Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Tsuen Wan

Region: Tsuen Wan

Country: Hong Kong

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Make a comment on this IP
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
42.3.52.58 attackbots 
SSH login attempts.
 2020-08-22 23:59:59
42.3.51.114 attackspambots 
Spam comment : https://www.alemprint.ru/uslugi/pechat-interernaya 
https://www.alemprint.ru/uslugi/shirokoformatnaya-pechat 
https://www.alemprint.ru/uslugi/pechat-bannerov 
https://www.alemprint.ru/uslugi/pechat-na-oboyah 
https://www.alemprint.ru/uslugi/pechat-na-setke 
https://www.grandprint.su/ https://www.grandprint.su/ 
https://www.alemprint.ru/uslugi/pechat-litogo-bannera 
https://www.alemprint.ru/uslugi/press-wall 
https://www.alemprint.ru/uslugi/pechat-na-plenke 
https://www.alemprint.ru/ https://www.alemprint.ru/
 2020-07-29 06:26:26
42.3.51.73 attackspambots 
May  4 14:04:56 webhost01 sshd[18065]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.3.51.73
May  4 14:04:58 webhost01 sshd[18065]: Failed password for invalid user user from 42.3.51.73 port 23646 ssh2
...
 2020-05-04 15:19:06
42.3.51.73 attackbots 
5x Failed Password
 2020-05-03 22:02:28
42.3.51.73 attack 
2020-04-23T03:45:12.750686ionos.janbro.de sshd[53096]: Invalid user ftpuser from 42.3.51.73 port 63964
2020-04-23T03:45:14.474831ionos.janbro.de sshd[53096]: Failed password for invalid user ftpuser from 42.3.51.73 port 63964 ssh2
2020-04-23T03:48:24.418605ionos.janbro.de sshd[53119]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.3.51.73  user=root
2020-04-23T03:48:26.032988ionos.janbro.de sshd[53119]: Failed password for root from 42.3.51.73 port 11280 ssh2
2020-04-23T03:51:36.945817ionos.janbro.de sshd[53126]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.3.51.73  user=root
2020-04-23T03:51:38.584936ionos.janbro.de sshd[53126]: Failed password for root from 42.3.51.73 port 13610 ssh2
2020-04-23T03:54:56.263293ionos.janbro.de sshd[53135]: Invalid user rl from 42.3.51.73 port 15938
2020-04-23T03:54:56.338530ionos.janbro.de sshd[53135]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eu
...
 2020-04-23 13:17:24
42.3.51.73 attack 
Unauthorised connection attempt detected at AUO MAIN. System is sshd. Protected by AUO Stack Web Application Firewall (WAF)
 2020-04-19 01:23:48
42.3.51.73 attack 
Tried sshing with brute force.
 2020-04-18 02:37:31
42.3.51.30 attackspam 
2020-04-08T07:34:05.724861upcloud.m0sh1x2.com sshd[25316]: Invalid user dasusrl from 42.3.51.30 port 58698
 2020-04-08 15:36:08
42.3.51.30 attackbots 
$f2bV_matches
 2020-03-31 12:10:52
42.3.51.30 attackspam 
2020-03-19 UTC: (30x) - cpaneleximfilter,diego,info,infusion-stoked,lusifen,mysql,odoo,root(21x),ubuntu,xulei
 2020-03-20 17:55:10
42.3.51.30 attackbots 
Mar 19 15:09:00 OPSO sshd\[3490\]: Invalid user qlu from 42.3.51.30 port 49596
Mar 19 15:09:00 OPSO sshd\[3490\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.3.51.30
Mar 19 15:09:02 OPSO sshd\[3490\]: Failed password for invalid user qlu from 42.3.51.30 port 49596 ssh2
Mar 19 15:15:18 OPSO sshd\[4747\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.3.51.30  user=root
Mar 19 15:15:20 OPSO sshd\[4747\]: Failed password for root from 42.3.51.30 port 33098 ssh2
 2020-03-19 23:00:09
42.3.56.45 attackbots 
Unauthorized connection attempt detected from IP address 42.3.56.45 to port 5555 [J]
 2020-01-28 21:56:15
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.3.5.219
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 28310
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.3.5.219.			IN	A

;; AUTHORITY SECTION:
.			559	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019092000 1800 900 604800 86400

;; Query time: 584 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Sep 21 00:05:02 CST 2019
;; MSG SIZE  rcvd: 114
Host info
219.5.3.42.in-addr.arpa domain name pointer 42-3-5-219.static.netvigator.com.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
219.5.3.42.in-addr.arpa	name = 42-3-5-219.static.netvigator.com.

