Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Liaoyang

Region: Liaoning

Country: China

Internet Service Provider: China Unicom

Hostname: unknown

Organization: CHINA UNICOM China169 Backbone

Usage Type: unknown

Comments:
Make a comment on this IP
Type Details Datetime
attack 
42.56.30.66 - - [09/Apr/2019:21:03:03 +0800] "GET /mgw.htm?operationType=com.cars.otsmobile.queryLeftTicket&requestData=%5B%7B\\x22train_date\\x22%3A\\x2220181231\\x22%2C\\x22purpose_codes\\x22%3A\\x2200\\x22%2C\\x22from_station\\x22%3A\\x22BJP\\x22%2C\\x22to_station\\x22%3A\\x22SHH\\x22%2C\\x22station_train_code\\x22%3A\\x22\\x22%2C\\x22start_time_begin\\x22%3A\\x220000\\x22%2C\\x22start_time_end\\x22%3A\\x222400\\x22%2C\\x22train_headers\\x22%3A\\x22QB%23\\x22%2C\\x22train_flag\\x22%3A\\x22\\x22%2C\\x22seat_type\\x22%3A\\x220\\x22%2C\\x22seatBack_Type\\x22%3A\\x22\\x22%2C\\x22ticket_num\\x22%3A\\x22\\x22%2C\\x22dfpStr\\x22%3A\\x22\\x22%2C\\x22baseDTO\\x22%3A%7B\\x22check_code\\x22%3A\\x22d38a201f2de926ce0686aedfdcf2de68\\x22%2C\\x22device_no\\x22%3A\\x22WtaHBzID7ZQDADJh05y5LLpd\\x22%2C\\x22mobile_no\\x22%3A\\x22\\x22%2C\\x22os_type\\x22%3A\\x22a\\x22%2C\\x22time_str\\x22%3A\\x2220181030152947\\x22%2C\\x22version_no\\x22%3A\\x224.1.9\\x22%7D%7D%5D&ts=1540884587652&sign=37b8ebe6406579e4fb2ac8c9038eab37 HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.87 Safari/537.36"
 2019-04-09 21:06:38
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.56.30.66
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 35243
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.56.30.66.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019040900 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Tue Apr 09 21:06:33 +08 2019
;; MSG SIZE  rcvd: 115
Host info
Host 66.30.56.42.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		67.207.67.3
Address:	67.207.67.3#53

