Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Phalaborwa

Region: Limpopo

Country: South Africa

Internet Service Provider: Letaba Wireless Internet CC

Hostname: unknown

Organization: Cybersmart

Usage Type: Fixed Line ISP

Comments:
Type Details Datetime
attackspam
$f2bV_matches
2019-10-31 02:30:43
attackbots
Oct 27 10:51:12 lcl-usvr-02 sshd[5391]: Invalid user ftp from 102.141.72.50 port 34134
Oct 27 10:51:12 lcl-usvr-02 sshd[5391]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.141.72.50
Oct 27 10:51:12 lcl-usvr-02 sshd[5391]: Invalid user ftp from 102.141.72.50 port 34134
Oct 27 10:51:14 lcl-usvr-02 sshd[5391]: Failed password for invalid user ftp from 102.141.72.50 port 34134 ssh2
Oct 27 10:57:39 lcl-usvr-02 sshd[6789]: Invalid user pn from 102.141.72.50 port 53369
...
2019-10-27 12:48:13
attackbotsspam
Oct  9 02:58:38 php1 sshd\[29172\]: Invalid user \^YHN\&UJM from 102.141.72.50
Oct  9 02:58:38 php1 sshd\[29172\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.141.72.50
Oct  9 02:58:40 php1 sshd\[29172\]: Failed password for invalid user \^YHN\&UJM from 102.141.72.50 port 59616 ssh2
Oct  9 03:04:18 php1 sshd\[29650\]: Invalid user \^YHN\&UJM from 102.141.72.50
Oct  9 03:04:18 php1 sshd\[29650\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.141.72.50
2019-10-09 21:08:18
attackbotsspam
Oct  8 03:18:56 php1 sshd\[12717\]: Invalid user o0i9u8y7t6r5e4 from 102.141.72.50
Oct  8 03:18:56 php1 sshd\[12717\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.141.72.50
Oct  8 03:18:58 php1 sshd\[12717\]: Failed password for invalid user o0i9u8y7t6r5e4 from 102.141.72.50 port 49287 ssh2
Oct  8 03:25:05 php1 sshd\[13267\]: Invalid user 123Snow from 102.141.72.50
Oct  8 03:25:05 php1 sshd\[13267\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.141.72.50
2019-10-08 22:30:53
attackspam
Sep 14 13:31:56 vtv3 sshd\[26153\]: Invalid user iz from 102.141.72.50 port 33338
Sep 14 13:31:56 vtv3 sshd\[26153\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.141.72.50
Sep 14 13:31:58 vtv3 sshd\[26153\]: Failed password for invalid user iz from 102.141.72.50 port 33338 ssh2
Sep 14 13:38:44 vtv3 sshd\[29529\]: Invalid user emp from 102.141.72.50 port 54605
Sep 14 13:38:44 vtv3 sshd\[29529\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.141.72.50
Sep 14 13:51:24 vtv3 sshd\[3670\]: Invalid user db1inst1 from 102.141.72.50 port 40674
Sep 14 13:51:24 vtv3 sshd\[3670\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.141.72.50
Sep 14 13:51:27 vtv3 sshd\[3670\]: Failed password for invalid user db1inst1 from 102.141.72.50 port 40674 ssh2
Sep 14 13:58:03 vtv3 sshd\[6777\]: Invalid user shun from 102.141.72.50 port 33704
Sep 14 13:58:03 vtv3 sshd\[6777\]: pam_unix\(ssh
2019-09-27 16:24:05
attackbotsspam
Sep 16 19:27:47 hcbbdb sshd\[6250\]: Invalid user gpadmin from 102.141.72.50
Sep 16 19:27:47 hcbbdb sshd\[6250\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.141.72.50
Sep 16 19:27:49 hcbbdb sshd\[6250\]: Failed password for invalid user gpadmin from 102.141.72.50 port 46412 ssh2
Sep 16 19:34:14 hcbbdb sshd\[6989\]: Invalid user admin from 102.141.72.50
Sep 16 19:34:14 hcbbdb sshd\[6989\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.141.72.50
2019-09-17 05:23:22
attackbotsspam
Sep 14 13:31:56 vtv3 sshd\[26153\]: Invalid user iz from 102.141.72.50 port 33338
Sep 14 13:31:56 vtv3 sshd\[26153\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.141.72.50
Sep 14 13:31:58 vtv3 sshd\[26153\]: Failed password for invalid user iz from 102.141.72.50 port 33338 ssh2
Sep 14 13:38:44 vtv3 sshd\[29529\]: Invalid user emp from 102.141.72.50 port 54605
Sep 14 13:38:44 vtv3 sshd\[29529\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.141.72.50
Sep 14 13:51:24 vtv3 sshd\[3670\]: Invalid user db1inst1 from 102.141.72.50 port 40674
Sep 14 13:51:24 vtv3 sshd\[3670\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.141.72.50
Sep 14 13:51:27 vtv3 sshd\[3670\]: Failed password for invalid user db1inst1 from 102.141.72.50 port 40674 ssh2
Sep 14 13:58:03 vtv3 sshd\[6777\]: Invalid user shun from 102.141.72.50 port 33704
Sep 14 13:58:03 vtv3 sshd\[6777\]: pam_unix\(ssh
2019-09-15 02:42:15
attackbots
Sep  7 06:10:42 microserver sshd[33287]: Invalid user oneadmin from 102.141.72.50 port 44411
Sep  7 06:10:42 microserver sshd[33287]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.141.72.50
Sep  7 06:10:44 microserver sshd[33287]: Failed password for invalid user oneadmin from 102.141.72.50 port 44411 ssh2
Sep  7 06:17:19 microserver sshd[34214]: Invalid user system from 102.141.72.50 port 38030
Sep  7 06:17:19 microserver sshd[34214]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.141.72.50
Sep  7 06:30:26 microserver sshd[36249]: Invalid user test from 102.141.72.50 port 53493
Sep  7 06:30:26 microserver sshd[36249]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.141.72.50
Sep  7 06:30:28 microserver sshd[36249]: Failed password for invalid user test from 102.141.72.50 port 53493 ssh2
Sep  7 06:37:02 microserver sshd[37111]: Invalid user ts3srv from 102.141.72.50 port 47109
2019-09-07 13:47:35
attack
Aug 18 07:11:03 ms-srv sshd[10879]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.141.72.50
Aug 18 07:11:06 ms-srv sshd[10879]: Failed password for invalid user bandit from 102.141.72.50 port 36975 ssh2
2019-08-18 19:20:03
attackspambots
Aug 17 11:15:21 php1 sshd\[14589\]: Invalid user butter from 102.141.72.50
Aug 17 11:15:21 php1 sshd\[14589\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.141.72.50
Aug 17 11:15:24 php1 sshd\[14589\]: Failed password for invalid user butter from 102.141.72.50 port 48741 ssh2
Aug 17 11:22:18 php1 sshd\[15226\]: Invalid user kafka from 102.141.72.50
Aug 17 11:22:18 php1 sshd\[15226\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.141.72.50
2019-08-18 05:27:54
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 102.141.72.50
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 8999
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;102.141.72.50.			IN	A

