196.200.1.56 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: South Africa

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
196.200.184.22	spambotsattackproxynormal	196.200.184.219 196.200.184.107 196.200.184.52 196.200.184.191 196.200.184.22 196.200.184.90 196.200.184.194 196.200.184.12 196.200.184.17 196.200.184.177 196.200.184.134 196.200.184.38 196.200.184.229 196.200.184.250 196.200.184.225 196.200.184.142 196.200.184.139 196.200.184.163 196.200.184.186 196.200.184.132 196.200.184.69 196.200.184.153 196.200.184.151 196.200.184.130 196.200.184.196 196.200.184.92 196.200.184.19 196.200.184.64 196.200.184.154 196.200.184.193 196.200.184.108 196.200.184.42 196.200.184.32 196.200.184.128 196.200.184.83 196.200.184.26 196.200.184.99 196.200.184.31 196.200.184.156 196.200.184.215 196.200.184.70 196.200.184.198 196.200.184.165 196.200.184.5 196.200.184.30 196.200.184.66 196.200.184.46 196.200.184.78 196.200.184.124 196.200.184.158 196.200.184.58 196.200.184.244 196.200.184.121 196.200.184.93 196.200.184.119 196.200.184.136 196.200.184.61 196.200.184.245 196.200.184.126 196.200.184.27 196.200.184.129 196.200.184.79 196.200.184.54 196.200.184.173 196.200.184.236 196.200.184.72 196.200.184.187 196.200.184.197 196.200.184.51 196.200.184.36 196.200.184.155 196.200.184.238 196.200.184.176 196.200.184.63 196.200.184.246 196.200.184.141 196.200.184.152 196.200.184.164 196.200.184.125 196.200.184.111 196.200.184.122 196.200.184.148 196.200.184.3 196.200.184.24	2023-09-20 05:51:19
196.200.184.22	spambotsattackproxynormal	196.200.184.219 196.200.184.107 196.200.184.52 196.200.184.191 196.200.184.22 196.200.184.90 196.200.184.194 196.200.184.12 196.200.184.17 196.200.184.177 196.200.184.134 196.200.184.38 196.200.184.229 196.200.184.250 196.200.184.225 196.200.184.142 196.200.184.139 196.200.184.163 196.200.184.186 196.200.184.132 196.200.184.69 196.200.184.153 196.200.184.151 196.200.184.130 196.200.184.196 196.200.184.92 196.200.184.19 196.200.184.64 196.200.184.154 196.200.184.193 196.200.184.108 196.200.184.42 196.200.184.32 196.200.184.128 196.200.184.83 196.200.184.26 196.200.184.99 196.200.184.31 196.200.184.156 196.200.184.215 196.200.184.70 196.200.184.198 196.200.184.165 196.200.184.5 196.200.184.30 196.200.184.66 196.200.184.46 196.200.184.78 196.200.184.124 196.200.184.158 196.200.184.58 196.200.184.244 196.200.184.121 196.200.184.93 196.200.184.119 196.200.184.136 196.200.184.61 196.200.184.245 196.200.184.126 196.200.184.27 196.200.184.129 196.200.184.79 196.200.184.54 196.200.184.173 196.200.184.236 196.200.184.72 196.200.184.187 196.200.184.197 196.200.184.51 196.200.184.36 196.200.184.155 196.200.184.238 196.200.184.176 196.200.184.63 196.200.184.246 196.200.184.141 196.200.184.152 196.200.184.164 196.200.184.125 196.200.184.111 196.200.184.122 196.200.184.148 196.200.184.3 196.200.184.24	2023-09-20 05:50:46
196.200.181.7	attack	Honeypot attack, port: 445, PTR: PTR record not found	2020-09-26 06:36:14
196.200.181.7	attackspam	Honeypot attack, port: 445, PTR: PTR record not found	2020-09-25 23:39:20
196.200.181.7	attackbots	Honeypot attack, port: 445, PTR: PTR record not found	2020-09-25 15:17:55
196.200.181.3	attackspambots	2020-08-24T05:53:29.211268linuxbox-skyline sshd[112091]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.200.181.3 user=root 2020-08-24T05:53:31.570971linuxbox-skyline sshd[112091]: Failed password for root from 196.200.181.3 port 47694 ssh2 ...	2020-08-24 20:14:18
196.200.181.3	attackbots	sshd jail - ssh hack attempt	2020-08-17 19:50:52
196.200.156.196	attackbotsspam	TCP (SYN) 196.200.156.196:62909 -> port 1433, len 52	2020-08-13 01:52:16
196.200.181.3	attack	Lines containing failures of 196.200.181.3 Jul 30 23:05:36 server-name sshd[25858]: User r.r from 196.200.181.3 not allowed because not listed in AllowUsers Jul 30 23:05:36 server-name sshd[25858]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.200.181.3 user=r.r Jul 30 23:05:38 server-name sshd[25858]: Failed password for invalid user r.r from 196.200.181.3 port 52280 ssh2 Jul 30 23:05:40 server-name sshd[25858]: Received disconnect from 196.200.181.3 port 52280:11: Bye Bye [preauth] Jul 30 23:05:40 server-name sshd[25858]: Disconnected from invalid user r.r 196.200.181.3 port 52280 [preauth] Jul 31 00:07:14 server-name sshd[28218]: User r.r from 196.200.181.3 not allowed because not listed in AllowUsers Jul 31 00:07:14 server-name sshd[28218]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.200.181.3 user=r.r Jul 31 00:07:16 server-name sshd[28218]: Failed password for invalid us........ ------------------------------	2020-08-13 00:35:44
196.200.181.3	attackspam	Lines containing failures of 196.200.181.3 Jul 30 23:05:36 server-name sshd[25858]: User r.r from 196.200.181.3 not allowed because not listed in AllowUsers Jul 30 23:05:36 server-name sshd[25858]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.200.181.3 user=r.r Jul 30 23:05:38 server-name sshd[25858]: Failed password for invalid user r.r from 196.200.181.3 port 52280 ssh2 Jul 30 23:05:40 server-name sshd[25858]: Received disconnect from 196.200.181.3 port 52280:11: Bye Bye [preauth] Jul 30 23:05:40 server-name sshd[25858]: Disconnected from invalid user r.r 196.200.181.3 port 52280 [preauth] Jul 31 00:07:14 server-name sshd[28218]: User r.r from 196.200.181.3 not allowed because not listed in AllowUsers Jul 31 00:07:14 server-name sshd[28218]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.200.181.3 user=r.r Jul 31 00:07:16 server-name sshd[28218]: Failed password for invalid us........ ------------------------------	2020-08-12 18:56:31
196.200.146.3	attack	TCP (SYN) 196.200.146.3:53101 -> port 22, len 44	2020-06-30 01:10:16
196.200.181.5	attackbots	Unauthorized connection attempt detected from IP address 196.200.181.5 to port 445	2020-06-22 05:51:26
196.200.181.6	attackbotsspam	Unauthorized connection attempt detected from IP address 196.200.181.6 to port 445	2020-06-22 05:51:10
196.200.181.7	attack	Unauthorized connection attempt detected from IP address 196.200.181.7 to port 445	2020-06-22 05:50:40
196.200.181.8	attackbotsspam	Unauthorized connection attempt detected from IP address 196.200.181.8 to port 445	2020-06-22 05:50:25

