JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

111.42.35.138

Neutral Activity

Abuse Confidence Score

0% Low Risk

2,650 reports

685 reporters · latest 1 year ago

ISP: China Mobile Communications Corporation
Usage Type: Fixed Line ISP
ASN: AS132525
Domain Name: chinamobile.com
Country: 🇨🇳 China
City: Harbin, Heilongjiang

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

111.42.35.138 has been reported 2,650 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

2,650 from 685 distinct reporters

First reported

October 18th 2023

Most recent report

1 year ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 bogdanv	2025-03-15 16:18:34 UTC · (1 year ago)	$f2bV_matches	Brute-Force SSH
🇩🇪 bogdanv	2025-03-08 12:20:39 UTC · (1 year ago)	$f2bV_matches	Brute-Force SSH
🇩🇪 bogdanv	2025-01-12 12:44:57 UTC · (1 year ago)	$f2bV_matches	Brute-Force SSH
🇩🇪 bogdanv	2024-10-24 05:19:10 UTC · (2 years ago)	$f2bV_matches	Brute-Force SSH
🇺🇸 voolik.com	2024-09-18 05:25:13 UTC · (2 years ago)	Sep 18 07:25:04 bla016-truserv-jhb1-001 sshd[3082536]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.42.35.138 user=root Sep 18 07:25:06 bla016-truserv-jhb1-001 sshd[3082536]: Failed password for root fr ... show more Sep 18 07:25:04 bla016-truserv-jhb1-001 sshd[3082536]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.42.35.138 user=root Sep 18 07:25:06 bla016-truserv-jhb1-001 sshd[3082536]: Failed password for root from 111.42.35.138 port 41920 ssh2 Sep 18 07:25:10 bla016-truserv-jhb1-001 sshd[3082683]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.42.35.138 user=root Sep 18 07:25:12 bla016-truserv-jhb1-001 sshd[3082683]: Failed password for root from 111.42.35.138 port 47564 ssh2 ... show less	Brute-Force SSH
🇨🇭 master.arknet.ch	2024-09-18 01:18:39 UTC · (2 years ago)	2024-09-18T03:18:35.476178+02:00 wels sshd[130155]: Connection closed by authenticating user root 111.42.35.138 port 40284 [preauth] 2024-09-18T03:18:36.461489+02:00 wels sshd[130157]: Connection closed by authenticating user root 111.42.35.138 port ... show more 2024-09-18T03:18:35.476178+02:00 wels sshd[130155]: Connection closed by authenticating user root 111.42.35.138 port 40284 [preauth] 2024-09-18T03:18:36.461489+02:00 wels sshd[130157]: Connection closed by authenticating user root 111.42.35.138 port 42448 [preauth] 2024-09-18T03:18:38.230447+02:00 wels sshd[130159]: Connection closed by authenticating user root 111.42.35.138 port 43366 [preauth] ... show less	Brute-Force SSH
🇧🇾 StatsMe	2024-09-17 21:15:23 UTC · (2 years ago)	2024-09-17T21:20:30.928802+0300 ET SCAN Potential SSH Scan	Port Scan Brute-Force SSH
🇫🇷 Hector Lorenzo	2024-09-17 16:18:08 UTC · (2 years ago)	$f2bV_matches	Brute-Force SSH
🇩🇪 www.hazi.ro	2024-09-17 11:19:00 UTC · (2 years ago)	[2024-09-17 11:19:00] SSH Bruteforce Attack	Brute-Force SSH
🇳🇱 nikoladd	2024-09-17 08:08:34 UTC · (2 years ago)	Sep 17 11:07:19 server2 sshd\[26510\]: User root from 111.42.35.138 not allowed because not listed in AllowUsers Sep 17 11:07:38 server2 sshd\[26520\]: User root from 111.42.35.138 not allowed because not listed in AllowUsers Sep 17 11:07:53 server2 ... show more Sep 17 11:07:19 server2 sshd\[26510\]: User root from 111.42.35.138 not allowed because not listed in AllowUsers Sep 17 11:07:38 server2 sshd\[26520\]: User root from 111.42.35.138 not allowed because not listed in AllowUsers Sep 17 11:07:53 server2 sshd\[26527\]: User root from 111.42.35.138 not allowed because not listed in AllowUsers Sep 17 11:08:08 server2 sshd\[26533\]: User root from 111.42.35.138 not allowed because not listed in AllowUsers Sep 17 11:08:28 server2 sshd\[26566\]: User root from 111.42.35.138 not allowed because not listed in AllowUsers Sep 17 11:08:30 server2 sshd\[26582\]: User root from 111.42.35.138 not allowed because not listed in AllowUsers show less	Brute-Force
