JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 188.42.101.111

188.42.101.111 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 83%: ?

83%

ISP	root SA
Usage Type	Data Center/Web Hosting/Transit
ASN	AS7979
Domain Name	root.lu
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 188.42.101.111

Whois 188.42.101.111

IP Abuse Reports for 188.42.101.111:

This IP address has been reported a total of 15 times from 14 distinct sources. 188.42.101.111 was first reported on July 11th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Axel	2026-07-13 15:34:36 (1 day ago)	[2026-07-13 15:34:36 UTC] Honeypot CouchDB connection attempt \| AXFRA HONEYPOT	Hacking
🇺🇸 technash	2026-07-13 14:20:00 (1 day ago)	Port scanning detection [Fortinet/Sentinel]. Deny/drop traffic.	Port Scan
🇹🇷 Threat.live	2026-07-13 12:45:03 (1 day ago)	Suspicious Connection Attempts	Brute-Force
🇩🇪 DerLukas	2026-07-13 10:25:39 (1 day ago)		Port Scan
🇭🇺 DumaNet	2026-07-13 03:20:00 (1 day ago)	Blocked for port scanning. Time: Sun Jul 12. 17:52:32 2026 +0200 IP: 188.42.101.111 (SG/Singapore/ ... show more Blocked for port scanning. Time: Sun Jul 12. 17:52:32 2026 +0200 IP: 188.42.101.111 (SG/Singapore/-) Sample of block hits: Jul 12 17:47:50 vserv kernel: [51855257.136890] Firewall: TCP_IN Blocked IN=eth0 OUT= MAC= SRC=188.42.101.111 DST=[removed] LEN=44 TOS=0x00 PREC=0x00 TTL=241 ID=8801 PROTO=TCP SPT=61000 DPT=5975 WINDOW=1025 RES=0x00 SYN URGP=0 Jul 12 17:48:26 vserv kernel: [51855293.309797] Firewall: TCP_IN Blocked IN=eth0 OUT= MAC= SRC=188.42.101.111 DST=[removed] LEN=44 TOS=0x00 PREC=0x00 TTL=242 ID=9423 PROTO=TCP SPT=61000 DPT=5915 WINDOW=1025 RES=0x00 SYN URGP=0 Jul 12 17:49:34 vserv kernel: [51855361.792118] Firewall: TCP_IN Blocked IN=eth0 OUT= MAC= SRC=188.42.101.111 DST=[removed] LEN=44 TOS=0x00 PREC=0x00 TTL=242 ID=40802 PROTO=TCP SPT=61000 DPT=5957 WINDOW=1025 RES=0x00 SYN URGP=0 Jul 12 17:50:08 vserv kernel: [51855395.104661] Firewall: TCP_IN Blocked IN=eth0 OUT= MAC= SRC=188.42.101.111 DST=[removed] LEN=44 TOS=0x00 PREC=0x00 TTL=242 ID=62006 PROTO=TCP SPT=61000 DPT=5997 WINDOW show less	Port Scan
🇫🇮 TrafficAnalyser	2026-07-12 18:05:10 (1 day ago)	Port scanning	Port Scan
🇬🇧 NotCool	2026-07-12 16:45:51 (1 day ago)	[3600] Port Scan detected from 188.42.101.111 (SG/Singapore/-). 11 hits in the last 80 seconds	Brute-Force
Anonymous	2026-07-12 15:34:30 (2 days ago)	Jul 12 11:33:03 localhost kernel: [112215620.377995] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:9 ... show more Jul 12 11:33:03 localhost kernel: [112215620.377995] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=188.42.101.111 DST=[mungedIP2] LEN=44 TOS=0x00 PREC=0x40 TTL=233 ID=6349 PROTO=TCP SPT=61000 DPT=5957 WINDOW=1025 RES=0x00 SYN URGP=0 Jul 12 11:33:03 localhost kernel: [112215620.378015] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=188.42.101.111 