94.61.1.42 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Portugal

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
94.61.185.237	attackspambots	94.61.185.237 - - [19/Aug/2020:23:26:51 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" 94.61.185.237 - - [19/Aug/2020:23:26:52 +0100] "POST /wp-login.php HTTP/1.1" 200 5673 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" 94.61.185.237 - - [19/Aug/2020:23:28:38 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" ...	2020-08-20 06:55:11
94.61.185.237	attackspambots	94.61.185.237 - - [19/Aug/2020:15:33:10 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" 94.61.185.237 - - [19/Aug/2020:15:33:12 +0100] "POST /wp-login.php HTTP/1.1" 200 5673 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" 94.61.185.237 - - [19/Aug/2020:15:43:50 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" ...	2020-08-19 23:10:05
94.61.185.237	attack	php WP PHPmyadamin ABUSE blocked for 12h	2020-06-12 22:28:49
94.61.122.102	attackspambots	TCP src-port=14368 dst-port=25 Listed on abuseat-org barracuda zen-spamhaus (Project Honey Pot rated Suspicious) (169)	2020-05-09 01:00:05
94.61.175.26	attackspambots	Unauthorized connection attempt detected from IP address 94.61.175.26 to port 22	2020-05-05 02:38:39
94.61.175.26	attack	Apr 12 14:38:21 163-172-32-151 sshd[12159]: Invalid user pi from 94.61.175.26 port 34282 ...	2020-04-13 03:55:14
94.61.100.138	attackbotsspam	2019-01-25 11:24:01 H=138.100.61.94.rev.vodafone.pt \[94.61.100.138\]:49760 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed 2019-01-25 11:24:20 H=138.100.61.94.rev.vodafone.pt \[94.61.100.138\]:58319 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed 2019-01-25 11:24:30 H=138.100.61.94.rev.vodafone.pt \[94.61.100.138\]:10144 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed ...	2019-10-24 20:51:14
94.61.10.176	attackspambots	Invalid user ftpuser from 94.61.10.176 port 7532	2019-08-21 19:16:26
94.61.10.176	attack	Aug 20 03:44:18 srv-4 sshd\[21662\]: Invalid user nagios from 94.61.10.176 Aug 20 03:44:18 srv-4 sshd\[21662\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.61.10.176 Aug 20 03:44:21 srv-4 sshd\[21662\]: Failed password for invalid user nagios from 94.61.10.176 port 34532 ssh2 ...	2019-08-20 08:51:43
94.61.10.176	attack	2019-08-12T21:33:46.5591501240 sshd\[26293\]: Invalid user admin from 94.61.10.176 port 35738 2019-08-12T21:33:46.5638281240 sshd\[26293\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.61.10.176 2019-08-12T21:33:48.2454871240 sshd\[26293\]: Failed password for invalid user admin from 94.61.10.176 port 35738 ssh2 ...	2019-08-13 04:01:10
94.61.143.51	attackspambots	19/8/11@07:11:09: FAIL: Alarm-SSH address from=94.61.143.51 19/8/11@07:11:09: FAIL: Alarm-SSH address from=94.61.143.51 ...	2019-08-11 19:57:38
94.61.130.90	attack	RDP Bruteforce	2019-07-29 10:26:07
94.61.130.90	attackspambots	Multiple failed RDP login attempts	2019-07-03 00:36:33

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 94.61.1.42
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 43356
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;94.61.1.42.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019082800 1800 900 604800 86400

;; Query time: 147 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Wed Aug 28 22:09:44 CST 2019
;; MSG SIZE  rcvd: 114

Host info

42.1.61.94.in-addr.arpa domain name pointer 42.1.61.94.rev.vodafone.pt.

Nslookup info:

Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
42.1.61.94.in-addr.arpa	name = 42.1.61.94.rev.vodafone.pt.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
88.243.180.122	attack	20/9/23@13:30:37: FAIL: Alarm-Network address from=88.243.180.122 20/9/23@13:30:37: FAIL: Alarm-Network address from=88.243.180.122 ...	2020-09-24 23:46:41
119.28.4.215	attack	SSH Brute-Force Attack	2020-09-25 00:19:12
69.76.196.64	attack	Automatic report - Banned IP Access	2020-09-25 00:26:43
165.22.101.1	attackbots	Invalid user alfresco from 165.22.101.1 port 47966	2020-09-25 00:26:20
180.165.134.156	attackbotsspam	Unauthorized connection attempt from IP address 180.165.134.156 on Port 445(SMB)	2020-09-25 00:25:47
14.239.38.167	attackspam	1600901349 - 09/24/2020 00:49:09 Host: 14.239.38.167/14.239.38.167 Port: 445 TCP Blocked ...	2020-09-24 23:50:36
113.163.238.118	attack	Unauthorized connection attempt from IP address 113.163.238.118 on Port 445(SMB)	2020-09-24 23:53:47
117.102.69.250	attackspam	Unauthorized connection attempt from IP address 117.102.69.250 on Port 445(SMB)	2020-09-24 23:40:01
222.186.15.115	attack	Sep 24 17:50:07 piServer sshd[13823]: Failed password for root from 222.186.15.115 port 13648 ssh2 Sep 24 17:50:11 piServer sshd[13823]: Failed password for root from 222.186.15.115 port 13648 ssh2 Sep 24 17:50:14 piServer sshd[13823]: Failed password for root from 222.186.15.115 port 13648 ssh2 ...	2020-09-24 23:51:20
111.229.216.155	attackspam	Invalid user xxx from 111.229.216.155 port 45760	2020-09-24 23:44:47
192.71.142.35	attack	TIME: Thu, 24 Sep 2020 09:17:20 -0300 REQUEST: /humans.txt	2020-09-25 00:21:51
152.231.221.145	attack	DATE:2020-09-23 19:00:40, IP:152.231.221.145, PORT:telnet Telnet brute force auth on honeypot server (epe-honey1-hq)	2020-09-25 00:04:06
117.223.233.115	attackspambots	Unauthorized connection attempt from IP address 117.223.233.115 on Port 445(SMB)	2020-09-25 00:07:25
40.76.197.252	attack	SSH bruteforce	2020-09-24 23:54:15
105.112.123.8	attackbots	1600880568 - 09/23/2020 19:02:48 Host: 105.112.123.8/105.112.123.8 Port: 445 TCP Blocked	2020-09-24 23:55:22

Recently Reported IPs

88.210.77.34	172.165.232.183	249.78.78.141	78.131.211.170
201.134.139.233	13.94.33.50	178.93.26.112	36.106.167.235
21.169.195.209	240.253.225.231	185.56.153.231	89.9.64.142
38.122.129.115	249.164.149.163	227.136.58.17	178.4.176.252
121.141.194.118	148.68.142.195	164.64.32.10	185.143.13.234