213.30.47.142 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Portugal

Internet Service Provider: Vodafone Portugal - Communicacoes Pessoais S.A.

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspambots	Sep 9 18:53:52 v22019058497090703 sshd[13701]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.30.47.142 Sep 9 18:53:54 v22019058497090703 sshd[13701]: Failed password for invalid user vyatta from 213.30.47.142 port 58128 ssh2 ...	2020-09-10 15:05:56
attackspambots	Sep 9 18:53:52 v22019058497090703 sshd[13701]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.30.47.142 Sep 9 18:53:54 v22019058497090703 sshd[13701]: Failed password for invalid user vyatta from 213.30.47.142 port 58128 ssh2 ...	2020-09-10 05:43:26

Type

Details

Datetime

attackspambots

Sep  9 18:53:52 v22019058497090703 sshd[13701]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.30.47.142
Sep  9 18:53:54 v22019058497090703 sshd[13701]: Failed password for invalid user vyatta from 213.30.47.142 port 58128 ssh2
...

2020-09-10 15:05:56

attackspambots

Sep  9 18:53:52 v22019058497090703 sshd[13701]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.30.47.142
Sep  9 18:53:54 v22019058497090703 sshd[13701]: Failed password for invalid user vyatta from 213.30.47.142 port 58128 ssh2
...

2020-09-10 05:43:26

Comments on same subnet:

IP	Type	Details	Datetime
213.30.47.33	attackspam	SSH-bruteforce attempts	2019-10-05 02:46:41

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 213.30.47.142
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 34948
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;213.30.47.142.			IN	A

;; AUTHORITY SECTION:
.			141	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020090901 1800 900 604800 86400

;; Query time: 43 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Sep 10 05:43:22 CST 2020
;; MSG SIZE  rcvd: 117

Host info

142.47.30.213.in-addr.arpa domain name pointer 142.47.30.213.rev.vodafone.pt.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
142.47.30.213.in-addr.arpa	name = 142.47.30.213.rev.vodafone.pt.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
222.186.30.248	attackbots	Apr 11 16:57:23 plusreed sshd[27690]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.248 user=root Apr 11 16:57:25 plusreed sshd[27690]: Failed password for root from 222.186.30.248 port 32274 ssh2 ...	2020-04-12 05:08:06
60.248.49.70	attackbotsspam	Unauthorized access or intrusion attempt detected from Thor banned IP	2020-04-12 05:08:59
123.59.148.35	attackbotsspam	Honeypot Attack, Port 23	2020-04-12 05:06:00
199.249.230.103	attackbots	Malicious Traffic/Form Submission	2020-04-12 04:58:00
123.207.118.138	attack	SSH Brute-Force reported by Fail2Ban	2020-04-12 05:03:23
114.67.100.234	attack	Apr 11 14:55:11 server1 sshd\[16416\]: Invalid user robason from 114.67.100.234 Apr 11 14:55:11 server1 sshd\[16416\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.67.100.234 Apr 11 14:55:13 server1 sshd\[16416\]: Failed password for invalid user robason from 114.67.100.234 port 57736 ssh2 Apr 11 14:57:16 server1 sshd\[17073\]: Invalid user darnet from 114.67.100.234 Apr 11 14:57:16 server1 sshd\[17073\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.67.100.234 ...	2020-04-12 05:14:18
115.84.91.63	attack	Apr 11 22:51:59 xeon sshd[26914]: Invalid user system from 115.84.91.63	2020-04-12 05:19:31
49.234.187.66	attack	Apr 11 20:52:22 powerpi2 sshd[15806]: Failed password for invalid user turbo from 49.234.187.66 port 46754 ssh2 Apr 11 20:57:24 powerpi2 sshd[16065]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.187.66 user=root Apr 11 20:57:26 powerpi2 sshd[16065]: Failed password for root from 49.234.187.66 port 48184 ssh2 ...	2020-04-12 05:07:09
189.7.129.60	attackbotsspam	SSH Brute-Force attacks	2020-04-12 05:15:06
175.142.61.93	attack	Port probing on unauthorized port 23	2020-04-12 04:54:41
124.156.107.252	attack	Apr 11 16:49:47 NPSTNNYC01T sshd[11955]: Failed password for root from 124.156.107.252 port 33604 ssh2 Apr 11 16:53:37 NPSTNNYC01T sshd[12399]: Failed password for root from 124.156.107.252 port 49648 ssh2 Apr 11 16:57:34 NPSTNNYC01T sshd[12650]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.156.107.252 ...	2020-04-12 05:01:31
188.3.100.117	attackspam	Automatic report - Port Scan Attack	2020-04-12 05:02:33
129.211.124.29	attack	Apr 11 22:57:23 mailserver sshd\[28046\]: Invalid user gituser from 129.211.124.29 ...	2020-04-12 05:06:35
162.242.235.222	attackbots	DATE:2020-04-11 22:57:20, IP:162.242.235.222, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc)	2020-04-12 05:11:20
212.83.175.115	attack	[2020-04-11 16:48:43] NOTICE[12114] chan_sip.c: Registration from '"618"' failed for '212.83.175.115:24568' - Wrong password [2020-04-11 16:48:43] SECURITY[12128] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-04-11T16:48:43.460-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="618",SessionID="0x7f020c10de98",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/212.83.175.115/24568",Challenge="7aacf8cf",ReceivedChallenge="7aacf8cf",ReceivedHash="47e47693af63438142447ca11ddfa20c" [2020-04-11 16:57:17] NOTICE[12114] chan_sip.c: Registration from '"634"' failed for '212.83.175.115:24576' - Wrong password [2020-04-11 16:57:17] SECURITY[12128] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-04-11T16:57:17.517-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="634",SessionID="0x7f020c088288",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/ ...	2020-04-12 05:13:29

Recently Reported IPs

62.56.216.67	141.162.76.209	36.203.72.158	35.131.224.105
45.140.17.63	205.134.12.2	53.183.119.38	245.61.180.1
231.156.18.55	237.130.224.182	244.220.152.92	249.59.144.218
3.235.63.186	91.192.6.110	180.151.56.124	200.119.193.82
28.201.171.94	40.77.13.228	88.99.87.73	98.197.24.128