80.38.125.242 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Spain

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 80.38.125.242
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 42524
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;80.38.125.242.			IN	A

;; AUTHORITY SECTION:
.			29	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025022800 1800 900 604800 86400

;; Query time: 13 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 28 19:47:45 CST 2025
;; MSG SIZE  rcvd: 106

Host info

242.125.38.80.in-addr.arpa domain name pointer 242.red-80-38-125.staticip.rima-tde.net.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
242.125.38.80.in-addr.arpa	name = 242.red-80-38-125.staticip.rima-tde.net.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
220.76.107.50	attackbots	Dec 24 02:54:43 : SSH login attempts with invalid user	2019-12-25 07:11:55
195.154.52.96	attackspam	\[2019-12-24 17:56:06\] SECURITY\[2857\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-12-24T17:56:06.923-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="9011972595725636",SessionID="0x7f0fb499d728",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/195.154.52.96/62205",ACLName="no_extension_match" \[2019-12-24 17:57:39\] SECURITY\[2857\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-12-24T17:57:39.554-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="7011972592277524",SessionID="0x7f0fb468cc98",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/195.154.52.96/50016",ACLName="no_extension_match" \[2019-12-24 18:01:21\] SECURITY\[2857\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-12-24T18:01:21.972-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="6011972592277524",SessionID="0x7f0fb468cc98",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/195.154.52.96/62533",ACLName="no_	2019-12-25 07:08:33
106.12.28.232	attackbots	$f2bV_matches	2019-12-25 07:05:45
46.197.66.79	attack	Dec 24 23:10:10 ns392434 sshd[11670]: Invalid user server from 46.197.66.79 port 36296 Dec 24 23:10:10 ns392434 sshd[11670]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.197.66.79 Dec 24 23:10:10 ns392434 sshd[11670]: Invalid user server from 46.197.66.79 port 36296 Dec 24 23:10:13 ns392434 sshd[11670]: Failed password for invalid user server from 46.197.66.79 port 36296 ssh2 Dec 24 23:33:53 ns392434 sshd[11848]: Invalid user test from 46.197.66.79 port 51730 Dec 24 23:33:53 ns392434 sshd[11848]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.197.66.79 Dec 24 23:33:53 ns392434 sshd[11848]: Invalid user test from 46.197.66.79 port 51730 Dec 24 23:33:55 ns392434 sshd[11848]: Failed password for invalid user test from 46.197.66.79 port 51730 ssh2 Dec 24 23:45:58 ns392434 sshd[12105]: Invalid user uftp from 46.197.66.79 port 52300	2019-12-25 06:52:52
176.31.170.245	attack	Dec 24 22:37:56 localhost sshd\[123744\]: Invalid user admin from 176.31.170.245 port 49754 Dec 24 22:37:56 localhost sshd\[123744\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.31.170.245 Dec 24 22:37:57 localhost sshd\[123744\]: Failed password for invalid user admin from 176.31.170.245 port 49754 ssh2 Dec 24 22:39:56 localhost sshd\[123849\]: Invalid user hironaka from 176.31.170.245 port 41906 Dec 24 22:39:56 localhost sshd\[123849\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.31.170.245 ...	2019-12-25 06:55:24
104.248.225.22	attack	SS5,WP GET /wp-login.php	2019-12-25 06:46:21
39.97.249.4	attackbotsspam	IDS	2019-12-25 06:50:06
