154.120.52.41 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Ghana

Internet Service Provider: University of Ghana

Hostname: unknown

Organization: unknown

Usage Type: University/College/School

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspam	Scanning	2020-08-23 18:48:31

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 154.120.52.41
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 12392
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;154.120.52.41.			IN	A

;; AUTHORITY SECTION:
.			455	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020082300 1800 900 604800 86400

;; Query time: 143 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Aug 23 18:48:28 CST 2020
;; MSG SIZE  rcvd: 117

Host info

Host 41.52.120.154.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 41.52.120.154.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
45.143.221.3	attackspambots	Fail2Ban Ban Triggered	2020-10-06 01:06:12
157.245.95.42	attackbotsspam	"Found User-Agent associated with security scanner - Matched Data: nmap scripting engine found within REQUEST_HEADERS:User-Agent: mozilla/5.0 (compatible; nmap scripting engine; hs://nmap.org/book/nse.html)"	2020-10-06 01:31:56
212.227.202.20	attackbots	SSH/22 MH Probe, BF, Hack -	2020-10-06 01:10:08
157.230.226.7	attackspambots	TCP (SYN) 157.230.226.7:58101 -> port 9332, len 40	2020-10-06 00:58:15
60.13.230.199	attack	2020-10-05T13:54:58.996476centos sshd[13193]: Failed password for root from 60.13.230.199 port 37644 ssh2 2020-10-05T13:59:05.063210centos sshd[13465]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.13.230.199 user=root 2020-10-05T13:59:06.921625centos sshd[13465]: Failed password for root from 60.13.230.199 port 33160 ssh2 ...	2020-10-06 01:24:40
112.85.42.122	attack	Oct 5 17:25:12 localhost sshd[75164]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.122 user=root Oct 5 17:25:15 localhost sshd[75164]: Failed password for root from 112.85.42.122 port 43018 ssh2 Oct 5 17:25:18 localhost sshd[75164]: Failed password for root from 112.85.42.122 port 43018 ssh2 Oct 5 17:25:12 localhost sshd[75164]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.122 user=root Oct 5 17:25:15 localhost sshd[75164]: Failed password for root from 112.85.42.122 port 43018 ssh2 Oct 5 17:25:18 localhost sshd[75164]: Failed password for root from 112.85.42.122 port 43018 ssh2 Oct 5 17:25:12 localhost sshd[75164]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.122 user=root Oct 5 17:25:15 localhost sshd[75164]: Failed password for root from 112.85.42.122 port 43018 ssh2 Oct 5 17:25:18 localhost sshd[75164]: Failed pas ...	2020-10-06 01:37:16
40.127.169.230	attackbotsspam	Oct 5 00:18:19 rocket sshd[16003]: Failed password for root from 40.127.169.230 port 2048 ssh2 Oct 5 00:22:44 rocket sshd[16689]: Failed password for root from 40.127.169.230 port 2048 ssh2 ...	2020-10-06 01:03:58
165.227.52.184	attackspam	$f2bV_matches	2020-10-06 01:11:39
106.12.113.111	attack	Port scan denied	2020-10-06 01:18:52
2607:5300:60:35b3::	attackspambots	[munged]::443 2607:5300:60:35b3:: - - [05/Oct/2020:16:24:35 +0200] "POST /[munged]: HTTP/1.1" 200 6132 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-10-06 00:58:41
125.166.1.55	attackbotsspam	TCP (SYN) 125.166.1.55:6201 -> port 23, len 44	2020-10-06 01:19:35
123.207.145.66	attackspam	(sshd) Failed SSH login from 123.207.145.66 (CN/China/-): 5 in the last 3600 secs	2020-10-06 01:33:10
85.234.117.151	attackbots	2020-10-05T18:42:42.669317vps773228.ovh.net sshd[4717]: Failed password for root from 85.234.117.151 port 44778 ssh2 2020-10-05T18:46:43.225458vps773228.ovh.net sshd[4791]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.234.117.151 user=root 2020-10-05T18:46:45.639575vps773228.ovh.net sshd[4791]: Failed password for root from 85.234.117.151 port 48024 ssh2 2020-10-05T18:50:49.305381vps773228.ovh.net sshd[4829]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.234.117.151 user=root 2020-10-05T18:50:51.488686vps773228.ovh.net sshd[4829]: Failed password for root from 85.234.117.151 port 51272 ssh2 ...	2020-10-06 00:56:19
193.112.213.248	attackbotsspam	Oct 5 12:17:14 rotator sshd\[29726\]: Failed password for root from 193.112.213.248 port 35796 ssh2Oct 5 12:18:43 rotator sshd\[29767\]: Failed password for root from 193.112.213.248 port 52742 ssh2Oct 5 12:20:20 rotator sshd\[30456\]: Failed password for root from 193.112.213.248 port 41460 ssh2Oct 5 12:21:58 rotator sshd\[30567\]: Failed password for root from 193.112.213.248 port 58420 ssh2Oct 5 12:23:31 rotator sshd\[30595\]: Failed password for root from 193.112.213.248 port 47132 ssh2Oct 5 12:25:01 rotator sshd\[30615\]: Failed password for root from 193.112.213.248 port 35850 ssh2 ...	2020-10-06 00:55:01
94.101.95.240	attack	Automatic report - Banned IP Access	2020-10-06 01:28:24

Recently Reported IPs

221.151.223.105	54.254.155.218	177.190.76.248	162.243.172.42
186.52.116.223	6.188.182.216	121.232.7.106	130.204.4.74
58.152.237.86	123.241.141.76	179.34.93.167	175.158.225.51
84.17.52.84	36.235.174.23	187.15.173.76	125.41.187.18
1.168.207.202	1.65.140.30	162.243.129.4	221.127.61.170