196.202.12.238

Basic Info

City: unknown

Region: unknown

Country: Egypt

Internet Service Provider: TE Data

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbots	Honeypot attack, port: 81, PTR: host-196.202.12.238-static.tedata.net.	2020-01-15 15:11:52
attackspambots	Telnet/23 MH Probe, BF, Hack -	2019-12-07 02:07:26

Comments on same subnet:

IP	Type	Details	Datetime
196.202.124.18	attackbotsspam	IP 196.202.124.18 attacked honeypot on port: 1433 at 6/14/2020 4:52:59 AM	2020-06-14 14:42:15
196.202.124.18	attack	Honeypot attack, port: 445, PTR: host-196.202.124.18-static.tedata.net.	2020-06-04 06:56:17
196.202.121.194	attack	Honeypot attack, port: 445, PTR: host-196.202.121.194-static.tedata.net.	2020-05-05 13:42:40
196.202.121.194	attackbotsspam	Unauthorized connection attempt from IP address 196.202.121.194 on Port 445(SMB)	2020-03-26 02:37:03
196.202.121.194	attackbotsspam	Unauthorized connection attempt from IP address 196.202.121.194 on Port 445(SMB)	2020-03-23 04:53:28
196.202.121.194	attack	Honeypot attack, port: 445, PTR: host-196.202.121.194-static.tedata.net.	2020-03-05 04:39:59
196.202.121.18	attackspam	Automatic report - Port Scan Attack	2020-02-09 01:50:53
196.202.121.194	attack	Honeypot attack, port: 445, PTR: host-196.202.121.194-static.tedata.net.	2020-01-15 14:48:00
196.202.127.190	attackbots	Scanning random ports - tries to find possible vulnerable services	2020-01-04 17:10:23
196.202.127.190	attackspam	Automatic report - Port Scan Attack	2019-12-26 17:35:53
196.202.120.18	attackbots	3389BruteforceFW21	2019-11-27 01:24:26
196.202.124.206	attack	Time: Sun Aug 18 08:59:36 2019 -0400 IP: 196.202.124.206 (EG/Egypt/host-196.202.124.206-static.tedata.net) Failures: 10 (ftpd) Interval: 3600 seconds Blocked: Permanent Block	2019-08-19 03:02:03
196.202.12.114	attackspambots	445/tcp 445/tcp [2019-07-08/15]2pkt	2019-07-16 08:31:13
196.202.12.114	attackspambots	445/tcp [2019-07-08]1pkt	2019-07-09 05:04:37

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 196.202.12.238
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49542
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;196.202.12.238.			IN	A

;; AUTHORITY SECTION:
.			373	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019120600 1800 900 604800 86400

;; Query time: 71 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Dec 07 02:07:22 CST 2019
;; MSG SIZE  rcvd: 118

Host info

238.12.202.196.in-addr.arpa domain name pointer host-196.202.12.238-static.tedata.net.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
238.12.202.196.in-addr.arpa	name = host-196.202.12.238-static.tedata.net.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
165.22.6.195	attackspambots	Sep 6 04:29:52 php1 sshd\[5670\]: Invalid user amsftp from 165.22.6.195 Sep 6 04:29:52 php1 sshd\[5670\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.6.195 Sep 6 04:29:54 php1 sshd\[5670\]: Failed password for invalid user amsftp from 165.22.6.195 port 56394 ssh2 Sep 6 04:34:15 php1 sshd\[6030\]: Invalid user mc from 165.22.6.195 Sep 6 04:34:15 php1 sshd\[6030\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.6.195	2019-09-07 07:53:28
111.38.26.108	attack	Telnet Server BruteForce Attack	2019-09-07 08:09:44
114.215.142.49	attackbotsspam	Unauthorized access to web resources	2019-09-07 08:02:43
213.8.116.86	attackbotsspam	Automatic report - Port Scan Attack	2019-09-07 08:38:36
146.196.63.178	attackbotsspam	namecheap spam	2019-09-07 07:54:13
71.66.168.146	attackbotsspam	2019-09-06T23:03:00.910262abusebot-5.cloudsearch.cf sshd\[10887\]: Invalid user admin from 71.66.168.146 port 62877	2019-09-07 08:12:49
167.71.209.74	attackbots	Sep 6 14:00:08 ny01 sshd[5330]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.209.74 Sep 6 14:00:10 ny01 sshd[5330]: Failed password for invalid user 1234 from 167.71.209.74 port 46432 ssh2 Sep 6 14:07:01 ny01 sshd[6502]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.209.74	2019-09-07 08:09:02
189.223.203.245	attackspam	Telnet Server BruteForce Attack	2019-09-07 08:00:16
213.135.154.232	attack	Sep 6 08:51:15 mailman postfix/smtpd[13240]: NOQUEUE: reject: RCPT from unknown[213.135.154.232]: 554 5.7.1 Service unavailable; Client host [213.135.154.232] blocked using sbl-xbl.spamhaus.org; https://www.spamhaus.org/query/ip/213.135.154.232 / https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo=<[213.135.154.232]> Sep 6 08:59:28 mailman postfix/smtpd[13406]: NOQUEUE: reject: RCPT from unknown[213.135.154.232]: 554 5.7.1 Service unavailable; Client host [213.135.154.232] blocked using sbl-xbl.spamhaus.org; https://www.spamhaus.org/query/ip/213.135.154.232 / https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo=<[213.135.154.232]>	2019-09-07 08:14:36
94.134.94.129	attackspambots	Web App Attack	2019-09-07 07:58:55
139.59.155.91	attackspam	Chat Spam	2019-09-07 08:42:07
82.61.105.92	attackbotsspam	DATE:2019-09-06 15:59:22, IP:82.61.105.92, PORT:telnet - Telnet brute force auth on a honeypot server (epe-dc)	2019-09-07 08:20:18
181.174.112.18	attackbots	Sep 6 21:42:24 vps691689 sshd[23736]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.174.112.18 Sep 6 21:42:26 vps691689 sshd[23736]: Failed password for invalid user password123 from 181.174.112.18 port 54404 ssh2 ...	2019-09-07 07:59:30
110.49.70.249	attackbots	18 failed attempt(s) in the last 24h	2019-09-07 08:12:01
45.55.131.104	attackbots	Sep 6 21:01:33 microserver sshd[18216]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.131.104 user=root Sep 6 21:01:36 microserver sshd[18216]: Failed password for root from 45.55.131.104 port 34665 ssh2 Sep 6 21:06:15 microserver sshd[18847]: Invalid user 83 from 45.55.131.104 port 59086 Sep 6 21:06:15 microserver sshd[18847]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.131.104 Sep 6 21:06:17 microserver sshd[18847]: Failed password for invalid user 83 from 45.55.131.104 port 59086 ssh2 Sep 6 21:20:01 microserver sshd[20349]: Invalid user test@123 from 45.55.131.104 port 47321 Sep 6 21:20:01 microserver sshd[20349]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.131.104 Sep 6 21:20:03 microserver sshd[20349]: Failed password for invalid user test@123 from 45.55.131.104 port 47321 ssh2 Sep 6 21:24:37 microserver sshd[20967]: Invalid user password from 45.55	2019-09-07 08:07:06

Recently Reported IPs

1.1.236.131	140.143.206.106	152.12.155.184	64.75.65.210
137.84.156.245	166.94.116.112	114.181.65.6	175.144.100.145
123.119.0.136	117.50.119.210	54.186.206.250	73.46.86.134
68.188.242.23	100.183.73.201	51.11.32.88	37.137.13.178
121.219.94.195	86.140.124.29	220.14.75.188	221.23.205.62