** server can't find 66.30.56.42.in-addr.arpa: NXDOMAIN
Related IP info:
42.56.30.212
42.56.30.172
42.56.30.174
42.56.30.147
42.56.30.1
42.56.30.217
42.56.30.193
42.56.30.171
42.56.30.48
42.56.30.36
42.56.30.144
42.56.30.16
42.56.30.6
42.56.30.116
42.56.30.99
42.56.30.8
42.56.30.146
42.56.30.60
42.56.30.221
42.56.30.161
42.56.30.78
42.56.30.211
42.56.30.33
42.56.30.85
42.56.30.23
42.56.30.31
42.56.30.26
42.56.30.100
42.56.30.121
42.56.30.158
42.56.30.163
42.56.30.247
42.56.30.183
42.56.30.73
42.56.30.88
42.56.30.145
42.56.30.63
42.56.30.220
42.56.30.50
42.56.30.252
42.56.30.239
42.56.30.39
42.56.30.24
42.56.30.93
42.56.30.109
42.56.30.64
42.56.30.104
42.56.30.162
42.56.30.40
42.56.30.114
42.56.30.25
42.56.30.49
42.56.30.92
42.56.30.227
42.56.30.208
42.56.30.43
42.56.30.219
42.56.30.160
42.56.30.51
42.56.30.74
42.56.30.45
42.56.30.95
42.56.30.246
42.56.30.205
42.56.30.41
42.56.30.149
42.56.30.136
42.56.30.202
42.56.30.209
42.56.30.180
42.56.30.178
42.56.30.81
42.56.30.140
42.56.30.192
42.56.30.22
42.56.30.237
42.56.30.87
42.56.30.13
42.56.30.234
42.56.30.182
42.56.30.159
42.56.30.245
42.56.30.46
42.56.30.57
42.56.30.54
42.56.30.173
42.56.30.98
42.56.30.152
42.56.30.191
42.56.30.164
42.56.30.240
42.56.30.235
42.56.30.198
42.56.30.72
42.56.30.5
42.56.30.20
42.56.30.127
42.56.30.254
42.56.30.207
42.56.30.141
42.56.30.55
42.56.30.53
42.56.30.135
42.56.30.102
42.56.30.76
42.56.30.168
42.56.30.129
42.56.30.226
42.56.30.225
42.56.30.7
42.56.30.15
42.56.30.70
42.56.30.231
42.56.30.200
42.56.30.216
42.56.30.250
42.56.30.238
42.56.30.29
42.56.30.138
42.56.30.2
42.56.30.189
42.56.30.77
42.56.30.197
42.56.30.112
42.56.30.251
42.56.30.68
42.56.30.32
42.56.30.130
42.56.30.52
42.56.30.170
42.56.30.248
42.56.30.143
42.56.30.28
42.56.30.128
42.56.30.84
42.56.30.69
42.56.30.165
42.56.30.108
42.56.30.59
42.56.30.17
42.56.30.82
42.56.30.194
42.56.30.139
42.56.30.97
42.56.30.89
42.56.30.133
42.56.30.75
42.56.30.196
42.56.30.58
42.56.30.117
42.56.30.210
42.56.30.125
42.56.30.66
42.56.30.155
42.56.30.30
42.56.30.86
42.56.30.137
42.56.30.61
42.56.30.134
42.56.30.157
42.56.30.96
42.56.30.122
42.56.30.83
42.56.30.148
42.56.30.111
42.56.30.65
42.56.30.232
42.56.30.105
42.56.30.177
42.56.30.12
42.56.30.79
42.56.30.19
42.56.30.11
42.56.30.126
42.56.30.167
42.56.30.199
42.56.30.110
42.56.30.94
42.56.30.156
42.56.30.185
42.56.30.187
42.56.30.249
42.56.30.42
42.56.30.179
42.56.30.124
42.56.30.120
42.56.30.71
42.56.30.215
42.56.30.62
42.56.30.243
42.56.30.91
42.56.30.47
42.56.30.10
42.56.30.229
42.56.30.106
42.56.30.224
42.56.30.222
42.56.30.118
42.56.30.176
42.56.30.80
42.56.30.253
42.56.30.166
42.56.30.123
42.56.30.242
42.56.30.44
42.56.30.228
42.56.30.186
42.56.30.213
42.56.30.56
42.56.30.181
42.56.30.115
42.56.30.154
42.56.30.3
42.56.30.90
42.56.30.244
42.56.30.204
42.56.30.241
42.56.30.151
42.56.30.9
42.56.30.67
42.56.30.113
42.56.30.37
42.56.30.233
42.56.30.218
42.56.30.214
42.56.30.236
42.56.30.21
42.56.30.4
42.56.30.34
42.56.30.38
42.56.30.223
42.56.30.132
42.56.30.184
42.56.30.206
42.56.30.190
42.56.30.230
42.56.30.201
42.56.30.18
42.56.30.27
42.56.30.203
42.56.30.131
42.56.30.169
42.56.30.101
42.56.30.175
42.56.30.107
42.56.30.195
42.56.30.103
42.56.30.188
42.56.30.35
42.56.30.153
42.56.30.14
42.56.30.119
42.56.30.142
42.56.30.150
Related comments:
IP Type Details Datetime
202.187.87.163 attack 
 TCP (SYN) 202.187.87.163:45748 -> port 23, len 44
 2020-09-12 03:06:58
103.237.56.23 attack 
Sep  7 11:18:19 mail.srvfarm.net postfix/smtps/smtpd[1026495]: warning: unknown[103.237.56.23]: SASL PLAIN authentication failed: 
Sep  7 11:18:19 mail.srvfarm.net postfix/smtps/smtpd[1026495]: lost connection after AUTH from unknown[103.237.56.23]
Sep  7 11:24:23 mail.srvfarm.net postfix/smtpd[1028455]: warning: unknown[103.237.56.23]: SASL PLAIN authentication failed: 
Sep  7 11:24:23 mail.srvfarm.net postfix/smtpd[1028455]: lost connection after AUTH from unknown[103.237.56.23]
Sep  7 11:26:59 mail.srvfarm.net postfix/smtpd[1028455]: warning: unknown[103.237.56.23]: SASL PLAIN authentication failed:
 2020-09-12 03:02:49
209.97.184.48 attackbots 
 TCP (SYN) 209.97.184.48:32767 -> port 8545, len 44
 2020-09-12 03:32:55
177.11.114.115 attack 
Sep  7 11:44:11 mail.srvfarm.net postfix/smtpd[1031549]: warning: unknown[177.11.114.115]: SASL PLAIN authentication failed: 
