Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Hong Kong

Internet Service Provider: Hong Kong Telecommunications (HKT) Limited

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Type Details Datetime
attackspambots
May  4 14:04:56 webhost01 sshd[18065]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.3.51.73
May  4 14:04:58 webhost01 sshd[18065]: Failed password for invalid user user from 42.3.51.73 port 23646 ssh2
...
2020-05-04 15:19:06
attackbots
5x Failed Password
2020-05-03 22:02:28
attack
2020-04-23T03:45:12.750686ionos.janbro.de sshd[53096]: Invalid user ftpuser from 42.3.51.73 port 63964
2020-04-23T03:45:14.474831ionos.janbro.de sshd[53096]: Failed password for invalid user ftpuser from 42.3.51.73 port 63964 ssh2
2020-04-23T03:48:24.418605ionos.janbro.de sshd[53119]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.3.51.73  user=root
2020-04-23T03:48:26.032988ionos.janbro.de sshd[53119]: Failed password for root from 42.3.51.73 port 11280 ssh2
2020-04-23T03:51:36.945817ionos.janbro.de sshd[53126]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.3.51.73  user=root
2020-04-23T03:51:38.584936ionos.janbro.de sshd[53126]: Failed password for root from 42.3.51.73 port 13610 ssh2
2020-04-23T03:54:56.263293ionos.janbro.de sshd[53135]: Invalid user rl from 42.3.51.73 port 15938
2020-04-23T03:54:56.338530ionos.janbro.de sshd[53135]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eu
...
2020-04-23 13:17:24
attack
Unauthorised connection attempt detected at AUO MAIN. System is sshd. Protected by AUO Stack Web Application Firewall (WAF)
2020-04-19 01:23:48
attack
Tried sshing with brute force.
2020-04-18 02:37:31
Comments on same subnet:
IP Type Details Datetime
42.3.51.114 attackspambots
Spam comment : https://www.alemprint.ru/uslugi/pechat-interernaya 
https://www.alemprint.ru/uslugi/shirokoformatnaya-pechat 
https://www.alemprint.ru/uslugi/pechat-bannerov 
https://www.alemprint.ru/uslugi/pechat-na-oboyah 
https://www.alemprint.ru/uslugi/pechat-na-setke 
https://www.grandprint.su/ https://www.grandprint.su/ 
https://www.alemprint.ru/uslugi/pechat-litogo-bannera 
https://www.alemprint.ru/uslugi/press-wall 
https://www.alemprint.ru/uslugi/pechat-na-plenke 
https://www.alemprint.ru/ https://www.alemprint.ru/
2020-07-29 06:26:26
42.3.51.30 attackspam
2020-04-08T07:34:05.724861upcloud.m0sh1x2.com sshd[25316]: Invalid user dasusrl from 42.3.51.30 port 58698
2020-04-08 15:36:08
42.3.51.30 attackbots
$f2bV_matches
2020-03-31 12:10:52
42.3.51.30 attackspam
2020-03-19 UTC: (30x) - cpaneleximfilter,diego,info,infusion-stoked,lusifen,mysql,odoo,root(21x),ubuntu,xulei
2020-03-20 17:55:10
42.3.51.30 attackbots
Mar 19 15:09:00 OPSO sshd\[3490\]: Invalid user qlu from 42.3.51.30 port 49596
Mar 19 15:09:00 OPSO sshd\[3490\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.3.51.30
Mar 19 15:09:02 OPSO sshd\[3490\]: Failed password for invalid user qlu from 42.3.51.30 port 49596 ssh2
Mar 19 15:15:18 OPSO sshd\[4747\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.3.51.30  user=root
Mar 19 15:15:20 OPSO sshd\[4747\]: Failed password for root from 42.3.51.30 port 33098 ssh2
2020-03-19 23:00:09
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.3.51.73
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 9291
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.3.51.73.			IN	A

;; AUTHORITY SECTION:
.			580	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020041702 1800 900 604800 86400

