Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Greece

Internet Service Provider: National Technical University of Athens

Hostname: unknown

Organization: unknown

Usage Type: University/College/School

Comments:
Type Details Datetime
attackspambots
Nov 12 08:19:04 mailrelay sshd[20076]: Invalid user heinzman from 147.102.42.2 port 45368
Nov 12 08:19:04 mailrelay sshd[20076]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=147.102.42.2
Nov 12 08:19:07 mailrelay sshd[20076]: Failed password for invalid user heinzman from 147.102.42.2 port 45368 ssh2
Nov 12 08:19:07 mailrelay sshd[20076]: Received disconnect from 147.102.42.2 port 45368:11: Bye Bye [preauth]
Nov 12 08:19:07 mailrelay sshd[20076]: Disconnected from 147.102.42.2 port 45368 [preauth]
Nov 12 08:46:14 mailrelay sshd[20447]: Invalid user drahozal from 147.102.42.2 port 38784
Nov 12 08:46:14 mailrelay sshd[20447]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=147.102.42.2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=147.102.42.2
2019-11-15 18:17:20
attackspambots
Nov 12 23:17:32 ip-172-31-62-245 sshd\[7404\]: Failed password for root from 147.102.42.2 port 55518 ssh2\
Nov 12 23:21:50 ip-172-31-62-245 sshd\[7416\]: Invalid user smbuser from 147.102.42.2\
Nov 12 23:21:53 ip-172-31-62-245 sshd\[7416\]: Failed password for invalid user smbuser from 147.102.42.2 port 60076 ssh2\
Nov 12 23:26:09 ip-172-31-62-245 sshd\[7427\]: Invalid user infosect from 147.102.42.2\
Nov 12 23:26:12 ip-172-31-62-245 sshd\[7427\]: Failed password for invalid user infosect from 147.102.42.2 port 36402 ssh2\
2019-11-13 07:31:13
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 147.102.42.2
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 43689
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;147.102.42.2.			IN	A

;; AUTHORITY SECTION:
.			518	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019111201 1800 900 604800 86400

;; Query time: 118 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Nov 13 07:31:08 CST 2019
;; MSG SIZE  rcvd: 116
Host info
Host 2.42.102.147.in-addr.arpa not found: 2(SERVFAIL)
Nslookup info:
;; Got SERVFAIL reply from 100.100.2.136, trying next server
** server can't find 2.42.102.147.in-addr.arpa: SERVFAIL

