Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Italy

Internet Service Provider: Vodafone Italia S.p.A.

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Type Details Datetime
attack
$f2bV_matches
2019-08-31 00:01:58
attackbotsspam
2019-08-30T00:48:18.808701abusebot-2.cloudsearch.cf sshd\[3804\]: Invalid user lxy from 2.42.193.48 port 50751
2019-08-30 09:17:45
attack
Aug 28 17:27:12 itv-usvr-02 sshd[29340]: Invalid user geraldo from 2.42.193.48 port 39502
Aug 28 17:27:12 itv-usvr-02 sshd[29340]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.42.193.48
Aug 28 17:27:12 itv-usvr-02 sshd[29340]: Invalid user geraldo from 2.42.193.48 port 39502
Aug 28 17:27:14 itv-usvr-02 sshd[29340]: Failed password for invalid user geraldo from 2.42.193.48 port 39502 ssh2
Aug 28 17:34:24 itv-usvr-02 sshd[29382]: Invalid user fx from 2.42.193.48 port 34416
2019-08-28 21:55:38
attack
Aug 25 22:59:50 v22019058497090703 sshd[27957]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.42.193.48
Aug 25 22:59:52 v22019058497090703 sshd[27957]: Failed password for invalid user uftp from 2.42.193.48 port 58426 ssh2
Aug 25 23:06:18 v22019058497090703 sshd[28473]: Failed password for mail from 2.42.193.48 port 53838 ssh2
...
2019-08-26 09:30:40
attackbots
Aug 24 12:10:13 lcprod sshd\[26419\]: Invalid user matilda from 2.42.193.48
Aug 24 12:10:13 lcprod sshd\[26419\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=net-2-42-193-48.cust.vodafonedsl.it
Aug 24 12:10:15 lcprod sshd\[26419\]: Failed password for invalid user matilda from 2.42.193.48 port 44090 ssh2
Aug 24 12:16:51 lcprod sshd\[27014\]: Invalid user magento from 2.42.193.48
Aug 24 12:16:51 lcprod sshd\[27014\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=net-2-42-193-48.cust.vodafonedsl.it
2019-08-25 14:59:25
attackspam
Aug 24 08:04:07 php1 sshd\[4586\]: Invalid user oracle from 2.42.193.48
Aug 24 08:04:07 php1 sshd\[4586\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.42.193.48
Aug 24 08:04:10 php1 sshd\[4586\]: Failed password for invalid user oracle from 2.42.193.48 port 47810 ssh2
Aug 24 08:10:43 php1 sshd\[5285\]: Invalid user ananda from 2.42.193.48
Aug 24 08:10:43 php1 sshd\[5285\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.42.193.48
2019-08-25 02:28:07
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 2.42.193.48
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 9708
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;2.42.193.48.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019081800 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sun Aug 18 23:14:24 CST 2019
;; MSG SIZE  rcvd: 115
Host info
48.193.42.2.in-addr.arpa domain name pointer net-2-42-193-48.cust.vodafonedsl.it.
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
48.193.42.2.in-addr.arpa	name = net-2-42-193-48.cust.vodafonedsl.it.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
47.105.206.192 attack
May 27 19:38:37 nxxxxxxx0 sshd[20729]: Invalid user solarus from 47.105.206.192
May 27 19:38:37 nxxxxxxx0 sshd[20729]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.105.206.192 
May 27 19:38:39 nxxxxxxx0 sshd[20729]: Failed password for invalid user solarus from 47.105.206.192 port 50888 ssh2
May 27 19:38:39 nxxxxxxx0 sshd[20729]: Received disconnect from 47.105.206.192: 11: Bye Bye [preauth]
May 27 20:00:40 nxxxxxxx0 sshd[23444]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.105.206.192  user=r.r
May 27 20:00:41 nxxxxxxx0 sshd[23444]: Failed password for r.r from 47.105.206.192 port 52678 ssh2
