167.71.48.42 - IPInfo

Basic Info

City: Frankfurt am Main

Region: Hessen

Country: Germany

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
167.71.48.194	attackspam	WordPress login Brute force / Web App Attack on client site.	2020-05-31 15:51:32
167.71.48.57	attack	Invalid user ts3bot1 from 167.71.48.57 port 43814	2020-05-17 03:22:58
167.71.48.57	attackspam	May 15 11:47:20 vserver sshd\[20067\]: Invalid user ohh from 167.71.48.57May 15 11:47:22 vserver sshd\[20067\]: Failed password for invalid user ohh from 167.71.48.57 port 60676 ssh2May 15 11:51:46 vserver sshd\[20109\]: Invalid user po8 from 167.71.48.57May 15 11:51:48 vserver sshd\[20109\]: Failed password for invalid user po8 from 167.71.48.57 port 52682 ssh2 ...	2020-05-15 19:54:47
167.71.48.194	attackspambots	xmlrpc attack	2020-05-14 19:56:03
167.71.48.57	attackbotsspam	May 12 23:11:15 home sshd[9183]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.48.57 May 12 23:11:17 home sshd[9183]: Failed password for invalid user user from 167.71.48.57 port 48072 ssh2 May 12 23:14:39 home sshd[9734]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.48.57 ...	2020-05-13 05:31:05
167.71.48.57	attack	2020-05-08T14:54:16.236589linuxbox-skyline sshd[32574]: Invalid user wlw from 167.71.48.57 port 38798 ...	2020-05-09 13:40:14
167.71.48.57	attackspam	May 4 21:18:42 vps58358 sshd\[15784\]: Invalid user web1 from 167.71.48.57May 4 21:18:44 vps58358 sshd\[15784\]: Failed password for invalid user web1 from 167.71.48.57 port 54306 ssh2May 4 21:22:25 vps58358 sshd\[15834\]: Invalid user chenyang from 167.71.48.57May 4 21:22:27 vps58358 sshd\[15834\]: Failed password for invalid user chenyang from 167.71.48.57 port 37740 ssh2May 4 21:26:12 vps58358 sshd\[15896\]: Invalid user ellery from 167.71.48.57May 4 21:26:14 vps58358 sshd\[15896\]: Failed password for invalid user ellery from 167.71.48.57 port 49404 ssh2 ...	2020-05-05 05:41:50
167.71.48.57	attackbotsspam	Apr 19 14:15:27 mail sshd[22168]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.48.57 Apr 19 14:15:29 mail sshd[22168]: Failed password for invalid user test from 167.71.48.57 port 40080 ssh2 Apr 19 14:19:33 mail sshd[22817]: Failed password for root from 167.71.48.57 port 57994 ssh2	2020-04-19 22:23:54
167.71.48.57	attackbots	$f2bV_matches	2020-04-17 20:55:35
167.71.48.57	attackspam	2020-04-15T11:39:19.001518shield sshd\[30258\]: Invalid user ehsan from 167.71.48.57 port 50546 2020-04-15T11:39:19.005250shield sshd\[30258\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.48.57 2020-04-15T11:39:21.150859shield sshd\[30258\]: Failed password for invalid user ehsan from 167.71.48.57 port 50546 ssh2 2020-04-15T11:43:04.903060shield sshd\[31038\]: Invalid user postgres from 167.71.48.57 port 38208 2020-04-15T11:43:04.906740shield sshd\[31038\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.48.57	2020-04-15 19:59:20
167.71.48.57	attackbots	2020-04-13T12:22:03.015960Z 06e47d935446 New connection: 167.71.48.57:38658 (172.17.0.5:2222) [session: 06e47d935446] 2020-04-13T12:31:42.000571Z 121a38a76e73 New connection: 167.71.48.57:36454 (172.17.0.5:2222) [session: 121a38a76e73]	2020-04-13 21:41:33
167.71.48.57	attack	(sshd) Failed SSH login from 167.71.48.57 (DE/Germany/-): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Apr 8 15:13:15 ubnt-55d23 sshd[16131]: Invalid user rachel from 167.71.48.57 port 48304 Apr 8 15:13:17 ubnt-55d23 sshd[16131]: Failed password for invalid user rachel from 167.71.48.57 port 48304 ssh2	2020-04-08 21:54:22
167.71.48.57	attackbots	Apr 5 18:46:12 web1 sshd\[15051\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.48.57 user=root Apr 5 18:46:14 web1 sshd\[15051\]: Failed password for root from 167.71.48.57 port 46640 ssh2 Apr 5 18:50:02 web1 sshd\[15381\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.48.57 user=root Apr 5 18:50:04 web1 sshd\[15381\]: Failed password for root from 167.71.48.57 port 57550 ssh2 Apr 5 18:53:46 web1 sshd\[15717\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.48.57 user=root	2020-04-06 17:38:18
167.71.48.15	attackbotsspam	" "	2019-11-02 04:19:17
167.71.48.116	attackbots	port scan/probe/communication attempt	2019-10-31 19:31:28

