Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: Tencent Cloud Computing (Beijing) Co. Ltd

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackspambots
firewall-block, port(s): 307/tcp
2020-09-12 01:06:30
attackspambots
SSH/22 MH Probe, BF, Hack -
2020-09-11 17:02:56
attackspambots
SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found
2020-09-11 09:16:05
attackbotsspam
[N10.H2.VM2] Port Scanner Detected Blocked by UFW
2020-09-09 13:28:09
attackbots
Sep  8 21:06:52 sip sshd[1543396]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.68.142.128 
Sep  8 21:06:52 sip sshd[1543396]: Invalid user maggiora from 81.68.142.128 port 37800
Sep  8 21:06:53 sip sshd[1543396]: Failed password for invalid user maggiora from 81.68.142.128 port 37800 ssh2
...
2020-09-09 05:41:07
attackspam
2020-08-21T12:47:23.441760shield sshd\[15154\]: Invalid user csgoserver from 81.68.142.128 port 39384
2020-08-21T12:47:23.449807shield sshd\[15154\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.68.142.128
2020-08-21T12:47:25.469272shield sshd\[15154\]: Failed password for invalid user csgoserver from 81.68.142.128 port 39384 ssh2
2020-08-21T12:48:02.376680shield sshd\[15228\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.68.142.128  user=root
2020-08-21T12:48:04.752311shield sshd\[15228\]: Failed password for root from 81.68.142.128 port 47464 ssh2
2020-08-22 02:00:24
attackbots
2020-08-21T12:01:49.832556shield sshd\[5863\]: Invalid user www-data from 81.68.142.128 port 34780
2020-08-21T12:01:49.841357shield sshd\[5863\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.68.142.128
2020-08-21T12:01:51.530005shield sshd\[5863\]: Failed password for invalid user www-data from 81.68.142.128 port 34780 ssh2
2020-08-21T12:02:41.735923shield sshd\[5938\]: Invalid user stefan from 81.68.142.128 port 42852
2020-08-21T12:02:41.744103shield sshd\[5938\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.68.142.128
2020-08-21 20:09:38
attack
Aug 17 21:46:52 webhost01 sshd[6050]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.68.142.128
Aug 17 21:46:54 webhost01 sshd[6050]: Failed password for invalid user sentry from 81.68.142.128 port 55082 ssh2
...
2020-08-18 00:29:34
attack
Aug  6 18:36:03 ovpn sshd\[17319\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.68.142.128  user=root
Aug  6 18:36:05 ovpn sshd\[17319\]: Failed password for root from 81.68.142.128 port 55764 ssh2
Aug  6 18:51:25 ovpn sshd\[29443\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.68.142.128  user=root
Aug  6 18:51:27 ovpn sshd\[29443\]: Failed password for root from 81.68.142.128 port 59464 ssh2
Aug  6 18:53:51 ovpn sshd\[31137\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.68.142.128  user=root
2020-08-07 02:49:01
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 81.68.142.128
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 61608
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;81.68.142.128.			IN	A

;; AUTHORITY SECTION:
.			435	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020080603 1800 900 604800 86400

;; Query time: 24 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Aug 07 02:48:57 CST 2020
;; MSG SIZE  rcvd: 117
Host info
Host 128.142.68.81.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 128.142.68.81.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
2001:470:dfa9:10ff:0:242:ac11:32 attackspambots
Port scan
2020-02-20 08:28:30
2001:470:dfa9:10ff:0:242:ac11:19 attackbotsspam
Port scan
2020-02-20 09:08:37
110.34.13.67 attackbots
firewall-block, port(s): 2323/tcp
2020-02-20 08:32:38
187.162.42.135 attackbots
Automatic report - Port Scan Attack
2020-02-20 08:54:03
45.133.99.2 attackspambots
Feb 19 23:52:31 heicom postfix/smtpd\[18090\]: warning: unknown\[45.133.99.2\]: SASL LOGIN authentication failed: authentication failure
Feb 19 23:52:35 heicom postfix/smtpd\[18090\]: warning: unknown\[45.133.99.2\]: SASL LOGIN authentication failed: authentication failure
Feb 20 00:15:53 heicom postfix/smtpd\[18644\]: warning: unknown\[45.133.99.2\]: SASL LOGIN authentication failed: authentication failure
Feb 20 00:16:00 heicom postfix/smtpd\[18644\]: warning: unknown\[45.133.99.2\]: SASL LOGIN authentication failed: authentication failure
Feb 20 00:29:37 heicom postfix/smtpd\[18796\]: warning: unknown\[45.133.99.2\]: SASL LOGIN authentication failed: authentication failure
...
2020-02-20 08:30:05
140.227.187.103 attackspam
20/2/19@16:54:26: FAIL: Alarm-Network address from=140.227.187.103
...
2020-02-20 09:06:06
218.92.0.158 attackspambots
IP blocked
2020-02-20 08:39:48
103.36.8.146 attackbotsspam
Feb 19 22:54:46 grey postfix/smtpd\[16066\]: NOQUEUE: reject: RCPT from unknown\[103.36.8.146\]: 554 5.7.1 Service unavailable\; Client host \[103.36.8.146\] blocked using bl.spamcop.net\; Blocked - see https://www.spamcop.net/bl.shtml\?103.36.8.146\; from=\ to=\ proto=SMTP helo=\
...
2020-02-20 08:49:47
123.231.44.71 attackspam
Invalid user waterboy from 123.231.44.71 port 48688
2020-02-20 08:59:22
185.36.81.57 attackbots
Rude login attack (139 tries in 1d)
2020-02-20 08:41:50
2001:470:dfa9:10ff:0:242:ac11:28 attack
Port scan
2020-02-20 08:46:27
2001:470:dfa9:10ff:0:242:ac11:31 attackbots
Port scan
2020-02-20 08:29:34
218.237.207.4 attackspam
SSH-BruteForce
2020-02-20 09:08:59
185.209.0.32 attack
Feb 20 01:28:36 debian-2gb-nbg1-2 kernel: \[4417728.822866\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=185.209.0.32 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=12867 PROTO=TCP SPT=50780 DPT=3516 WINDOW=1024 RES=0x00 SYN URGP=0
2020-02-20 08:56:19
178.128.114.248 attackspam
Feb 19 22:55:01 debian-2gb-nbg1-2 kernel: \[4408513.782028\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=178.128.114.248 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x40 TTL=242 ID=6120 PROTO=TCP SPT=32767 DPT=8545 WINDOW=1024 RES=0x00 SYN URGP=0
2020-02-20 08:36:27

Recently Reported IPs

162.155.248.162 108.95.105.200 215.80.7.219 106.58.82.234
205.177.184.204 20.41.160.132 149.165.49.127 80.46.32.126
155.209.2.192 162.233.235.10 23.232.230.221 177.137.198.131
52.160.101.185 62.44.135.87 195.114.121.174 167.99.203.150
202.60.130.200 198.177.122.98 201.117.254.189 117.109.211.52