🇩🇪 blatovi	2024-09-17 05:23:58 UTC · (2 years ago)	Sep 17 05:23:47 cknpih001 sshd[140414]: Failed password for root from 111.42.35.138 port 58440 ssh2 Sep 17 05:23:49 cknpih001 sshd[140416]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.42.35.138 user=ro ... show more Sep 17 05:23:47 cknpih001 sshd[140414]: Failed password for root from 111.42.35.138 port 58440 ssh2 Sep 17 05:23:49 cknpih001 sshd[140416]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.42.35.138 user=root Sep 17 05:23:51 cknpih001 sshd[140416]: Failed password for root from 111.42.35.138 port 33880 ssh2 Sep 17 05:23:54 cknpih001 sshd[140418]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.42.35.138 user=root Sep 17 05:23:57 cknpih001 sshd[140418]: Failed password for root from 111.42.35.138 port 38082 ssh2 ... show less	Brute-Force SSH
🇷🇸 Scan	2024-09-17 05:12:26 UTC · (2 years ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇨🇭 Filli Group	2024-09-17 03:27:17 UTC · (2 years ago)	2024-09-17T05:27:14.173351+02:00 server01.k3s.pve01.rma.ch.crazycraftland.net sshd[2789387]: User root from 111.42.35.138 not allowed because not listed in AllowUsers 2024-09-17T05:27:15.259451+02:00 server01.k3s.pve01.rma.ch.crazycraftland.net sshd[ ... show more 2024-09-17T05:27:14.173351+02:00 server01.k3s.pve01.rma.ch.crazycraftland.net sshd[2789387]: User root from 111.42.35.138 not allowed because not listed in AllowUsers 2024-09-17T05:27:15.259451+02:00 server01.k3s.pve01.rma.ch.crazycraftland.net sshd[2789389]: User root from 111.42.35.138 not allowed because not listed in AllowUsers 2024-09-17T05:27:16.386186+02:00 server01.k3s.pve01.rma.ch.crazycraftland.net sshd[2789391]: User root from 111.42.35.138 not allowed because not listed in AllowUsers ... show less	Brute-Force SSH
🇨🇦 an_original_username	2024-09-17 02:10:41 UTC · (2 years ago)	Sep 16 22:10:34 vps196363 sshd[25563]: Failed password for root from 111.42.35.138 port 46004 ssh2 Sep 16 22:10:37 vps196363 sshd[25565]: Failed password for root from 111.42.35.138 port 49238 ssh2 Sep 16 22:10:41 vps196363 sshd[25567]: Failed passwo ... show more Sep 16 22:10:34 vps196363 sshd[25563]: Failed password for root from 111.42.35.138 port 46004 ssh2 Sep 16 22:10:37 vps196363 sshd[25565]: Failed password for root from 111.42.35.138 port 49238 ssh2 Sep 16 22:10:41 vps196363 sshd[25567]: Failed password for root from 111.42.35.138 port 52092 ssh2 ... show less	Brute-Force SSH
🇺🇸 musicwolf83	2024-09-16 22:57:43 UTC · (2 years ago)	2024-09-16 16:57:41.319575921 2024-09-16T22:57:41.319Z ACCEPT host=::ffff:111.42.35.138 port=43042 fd=5 n=2/4096 ...	Brute-Force SSH

Showing 1 to 15 of 2650 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 118.145.107.219

🇵🇰 39.61.57.81

🇺🇸 207.241.173.236

🇩🇪 194.88.98.86

🇵🇭 180.193.181.195

🇨🇭 179.43.153.2

🇨🇳 106.13.124.241

🇵🇱 95.214.53.196

🇫🇷 91.231.89.199

🇩🇴 45.172.152.74

🇺🇸 45.132.115.158

🇺🇸 20.118.235.131

🇨🇳 14.153.244.106

🇷🇴 2.57.121.112

🇸🇬 178.128.118.82

🇰🇷 125.142.37.91

🇵🇱 87.251.64.41

🇧🇬 78.128.114.118

🇧🇷 45.229.91.2

🇺🇸 18.190.15.50