;; Query time: 101 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Apr 18 02:37:27 CST 2020
;; MSG SIZE  rcvd: 114
Host info
73.51.3.42.in-addr.arpa domain name pointer 42-3-51-073.static.netvigator.com.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
73.51.3.42.in-addr.arpa	name = 42-3-51-073.static.netvigator.com.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
40.73.34.44 attackspambots
Oct 27 06:55:26 localhost sshd\[32112\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.73.34.44  user=root
Oct 27 06:55:28 localhost sshd\[32112\]: Failed password for root from 40.73.34.44 port 53526 ssh2
Oct 27 07:01:02 localhost sshd\[32733\]: Invalid user sunset from 40.73.34.44 port 35450
Oct 27 07:01:02 localhost sshd\[32733\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.73.34.44
2019-10-27 14:13:05
122.51.116.169 attackspam
Oct 27 07:45:09 server sshd\[25444\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.116.169  user=root
Oct 27 07:45:11 server sshd\[25444\]: Failed password for root from 122.51.116.169 port 36789 ssh2
Oct 27 07:54:01 server sshd\[27383\]: Invalid user bpadmin from 122.51.116.169
Oct 27 07:54:01 server sshd\[27383\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.116.169 
Oct 27 07:54:03 server sshd\[27383\]: Failed password for invalid user bpadmin from 122.51.116.169 port 37142 ssh2
...
2019-10-27 14:28:38
42.157.129.158 attackbotsspam
2019-10-27T05:00:30.093431abusebot-8.cloudsearch.cf sshd\[8276\]: Invalid user web5 from 42.157.129.158 port 38978
2019-10-27 14:04:50
81.92.149.60 attackbots
Invalid user mktg1 from 81.92.149.60 port 34796
2019-10-27 14:08:22
183.105.217.170 attackspambots
*Port Scan* detected from 183.105.217.170 (KR/South Korea/-). 4 hits in the last 276 seconds
2019-10-27 14:13:19
185.175.93.105 attackbotsspam
10/27/2019-07:14:12.656720 185.175.93.105 Protocol: 6 ET DROP Dshield Block Listed Source group 1
2019-10-27 14:32:11
180.76.58.76 attack
2019-10-27T04:59:45.611247abusebot-5.cloudsearch.cf sshd\[28283\]: Invalid user gerhard from 180.76.58.76 port 32926
2019-10-27 13:54:04
46.101.63.219 attackspambots
[munged]::443 46.101.63.219 - - [27/Oct/2019:06:18:05 +0100] "POST /[munged]: HTTP/1.1" 200 9080 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 46.101.63.219 - - [27/Oct/2019:06:18:05 +0100] "POST /[munged]: HTTP/1.1" 200 9080 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 46.101.63.219 - - [27/Oct/2019:06:18:05 +0100] "POST /[munged]: HTTP/1.1" 200 9080 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 46.101.63.219 - - [27/Oct/2019:06:18:05 +0100] "POST /[munged]: HTTP/1.1" 200 9080 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 46.101.63.219 - - [27/Oct/2019:06:18:05 +0100] "POST /[munged]: HTTP/1.1" 200 9080 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 46.101.63.219 - - [27/Oct/2019:06:18:05 +0100] "POST /[munged]: HTTP/1.1" 200 9080 "-" "Mozilla/5.0 (X11; Ubun
2019-10-27 14:01:59
54.36.150.15 attack
Automatic report - Banned IP Access
2019-10-27 14:27:41
132.145.82.128 attack
Oct 27 04:55:32 srv2 sshd\[14671\]: Invalid user steam from 132.145.82.128 port 34320
Oct 27 04:55:34 srv2 sshd\[14673\]: Invalid user steam from 132.145.82.128 port 35094
Oct 27 04:55:37 srv2 sshd\[14675\]: Invalid user steam from 132.145.82.128 port 35782
2019-10-27 13:54:54
138.68.226.175 attackspambots
Triggered by Fail2Ban at Ares web server
2019-10-27 14:10:37
180.101.125.162 attack
Automatic report - Banned IP Access
2019-10-27 14:10:12
45.40.251.51 attackbotsspam
Automatic report - XMLRPC Attack
2019-10-27 14:07:48
186.193.19.48 attackbotsspam
Automatic report - Banned IP Access
2019-10-27 13:59:50
112.6.231.114 attack
*Port Scan* detected from 112.6.231.114 (CN/China/-). 4 hits in the last 136 seconds
2019-10-27 14:16:46

Recently Reported IPs

185.151.242.165 175.107.203.42 52.215.96.218 180.248.32.187
212.179.99.184 103.6.55.90 178.238.233.182 58.218.209.50
208.73.204.156 78.194.1.42 165.188.191.24 212.237.50.122
155.63.121.92 155.255.80.217 231.120.30.145 98.242.103.132
29.253.26.164 180.114.38.81 249.154.124.186 208.143.108.101