Related IP info:
Related comments:
IP Type Details Datetime
103.7.29.12 attack
ICMP MP Probe, Scan -
2019-10-04 01:47:37
125.69.92.205 attack
Oct  3 08:12:08 vtv3 sshd\[17681\]: Invalid user sites from 125.69.92.205 port 40660
Oct  3 08:12:08 vtv3 sshd\[17681\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.69.92.205
Oct  3 08:12:10 vtv3 sshd\[17681\]: Failed password for invalid user sites from 125.69.92.205 port 40660 ssh2
Oct  3 08:15:56 vtv3 sshd\[19649\]: Invalid user yue from 125.69.92.205 port 33478
Oct  3 08:15:56 vtv3 sshd\[19649\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.69.92.205
Oct  3 08:29:09 vtv3 sshd\[26015\]: Invalid user teste from 125.69.92.205 port 40208
Oct  3 08:29:09 vtv3 sshd\[26015\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.69.92.205
Oct  3 08:29:11 vtv3 sshd\[26015\]: Failed password for invalid user teste from 125.69.92.205 port 40208 ssh2
Oct  3 08:33:16 vtv3 sshd\[28292\]: Invalid user www from 125.69.92.205 port 33034
Oct  3 08:33:16 vtv3 sshd\[28292\]: pam_unix\
2019-10-04 01:32:13
95.174.219.101 attackbots
Oct  3 15:26:30 v22019058497090703 sshd[20334]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.174.219.101
Oct  3 15:26:32 v22019058497090703 sshd[20334]: Failed password for invalid user bsd2 from 95.174.219.101 port 46074 ssh2
Oct  3 15:30:39 v22019058497090703 sshd[20678]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.174.219.101
...
2019-10-04 01:27:04
77.247.110.80 attack
Automatic report - Port Scan
2019-10-04 01:37:19
104.200.110.210 attack
Oct  3 17:20:33 hcbbdb sshd\[28942\]: Invalid user ubnt from 104.200.110.210
Oct  3 17:20:33 hcbbdb sshd\[28942\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.200.110.210
Oct  3 17:20:34 hcbbdb sshd\[28942\]: Failed password for invalid user ubnt from 104.200.110.210 port 56092 ssh2
Oct  3 17:25:18 hcbbdb sshd\[29446\]: Invalid user plex from 104.200.110.210
Oct  3 17:25:18 hcbbdb sshd\[29446\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.200.110.210
2019-10-04 01:30:50
117.200.165.123 attack
Unauthorised access (Oct  3) SRC=117.200.165.123 LEN=52 PREC=0x20 TTL=111 ID=12540 DF TCP DPT=445 WINDOW=8192 SYN
2019-10-04 01:54:26
104.197.56.56 attackbots
ICMP MP Probe, Scan -
2019-10-04 01:22:43
185.173.104.159 attackspam
fail2ban honeypot
2019-10-04 01:36:21
178.128.217.58 attackbots
Oct  3 19:33:13 srv206 sshd[1983]: Invalid user kq from 178.128.217.58
...
2019-10-04 01:39:48
163.172.199.18 attackbotsspam
WordPress login Brute force / Web App Attack on client site.
2019-10-04 01:58:06
182.254.172.159 attackspambots
" "
2019-10-04 01:49:57
80.22.196.98 attackspam
Oct  3 16:19:48 microserver sshd[42516]: Invalid user admin from 80.22.196.98 port 41589
Oct  3 16:19:48 microserver sshd[42516]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.22.196.98
Oct  3 16:19:50 microserver sshd[42516]: Failed password for invalid user admin from 80.22.196.98 port 41589 ssh2
Oct  3 16:24:07 microserver sshd[43386]: Invalid user rabbitmq from 80.22.196.98 port 34068
Oct  3 16:24:07 microserver sshd[43386]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.22.196.98
Oct  3 16:37:47 microserver sshd[45458]: Invalid user test2 from 80.22.196.98 port 39798
Oct  3 16:37:47 microserver sshd[45458]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.22.196.98
Oct  3 16:37:49 microserver sshd[45458]: Failed password for invalid user test2 from 80.22.196.98 port 39798 ssh2
Oct  3 16:42:12 microserver sshd[46131]: Invalid user spo from 80.22.196.98 port 60569
Oct  3 16:42:
2019-10-04 01:52:59
129.211.125.143 attack
Oct  3 18:38:55 MK-Soft-VM5 sshd[18221]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.125.143 
Oct  3 18:38:57 MK-Soft-VM5 sshd[18221]: Failed password for invalid user passpass from 129.211.125.143 port 55626 ssh2
...
2019-10-04 01:54:51
1.179.137.10 attackbots
Oct  3 19:38:15 meumeu sshd[500]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.179.137.10 
Oct  3 19:38:16 meumeu sshd[500]: Failed password for invalid user PlcmSpIp from 1.179.137.10 port 55760 ssh2
Oct  3 19:42:33 meumeu sshd[1160]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.179.137.10 
...
2019-10-04 01:56:50
202.107.227.42 attackbotsspam
Port=
2019-10-04 01:19:30

Recently Reported IPs

118.69.55.61 96.42.135.85 106.135.109.150 144.180.222.124
33.161.156.123 133.71.10.10 103.120.178.37 170.30.228.67
214.112.154.18 220.39.45.92 187.73.239.96 39.98.160.133
92.46.84.233 37.37.47.204 151.66.51.66 180.68.177.15
171.112.230.27 183.247.214.197 110.40.188.153 180.170.173.170