DST=[mungedIP2] LEN=44 TOS=0x00 PREC=0x40 TTL=233 ID=6349 PROTO=TCP SPT=61000 DPT=5957 SEQ=570388470 ACK=0 WINDOW=1025 RES=0x00 SYN URGP=0 OPT (020405B4) Jul 12 11:34:30 localhost kernel: [112215706.729057] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=188.42.101.111 DST=[mungedIP2] LEN=44 TOS=0x00 PREC=0x40 TTL=233 ID=61031 PROTO=TCP SPT=61000 DPT=5951 WINDOW=1025 RES=0x00 SYN URGP=0 Jul 12 11:34:30 localhost kernel: [112215706.729072] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=188.42.101.111 DST=[mungedI show less	Port Scan
🇯🇵 jay hung	2026-07-12 01:56:15 (2 days ago)	2026-07-12T01:56:14.518116+00:00 quarktech kernel: [2466033.935192] [UFW BLOCK] IN=eth0 OUT= MAC=22: ... show more 2026-07-12T01:56:14.518116+00:00 quarktech kernel: [2466033.935192] [UFW BLOCK] IN=eth0 OUT= MAC=22:00:92:2e:84:93:fe:ff:ff:ff:ff:ff:08:00 SRC=188.42.101.111 DST=172.237.20.248 LEN=44 TOS=0x00 PREC=0x40 TTL=235 ID=22707 PROTO=TCP SPT=61000 DPT=5911 WINDOW=1025 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇫🇷 Duggy_Tuxy🧱	2026-07-12 01:56:15 (2 days ago)	[DS-BLKS-PROD01] Blocked by SysWarden Firewall (Port Scan / Probing)	Port Scan
🇨🇭 pingusurmars	2026-07-11 21:38:30 (2 days ago)	Blocked by UFW on amperetwo [5945/tcp] Source port: 61000 TTL: 243 Packet length: 44 TOS: 0x00 This ... show more Blocked by UFW on amperetwo [5945/tcp] Source port: 61000 TTL: 243 Packet length: 44 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 chillcog.com	2026-07-11 21:26:52 (2 days ago)	Blocked by on honeypot2 [5916/tcp] \| SPT: 61000 \| TTL: 242 \| LEN: 44 \| TOS: 0x00 • Reported by: abus ... show more Blocked by on honeypot2 [5916/tcp] \| SPT: 61000 \| TTL: 242 \| LEN: 44 \| TOS: 0x00 • Reported by: abuse.terraforge.fun show less	Port Scan
🇨🇭 pingusurmars	2026-07-11 21:23:03 (2 days ago)	Blocked by UFW on ampereone [5984/tcp] Source port: 61000 TTL: 243 Packet length: 44 TOS: 0x00 This ... show more Blocked by UFW on ampereone [5984/tcp] Source port: 61000 TTL: 243 Packet length: 44 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇯🇵 S.O.B.A. Dev.	2026-07-11 17:59:49 (2 days ago)	Persistent port scanning or vulnerability scanning	Port Scan
Anonymous	2026-07-11 13:07:37 (3 days ago)	Honeypot hit: Empty payload (likely service probe); 5940 [1], 5985 [1], 5936 [1], 5918 [1], 5971 [1] ... show more Honeypot hit: Empty payload (likely service probe); 5940 [1], 5985 [1], 5936 [1], 5918 [1], 5971 [1], 5932 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 195.184.76.198

🇩🇪 185.242.3.195

🇧🇷 179.181.133.153

🇺🇸 147.185.132.180

🇺🇸 147.185.132.62

🇨🇦 138.197.164.4

🇸🇬 131.103.100.173

🇮🇹 106.48.18.188

🇺🇸 104.236.83.40

🇹🇷 94.154.43.188

🇺🇸 93.180.192.72

🇬🇧 35.203.211.218

🇮🇹 206.232.41.64

🇺🇸 147.185.132.165

🇺🇸 147.185.132.156

🇮🇳 119.13.232.164

🇺🇸 119.13.200.137

🇨🇳 113.233.51.46

🇱🇹 91.224.92.159

🇺🇸 89.38.234.170