Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Germany

Internet Service Provider: Vodafone Kabel Deutschland GmbH

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:
Type Details Datetime
attack
Jul  7 21:07:27 mailserver sshd[27148]: Invalid user magda from 31.16.147.48
Jul  7 21:07:27 mailserver sshd[27148]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.16.147.48
Jul  7 21:07:30 mailserver sshd[27148]: Failed password for invalid user magda from 31.16.147.48 port 37166 ssh2
Jul  7 21:07:30 mailserver sshd[27148]: Received disconnect from 31.16.147.48 port 37166:11: Normal Shutdown, Thank you for playing [preauth]
Jul  7 21:07:30 mailserver sshd[27148]: Disconnected from 31.16.147.48 port 37166 [preauth]
Jul  7 22:16:52 mailserver sshd[30732]: Invalid user mella from 31.16.147.48
Jul  7 22:16:52 mailserver sshd[30732]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.16.147.48
Jul  7 22:16:54 mailserver sshd[30732]: Failed password for invalid user mella from 31.16.147.48 port 36512 ssh2
Jul  7 22:16:54 mailserver sshd[30732]: Received disconnect from 31.16.147.48 port 36512........
-------------------------------
2019-07-10 11:15:59
attackspam
Jul  7 00:41:05 MK-Soft-VM4 sshd\[22609\]: Invalid user stormy from 31.16.147.48 port 56669
Jul  7 00:41:05 MK-Soft-VM4 sshd\[22609\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.16.147.48
Jul  7 00:41:07 MK-Soft-VM4 sshd\[22609\]: Failed password for invalid user stormy from 31.16.147.48 port 56669 ssh2
...
2019-07-07 10:38:47
attack
Jul  3 06:53:38 srv-4 sshd\[18428\]: Invalid user test from 31.16.147.48
Jul  3 06:53:38 srv-4 sshd\[18428\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.16.147.48
Jul  3 06:53:40 srv-4 sshd\[18428\]: Failed password for invalid user test from 31.16.147.48 port 56745 ssh2
...
2019-07-03 13:55:56
attackspambots
Jul  2 07:41:05 web2 sshd[10452]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.16.147.48
Jul  2 07:41:07 web2 sshd[10452]: Failed password for invalid user east from 31.16.147.48 port 58300 ssh2
2019-07-02 16:18:56
attackspam
Lines containing failures of 31.16.147.48 (max 1000)
Jun 27 03:42:09 Server sshd[12290]: User r.r from 31.16.147.48 not allowed because not listed in AllowUsers
Jun 27 03:42:09 Server sshd[12290]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.16.147.48  user=r.r
Jun 27 03:42:10 Server sshd[12290]: Failed password for invalid user r.r from 31.16.147.48 port 54123 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=31.16.147.48
2019-06-30 12:27:12
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 31.16.147.48
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 25884
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;31.16.147.48.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019062901 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sun Jun 30 12:27:06 CST 2019
;; MSG SIZE  rcvd: 116
Host info
48.147.16.31.in-addr.arpa domain name pointer ip1f109330.dynamic.kabel-deutschland.de.
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
48.147.16.31.in-addr.arpa	name = ip1f109330.dynamic.kabel-deutschland.de.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
167.99.170.83 attackbots
Jul 16 11:48:51 amit sshd\[28204\]: Invalid user jacinto from 167.99.170.83
Jul 16 11:48:51 amit sshd\[28204\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.170.83
Jul 16 11:48:53 amit sshd\[28204\]: Failed password for invalid user jacinto from 167.99.170.83 port 44822 ssh2
...
2020-07-16 17:49:25
185.100.87.41 attackbots
Fail2Ban Ban Triggered
2020-07-16 17:39:43
218.78.44.107 attack
Port Scan
...
2020-07-16 17:53:51
206.189.127.6 attack
Jul 15 06:18:13 Tower sshd[37798]: refused connect from 112.85.42.189 (112.85.42.189)
