots
Port probing on unauthorized port 5555
2020-04-20 00:17:13
attackspambots
Honeypot attack, port: 5555, PTR: 42-2-48-166.static.netvigator.com.
2020-04-13 16:56:25
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.2.48.166
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 34793
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.2.48.166.			IN	A

;; AUTHORITY SECTION:
.			505	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020041300 1800 900 604800 86400

;; Query time: 108 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Apr 13 16:56:20 CST 2020
;; MSG SIZE  rcvd: 115
Host info
166.48.2.42.in-addr.arpa domain name pointer 42-2-48-166.static.netvigator.com.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
166.48.2.42.in-addr.arpa	name = 42-2-48-166.static.netvigator.com.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
69.10.52.142 attackspam
2019-09-19 17:57:03,232 fail2ban.actions        \[946\]: NOTICE  \[sshd\] Ban 69.10.52.142
2019-09-19 18:30:00,470 fail2ban.actions        \[946\]: NOTICE  \[sshd\] Ban 69.10.52.142
2019-09-19 19:00:26,952 fail2ban.actions        \[946\]: NOTICE  \[sshd\] Ban 69.10.52.142
2019-09-19 19:30:53,648 fail2ban.actions        \[946\]: NOTICE  \[sshd\] Ban 69.10.52.142
2019-09-19 20:09:14,059 fail2ban.actions        \[946\]: NOTICE  \[sshd\] Ban 69.10.52.142
...
2019-09-23 00:03:29
69.194.8.237 attackbots
2019-09-15 18:10:20,086 fail2ban.actions        \[946\]: NOTICE  \[sshd\] Ban 69.194.8.237
2019-09-15 19:20:37,762 fail2ban.actions        \[946\]: NOTICE  \[sshd\] Ban 69.194.8.237
2019-09-15 20:05:53,870 fail2ban.actions        \[946\]: NOTICE  \[sshd\] Ban 69.194.8.237
2019-09-15 20:51:27,765 fail2ban.actions        \[946\]: NOTICE  \[sshd\] Ban 69.194.8.237
2019-09-15 21:36:00,232 fail2ban.actions        \[946\]: NOTICE  \[sshd\] Ban 69.194.8.237
...
2019-09-22 23:58:06
62.28.34.125 attackbots
2019-09-17 22:13:11,228 fail2ban.actions        [800]: NOTICE  [sshd] Ban 62.28.34.125
2019-09-18 01:19:29,672 fail2ban.actions        [800]: NOTICE  [sshd] Ban 62.28.34.125
2019-09-18 04:25:47,608 fail2ban.actions        [800]: NOTICE  [sshd] Ban 62.28.34.125
...
2019-09-23 00:15:01
54.38.33.186 attackspambots
2019-08-22 01:07:21,533 fail2ban.actions        [878]: NOTICE  [sshd] Ban 54.38.33.186
2019-08-22 04:12:59,596 fail2ban.actions        [878]: NOTICE  [sshd] Ban 54.38.33.186
2019-08-22 07:17:10,883 fail2ban.actions        [878]: NOTICE  [sshd] Ban 54.38.33.186
...
2019-09-22 23:27:43
220.140.14.196 attack
DATE:2019-09-22 14:44:20, IP:220.140.14.196, PORT:telnet - Telnet brute force auth on a honeypot server (epe-dc)
2019-09-22 23:59:00
159.203.182.127 attackspam
Sep 22 16:46:32 MainVPS sshd[15644]: Invalid user docker from 159.203.182.127 port 50866
Sep 22 16:46:32 MainVPS sshd[15644]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.182.127
Sep 22 16:46:32 MainVPS sshd[15644]: Invalid user docker from 159.203.182.127 port 50866
Sep 22 16:46:34 MainVPS sshd[15644]: Failed password for invalid user docker from 159.203.182.127 port 50866 ssh2
Sep 22 16:50:44 MainVPS sshd[16028]: Invalid user info from 159.203.182.127 port 42974
...
2019-09-22 23:24:22
106.12.33.50 attackspambots
Sep 22 14:39:55 meumeu sshd[11029]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.33.50 
Sep 22 14:39:57 meumeu sshd[11029]: Failed password for invalid user Guest from 106.12.33.50 port 58708 ssh2
Sep 22 14:44:38 meumeu sshd[11942]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.33.50 
...
2019-09-22 23:45:09
186.31.37.203 attack
2019-08-27 19:11:37,335 fail2ban.actions        [804]: NOTICE  [sshd] Ban 186.31.37.203
2019-08-27 22:17:30,661 fail2ban.actions        [804]: NOTICE  [sshd] Ban 186.31.37.203
2019-08-28 01:25:25,139 fail2ban.actions        [804]: NOTICE  [sshd] Ban 186.31.37.203
...
2019-09-22 23:48:35
182.48.106.205 attackbots
$f2bV_matches_ltvn
2019-09-22 23:34:28
3.130.179.51 attackbots
Multiple failed RDP login attempts
2019-09-22 23:34:08
123.20.252.245 attackspambots
Chat Spam
2019-09-23 00:12:11
174.49.48.61 attackspam
Sep 22 17:18:54 SilenceServices sshd[21606]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=174.49.48.61
Sep 22 17:18:56 SilenceServices sshd[21606]: Failed password for invalid user zimbra from 174.49.48.61 port 59784 ssh2
Sep 22 17:23:00 SilenceServices sshd[22796]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=174.49.48.61
2019-09-22 23:34:42
89.36.220.145 attack
$f2bV_matches
2019-09-23 00:04:02
112.85.42.195 attackbots
Sep 22 17:29:55 eventyay sshd[26052]: Failed password for root from 112.85.42.195 port 39085 ssh2
Sep 22 17:31:32 eventyay sshd[26657]: Failed password for root from 112.85.42.195 port 64346 ssh2
Sep 22 17:31:34 eventyay sshd[26657]: Failed password for root from 112.85.42.195 port 64346 ssh2
...
2019-09-22 23:51:11
58.56.33.221 attackspambots
Sep 22 15:36:14 hcbbdb sshd\[9478\]: Invalid user log-in from 58.56.33.221
Sep 22 15:36:14 hcbbdb sshd\[9478\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.56.33.221
Sep 22 15:36:16 hcbbdb sshd\[9478\]: Failed password for invalid user log-in from 58.56.33.221 port 54796 ssh2
Sep 22 15:42:21 hcbbdb sshd\[10201\]: Invalid user deb from 58.56.33.221
Sep 22 15:42:21 hcbbdb sshd\[10201\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.56.33.221
2019-09-22 23:59:26

Recently Reported IPs

27.72.68.166 175.110.102.18 129.146.103.14 118.165.11.182
176.109.241.206 117.5.111.109 36.68.239.192 113.210.102.204
106.202.93.51 221.11.51.162 113.186.124.210 110.248.233.165
14.250.53.222 103.226.89.93 72.38.192.163 186.225.176.34
101.29.163.244 1.52.124.218 45.175.32.3 74.59.140.138