Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: Unicom Liaoning Province Network

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Make a comment on this IP
Type Details Datetime
attackspam 
Unauthorized connection attempt detected from IP address 42.56.11.130 to port 6656 [T]
 2020-01-30 18:43:33
Comments on same subnet:
IP Type Details Datetime
42.56.11.29 attackbotsspam 
DATE:2020-02-26 01:47:14, IP:42.56.11.29, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc)
 2020-02-26 09:02:41
42.56.110.120 attack 
8080
 2019-09-03 06:56:36
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.56.11.130
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49715
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.56.11.130.			IN	A

;; AUTHORITY SECTION:
.			506	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020013001 1800 900 604800 86400

;; Query time: 65 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jan 30 18:43:19 CST 2020
;; MSG SIZE  rcvd: 116
Host info
Host 130.11.56.42.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 130.11.56.42.in-addr.arpa: NXDOMAIN
Related IP info:
42.56.11.54
42.56.11.204
42.56.11.163
42.56.11.83
42.56.11.213
42.56.11.151
42.56.11.81
42.56.11.128
42.56.11.229
42.56.11.149
42.56.11.58
42.56.11.20
42.56.11.211
42.56.11.197
42.56.11.98
42.56.11.175
42.56.11.142
42.56.11.221
42.56.11.154
42.56.11.77
42.56.11.26
42.56.11.24
42.56.11.127
42.56.11.59
42.56.11.232
42.56.11.64
42.56.11.243
42.56.11.181
42.56.11.118
42.56.11.201
42.56.11.141
42.56.11.195
42.56.11.96
42.56.11.32
42.56.11.47
42.56.11.7
42.56.11.82
42.56.11.153
42.56.11.122
42.56.11.110
42.56.11.159
42.56.11.215
42.56.11.11
42.56.11.191
42.56.11.49
42.56.11.228
42.56.11.176
42.56.11.17
42.56.11.242
42.56.11.150
42.56.11.67
42.56.11.190
42.56.11.38
42.56.11.208
42.56.11.55
42.56.11.95
42.56.11.66
42.56.11.10
42.56.11.146
42.56.11.35
42.56.11.111
42.56.11.14
42.56.11.44
42.56.11.33
42.56.11.170
42.56.11.117
42.56.11.244
42.56.11.92
42.56.11.121
42.56.11.212
42.56.11.180
42.56.11.86
42.56.11.184
42.56.11.5
42.56.11.192
42.56.11.179
42.56.11.51
42.56.11.162
42.56.11.21
42.56.11.48
42.56.11.167
42.56.11.199
42.56.11.19
42.56.11.136
42.56.11.200
42.56.11.80
42.56.11.147
42.56.11.6
42.56.11.88
42.56.11.173
42.56.11.85
42.56.11.174
42.56.11.16
42.56.11.22
42.56.11.209
42.56.11.194
42.56.11.43
42.56.11.126
42.56.11.53
42.56.11.37
42.56.11.233
42.56.11.1
42.56.11.235
42.56.11.129
42.56.11.140
42.56.11.46
42.56.11.125
42.56.11.9
42.56.11.182
42.56.11.185
42.56.11.193
42.56.11.108
42.56.11.131
42.56.11.139
42.56.11.132
42.56.11.112
42.56.11.171
42.56.11.56
42.56.11.245
42.56.11.27
42.56.11.65
42.56.11.99
42.56.11.79
42.56.11.103
42.56.11.216
42.56.11.234
42.56.11.254
42.56.11.89
42.56.11.23
42.56.11.91
42.56.11.114
42.56.11.230
42.56.11.31
42.56.11.222
42.56.11.13
42.56.11.207
42.56.11.87
42.56.11.42
42.56.11.161
42.56.11.231
42.56.11.214
42.56.11.72
42.56.11.3
42.56.11.198
42.56.11.246
42.56.11.203
42.56.11.69
42.56.11.57
42.56.11.172
42.56.11.25
42.56.11.236
42.56.11.73
42.56.11.106
42.56.11.237
42.56.11.76
42.56.11.102
42.56.11.165
42.56.11.220
42.56.11.133
42.56.11.36
42.56.11.206
42.56.11.124
42.56.11.196
42.56.11.160
42.56.11.137
42.56.11.251
42.56.11.187
42.56.11.247
42.56.11.169
42.56.11.250
42.56.11.75
42.56.11.40
42.56.11.84
42.56.11.30
42.56.11.8
42.56.11.164
42.56.11.240
42.56.11.217
42.56.11.45
42.56.11.97
42.56.11.12
42.56.11.156
42.56.11.52
42.56.11.135
42.56.11.62
42.56.11.113
42.56.11.224
42.56.11.130
42.56.11.227
42.56.11.239
42.56.11.28
42.56.11.41
42.56.11.93
42.56.11.74
42.56.11.223
42.56.11.155
42.56.11.90
42.56.11.189
42.56.11.123
42.56.11.183
42.56.11.148
42.56.11.168
42.56.11.177
42.56.11.166
42.56.11.134
42.56.11.143
42.56.11.78
42.56.11.4
42.56.11.218
42.56.11.100
42.56.11.63
42.56.11.145
42.56.11.18
42.56.11.119
42.56.11.2
42.56.11.205
42.56.11.34
42.56.11.225
42.56.11.241
42.56.11.253
42.56.11.105
42.56.11.157
42.56.11.144
42.56.11.61
42.56.11.115
42.56.11.50
42.56.11.94
42.56.11.219
42.56.11.120
42.56.11.60
42.56.11.68
42.56.11.15
42.56.11.70
42.56.11.226
42.56.11.116
42.56.11.202
42.56.11.109
42.56.11.252
42.56.11.249
42.56.11.107
42.56.11.29
42.56.11.188
42.56.11.104
42.56.11.101
42.56.11.248
42.56.11.186
42.56.11.210
42.56.11.152
42.56.11.39
42.56.11.178
42.56.11.71
42.56.11.238
42.56.11.138
42.56.11.158