Jul 16 03:47:30 Tower sshd[37798]: Connection from 206.189.127.6 port 43734 on 192.168.10.220 port 22 rdomain ""
Jul 16 03:47:30 Tower sshd[37798]: Invalid user admin from 206.189.127.6 port 43734
Jul 16 03:47:30 Tower sshd[37798]: error: Could not get shadow information for NOUSER
Jul 16 03:47:30 Tower sshd[37798]: Failed password for invalid user admin from 206.189.127.6 port 43734 ssh2
Jul 16 03:47:30 Tower sshd[37798]: Received disconnect from 206.189.127.6 port 43734:11: Bye Bye [preauth]
Jul 16 03:47:30 Tower sshd[37798]: Disconnected from invalid user admin 206.189.127.6 port 43734 [preauth]
2020-07-16 17:45:37
161.35.126.76 attackbots
2020-07-16T05:32:30.4230561495-001 sshd[19969]: Invalid user ph from 161.35.126.76 port 41464
2020-07-16T05:32:32.1205481495-001 sshd[19969]: Failed password for invalid user ph from 161.35.126.76 port 41464 ssh2
2020-07-16T05:40:48.4467931495-001 sshd[20328]: Invalid user es from 161.35.126.76 port 58560
2020-07-16T05:40:48.4498971495-001 sshd[20328]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.35.126.76
2020-07-16T05:40:48.4467931495-001 sshd[20328]: Invalid user es from 161.35.126.76 port 58560
2020-07-16T05:40:49.8427051495-001 sshd[20328]: Failed password for invalid user es from 161.35.126.76 port 58560 ssh2
...
2020-07-16 18:14:55
13.75.71.42 attackbots
SSH Brute-Force reported by Fail2Ban
2020-07-16 18:00:22
165.227.66.215 attackbotsspam
Port scan denied
2020-07-16 18:08:23
122.14.218.159 attackbots
prod6
...
2020-07-16 17:50:44
83.171.96.64 attack
[portscan] tcp/135 [DCE/RPC]
[scan/connect: 2 time(s)]
*(RWIN=1024)(07161155)
2020-07-16 17:51:10
64.202.189.187 attackbotsspam
64.202.189.187 - - [16/Jul/2020:06:51:14 +0200] "GET /wp-login.php HTTP/1.1" 200 6310 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
64.202.189.187 - - [16/Jul/2020:06:51:16 +0200] "POST /wp-login.php HTTP/1.1" 200 6621 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
64.202.189.187 - - [16/Jul/2020:06:51:17 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-07-16 17:46:01
49.235.99.209 attackbotsspam
Invalid user progress from 49.235.99.209 port 36254
2020-07-16 17:52:51
51.91.123.235 attack
51.91.123.235 - - [16/Jul/2020:09:35:01 +0100] "POST /wp-login.php HTTP/1.1" 200 1949 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
51.91.123.235 - - [16/Jul/2020:09:35:03 +0100] "POST /wp-login.php HTTP/1.1" 200 1924 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
51.91.123.235 - - [16/Jul/2020:09:35:04 +0100] "POST /xmlrpc.php HTTP/1.1" 200 247 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-07-16 17:35:02
167.172.195.227 attack
Jul 16 11:46:01 nextcloud sshd\[16382\]: Invalid user gengjiao from 167.172.195.227
Jul 16 11:46:01 nextcloud sshd\[16382\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.172.195.227
Jul 16 11:46:03 nextcloud sshd\[16382\]: Failed password for invalid user gengjiao from 167.172.195.227 port 59962 ssh2
2020-07-16 18:14:33
69.28.234.130 attack
Jul 16 11:00:24 *hidden* sshd[35246]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.28.234.130 Jul 16 11:00:25 *hidden* sshd[35246]: Failed password for invalid user openhab from 69.28.234.130 port 47654 ssh2
2020-07-16 17:41:29
46.101.100.227 attackbots
Jul 16 14:37:58 gw1 sshd[27789]: Failed password for ubuntu from 46.101.100.227 port 36128 ssh2
...
2020-07-16 17:55:32

Recently Reported IPs

82.111.118.129 115.84.99.178 204.26.201.147 218.173.160.112
117.5.216.201 190.242.41.131 78.187.52.7 93.181.206.204
45.119.82.70 143.255.242.149 153.251.236.161 182.68.80.120
2.180.22.125 121.180.147.241 192.241.247.89 157.230.105.118
36.237.193.133 1.55.194.123 73.8.91.33 144.129.53.68