133.242.196.94

Basic Info

City: unknown

Region: unknown

Country: Japan

Internet Service Provider: Geo Code Co. Ltd.

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	Mar 30 15:56:15 debian-2gb-nbg1-2 kernel: \[7835632.920766\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=133.242.196.94 DST=195.201.40.59 LEN=44 TOS=0x00 PREC=0x00 TTL=46 ID=0 DF PROTO=TCP SPT=21 DPT=31068 WINDOW=14600 RES=0x00 ACK SYN URGP=0	2020-03-31 00:10:22

Type

Details

Datetime

attack

Mar 30 15:56:15 debian-2gb-nbg1-2 kernel: \[7835632.920766\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=133.242.196.94 DST=195.201.40.59 LEN=44 TOS=0x00 PREC=0x00 TTL=46 ID=0 DF PROTO=TCP SPT=21 DPT=31068 WINDOW=14600 RES=0x00 ACK SYN URGP=0

2020-03-31 00:10:22

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 133.242.196.94
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 28898
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;133.242.196.94.			IN	A

;; AUTHORITY SECTION:
.			554	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020033000 1800 900 604800 86400

;; Query time: 100 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Mar 31 00:10:01 CST 2020
;; MSG SIZE  rcvd: 118

Host info

Host 94.196.242.133.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 94.196.242.133.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
184.105.247.199	attackbots	TCP (SYN) 184.105.247.199:60372 -> port 2323, len 40	2020-09-03 20:02:31
185.189.211.234	attackbots	TCP (SYN) 185.189.211.234:55237 -> port 5900, len 52	2020-09-03 19:50:07
46.48.142.45	attackspambots	TCP (SYN) 46.48.142.45:42198 -> port 2323, len 40	2020-09-03 20:08:37
45.143.223.6	attack	[2020-09-03 04:10:37] NOTICE[1185][C-0000a796] chan_sip.c: Call from '' (45.143.223.6:58995) to extension '219946903433909' rejected because extension not found in context 'public'. [2020-09-03 04:10:37] SECURITY[1203] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-09-03T04:10:37.376-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="219946903433909",SessionID="0x7f10c4989438",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.223.6/58995",ACLName="no_extension_match" [2020-09-03 04:11:08] NOTICE[1185][C-0000a798] chan_sip.c: Call from '' (45.143.223.6:63814) to extension '580846903433909' rejected because extension not found in context 'public'. [2020-09-03 04:11:08] SECURITY[1203] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-09-03T04:11:08.548-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="580846903433909",SessionID="0x7f10c42761e8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45. ...	2020-09-03 20:26:28
134.180.154.14	attack	TCP (SYN) 134.180.154.14:53494 -> port 23, len 44	2020-09-03 20:15:05
91.200.113.219	attackspambots	TCP (SYN) 91.200.113.219:25464 -> port 7547, len 40	2020-09-03 20:06:48
156.96.128.222	attackspambots	TCP (SYN) 156.96.128.222:59165 -> port 443, len 44	2020-09-03 20:13:39
192.99.175.184	attack	TCP (SYN) 192.99.175.184:27179 -> port 1080, len 60	2020-09-03 20:01:54
188.166.244.121	attackbotsspam	Invalid user es from 188.166.244.121 port 51504	2020-09-03 20:20:14
147.158.42.247	attack	SS5,WP GET /wp-login.php	2020-09-03 20:14:22
95.215.71.119	attack	TCP (SYN) 95.215.71.119:53403 -> port 445, len 52	2020-09-03 20:05:12
165.227.50.84	attack	Sep 3 13:52:16 rancher-0 sshd[1423451]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.50.84 user=root Sep 3 13:52:18 rancher-0 sshd[1423451]: Failed password for root from 165.227.50.84 port 56144 ssh2 ...	2020-09-03 20:16:42
121.58.194.70	attack	TCP (SYN) 121.58.194.70:63905 -> port 445, len 52	2020-09-03 20:15:25
91.200.115.75	attackspambots	TCP (SYN) 91.200.115.75:32217 -> port 7547, len 40	2020-09-03 20:06:07
42.112.211.52	attackspam	Invalid user erp from 42.112.211.52 port 39306	2020-09-03 20:28:56

Recently Reported IPs

229.84.209.137	218.153.6.233	186.42.132.145	12.19.77.153
116.76.83.216	243.151.178.42	64.39.166.93	3.92.224.101
239.26.129.192	231.180.177.235	1.67.200.246	97.38.247.158
94.101.25.167	181.183.153.120	111.182.12.185	116.106.145.56
223.68.10.16	114.252.230.245	223.66.214.118	36.108.175.55