Related comments:
IP Type Details Datetime
192.136.193.92 attackspam 
Unauthorized connection attempt from IP address 192.136.193.92 on Port 445(SMB)
 2019-09-05 10:13:44
117.221.239.64 attackspam 
5431/tcp
[2019-09-04]1pkt
 2019-09-05 09:54:55
1.52.39.153 attackspam 
Unauthorized connection attempt from IP address 1.52.39.153 on Port 445(SMB)
 2019-09-05 09:44:31
220.128.218.94 attackbots 
445/tcp
[2019-09-04]1pkt
 2019-09-05 09:35:15
186.231.33.26 attack 
445/tcp
[2019-09-04]1pkt
 2019-09-05 10:03:35
77.247.110.68 attack 
\[2019-09-04 21:33:36\] NOTICE\[1829\] chan_sip.c: Registration from '"90" \' failed for '77.247.110.68:5394' - Wrong password
\[2019-09-04 21:33:36\] SECURITY\[1837\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-09-04T21:33:36.398-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="90",SessionID="0x7f7b307ca688",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.110.68/5394",Challenge="0d71df4e",ReceivedChallenge="0d71df4e",ReceivedHash="c7877152baf4d8345db5dff5261e512d"
\[2019-09-04 21:33:36\] NOTICE\[1829\] chan_sip.c: Registration from '"90" \' failed for '77.247.110.68:5394' - Wrong password
\[2019-09-04 21:33:36\] SECURITY\[1837\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-09-04T21:33:36.493-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="90",SessionID="0x7f7b310167d8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.110
 2019-09-05 10:09:11
40.68.230.43 attackspam 
Automatic report - SSH Brute-Force Attack
 2019-09-05 09:42:33
59.13.139.54 attackspam 
Sep  5 00:43:15 XXX sshd[55722]: Invalid user ofsaa from 59.13.139.54 port 47192
 2019-09-05 10:17:00
49.34.120.172 attack 
Unauthorized connection attempt from IP address 49.34.120.172 on Port 445(SMB)
 2019-09-05 09:35:53
111.29.27.97 attackbots 
Sep  5 01:55:44 server sshd\[2298\]: Invalid user helen from 111.29.27.97 port 53492
Sep  5 01:55:44 server sshd\[2298\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.29.27.97
Sep  5 01:55:47 server sshd\[2298\]: Failed password for invalid user helen from 111.29.27.97 port 53492 ssh2
Sep  5 02:01:18 server sshd\[21434\]: Invalid user ts from 111.29.27.97 port 39152
Sep  5 02:01:18 server sshd\[21434\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.29.27.97
 2019-09-05 09:35:30
129.204.74.15 attackbots 
Sep  5 03:03:01 nginx sshd[64671]: error: PAM: authentication error for daemon from 129.204.74.15
Sep  5 03:03:01 nginx sshd[64671]: Failed keyboard-interactive/pam for daemon from 129.204.74.15 port 54120 ssh2
 2019-09-05 09:59:46
102.165.48.138 attackbots 
Unauthorized connection attempt from IP address 102.165.48.138 on Port 445(SMB)
 2019-09-05 10:17:40
178.128.91.46 attackspambots 
Sep  5 03:40:33 eventyay sshd[22045]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.91.46
Sep  5 03:40:35 eventyay sshd[22045]: Failed password for invalid user server from 178.128.91.46 port 34668 ssh2
Sep  5 03:48:08 eventyay sshd[22248]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.91.46
...
 2019-09-05 09:59:19
159.65.70.218 attack 
Sep  5 03:28:09 vps647732 sshd[23899]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.70.218
Sep  5 03:28:11 vps647732 sshd[23899]: Failed password for invalid user sdtdserver from 159.65.70.218 port 59872 ssh2
...
 2019-09-05 09:50:10
193.32.160.137 attackspambots 
Sep  5 03:59:25 relay postfix/smtpd\[26716\]: NOQUEUE: reject: RCPT from unknown\[193.32.160.137\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\<\[193.32.160.139\]\>
Sep  5 03:59:25 relay postfix/smtpd\[26716\]: NOQUEUE: reject: RCPT from unknown\[193.32.160.137\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\<\[193.32.160.139\]\>
Sep  5 03:59:25 relay postfix/smtpd\[26716\]: NOQUEUE: reject: RCPT from unknown\[193.32.160.137\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\<\[193.32.160.139\]\>
Sep  5 03:59:25 relay postfix/smtpd\[26716\]: NOQUEUE: reject: RCPT from unknown\[193.32.160.137\]: 554 5.7.1 \: Relay access denied\;
...
 2019-09-05 10:00:21

Recently Reported IPs

218.73.143.178 83.230.143.133 211.141.221.42 111.90.150.212
210.56.55.228 182.127.127.95 182.105.201.126 182.32.103.163
167.71.9.180 153.99.90.229 140.255.151.58 125.111.151.169
125.109.197.30 124.112.215.157 124.8.226.121 123.179.130.217
121.56.212.252 120.55.86.200 120.38.232.208 119.142.198.7