Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: China Education and Research Network

Hostname: unknown

Organization: unknown

Usage Type: University/College/School

Comments:
Type Details Datetime
attackbots
Unauthorized connection attempt detected from IP address 42.247.5.85 to port 1433 [J]
2020-02-04 00:02:07
Comments on same subnet:
IP Type Details Datetime
42.247.5.86 attack
Unauthorised access (Sep 10) SRC=42.247.5.86 LEN=40 TOS=0x08 PREC=0x20 TTL=223 ID=35781 TCP DPT=1433 WINDOW=1024 SYN
2020-09-11 22:47:08
42.247.5.86 attackspam
Unauthorised access (Sep 10) SRC=42.247.5.86 LEN=40 TOS=0x08 PREC=0x20 TTL=223 ID=35781 TCP DPT=1433 WINDOW=1024 SYN
2020-09-11 14:53:29
42.247.5.86 attack
Unauthorised access (Sep 10) SRC=42.247.5.86 LEN=40 TOS=0x08 PREC=0x20 TTL=223 ID=35781 TCP DPT=1433 WINDOW=1024 SYN
2020-09-11 07:04:41
42.247.5.70 attackspam
Unauthorized connection attempt detected from IP address 42.247.5.70 to port 1433 [T]
2020-08-14 01:51:20
42.247.5.92 attack
Unauthorised access (Jul 30) SRC=42.247.5.92 LEN=40 TOS=0x08 PREC=0x20 TTL=223 ID=46808 TCP DPT=1433 WINDOW=1024 SYN
2020-07-30 21:58:24
42.247.5.88 attack
07/16/2020-23:54:27.251909 42.247.5.88 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433
2020-07-17 16:14:33
42.247.5.82 attack
unauthorized connection attempt
2020-07-01 16:59:27
42.247.5.78 attackspambots
Icarus honeypot on github
2020-06-08 07:02:29
42.247.5.77 attack
Unauthorized connection attempt detected from IP address 42.247.5.77 to port 1433
2020-05-20 05:32:27
42.247.5.70 attack
 TCP (RST) 42.247.5.70:46859 -> port 1433, len 40
2020-05-17 03:01:54
42.247.5.84 attackbotsspam
1433/tcp 1433/tcp
[2020-03-05/04-10]2pkt
2020-04-11 06:35:58
42.247.5.78 attackspam
Icarus honeypot on github
2020-04-10 23:56:54
42.247.5.95 attackbots
Unauthorized connection attempt detected from IP address 42.247.5.95 to port 1433 [J]
2020-03-03 00:21:13
42.247.5.71 attack
unauthorized connection attempt
2020-02-26 18:08:12
42.247.5.95 attackbots
Feb 26 06:31:38 debian-2gb-nbg1-2 kernel: \[4954295.571976\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=42.247.5.95 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=230 ID=22462 PROTO=TCP SPT=49139 DPT=1433 WINDOW=1024 RES=0x00 SYN URGP=0
2020-02-26 16:49:04
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.247.5.85
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 47509
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.247.5.85.			IN	A

;; AUTHORITY SECTION:
.			407	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020020300 1800 900 604800 86400

;; Query time: 95 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 04 00:02:03 CST 2020
;; MSG SIZE  rcvd: 115
Host info
Host 85.5.247.42.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 85.5.247.42.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
94.180.58.238 attackbotsspam
Invalid user pramod from 94.180.58.238 port 35590
2020-03-13 16:38:07
218.92.0.145 attackbots
Mar 13 08:41:31 combo sshd[25611]: Failed password for root from 218.92.0.145 port 23127 ssh2
Mar 13 08:41:34 combo sshd[25611]: Failed password for root from 218.92.0.145 port 23127 ssh2
Mar 13 08:41:38 combo sshd[25611]: Failed password for root from 218.92.0.145 port 23127 ssh2
...
2020-03-13 16:46:49
5.39.29.252 attackspam
Mar 13 08:46:20 cp sshd[29549]: Failed password for root from 5.39.29.252 port 34590 ssh2
Mar 13 08:46:20 cp sshd[29549]: Failed password for root from 5.39.29.252 port 34590 ssh2
2020-03-13 16:22:06
106.13.149.221 attackspambots
k+ssh-bruteforce
2020-03-13 16:46:09
104.139.74.25 attackspam
IP was detected trying to Brute-Force SSH, FTP, Web Apps, Port-Scan or Hacking.
2020-03-13 16:40:25
222.165.230.158 attack
firewall-block, port(s): 1433/tcp
2020-03-13 16:26:58
185.176.27.250 attackbotsspam
03/13/2020-04:28:46.462170 185.176.27.250 Protocol: 6 ET DROP Dshield Block Listed Source group 1
2020-03-13 16:31:48
186.177.149.152 attackbots
LGS,WP GET /wp-login.php
2020-03-13 16:24:30
218.92.0.210 attackspambots
2020-03-13T09:28:59.766845scmdmz1 sshd[19366]: Failed password for root from 218.92.0.210 port 26812 ssh2
2020-03-13T09:29:02.113793scmdmz1 sshd[19366]: Failed password for root from 218.92.0.210 port 26812 ssh2
2020-03-13T09:29:04.069108scmdmz1 sshd[19366]: Failed password for root from 218.92.0.210 port 26812 ssh2
...
2020-03-13 16:40:57
14.183.214.139 attackspambots
20/3/12@23:52:23: FAIL: Alarm-Network address from=14.183.214.139
20/3/12@23:52:23: FAIL: Alarm-Network address from=14.183.214.139
...
2020-03-13 16:14:05
177.99.217.233 attackbotsspam
*Port Scan* detected from 177.99.217.233 (BR/Brazil/livrariacultura.com.br.static.gvt.net.br). 4 hits in the last 81 seconds
2020-03-13 16:50:00
122.144.211.235 attack
Mar 13 08:56:12 ourumov-web sshd\[5393\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.144.211.235  user=root
Mar 13 08:56:14 ourumov-web sshd\[5393\]: Failed password for root from 122.144.211.235 port 51496 ssh2
Mar 13 09:07:05 ourumov-web sshd\[6113\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.144.211.235  user=root
...
2020-03-13 16:07:50
184.105.139.67 attackspambots
Unauthorized connection attempt detected from IP address 184.105.139.67 to port 5900
2020-03-13 16:34:45
134.73.51.145 attack
Mar 13 05:56:28 mail.srvfarm.net postfix/smtpd[2296126]: NOQUEUE: reject: RCPT from unknown[134.73.51.145]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Mar 13 05:56:28 mail.srvfarm.net postfix/smtpd[2288887]: NOQUEUE: reject: RCPT from unknown[134.73.51.145]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Mar 13 05:56:28 mail.srvfarm.net postfix/smtpd[2296127]: NOQUEUE: reject: RCPT from unknown[134.73.51.145]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Mar 13 05:56:28 mail.srvfarm.net postfix/smtpd[2296131]: NOQUEUE: reject: RCPT from unknown[134.73.51.145]:
2020-03-13 16:35:14
162.243.128.57 attackspambots
Port probing on unauthorized port 9001
2020-03-13 16:06:15

Recently Reported IPs

180.242.180.123 134.206.147.119 128.8.120.2 125.81.150.189
203.94.179.114 79.85.74.201 177.26.229.241 221.84.35.124
32.4.78.71 164.132.122.255 203.226.48.25 127.242.222.67
114.27.26.162 57.31.132.194 185.205.77.152 74.230.223.239
63.177.191.88 185.152.206.232 128.210.235.183 57.116.114.12