Authoritative answers can be found from:
Related IP info:
42.3.5.113
42.3.5.154
42.3.5.16
42.3.5.172
42.3.5.58
42.3.5.249
42.3.5.240
42.3.5.35
42.3.5.12
42.3.5.47
42.3.5.168
42.3.5.30
42.3.5.173
42.3.5.223
42.3.5.244
42.3.5.77
42.3.5.50
42.3.5.135
42.3.5.143
42.3.5.51
42.3.5.98
42.3.5.26
42.3.5.114
42.3.5.27
42.3.5.254
42.3.5.185
42.3.5.169
42.3.5.227
42.3.5.13
42.3.5.179
42.3.5.188
42.3.5.221
42.3.5.22
42.3.5.241
42.3.5.81
42.3.5.211
42.3.5.252
42.3.5.122
42.3.5.202
42.3.5.105
42.3.5.148
42.3.5.73
42.3.5.111
42.3.5.174
42.3.5.194
42.3.5.158
42.3.5.151
42.3.5.224
42.3.5.212
42.3.5.165
42.3.5.228
42.3.5.48
42.3.5.56
42.3.5.146
42.3.5.96
42.3.5.215
42.3.5.90
42.3.5.229
42.3.5.200
42.3.5.93
42.3.5.72
42.3.5.110
42.3.5.141
42.3.5.231
42.3.5.39
42.3.5.171
42.3.5.195
42.3.5.245
42.3.5.61
42.3.5.24
42.3.5.162
42.3.5.156
42.3.5.203
42.3.5.52
42.3.5.207
42.3.5.121
42.3.5.199
42.3.5.103
42.3.5.127
42.3.5.102
42.3.5.167
42.3.5.31
42.3.5.142
42.3.5.120
42.3.5.118
42.3.5.123
42.3.5.101
42.3.5.14
42.3.5.178
42.3.5.3
42.3.5.55
42.3.5.15
42.3.5.68
42.3.5.9
42.3.5.104
42.3.5.6
42.3.5.160
42.3.5.209
42.3.5.133
42.3.5.74
42.3.5.177
42.3.5.57
42.3.5.79
42.3.5.83
42.3.5.208
42.3.5.186
42.3.5.230
42.3.5.218
42.3.5.5
42.3.5.92
42.3.5.19
42.3.5.88
42.3.5.34
42.3.5.44
42.3.5.251
42.3.5.157
42.3.5.18
42.3.5.217
42.3.5.46
42.3.5.80
42.3.5.8
42.3.5.64
42.3.5.144
42.3.5.191
42.3.5.222
42.3.5.124
42.3.5.45
42.3.5.248
42.3.5.138
42.3.5.75
42.3.5.170
42.3.5.2
42.3.5.125
42.3.5.63
42.3.5.99
42.3.5.32
42.3.5.246
42.3.5.85
42.3.5.238
42.3.5.232
42.3.5.189
42.3.5.10
42.3.5.140
42.3.5.176
42.3.5.1
42.3.5.67
42.3.5.17
42.3.5.181
42.3.5.247
42.3.5.216
42.3.5.33
42.3.5.108
42.3.5.152
42.3.5.59
42.3.5.175
42.3.5.86
42.3.5.107
42.3.5.69
42.3.5.145
42.3.5.38
42.3.5.192
42.3.5.40
42.3.5.220
42.3.5.153
42.3.5.225
42.3.5.37
42.3.5.164
42.3.5.29
42.3.5.134
42.3.5.130
42.3.5.84
42.3.5.112
42.3.5.204
42.3.5.182
42.3.5.117
42.3.5.137
42.3.5.163
42.3.5.237
42.3.5.226
42.3.5.129
42.3.5.197
42.3.5.198
42.3.5.23
42.3.5.147
42.3.5.66
42.3.5.150
42.3.5.82
42.3.5.155
42.3.5.219
42.3.5.149
42.3.5.139
42.3.5.239
42.3.5.196
42.3.5.76
42.3.5.128
42.3.5.253
42.3.5.28
42.3.5.235
42.3.5.166
42.3.5.119
42.3.5.201
42.3.5.54
42.3.5.94
42.3.5.65
42.3.5.109
42.3.5.20
42.3.5.242
42.3.5.106
42.3.5.159
42.3.5.41
42.3.5.205
42.3.5.206
42.3.5.89
42.3.5.161
42.3.5.71
42.3.5.213
42.3.5.180
42.3.5.36
42.3.5.184
42.3.5.25
42.3.5.250
42.3.5.70
42.3.5.60
42.3.5.131
42.3.5.91
42.3.5.187
42.3.5.49
42.3.5.42
42.3.5.4
42.3.5.97
42.3.5.87
42.3.5.126
42.3.5.183
42.3.5.116
42.3.5.100
42.3.5.210
42.3.5.115
42.3.5.234
42.3.5.233
42.3.5.43
42.3.5.11
42.3.5.7
42.3.5.62
42.3.5.136
42.3.5.21
42.3.5.78
42.3.5.193
42.3.5.132
42.3.5.53
42.3.5.95
42.3.5.214
42.3.5.190
42.3.5.243
42.3.5.236
Related comments:
IP Type Details Datetime
193.32.163.104 attackbots 
firewall-block, port(s): 3501/tcp, 3510/tcp
 2019-09-12 18:50:50
84.120.41.118 attackspam 
Sep 11 23:51:51 php2 sshd\[23228\]: Invalid user postgres from 84.120.41.118
Sep 11 23:51:51 php2 sshd\[23228\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=84.120.41.118.dyn.user.ono.com
Sep 11 23:51:53 php2 sshd\[23228\]: Failed password for invalid user postgres from 84.120.41.118 port 47567 ssh2
Sep 11 23:59:07 php2 sshd\[24156\]: Invalid user nagios from 84.120.41.118
Sep 11 23:59:07 php2 sshd\[24156\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=84.120.41.118.dyn.user.ono.com
 2019-09-12 19:12:01
51.38.57.78 attackbotsspam 
Sep 12 09:58:34 game-panel sshd[28433]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.57.78
Sep 12 09:58:36 game-panel sshd[28433]: Failed password for invalid user ts from 51.38.57.78 port 57278 ssh2
Sep 12 10:03:41 game-panel sshd[28596]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.57.78
 2019-09-12 18:16:59
165.227.108.233 attackspam 
