193.42.96.137 - IPInfo

Basic Info

City: Frankfurt am Main

Region: Hessen

Country: Germany

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
193.42.96.97	attackbots	SSH_attack	2020-10-13 23:53:26
193.42.96.97	attackbotsspam	Lines containing failures of 193.42.96.97 Oct 12 01:18:27 node2d sshd[12125]: Invalid user aminaka from 193.42.96.97 port 37804 Oct 12 01:18:27 node2d sshd[12125]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.42.96.97 Oct 12 01:18:29 node2d sshd[12125]: Failed password for invalid user aminaka from 193.42.96.97 port 37804 ssh2 Oct 12 01:18:29 node2d sshd[12125]: Received disconnect from 193.42.96.97 port 37804:11: Bye Bye [preauth] Oct 12 01:18:29 node2d sshd[12125]: Disconnected from invalid user aminaka 193.42.96.97 port 37804 [preauth] Oct 12 01:30:00 node2d sshd[14277]: Invalid user diane from 193.42.96.97 port 40700 Oct 12 01:30:00 node2d sshd[14277]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.42.96.97 Oct 12 01:30:02 node2d sshd[14277]: Failed password for invalid user diane from 193.42.96.97 port 40700 ssh2 Oct 12 01:30:02 node2d sshd[14277]: Received disconnect from 19........ ------------------------------	2020-10-13 15:08:07
193.42.96.97	attack	Lines containing failures of 193.42.96.97 Oct 12 01:18:27 node2d sshd[12125]: Invalid user aminaka from 193.42.96.97 port 37804 Oct 12 01:18:27 node2d sshd[12125]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.42.96.97 Oct 12 01:18:29 node2d sshd[12125]: Failed password for invalid user aminaka from 193.42.96.97 port 37804 ssh2 Oct 12 01:18:29 node2d sshd[12125]: Received disconnect from 193.42.96.97 port 37804:11: Bye Bye [preauth] Oct 12 01:18:29 node2d sshd[12125]: Disconnected from invalid user aminaka 193.42.96.97 port 37804 [preauth] Oct 12 01:30:00 node2d sshd[14277]: Invalid user diane from 193.42.96.97 port 40700 Oct 12 01:30:00 node2d sshd[14277]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.42.96.97 Oct 12 01:30:02 node2d sshd[14277]: Failed password for invalid user diane from 193.42.96.97 port 40700 ssh2 Oct 12 01:30:02 node2d sshd[14277]: Received disconnect from 19........ ------------------------------	2020-10-13 07:46:34

Type

Details

Datetime

193.42.96.97

attackbots

SSH_attack

2020-10-13 23:53:26

193.42.96.97

attackbotsspam

Lines containing failures of 193.42.96.97
Oct 12 01:18:27 node2d sshd[12125]: Invalid user aminaka from 193.42.96.97 port 37804
Oct 12 01:18:27 node2d sshd[12125]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.42.96.97
Oct 12 01:18:29 node2d sshd[12125]: Failed password for invalid user aminaka from 193.42.96.97 port 37804 ssh2
Oct 12 01:18:29 node2d sshd[12125]: Received disconnect from 193.42.96.97 port 37804:11: Bye Bye [preauth]
Oct 12 01:18:29 node2d sshd[12125]: Disconnected from invalid user aminaka 193.42.96.97 port 37804 [preauth]
Oct 12 01:30:00 node2d sshd[14277]: Invalid user diane from 193.42.96.97 port 40700
Oct 12 01:30:00 node2d sshd[14277]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.42.96.97
Oct 12 01:30:02 node2d sshd[14277]: Failed password for invalid user diane from 193.42.96.97 port 40700 ssh2
Oct 12 01:30:02 node2d sshd[14277]: Received disconnect from 19........
------------------------------

2020-10-13 15:08:07

193.42.96.97

attack

Lines containing failures of 193.42.96.97
Oct 12 01:18:27 node2d sshd[12125]: Invalid user aminaka from 193.42.96.97 port 37804
Oct 12 01:18:27 node2d sshd[12125]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.42.96.97
Oct 12 01:18:29 node2d sshd[12125]: Failed password for invalid user aminaka from 193.42.96.97 port 37804 ssh2
Oct 12 01:18:29 node2d sshd[12125]: Received disconnect from 193.42.96.97 port 37804:11: Bye Bye [preauth]
Oct 12 01:18:29 node2d sshd[12125]: Disconnected from invalid user aminaka 193.42.96.97 port 37804 [preauth]
Oct 12 01:30:00 node2d sshd[14277]: Invalid user diane from 193.42.96.97 port 40700
Oct 12 01:30:00 node2d sshd[14277]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.42.96.97
Oct 12 01:30:02 node2d sshd[14277]: Failed password for invalid user diane from 193.42.96.97 port 40700 ssh2
Oct 12 01:30:02 node2d sshd[14277]: Received disconnect from 19........
------------------------------