185.147.212.8	attack	\[2019-12-24 10:20:07\] NOTICE\[2839\] chan_sip.c: Registration from '\' failed for '185.147.212.8:51084' - Wrong password \[2019-12-24 10:20:07\] SECURITY\[2857\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-12-24T10:20:07.555-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="54759",SessionID="0x7f0fb4804f58",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.147.212.8/51084",Challenge="2c2ec4a7",ReceivedChallenge="2c2ec4a7",ReceivedHash="b27156f9f23f9a964e995e950c214533" \[2019-12-24 10:25:33\] NOTICE\[2839\] chan_sip.c: Registration from '\' failed for '185.147.212.8:56610' - Wrong password \[2019-12-24 10:25:33\] SECURITY\[2857\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-12-24T10:25:33.005-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="70089",SessionID="0x7f0fb4804f58",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.1	2019-12-25 07:11:09
84.137.106.140	attack	Lines containing failures of 84.137.106.140 Dec 24 22:16:16 mail sshd[10617]: Invalid user butterfield from 84.137.106.140 port 57732 Dec 24 22:16:16 mail sshd[10617]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=84.137.106.140 Dec 24 22:16:18 mail sshd[10617]: Failed password for invalid user butterfield from 84.137.106.140 port 57732 ssh2 Dec 24 22:16:18 mail sshd[10617]: Received disconnect from 84.137.106.140 port 57732:11: Bye Bye [preauth] Dec 24 22:16:18 mail sshd[10617]: Disconnected from 84.137.106.140 port 57732 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=84.137.106.140	2019-12-25 06:43:42
89.216.47.154	attackspam	SSH invalid-user multiple login attempts	2019-12-25 07:10:44
96.88.26.212	attackspambots	2019-12-24T16:21:20.027140vps751288.ovh.net sshd\[19547\]: Invalid user riak from 96.88.26.212 port 46316 2019-12-24T16:21:20.037430vps751288.ovh.net sshd\[19547\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=96-88-26-212-static.hfc.comcastbusiness.net 2019-12-24T16:21:22.278855vps751288.ovh.net sshd\[19547\]: Failed password for invalid user riak from 96.88.26.212 port 46316 ssh2 2019-12-24T16:26:00.418359vps751288.ovh.net sshd\[19583\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=96-88-26-212-static.hfc.comcastbusiness.net user=root 2019-12-24T16:26:02.765928vps751288.ovh.net sshd\[19583\]: Failed password for root from 96.88.26.212 port 54002 ssh2	2019-12-25 06:59:44
222.161.56.248	attackbotsspam	Dec 24 20:14:51 xeon sshd[58384]: Failed password for invalid user user9 from 222.161.56.248 port 41320 ssh2	2019-12-25 06:48:32
209.17.97.74	attackbotsspam	Unauthorized connection attempt detected from IP address 209.17.97.74 to port 8888	2019-12-25 06:42:42
218.92.0.138	attack	Dec 24 23:39:38 MainVPS sshd[24585]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.138 user=root Dec 24 23:39:40 MainVPS sshd[24585]: Failed password for root from 218.92.0.138 port 11745 ssh2 Dec 24 23:39:52 MainVPS sshd[24585]: error: maximum authentication attempts exceeded for root from 218.92.0.138 port 11745 ssh2 [preauth] Dec 24 23:39:38 MainVPS sshd[24585]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.138 user=root Dec 24 23:39:40 MainVPS sshd[24585]: Failed password for root from 218.92.0.138 port 11745 ssh2 Dec 24 23:39:52 MainVPS sshd[24585]: error: maximum authentication attempts exceeded for root from 218.92.0.138 port 11745 ssh2 [preauth] Dec 24 23:40:03 MainVPS sshd[25144]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.138 user=root Dec 24 23:40:05 MainVPS sshd[25144]: Failed password for root from 218.92.0.138 port 44077 ssh2 ...	2019-12-25 06:45:35
145.239.76.165	attack	145.239.76.165 - - [24/Dec/2019:15:25:20 +0000] "POST /wp-login.php HTTP/1.1" 200 6393 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 145.239.76.165 - - [24/Dec/2019:15:25:21 +0000] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2019-12-25 07:15:17

Recently Reported IPs

45.184.220.183	159.240.156.21	20.89.133.40	95.169.50.51
193.153.56.206	44.97.85.76	142.219.138.47	187.38.126.42
36.51.75.249	169.237.199.1	119.43.163.66	187.88.202.224
108.154.88.58	210.224.26.252	61.218.242.230	150.163.173.95
25.143.5.31	137.174.71.121	218.71.103.23	243.21.68.209