Sep 11 23:34:06 hcbb sshd\[1423\]: Invalid user test from 165.227.108.233
Sep 11 23:34:06 hcbb sshd\[1423\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.108.233
Sep 11 23:34:08 hcbb sshd\[1423\]: Failed password for invalid user test from 165.227.108.233 port 56558 ssh2
Sep 11 23:41:06 hcbb sshd\[2135\]: Invalid user ts2 from 165.227.108.233
Sep 11 23:41:06 hcbb sshd\[2135\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.108.233
 2019-09-12 17:59:27
81.171.58.72 attackspambots 
\[2019-09-12 06:18:34\] NOTICE\[1827\] chan_sip.c: Registration from '\' failed for '81.171.58.72:54054' - Wrong password
\[2019-09-12 06:18:34\] SECURITY\[1849\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-09-12T06:18:34.792-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="4583",SessionID="0x7fd9a83796a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/81.171.58.72/54054",Challenge="59164cdb",ReceivedChallenge="59164cdb",ReceivedHash="f21fdb2cf9af5c0a596e81f517455a4e"
\[2019-09-12 06:18:54\] NOTICE\[1827\] chan_sip.c: Registration from '\' failed for '81.171.58.72:64181' - Wrong password
\[2019-09-12 06:18:54\] SECURITY\[1849\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-09-12T06:18:54.624-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="2638",SessionID="0x7fd9a8545448",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/81.171.58.72
 2019-09-12 18:21:32
218.92.0.207 attackspam 
2019-09-12T08:55:03.283995abusebot-8.cloudsearch.cf sshd\[5685\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.207  user=root
 2019-09-12 17:16:08
129.204.154.133 attackspam 
Sep 12 05:51:51 rpi sshd[11555]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.154.133 
Sep 12 05:51:52 rpi sshd[11555]: Failed password for invalid user admin from 129.204.154.133 port 53842 ssh2
 2019-09-12 18:59:49
121.33.247.107 attackbotsspam 
Sep 12 11:56:20 elektron postfix/smtpd\[12869\]: warning: unknown\[121.33.247.107\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep 12 11:56:28 elektron postfix/smtpd\[17836\]: warning: unknown\[121.33.247.107\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep 12 11:56:42 elektron postfix/smtpd\[12869\]: warning: unknown\[121.33.247.107\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
 2019-09-12 17:17:38
217.182.74.125 attackspam 
Sep 11 23:57:33 friendsofhawaii sshd\[13612\]: Invalid user 1 from 217.182.74.125
Sep 11 23:57:33 friendsofhawaii sshd\[13612\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.ip-217-182-74.eu
Sep 11 23:57:36 friendsofhawaii sshd\[13612\]: Failed password for invalid user 1 from 217.182.74.125 port 49602 ssh2
Sep 12 00:03:32 friendsofhawaii sshd\[14166\]: Invalid user wwwadm from 217.182.74.125
Sep 12 00:03:32 friendsofhawaii sshd\[14166\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.ip-217-182-74.eu
 2019-09-12 18:50:29
167.99.7.178 attackbots 
Sep 12 11:31:40 minden010 sshd[26392]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.7.178
Sep 12 11:31:42 minden010 sshd[26392]: Failed password for invalid user 123 from 167.99.7.178 port 54951 ssh2
Sep 12 11:37:45 minden010 sshd[28393]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.7.178
...
 2019-09-12 17:39:03
145.239.227.21 attackspambots 
Sep 12 10:59:26 SilenceServices sshd[20424]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=145.239.227.21
Sep 12 10:59:28 SilenceServices sshd[20424]: Failed password for invalid user postgres from 145.239.227.21 port 57638 ssh2
Sep 12 11:05:12 SilenceServices sshd[22526]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=145.239.227.21
 2019-09-12 17:19:48
125.99.173.162 attackspam 
SSH Brute Force, server-1 sshd[23251]: Failed password for mysql from 125.99.173.162 port 3068 ssh2
 2019-09-12 17:44:51
24.121.219.54 attackspambots 
US - 1H : (381)  Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : US 
 NAME ASN : ASN19108 
 
