Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: Liaoning

Country: China

Internet Service Provider: Unicom Liaoning Province Network

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Type Details Datetime
attackspam
Unauthorised access (Sep 25) SRC=42.5.216.85 LEN=40 TTL=49 ID=51752 TCP DPT=8080 WINDOW=40004 SYN 
Unauthorised access (Sep 25) SRC=42.5.216.85 LEN=40 TTL=49 ID=389 TCP DPT=8080 WINDOW=40004 SYN
2019-09-26 02:23:00
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.5.216.85
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 52811
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.5.216.85.			IN	A

;; AUTHORITY SECTION:
.			598	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019092500 1800 900 604800 86400

;; Query time: 282 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Sep 26 02:22:57 CST 2019
;; MSG SIZE  rcvd: 115
Host info
Host 85.216.5.42.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 85.216.5.42.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
212.237.38.79 attack
May 27 15:00:12 ArkNodeAT sshd\[6508\]: Invalid user phpmy from 212.237.38.79
May 27 15:00:12 ArkNodeAT sshd\[6508\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.237.38.79
May 27 15:00:14 ArkNodeAT sshd\[6508\]: Failed password for invalid user phpmy from 212.237.38.79 port 45882 ssh2
2020-05-28 00:15:35
195.16.76.194 attackspambots
php WP PHPmyadamin ABUSE blocked for 12h
2020-05-28 00:36:39
173.67.48.130 attack
Bruteforce detected by fail2ban
2020-05-28 00:30:00
120.31.144.249 attackspambots
1590580353 - 05/27/2020 13:52:33 Host: 120.31.144.249/120.31.144.249 Port: 445 TCP Blocked
2020-05-28 00:14:43
221.217.227.86 attack
May 27 17:43:48 electroncash sshd[59074]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.217.227.86 
May 27 17:43:47 electroncash sshd[59074]: Invalid user andrei from 221.217.227.86 port 33633
May 27 17:43:50 electroncash sshd[59074]: Failed password for invalid user andrei from 221.217.227.86 port 33633 ssh2
May 27 17:47:13 electroncash sshd[59981]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.217.227.86  user=root
May 27 17:47:15 electroncash sshd[59981]: Failed password for root from 221.217.227.86 port 31361 ssh2
...
2020-05-28 00:32:38
37.187.113.229 attackbotsspam
May 27 15:01:56 vmd17057 sshd[6333]: Failed password for root from 37.187.113.229 port 52392 ssh2
...
2020-05-28 00:23:43
119.28.7.77 attack
May 27 04:44:55 dignus sshd[14962]: Failed password for invalid user nessus1 from 119.28.7.77 port 37256 ssh2
May 27 04:48:32 dignus sshd[15165]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.28.7.77  user=root
May 27 04:48:34 dignus sshd[15165]: Failed password for root from 119.28.7.77 port 39316 ssh2
May 27 04:52:03 dignus sshd[15359]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.28.7.77  user=root
May 27 04:52:05 dignus sshd[15359]: Failed password for root from 119.28.7.77 port 41374 ssh2
...
2020-05-28 00:35:54
179.183.121.147 attackbotsspam
Automatic report - Port Scan Attack
2020-05-28 00:49:45
102.141.74.17 attackbots
23/tcp
[2020-05-27]1pkt
2020-05-28 00:35:40
220.124.240.66 attackbots
(imapd) Failed IMAP login from 220.124.240.66 (KR/South Korea/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: May 27 21:11:50 ir1 dovecot[2885757]: imap-login: Disconnected (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=220.124.240.66, lip=5.63.12.44, session=<4Lgj46Om9sXcfPBC>
2020-05-28 00:47:30
185.234.216.66 attackspam
2020-05-27T13:34:34.422614www postfix/smtpd[1769]: warning: unknown[185.234.216.66]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
2020-05-27T13:43:28.241642www postfix/smtpd[2356]: warning: unknown[185.234.216.66]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
2020-05-27T13:52:27.486873www postfix/smtpd[3749]: warning: unknown[185.234.216.66]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...
2020-05-28 00:20:15
68.183.147.58 attackbotsspam
May 27 13:52:56 ajax sshd[20385]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.147.58 
May 27 13:52:59 ajax sshd[20385]: Failed password for invalid user anouk from 68.183.147.58 port 48506 ssh2
2020-05-28 00:18:22
124.12.160.225 attackspam
1590580305 - 05/27/2020 13:51:45 Host: 124.12.160.225/124.12.160.225 Port: 445 TCP Blocked
2020-05-28 00:50:50
132.232.225.43 attack
report
2020-05-28 00:20:50
58.41.144.222 attack
Unauthorized connection attempt detected from IP address 58.41.144.222 to port 23
2020-05-28 00:12:20

Recently Reported IPs

188.202.203.4 83.231.43.222 91.178.74.136 173.36.233.220
217.108.98.84 197.64.14.184 52.119.197.57 212.93.132.47
223.9.239.132 129.208.233.105 174.111.35.134 159.203.201.103
80.91.174.186 109.101.69.234 187.6.150.171 24.150.19.210
86.248.48.109 92.24.215.167 156.212.235.125 70.120.80.10