Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Hong Kong

Internet Service Provider: Hong Kong Telecommunications (HKT) Limited

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Type Details Datetime
attack
Invalid user admin from 42.3.148.20 port 56086
2020-05-24 04:02:48
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.3.148.20
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 5814
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.3.148.20.			IN	A

;; AUTHORITY SECTION:
.			561	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020052302 1800 900 604800 86400

;; Query time: 70 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun May 24 04:02:44 CST 2020
;; MSG SIZE  rcvd: 115
Host info
20.148.3.42.in-addr.arpa domain name pointer 42-3-148-020.static.netvigator.com.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
20.148.3.42.in-addr.arpa	name = 42-3-148-020.static.netvigator.com.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
117.66.254.147 attackbots
badbot
2019-11-20 17:40:08
185.174.130.94 attackbots
Nov 20 09:29:30 jane sshd[1074]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.174.130.94 
Nov 20 09:29:32 jane sshd[1074]: Failed password for invalid user candace from 185.174.130.94 port 45848 ssh2
...
2019-11-20 17:53:32
12.244.187.30 attackbots
<6 unauthorized SSH connections
2019-11-20 17:49:03
185.74.4.189 attackbotsspam
ssh intrusion attempt
2019-11-20 17:33:54
31.181.31.25 attackspambots
Automatic report - Port Scan Attack
2019-11-20 17:36:31
210.56.28.219 attackbots
2019-11-20T09:02:45.639351abusebot-5.cloudsearch.cf sshd\[7321\]: Invalid user admin from 210.56.28.219 port 35442
2019-11-20 17:29:35
84.93.153.9 attackspambots
Nov 20 08:33:50 serwer sshd\[18200\]: Invalid user server from 84.93.153.9 port 44931
Nov 20 08:33:50 serwer sshd\[18200\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=84.93.153.9
Nov 20 08:33:52 serwer sshd\[18200\]: Failed password for invalid user server from 84.93.153.9 port 44931 ssh2
...
2019-11-20 17:49:16
185.175.93.27 attackbotsspam
firewall-block, port(s): 28225/tcp, 28226/tcp, 28227/tcp
2019-11-20 17:35:40
74.91.122.68 attack
74.91.122.68 was recorded 5 times by 1 hosts attempting to connect to the following ports: 22. Incident counter (4h, 24h, all-time): 5, 5, 5
2019-11-20 17:59:26
103.38.13.23 attackbotsspam
2019-11-20 06:17:52 H=(dwan.co.in.23.13.38.103.in-addr.arpa) [103.38.13.23]:14584 I=[10.100.18.20]:25 F=: Host/domain is listed in RBL cbl.abuseat.org (Blocked - see hxxp://www.abuseat.org/lookup.cgi?ip=103.38.13.23)
2019-11-20 06:17:53 unexpected disconnection while reading SMTP command from (dwan.co.in.23.13.38.103.in-addr.arpa) [103.38.13.23]:14584 I=[10.100.18.20]:25 (error: Connection reset by peer)
2019-11-20 07:08:01 H=(dwan.co.in.23.13.38.103.in-addr.arpa) [103.38.13.23]:14394 I=[10.100.18.20]:25 F=: Host/domain is listed in RBL cbl.abuseat.org (Blocked - see hxxp://www.abuseat.org/lookup.cgi?ip=103.38.13.23)


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=103.38.13.23
2019-11-20 17:29:11
112.113.156.230 attackspam
badbot
2019-11-20 17:42:58
145.239.91.88 attackspambots
Nov 20 07:47:34 vps647732 sshd[27226]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=145.239.91.88
Nov 20 07:47:35 vps647732 sshd[27226]: Failed password for invalid user murri from 145.239.91.88 port 46366 ssh2
...
2019-11-20 17:52:06
182.101.38.47 attackbots
badbot
2019-11-20 17:58:19
41.93.73.2 attackbotsspam
2019-11-20 05:53:03 H=([41.93.73.2]) [41.93.73.2]:36174 I=[10.100.18.23]:25 F=: Host/domain is listed in RBL cbl.abuseat.org (Blocked - see hxxp://www.abuseat.org/lookup.cgi?ip=41.93.73.2)
2019-11-20 05:53:04 unexpected disconnection while reading SMTP command from ([41.93.73.2]) [41.93.73.2]:36174 I=[10.100.18.23]:25 (error: Connection reset by peer)
2019-11-20 07:07:26 H=([197.149.178.18]) [41.93.73.2]:49779 I=[10.100.18.23]:25 F=: Host/domain is listed in RBL cbl.abuseat.org (Blocked - see hxxp://www.abuseat.org/lookup.cgi?ip=41.93.73.2)


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=41.93.73.2
2019-11-20 17:24:43
123.171.164.147 attackspam
badbot
2019-11-20 17:39:24

Recently Reported IPs

170.253.5.194 125.166.50.14 220.135.162.48 201.42.38.50
185.210.217.12 41.76.216.218 190.15.196.185 190.199.221.47
115.79.88.240 189.207.244.53 187.135.100.87 170.247.22.106
85.221.156.51 77.69.190.206 36.237.198.201 14.161.47.200
223.205.237.3 172.103.2.143 176.33.182.150 64.225.67.229