 IP : 24.121.219.54 
 
 CIDR : 24.121.128.0/17 
 
 PREFIX COUNT : 902 
 
 UNIQUE IP COUNT : 2823680 
 
 
 WYKRYTE ATAKI Z ASN19108 :  
  1H - 2 
  3H - 2 
  6H - 2 
 12H - 2 
 24H - 2 
 
 INFO : Looking for resource vulnerabilities 403 Detected and Blocked by ADMIN  - data recovery 
  https://help-dysk.pl
 2019-09-12 18:07:14
159.65.9.28 attack 
Sep 12 10:36:31 MK-Soft-Root2 sshd\[12232\]: Invalid user test7 from 159.65.9.28 port 57640
Sep 12 10:36:31 MK-Soft-Root2 sshd\[12232\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.9.28
Sep 12 10:36:33 MK-Soft-Root2 sshd\[12232\]: Failed password for invalid user test7 from 159.65.9.28 port 57640 ssh2
...
 2019-09-12 17:29:22
193.70.1.220 attack 
2019-09-09T23:13:15.220149www.arvenenaske.de sshd[115490]: Invalid user odoo from 193.70.1.220 port 40456
2019-09-09T23:13:15.225226www.arvenenaske.de sshd[115490]: pam_sss(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.70.1.220 user=odoo
2019-09-09T23:13:15.225796www.arvenenaske.de sshd[115490]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.70.1.220
2019-09-09T23:13:15.220149www.arvenenaske.de sshd[115490]: Invalid user odoo from 193.70.1.220 port 40456
2019-09-09T23:13:17.372587www.arvenenaske.de sshd[115490]: Failed password for invalid user odoo from 193.70.1.220 port 40456 ssh2
2019-09-09T23:20:56.529586www.arvenenaske.de sshd[115562]: pam_sss(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.70.1.220 user=ghostname
2019-09-09T23:20:56.529671www.arvenenaske.de sshd[115562]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser........
------------------------------
 2019-09-12 17:42:43

Recently Reported IPs

58.246.26.230 41.253.207.177 182.90.221.147 95.63.158.87
5.153.42.21 166.99.204.91 165.128.50.204 4.201.62.148
224.73.247.239 124.88.112.48 39.248.63.127 182.126.212.213
10.221.165.18 134.209.51.28 36.75.122.60 36.199.238.181
183.154.48.191 39.180.239.157 104.131.8.137 60.182.34.247