196.207.172.134

Basic Info

City: unknown

Region: unknown

Country: Kenya

Internet Service Provider: Wananchi Group Kenya

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspambots	SSH login attempts.	2020-03-27 22:22:05

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 196.207.172.134
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 41189
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;196.207.172.134.		IN	A

;; AUTHORITY SECTION:
.			370	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020032700 1800 900 604800 86400

;; Query time: 101 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Mar 27 22:21:57 CST 2020
;; MSG SIZE  rcvd: 119

Host info

Host 134.172.207.196.in-addr.arpa not found: 2(SERVFAIL)

Nslookup info:

;; Got SERVFAIL reply from 100.100.2.138, trying next server
;; Got SERVFAIL reply from 100.100.2.138, trying next server
Server:		100.100.2.136
Address:	100.100.2.136#53

** server can't find 134.172.207.196.in-addr.arpa: SERVFAIL

Related IP info:

Related comments:

IP	Type	Details	Datetime
157.245.180.127	attackspambots	3389BruteforceFW23	2020-01-11 13:47:01
103.101.52.48	attackspambots	SSH Login Bruteforce	2020-01-11 13:38:47
69.55.49.127	attackbots	3389BruteforceFW23	2020-01-11 13:50:19
49.88.112.114	attackspambots	Jan 10 19:47:11 php1 sshd\[31905\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.114 user=root Jan 10 19:47:12 php1 sshd\[31905\]: Failed password for root from 49.88.112.114 port 57596 ssh2 Jan 10 19:48:15 php1 sshd\[31987\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.114 user=root Jan 10 19:48:17 php1 sshd\[31987\]: Failed password for root from 49.88.112.114 port 28050 ssh2 Jan 10 19:48:20 php1 sshd\[31987\]: Failed password for root from 49.88.112.114 port 28050 ssh2	2020-01-11 13:57:07
185.220.101.69	attack	01/11/2020-05:57:38.969454 185.220.101.69 Protocol: 6 ET TOR Known Tor Exit Node Traffic group 34	2020-01-11 14:07:51
197.51.3.207	attackbotsspam	1578718688 - 01/11/2020 05:58:08 Host: 197.51.3.207/197.51.3.207 Port: 445 TCP Blocked	2020-01-11 13:58:20
121.227.1.153	attack	[portscan] Port scan	2020-01-11 13:56:10
212.200.237.122	attackspambots	Spam trapped	2020-01-11 13:34:31
212.244.112.4	attackbotsspam	Automatic report - XMLRPC Attack	2020-01-11 14:00:59
222.186.175.220	attack	Jan 11 06:39:50 sd-53420 sshd\[22249\]: User root from 222.186.175.220 not allowed because none of user's groups are listed in AllowGroups Jan 11 06:39:50 sd-53420 sshd\[22249\]: Failed none for invalid user root from 222.186.175.220 port 5380 ssh2 Jan 11 06:39:50 sd-53420 sshd\[22249\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.220 user=root Jan 11 06:39:52 sd-53420 sshd\[22249\]: Failed password for invalid user root from 222.186.175.220 port 5380 ssh2 Jan 11 06:40:05 sd-53420 sshd\[22249\]: Failed password for invalid user root from 222.186.175.220 port 5380 ssh2 ...	2020-01-11 13:44:00
54.67.64.242	attack	Unauthorized connection attempt detected from IP address 54.67.64.242 to port 8080	2020-01-11 14:00:29
179.124.36.195	attackspambots	Invalid user ftpuser from 179.124.36.195 port 41703	2020-01-11 14:04:10
200.141.223.79	attackbots	Jan 11 05:54:26 MK-Soft-VM7 sshd[5279]: Failed password for root from 200.141.223.79 port 37169 ssh2 ...	2020-01-11 13:45:07
189.51.101.126	attackbots	Automatically reported by fail2ban report script (powermetal_old)	2020-01-11 13:45:25
103.125.155.206	attackbots	Jan 11 05:58:39 grey postfix/smtpd\[9382\]: NOQUEUE: reject: RCPT from unknown\[103.125.155.206\]: 554 5.7.1 Service unavailable\; Client host \[103.125.155.206\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[103.125.155.206\]\; from=\ to=\ proto=ESMTP helo=\<\[103.125.155.206\]\> ...	2020-01-11 13:42:39

Recently Reported IPs

85.101.116.209	197.36.239.206	113.190.44.237	80.211.78.82
42.114.242.102	41.35.2.28	222.252.16.26	181.143.221.68
212.95.137.233	183.83.142.39	152.32.215.76	5.182.39.94
205.178.189.129	202.69.50.63	53.247.60.9	185.210.183.189
106.1.187.108	163.213.209.48	95.213.194.60	152.177.224.190