;; AUTHORITY SECTION:
.			1009	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019081701 1800 900 604800 86400

;; Query time: 1 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sun Aug 18 05:27:49 CST 2019
;; MSG SIZE  rcvd: 117
Host info
Host 50.72.141.102.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 50.72.141.102.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
106.12.3.28 attackbots
Invalid user testing from 106.12.3.28 port 45444
2020-10-02 13:51:10
203.213.66.170 attack
Invalid user ram from 203.213.66.170 port 46872
2020-10-02 13:32:05
125.43.69.155 attackspam
Invalid user cloud from 125.43.69.155 port 19408
2020-10-02 13:25:31
222.186.30.57 attack
Oct  2 05:44:06 scw-tender-jepsen sshd[12842]: Failed password for root from 222.186.30.57 port 16963 ssh2
Oct  2 05:44:08 scw-tender-jepsen sshd[12842]: Failed password for root from 222.186.30.57 port 16963 ssh2
2020-10-02 13:52:59
45.148.122.190 attackspambots
Invalid user fake from 45.148.122.190 port 38092
2020-10-02 13:49:01
181.48.120.220 attackbotsspam
Invalid user bugzilla from 181.48.120.220 port 57169
2020-10-02 13:25:07
51.77.146.156 attackspambots
Invalid user jeremiah from 51.77.146.156 port 59778
2020-10-02 13:26:16
182.73.243.154 attackbots
firewall-block, port(s): 445/tcp
2020-10-02 13:53:37
122.96.140.194 attackbots
Found on   Alienvault    / proto=6  .  srcport=4874  .  dstport=1433  .     (3838)
2020-10-02 13:44:12
197.38.216.179 attackspam
firewall-block, port(s): 23/tcp
2020-10-02 13:44:53
182.121.96.204 attackbotsspam
" "
2020-10-02 13:29:59
41.41.18.129 attackbotsspam
Unauthorised access (Oct  1) SRC=41.41.18.129 LEN=52 TTL=114 ID=7367 DF TCP DPT=445 WINDOW=8192 SYN
2020-10-02 13:55:33
2.82.170.124 attack
Connection to SSH Honeypot - Detected by HoneypotDB
2020-10-02 13:40:55
104.219.251.35 attackspam
Automatic report - XMLRPC Attack
2020-10-02 13:37:41
142.93.235.47 attackbotsspam
Invalid user buero from 142.93.235.47 port 40720
2020-10-02 13:46:44

Recently Reported IPs

97.243.231.36 165.61.192.167 36.14.187.65 171.9.74.214
216.75.206.86 80.88.122.203 36.87.105.15 131.189.197.32
190.217.22.119 34.107.69.230 89.218.160.238 47.52.155.213
129.96.183.252 37.21.115.14 105.150.197.169 70.181.143.227
65.96.29.66 50.217.125.61 70.99.164.129 40.138.182.35