2020-10-13 07:46:34

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 193.42.96.137
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 51723
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;193.42.96.137.			IN	A

;; AUTHORITY SECTION:
.			473	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2024081001 1800 900 604800 86400

;; Query time: 26 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Aug 11 05:17:08 CST 2024
;; MSG SIZE  rcvd: 106

Host info

Host 137.96.42.193.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 137.96.42.193.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
62.141.50.140	attack	ssh bruteforce or scan ...	2019-06-27 09:34:37
61.158.186.84	attackspam	Brute force attack stopped by firewall	2019-06-27 10:05:12
216.244.66.232	attack	Brute force attack stopped by firewall	2019-06-27 09:44:52
61.185.137.161	attack	Brute force attack stopped by firewall	2019-06-27 10:07:22
13.66.139.0	attack	Brute force attack stopped by firewall	2019-06-27 09:28:16
138.197.195.52	attack	Reported by AbuseIPDB proxy server.	2019-06-27 09:29:07
141.98.81.38	attackspam	ports scanning	2019-06-27 09:53:31
186.215.130.242	attack	Brute force attack stopped by firewall	2019-06-27 10:06:46
198.108.66.121	attack	Brute force attack stopped by firewall	2019-06-27 09:28:31
14.169.132.116	attackbotsspam	Jun 27 01:52:00 elektron postfix/smtpd\[25017\]: NOQUEUE: reject: RCPT from unknown\[14.169.132.116\]: 450 4.7.1 Client host rejected: cannot find your hostname, \[14.169.132.116\]\; from=\ to=\ proto=ESMTP helo=\<\[185.180.222.147\]\> Jun 27 01:52:01 elektron postfix/smtpd\[25017\]: NOQUEUE: reject: RCPT from unknown\[14.169.132.116\]: 450 4.7.1 Client host rejected: cannot find your hostname, \[14.169.132.116\]\; from=\ to=\ proto=ESMTP helo=\<\[185.180.222.147\]\> Jun 27 01:52:01 elektron postfix/smtpd\[25017\]: NOQUEUE: reject: RCPT from unknown\[14.169.132.116\]: 450 4.7.1 Client host rejected: cannot find your hostname, \[14.169.132.116\]\; from=\ to=\ proto=ESMTP helo=\<\[185.180.222.147\]\> Jun 27 01:52:01 elektron postfix/smtpd\[25017\]: NOQUEUE: reject: RCPT from unknown\[14.169.132.116\]: 450 4.7.1 Client host rejected: cannot find your hostname, \[14.169.132.116\]\; from=\	2019-06-27 09:58:12
27.42.165.226	attack	Brute force attack stopped by firewall	2019-06-27 09:34:04
170.0.125.26	attackbots	Brute force attack stopped by firewall	2019-06-27 09:43:09
107.172.102.206	attackspambots	Invalid user admin from 107.172.102.206 port 39178 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.172.102.206 Failed password for invalid user admin from 107.172.102.206 port 39178 ssh2 Invalid user hduser from 107.172.102.206 port 39978 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.172.102.206	2019-06-27 10:11:31
165.22.128.115	attackspam	Jun 27 03:25:19 vmd17057 sshd\[30659\]: Invalid user admin from 165.22.128.115 port 49818 Jun 27 03:25:19 vmd17057 sshd\[30659\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.128.115 Jun 27 03:25:21 vmd17057 sshd\[30659\]: Failed password for invalid user admin from 165.22.128.115 port 49818 ssh2 ...	2019-06-27 09:59:56
183.87.140.42	attackspam	Brute force attack stopped by firewall	2019-06-27 10:04:54

Recently Reported IPs

223.72.29.10	71.62.240.213	135.181.140.185	36.67.195.2
36.67.195.3	36.67.195.4	23.225.156.245	23.225.156.184
123.24.108.205	123.24.108.206	71.125.128.40	192.121.245.202
192.121.245.86	192.36.109.208	188.213.34.199	142.250.74.202
72.247.160.30	37.157.4.29	178.55.216.215	100.33.155.90