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 196.200.1.56
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 24643
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;196.200.1.56.			IN	A

;; AUTHORITY SECTION:
.			29	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025021800 1800 900 604800 86400

;; Query time: 13 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 18 23:07:05 CST 2025
;; MSG SIZE  rcvd: 105

Host info

Host 56.1.200.196.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 56.1.200.196.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
122.117.21.212	attackbotsspam	Unauthorized connection attempt from IP address 122.117.21.212 on Port 445(SMB)	2020-06-01 18:27:07
148.66.157.84	attackbotsspam	LGS,WP GET /newsite/wp-includes/wlwmanifest.xml	2020-06-01 17:51:24
144.34.210.56	attack	prod11 ...	2020-06-01 18:22:32
132.232.68.26	attackspambots	Jun 1 10:39:46 cdc sshd[30022]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.68.26 user=root Jun 1 10:39:48 cdc sshd[30022]: Failed password for invalid user root from 132.232.68.26 port 36404 ssh2	2020-06-01 18:25:44
125.132.73.28	attackspambots	Jun 1 07:49:40 vpn01 sshd[3372]: Failed password for root from 125.132.73.28 port 58775 ssh2 ...	2020-06-01 17:56:11
194.26.29.116	attackbotsspam	06/01/2020-04:12:52.319623 194.26.29.116 Protocol: 6 ET SCAN NMAP -sS window 1024	2020-06-01 18:07:22
54.71.115.235	attackbotsspam	Automatic report - Banned IP Access	2020-06-01 18:01:04
49.48.246.47	attackbots	Unauthorized connection attempt from IP address 49.48.246.47 on Port 445(SMB)	2020-06-01 18:26:24
51.15.194.51	attackbots	Invalid user hugo from 51.15.194.51 port 45316	2020-06-01 18:09:50
51.254.137.206	attackbotsspam	2020-06-01T09:45:14.502231shield sshd\[31835\]: Invalid user phpmyadmin from 51.254.137.206 port 60003 2020-06-01T09:45:14.505904shield sshd\[31835\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.ip-51-254-137.eu 2020-06-01T09:45:16.067171shield sshd\[31835\]: Failed password for invalid user phpmyadmin from 51.254.137.206 port 60003 ssh2 2020-06-01T09:46:25.930924shield sshd\[32090\]: Invalid user php from 51.254.137.206 port 44440 2020-06-01T09:46:25.934609shield sshd\[32090\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.ip-51-254-137.eu	2020-06-01 17:54:34
58.19.0.3	attack	CPHulk brute force detection (a)	2020-06-01 18:08:12
74.82.47.47	attackbots	TCP (SYN) 74.82.47.47:58812 -> port 7547, len 44	2020-06-01 18:02:20
103.147.185.13	attack	Brute Force attack - banned by Fail2Ban	2020-06-01 18:19:38
203.99.62.158	attackbots	Jun 1 10:45:43 ajax sshd[21850]: Failed password for root from 203.99.62.158 port 39440 ssh2	2020-06-01 17:58:40
49.235.170.200	attackspam	Jun 1 06:15:20 cloud sshd[3657]: Failed password for root from 49.235.170.200 port 47560 ssh2	2020-06-01 17:53:37

Recently Reported IPs

234.20.144.114	216.189.50.156	69.241.240.121	205.103.132.122
37.221.211.98	175.60.122.141	153.6.4.252	120.80.233.152
195.246.249.65	127.57.240.254	174.107.240.254	2.191.130.211
40.55.129.243	78.178.71.48	218.26.3.219	127.133.5.0
248.64.120.209	134.69.84.127	213.203.143.209	238.54.151.172