Whois info:

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#


NetRange:       167.71.0.0 - 167.71.255.255
CIDR:           167.71.0.0/16
NetName:        DIGITALOCEAN-167-71-0-0
NetHandle:      NET-167-71-0-0-1
Parent:         NET167 (NET-167-0-0-0-0)
NetType:        Direct Allocation
OriginAS:       
Organization:   DigitalOcean, LLC (DO-13)
RegDate:        2019-04-24
Updated:        2020-04-03
Comment:        Routing and Peering Policy can be found at https://www.as14061.net
Comment:        
Comment:        Please submit abuse reports at https://www.digitalocean.com/company/contact/#abuse
Ref:            https://rdap.arin.net/registry/ip/167.71.0.0



OrgName:        DigitalOcean, LLC
OrgId:          DO-13
Address:        105 Edgeview Drive, Suite 425
City:           Broomfield
StateProv:      CO
PostalCode:     80021
Country:        US
RegDate:        2012-05-14
Updated:        2025-04-11
Ref:            https://rdap.arin.net/registry/entity/DO-13


OrgNOCHandle: NOC32014-ARIN
OrgNOCName:   Network Operations Center
OrgNOCPhone:  +1-646-827-4366 
OrgNOCEmail:  noc@digitalocean.com
OrgNOCRef:    https://rdap.arin.net/registry/entity/NOC32014-ARIN

OrgAbuseHandle: DIGIT19-ARIN
OrgAbuseName:   DigitalOcean Abuse
OrgAbusePhone:  +1-646-827-4366 
OrgAbuseEmail:  abuse@digitalocean.com
OrgAbuseRef:    https://rdap.arin.net/registry/entity/DIGIT19-ARIN

OrgTechHandle: NOC32014-ARIN
OrgTechName:   Network Operations Center
OrgTechPhone:  +1-646-827-4366 
OrgTechEmail:  noc@digitalocean.com
OrgTechRef:    https://rdap.arin.net/registry/entity/NOC32014-ARIN


#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 167.71.48.42
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 13529
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;167.71.48.42.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026033100 1800 900 604800 86400

;; Query time: 7 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Mar 31 15:01:41 CST 2026
;; MSG SIZE  rcvd: 105