Sep  7 11:44:11 mail.srvfarm.net postfix/smtpd[1031549]: lost connection after AUTH from unknown[177.11.114.115]
Sep  7 11:49:24 mail.srvfarm.net postfix/smtpd[1031548]: warning: unknown[177.11.114.115]: SASL PLAIN authentication failed: 
Sep  7 11:49:24 mail.srvfarm.net postfix/smtpd[1031548]: lost connection after AUTH from unknown[177.11.114.115]
Sep  7 11:50:30 mail.srvfarm.net postfix/smtps/smtpd[1032347]: warning: unknown[177.11.114.115]: SASL PLAIN authentication failed:
 2020-09-12 02:58:45
80.90.131.181 attackbotsspam 
Sep  7 11:43:46 mail.srvfarm.net postfix/smtpd[1031549]: warning: 80-90-131-181.static.oxid.cz[80.90.131.181]: SASL PLAIN authentication failed: 
Sep  7 11:43:46 mail.srvfarm.net postfix/smtpd[1031549]: lost connection after AUTH from 80-90-131-181.static.oxid.cz[80.90.131.181]
Sep  7 11:50:48 mail.srvfarm.net postfix/smtpd[1031549]: warning: 80-90-131-181.static.oxid.cz[80.90.131.181]: SASL PLAIN authentication failed: 
Sep  7 11:50:48 mail.srvfarm.net postfix/smtpd[1031549]: lost connection after AUTH from 80-90-131-181.static.oxid.cz[80.90.131.181]
Sep  7 11:51:11 mail.srvfarm.net postfix/smtps/smtpd[1032281]: warning: 80-90-131-181.static.oxid.cz[80.90.131.181]: SASL PLAIN authentication failed:
 2020-09-12 02:59:47
157.245.108.35 attackspambots 
Sep 11 19:29:18 sshgateway sshd\[31990\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.108.35  user=root
Sep 11 19:29:20 sshgateway sshd\[31990\]: Failed password for root from 157.245.108.35 port 54526 ssh2
Sep 11 19:35:22 sshgateway sshd\[340\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.108.35  user=root
 2020-09-12 03:11:24
202.107.226.4 attack 
Persistent port scanning [29 denied]
 2020-09-12 03:34:00
193.228.91.109 attackbotsspam 
Sep 11 21:32:29 vps647732 sshd[345]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.228.91.109
Sep 11 21:32:31 vps647732 sshd[345]: Failed password for invalid user db from 193.228.91.109 port 34204 ssh2
...
 2020-09-12 03:34:14
40.120.36.240 attack 
Port Scan: TCP/443
 2020-09-12 03:16:19
167.248.133.30 attackbotsspam 
 TCP (SYN) 167.248.133.30:39790 -> port 995, len 44
 2020-09-12 03:22:44
167.172.131.88 attackbots 
167.172.131.88 - - [11/Sep/2020:15:54:26 +0200] "POST /xmlrpc.php HTTP/1.1" 403 461 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
167.172.131.88 - - [11/Sep/2020:16:21:28 +0200] "POST /xmlrpc.php HTTP/1.1" 403 461 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
 2020-09-12 03:15:22
182.76.21.208 attack 
1599756679 - 09/10/2020 18:51:19 Host: 182.76.21.208/182.76.21.208 Port: 445 TCP Blocked
 2020-09-12 02:57:56
78.31.93.49 attackbots 
Sep  9 11:37:21 mail.srvfarm.net postfix/smtpd[2330267]: warning: unknown[78.31.93.49]: SASL PLAIN authentication failed: 
Sep  9 11:37:21 mail.srvfarm.net postfix/smtpd[2330267]: lost connection after AUTH from unknown[78.31.93.49]
Sep  9 11:40:09 mail.srvfarm.net postfix/smtps/smtpd[2334662]: warning: unknown[78.31.93.49]: SASL PLAIN authentication failed: 
Sep  9 11:40:09 mail.srvfarm.net postfix/smtps/smtpd[2334662]: lost connection after AUTH from unknown[78.31.93.49]
Sep  9 11:43:26 mail.srvfarm.net postfix/smtps/smtpd[2330448]: warning: unknown[78.31.93.49]: SASL PLAIN authentication failed:
 2020-09-12 03:03:58
45.232.64.183 attackbotsspam 
Sep 11 15:52:32 mail.srvfarm.net postfix/smtpd[3830354]: warning: unknown[45.232.64.183]: SASL PLAIN authentication failed: 
Sep 11 15:52:32 mail.srvfarm.net postfix/smtpd[3830354]: lost connection after AUTH from unknown[45.232.64.183]
Sep 11 15:57:09 mail.srvfarm.net postfix/smtpd[3830353]: warning: unknown[45.232.64.183]: SASL PLAIN authentication failed: 
Sep 11 15:57:10 mail.srvfarm.net postfix/smtpd[3830353]: lost connection after AUTH from unknown[45.232.64.183]
Sep 11 15:58:18 mail.srvfarm.net postfix/smtps/smtpd[3832070]: warning: unknown[45.232.64.183]: SASL PLAIN authentication failed:
 2020-09-12 03:00:11
218.91.1.91 attack 
SMTP brute force
 2020-09-12 03:11:07

Recently Reported IPs

23.129.64.104 31.160.91.14 138.197.70.149 213.230.113.240
179.185.185.228 14.139.191.130 212.156.79.166 95.54.192.150
220.129.104.99 192.232.233.178 123.235.32.120 198.61.254.1
117.84.112.127 90.166.12.245 62.210.161.142 62.210.161.115
188.190.248.8 58.246.56.230 80.211.26.131 188.133.157.197