May 27 20:00:42 nxxxxxxx0 sshd[23444]: Received disconnect from 47.105.206.192: 11: Bye Bye [preauth]
May 27 20:01:32 nxxxxxxx0 sshd[23580]: Invalid user adDmin from 47.105.206.192
May 27 20:01:32 nxxxxxxx0 sshd[23580]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=s........
-------------------------------
2020-05-28 03:08:06
195.54.167.120 attackbots
05/27/2020-14:21:42.413696 195.54.167.120 Protocol: 6 ET SCAN NMAP -sS window 1024
2020-05-28 03:12:32
118.96.72.244 attackbots
1590603711 - 05/27/2020 20:21:51 Host: 118.96.72.244/118.96.72.244 Port: 445 TCP Blocked
2020-05-28 03:07:05
148.227.227.67 attack
May 27 15:03:06 Tower sshd[20461]: Connection from 148.227.227.67 port 52594 on 192.168.10.220 port 22 rdomain ""
May 27 15:03:07 Tower sshd[20461]: Failed password for root from 148.227.227.67 port 52594 ssh2
May 27 15:03:07 Tower sshd[20461]: Received disconnect from 148.227.227.67 port 52594:11: Bye Bye [preauth]
May 27 15:03:07 Tower sshd[20461]: Disconnected from authenticating user root 148.227.227.67 port 52594 [preauth]
2020-05-28 03:04:45
85.234.117.151 attackbotsspam
May 27 19:42:13 server sshd[3374]: Failed password for root from 85.234.117.151 port 59525 ssh2
May 27 20:19:14 server sshd[35744]: Failed password for root from 85.234.117.151 port 55129 ssh2
May 27 20:21:46 server sshd[38530]: Failed password for invalid user gos from 85.234.117.151 port 46073 ssh2
2020-05-28 03:07:36
52.211.229.144 attackspambots
Unauthorised connection attempt detected at AUO NODE 4. System is sshd. Protected by AUO Stack Web Application Firewall (WAF)
2020-05-28 03:19:25
185.117.215.9 attackspam
Tor exit node
2020-05-28 03:15:09
209.141.40.46 attack
Tor exit node
2020-05-28 03:06:37
140.143.243.27 attack
May 27 20:17:54 sso sshd[5559]: Failed password for root from 140.143.243.27 port 44532 ssh2
...
2020-05-28 03:03:44
90.187.66.141 attackbotsspam
May 27 21:03:52 PorscheCustomer sshd[13521]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=90.187.66.141
May 27 21:03:54 PorscheCustomer sshd[13521]: Failed password for invalid user test from 90.187.66.141 port 55838 ssh2
May 27 21:07:47 PorscheCustomer sshd[13696]: Failed password for root from 90.187.66.141 port 34924 ssh2
...
2020-05-28 03:09:36
202.44.194.77 attackbotsspam
May 27 20:26:27 MainVPS sshd[20505]: Invalid user melinda from 202.44.194.77 port 35908
May 27 20:26:27 MainVPS sshd[20505]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.44.194.77
May 27 20:26:27 MainVPS sshd[20505]: Invalid user melinda from 202.44.194.77 port 35908
May 27 20:26:29 MainVPS sshd[20505]: Failed password for invalid user melinda from 202.44.194.77 port 35908 ssh2
May 27 20:30:44 MainVPS sshd[24315]: Invalid user oper from 202.44.194.77 port 36102
...
2020-05-28 03:34:13
114.67.83.42 attackspam
May 27 14:28:50 mail sshd\[39605\]: Invalid user admin from 114.67.83.42
May 27 14:28:50 mail sshd\[39605\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.67.83.42
...
2020-05-28 03:15:35
157.245.34.72 attack
Automatic report - XMLRPC Attack
2020-05-28 03:39:59
195.54.160.254 attack
Unauthorized connection attempt detected from IP address 195.54.160.254 to port 5900
2020-05-28 03:25:37
123.24.180.120 attackspam
2020-05-27 x@x


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=123.24.180.120
2020-05-28 03:29:07

Recently Reported IPs

162.65.20.84 118.187.31.11 94.181.232.118 16.130.79.23
141.170.96.212 71.133.77.250 174.80.38.42 193.116.103.31
119.146.124.80 98.83.144.2 241.36.229.18 66.77.248.106
104.68.116.0 68.125.86.212 162.240.79.87 247.139.122.17
251.252.1.3 7.78.197.252 114.94.161.239 124.102.219.151