Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
42.245.203.153 attackbots
Honeypot attack, port: 445, PTR: PTR record not found
2020-05-26 07:54:52
42.245.203.139 attackspambots
Honeypot attack, port: 445, PTR: PTR record not found
2020-02-23 22:23:13
42.245.203.136 attackbots
Port probing on unauthorized port 445
2020-02-14 09:53:22
42.245.203.148 attackbotsspam
Honeypot attack, port: 445, PTR: PTR record not found
2020-01-13 14:30:01
42.245.203.148 attackspam
Unauthorized connection attempt detected from IP address 42.245.203.148 to port 4899 [J]
2020-01-06 14:26:40
42.245.203.134 attack
Port Scan: TCP/445
2019-08-24 14:32:30
42.245.203.139 attackbotsspam
19/7/22@19:26:43: FAIL: Alarm-Intrusion address from=42.245.203.139
...
2019-07-23 09:28:25
42.245.203.136 attackspam
19/7/22@19:27:24: FAIL: Alarm-Intrusion address from=42.245.203.136
...
2019-07-23 09:08:17
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.245.2.253
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49706
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;42.245.2.253.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025013100 1800 900 604800 86400

;; Query time: 13 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jan 31 15:01:56 CST 2025
;; MSG SIZE  rcvd: 105
Host info
Host 253.2.245.42.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 253.2.245.42.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
51.254.53.32 attackbots
Oct 10 09:49:47 plusreed sshd[26147]: Invalid user @Wsx!Qaz from 51.254.53.32
...
2019-10-11 01:52:38
106.12.105.10 attackspambots
2019-10-10T12:43:42.718770Z 780307011cf9 New connection: 106.12.105.10:50874 (172.17.0.2:2222) [session: 780307011cf9]
2019-10-10T12:56:04.765210Z 001190183fc6 New connection: 106.12.105.10:44566 (172.17.0.2:2222) [session: 001190183fc6]
2019-10-11 02:10:20
45.13.231.16 attack
IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/45.13.231.16/ 
 IT - 1H : (71)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : IT 
 NAME ASN : ASN204287 
 
 IP : 45.13.231.16 
 
 CIDR : 45.13.228.0/22 
 
 PREFIX COUNT : 29 
 
 UNIQUE IP COUNT : 16640 
 
 
 WYKRYTE ATAKI Z ASN204287 :  
  1H - 2 
  3H - 2 
  6H - 2 
 12H - 2 
 24H - 2 
 
 DateTime : 2019-10-10 13:50:53 
 
 INFO : Web Crawlers ? Scan Detected and Blocked by ADMIN  - data recovery
2019-10-11 01:50:50
149.202.59.85 attack
$f2bV_matches
2019-10-11 01:58:16
111.1.89.230 attackbotsspam
Dovecot Brute-Force
2019-10-11 01:48:40
201.95.82.97 attack
Lines containing failures of 201.95.82.97
Oct  7 04:21:26 shared01 sshd[15111]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.95.82.97  user=r.r
Oct  7 04:21:29 shared01 sshd[15111]: Failed password for r.r from 201.95.82.97 port 49894 ssh2
Oct  7 04:21:29 shared01 sshd[15111]: Received disconnect from 201.95.82.97 port 49894:11: Bye Bye [preauth]
Oct  7 04:21:29 shared01 sshd[15111]: Disconnected from authenticating user r.r 201.95.82.97 port 49894 [preauth]
Oct  7 04:32:25 shared01 sshd[18157]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.95.82.97  user=r.r
Oct  7 04:32:27 shared01 sshd[18157]: Failed password for r.r from 201.95.82.97 port 52888 ssh2
Oct  7 04:32:28 shared01 sshd[18157]: Received disconnect from 201.95.82.97 port 52888:11: Bye Bye [preauth]
Oct  7 04:32:28 shared01 sshd[18157]: Disconnected from authenticating user r.r 201.95.82.97 port 52888 [preauth]
Oct  7 ........
------------------------------
2019-10-11 02:12:31
185.175.93.105 attackspam
10/10/2019-19:28:49.715750 185.175.93.105 Protocol: 6 ET DROP Dshield Block Listed Source group 1
2019-10-11 01:59:26
77.42.127.121 attack
Automatic report - Port Scan Attack
2019-10-11 01:52:58
165.22.182.183 attackspam
Automatic report - XMLRPC Attack
2019-10-11 01:40:42
103.19.229.82 attack
2019-10-10 06:50:26 H=(lithoexpress.it) [103.19.229.82]:54803 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4, 127.0.0.3) (https://www.spamhaus.org/query/ip/103.19.229.82)
2019-10-10 06:50:27 H=(lithoexpress.it) [103.19.229.82]:54803 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4, 127.0.0.3) (https://www.spamhaus.org/query/ip/103.19.229.82)
2019-10-10 06:50:27 H=(lithoexpress.it) [103.19.229.82]:54803 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4, 127.0.0.3) (https://www.spamhaus.org/query/ip/103.19.229.82)
...
2019-10-11 02:06:39
83.234.179.115 attackbots
[portscan] Port scan
2019-10-11 01:39:15
91.121.114.69 attackbotsspam
Oct 10 11:50:19 *** sshd[17994]: User root from 91.121.114.69 not allowed because not listed in AllowUsers
2019-10-11 02:11:10
94.183.118.69 attackspam
Oct 10 11:50:14 system,error,critical: login failure for user admin from 94.183.118.69 via telnet
Oct 10 11:50:16 system,error,critical: login failure for user root from 94.183.118.69 via telnet
Oct 10 11:50:18 system,error,critical: login failure for user root from 94.183.118.69 via telnet
Oct 10 11:50:21 system,error,critical: login failure for user user from 94.183.118.69 via telnet
Oct 10 11:50:23 system,error,critical: login failure for user admin from 94.183.118.69 via telnet
Oct 10 11:50:25 system,error,critical: login failure for user admin from 94.183.118.69 via telnet
Oct 10 11:50:28 system,error,critical: login failure for user root from 94.183.118.69 via telnet
Oct 10 11:50:30 system,error,critical: login failure for user admin from 94.183.118.69 via telnet
Oct 10 11:50:32 system,error,critical: login failure for user root from 94.183.118.69 via telnet
Oct 10 11:50:35 system,error,critical: login failure for user root from 94.183.118.69 via telnet
2019-10-11 02:01:39
2.82.143.65 attack
Automatic report - XMLRPC Attack
2019-10-11 01:51:51
182.61.23.89 attack
Oct 10 18:23:46 localhost sshd\[3515\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.23.89  user=root
Oct 10 18:23:48 localhost sshd\[3515\]: Failed password for root from 182.61.23.89 port 52648 ssh2
Oct 10 18:28:33 localhost sshd\[3956\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.23.89  user=root
2019-10-11 01:44:46

Recently Reported IPs

28.230.43.103 26.150.141.84 201.195.22.19 53.176.150.111
95.168.216.53 206.151.207.238 221.31.102.13 193.15.186.185
39.197.87.15 247.161.229.106 119.145.229.70 9.164.9.104
210.145.43.233 193.58.31.214 79.107.220.187 118.243.245.143
239.21.114.225 77.223.63.120 178.171.214.211 160.216.202.171