193.193.238.66

Basic Info

City: unknown

Region: unknown

Country: Kazakhstan

Internet Service Provider: Astel JSC

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspam	2020-08-27 22:42:00.404786-0500 localhost smtpd[89189]: NOQUEUE: reject: RCPT from vpn.ans.kz[193.193.238.66]: 554 5.7.1 Service unavailable; Client host [193.193.238.66] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/193.193.238.66; from= to= proto=ESMTP helo=	2020-08-28 18:49:15

Type

Details

Datetime

attackspam

2020-08-27 22:42:00.404786-0500  localhost smtpd[89189]: NOQUEUE: reject: RCPT from vpn.ans.kz[193.193.238.66]: 554 5.7.1 Service unavailable; Client host [193.193.238.66] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/193.193.238.66; from= to= proto=ESMTP helo=

2020-08-28 18:49:15

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 193.193.238.66
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 32969
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;193.193.238.66.			IN	A

;; AUTHORITY SECTION:
.			343	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020082800 1800 900 604800 86400

;; Query time: 93 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Aug 28 18:49:09 CST 2020
;; MSG SIZE  rcvd: 118

Host info

66.238.193.193.in-addr.arpa domain name pointer vpn.ans.kz.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
66.238.193.193.in-addr.arpa	name = vpn.ans.kz.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
112.85.42.72	attack	2019-11-08T13:05:09.976803abusebot-6.cloudsearch.cf sshd\[2717\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.72 user=root	2019-11-08 21:11:28
195.110.53.148	attackbotsspam	Absender hat Spam-Falle ausgel?st	2019-11-08 21:39:12
210.177.54.141	attackspambots	Nov 8 13:33:14 srv1 sshd[31512]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.177.54.141 Nov 8 13:33:16 srv1 sshd[31512]: Failed password for invalid user prom from 210.177.54.141 port 57532 ssh2 ...	2019-11-08 21:12:35
5.200.63.190	attack	SSH bruteforce	2019-11-08 21:16:32
185.176.27.18	attackbots	185.176.27.18 was recorded 142 times by 30 hosts attempting to connect to the following ports: 33858,33855,33884,33852,33866,33831,33867,33805,33808,33878,33812,33885,33853,33810,33802,33869,33863,33865,33883,33800,33856,33841,33809,33859,33804,33829,33872,33857,33840,33850,33874,33847,33861,33844,33833,33803,33814,33848,33838,33821,33887,33864,33830,33889,33846,33823,33843,33860,33815,33806,33880,33886,33879,33822,33807,33813,33876,33868,33842,33811,33888,33873,33817,33820,33862. Incident counter (4h, 24h, all-time): 142, 800, 2633	2019-11-08 21:29:34
117.73.2.103	attack	SSH-bruteforce attempts	2019-11-08 21:07:04
181.189.221.245	attackbotsspam	Absender hat Spam-Falle ausgel?st	2019-11-08 21:45:03
187.95.38.17	attack	SPF Fail sender not permitted to send mail for @lrmmotors.it / Mail sent to address hacked/leaked from Destructoid	2019-11-08 21:41:18
159.89.153.54	attackbots	Nov 8 07:13:26 vserver sshd\[29531\]: Failed password for root from 159.89.153.54 port 50356 ssh2Nov 8 07:17:17 vserver sshd\[29546\]: Failed password for root from 159.89.153.54 port 59482 ssh2Nov 8 07:20:51 vserver sshd\[29562\]: Invalid user ubnt from 159.89.153.54Nov 8 07:20:53 vserver sshd\[29562\]: Failed password for invalid user ubnt from 159.89.153.54 port 40402 ssh2 ...	2019-11-08 21:25:57
79.137.75.5	attackbotsspam	Nov 8 13:07:22 sso sshd[3625]: Failed password for root from 79.137.75.5 port 44740 ssh2 ...	2019-11-08 21:32:41
202.70.85.93	attack	Absender hat Spam-Falle ausgel?st	2019-11-08 21:30:03
218.249.69.210	attack	Nov 8 09:41:15 server sshd\[9552\]: Invalid user support from 218.249.69.210 Nov 8 09:41:15 server sshd\[9552\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.249.69.210 Nov 8 09:41:17 server sshd\[9552\]: Failed password for invalid user support from 218.249.69.210 port 14117 ssh2 Nov 8 10:01:29 server sshd\[14819\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.249.69.210 user=ftp Nov 8 10:01:31 server sshd\[14819\]: Failed password for ftp from 218.249.69.210 port 14140 ssh2 ...	2019-11-08 21:17:11
54.37.136.87	attackbots	Nov 8 08:21:39 jane sshd[29815]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.136.87 Nov 8 08:21:41 jane sshd[29815]: Failed password for invalid user uc from 54.37.136.87 port 36150 ssh2 ...	2019-11-08 21:17:32
210.65.138.65	attackspambots	Nov 8 13:26:57 mout sshd[4301]: Invalid user temp from 210.65.138.65 port 60394	2019-11-08 21:27:22
186.250.220.190	attackspambots	[ER hit] Tried to deliver spam. Already well known.	2019-11-08 21:42:03

Recently Reported IPs

89.248.172.237	182.75.51.238	218.51.205.132	227.212.212.168
48.40.0.125	51.161.54.149	199.195.253.109	122.117.158.120
231.80.136.172	134.122.53.187	118.39.152.132	95.178.157.241
123.170.146.181	59.188.23.79	75.142.99.96	161.97.98.210
146.82.41.79	187.212.108.232	41.230.66.136	176.43.128.193