Host info

Host 42.48.71.167.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 42.48.71.167.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
45.117.83.36	attackbotsspam	Dec 7 12:36:31 cvbnet sshd[10168]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.117.83.36 Dec 7 12:36:33 cvbnet sshd[10168]: Failed password for invalid user oracle from 45.117.83.36 port 34299 ssh2 ...	2019-12-07 21:00:37
118.89.116.10	attackbots	2019-12-07T11:57:05.447607Z 8411565343ff New connection: 118.89.116.10:60054 (172.17.0.6:2222) [session: 8411565343ff] 2019-12-07T12:13:55.696324Z d0c3c594ee9e New connection: 118.89.116.10:52432 (172.17.0.6:2222) [session: d0c3c594ee9e]	2019-12-07 20:38:03
63.81.87.135	attackspambots	2019-12-07T07:25:16.218957stark.klein-stark.info postfix/smtpd\[10655\]: NOQUEUE: reject: RCPT from careful.jcnovel.com\[63.81.87.135\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\ ...	2019-12-07 20:53:25
180.168.156.211	attack	2019-12-07T09:45:08.637084abusebot-2.cloudsearch.cf sshd\[14238\]: Invalid user fon from 180.168.156.211 port 42187	2019-12-07 20:58:41
51.77.210.216	attackbots	Dec 6 23:51:19 tdfoods sshd\[29989\]: Invalid user nagesh from 51.77.210.216 Dec 6 23:51:19 tdfoods sshd\[29989\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=216.ip-51-77-210.eu Dec 6 23:51:20 tdfoods sshd\[29989\]: Failed password for invalid user nagesh from 51.77.210.216 port 45402 ssh2 Dec 6 23:56:44 tdfoods sshd\[30517\]: Invalid user cutrufello from 51.77.210.216 Dec 6 23:56:44 tdfoods sshd\[30517\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=216.ip-51-77-210.eu	2019-12-07 20:39:05
79.115.253.165	attack	2019-12-07T06:25:06.482876homeassistant sshd[25265]: Invalid user ubnt from 79.115.253.165 port 52063 2019-12-07T06:25:06.526377homeassistant sshd[25265]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.115.253.165 ...	2019-12-07 21:08:33
201.247.246.4	attack	Unauthorised access (Dec 7) SRC=201.247.246.4 LEN=48 TOS=0x08 PREC=0x20 TTL=237 ID=10091 DF TCP DPT=445 WINDOW=8192 SYN	2019-12-07 20:57:45
140.246.215.19	attackbots	Dec 7 14:46:00 gw1 sshd[13763]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.215.19 Dec 7 14:46:02 gw1 sshd[13763]: Failed password for invalid user assen from 140.246.215.19 port 52964 ssh2 ...	2019-12-07 20:52:35
123.108.167.125	attack	UTC: 2019-12-06 port: 123/udp	2019-12-07 21:04:43
51.75.19.175	attack	pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.19.175 user=root Failed password for root from 51.75.19.175 port 37412 ssh2 Invalid user ftp from 51.75.19.175 port 46694 pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.19.175 Failed password for invalid user ftp from 51.75.19.175 port 46694 ssh2	2019-12-07 20:57:27
195.225.198.198	attackspambots	UTC: 2019-12-06 pkts: 2 ports(tcp): 143, 443	2019-12-07 21:08:11
220.235.66.119	attackbotsspam	UTC: 2019-12-06 port: 80/tcp	2019-12-07 20:36:29
122.152.208.242	attackspam	2019-12-07T10:28:09.548943shield sshd\[6577\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.152.208.242 user=root 2019-12-07T10:28:11.857188shield sshd\[6577\]: Failed password for root from 122.152.208.242 port 56346 ssh2 2019-12-07T10:34:26.591548shield sshd\[7660\]: Invalid user student from 122.152.208.242 port 60890 2019-12-07T10:34:26.595662shield sshd\[7660\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.152.208.242 2019-12-07T10:34:28.658014shield sshd\[7660\]: Failed password for invalid user student from 122.152.208.242 port 60890 ssh2	2019-12-07 20:46:47
198.108.67.38	attackbots	firewall-block, port(s): 7510/tcp	2019-12-07 21:09:20
167.99.83.237	attackbots	Dec 6 22:35:16 tdfoods sshd\[22521\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.83.237 user=root Dec 6 22:35:19 tdfoods sshd\[22521\]: Failed password for root from 167.99.83.237 port 40568 ssh2 Dec 6 22:40:44 tdfoods sshd\[23103\]: Invalid user pelegrino from 167.99.83.237 Dec 6 22:40:44 tdfoods sshd\[23103\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.83.237 Dec 6 22:40:46 tdfoods sshd\[23103\]: Failed password for invalid user pelegrino from 167.99.83.237 port 49580 ssh2	2019-12-07 20:52:53

Recently Reported IPs

167.99.132.27	165.227.149.73	128.199.164.57	105.115.47.191
10.129.208.188	74.114.54.71	2606:4700:10::6816:2285	2606:4700:10::6814:6442
2606:4700:10::6814:6856	2606:4700:10::6816:1664	110.77.248.113	2606:4700:10::6814:8706
203.224.69.119	110.10.154.185	119.38.117.228	139.162.119.94
138.197.87.148	2606:4700:10::6814:5184	2606:4700:10::6814:9754	2606:4700:10::ac43:601