Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Nigeria

Internet Service Provider: Ahmadu Bello University Zaria Nigeria

Hostname: unknown

Organization: unknown

Usage Type: University/College/School

Comments:
Type Details Datetime
attack
$f2bV_matches
2020-08-24 18:21:27
attackspam
$f2bV_matches
2020-07-17 19:32:42
attack
$f2bV_matches
2020-07-12 01:02:34
attackbots
Jun  9 08:37:54 ns382633 sshd\[16394\]: Invalid user eng from 196.220.67.2 port 37915
Jun  9 08:37:54 ns382633 sshd\[16394\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.220.67.2
Jun  9 08:37:56 ns382633 sshd\[16394\]: Failed password for invalid user eng from 196.220.67.2 port 37915 ssh2
Jun  9 08:49:20 ns382633 sshd\[18477\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.220.67.2  user=root
Jun  9 08:49:22 ns382633 sshd\[18477\]: Failed password for root from 196.220.67.2 port 38581 ssh2
2020-06-09 15:02:43
attackbots
<6 unauthorized SSH connections
2020-06-03 16:05:54
attack
SSH Brute Force
2020-04-23 18:18:05
attack
Invalid user john from 196.220.67.2 port 52517
2020-04-17 14:19:15
attack
Apr 13 07:36:01 host01 sshd[18787]: Failed password for root from 196.220.67.2 port 34852 ssh2
Apr 13 07:41:15 host01 sshd[19849]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.220.67.2 
Apr 13 07:41:17 host01 sshd[19849]: Failed password for invalid user sprocket from 196.220.67.2 port 59991 ssh2
...
2020-04-13 13:43:27
attackspam
Apr 12 22:41:39 ks10 sshd[4063243]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.220.67.2 
Apr 12 22:41:41 ks10 sshd[4063243]: Failed password for invalid user lian from 196.220.67.2 port 55580 ssh2
...
2020-04-13 04:59:10
attackbotsspam
(sshd) Failed SSH login from 196.220.67.2 (NG/Nigeria/-): 5 in the last 3600 secs
2020-03-28 14:38:25
attackbots
Mar 12 08:52:51 ns41 sshd[30479]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.220.67.2
2020-03-12 17:01:39
attack
Mar 11 03:40:23 sd-53420 sshd\[12469\]: User root from 196.220.67.2 not allowed because none of user's groups are listed in AllowGroups
Mar 11 03:40:23 sd-53420 sshd\[12469\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.220.67.2  user=root
Mar 11 03:40:25 sd-53420 sshd\[12469\]: Failed password for invalid user root from 196.220.67.2 port 60855 ssh2
Mar 11 03:46:20 sd-53420 sshd\[13170\]: User root from 196.220.67.2 not allowed because none of user's groups are listed in AllowGroups
Mar 11 03:46:20 sd-53420 sshd\[13170\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.220.67.2  user=root
...
2020-03-11 16:17:21
attackspambots
Feb 25 01:09:10 zeus sshd[4123]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.220.67.2 
Feb 25 01:09:12 zeus sshd[4123]: Failed password for invalid user email from 196.220.67.2 port 58852 ssh2
Feb 25 01:15:21 zeus sshd[4272]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.220.67.2 
Feb 25 01:15:23 zeus sshd[4272]: Failed password for invalid user magda from 196.220.67.2 port 59646 ssh2
2020-02-25 09:29:44
attackspam
Feb 18 14:54:42 legacy sshd[15882]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.220.67.2
Feb 18 14:54:44 legacy sshd[15882]: Failed password for invalid user phrae from 196.220.67.2 port 40441 ssh2
Feb 18 14:58:41 legacy sshd[16084]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.220.67.2
...
2020-02-18 22:00:54
attackspambots
Unauthorized connection attempt detected from IP address 196.220.67.2 to port 2220 [J]
2020-01-16 03:22:16
attackbotsspam
Jan  8 06:16:51 localhost sshd\[18944\]: Invalid user bot from 196.220.67.2 port 43726
Jan  8 06:16:51 localhost sshd\[18944\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.220.67.2
Jan  8 06:16:53 localhost sshd\[18944\]: Failed password for invalid user bot from 196.220.67.2 port 43726 ssh2
2020-01-08 13:39:50
attackbotsspam
Jan  1 18:56:26 web9 sshd\[23311\]: Invalid user cepeda from 196.220.67.2
Jan  1 18:56:26 web9 sshd\[23311\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.220.67.2
Jan  1 18:56:28 web9 sshd\[23311\]: Failed password for invalid user cepeda from 196.220.67.2 port 52999 ssh2
Jan  1 18:59:17 web9 sshd\[23731\]: Invalid user harizan from 196.220.67.2
Jan  1 18:59:17 web9 sshd\[23731\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.220.67.2
2020-01-02 13:20:08
attack
"SSH brute force auth login attempt."
2019-12-25 04:50:24
attackspambots
Aug 18 08:02:00 mail sshd\[32051\]: Invalid user 777 from 196.220.67.2 port 48485
Aug 18 08:02:00 mail sshd\[32051\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.220.67.2
...
2019-08-18 20:00:49
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 196.220.67.2
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 25132
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;196.220.67.2.			IN	A

;; AUTHORITY SECTION:
.			2647	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019052701 1800 900 604800 86400

;; Query time: 0 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Tue May 28 10:27:21 CST 2019
;; MSG SIZE  rcvd: 116

Host info
Host 2.67.220.196.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 2.67.220.196.in-addr.arpa: NXDOMAIN

Related IP info:
Related comments:
IP Type Details Datetime
113.200.156.180 attackspambots
Invalid user mongodb from 113.200.156.180 port 43278
2020-08-22 18:30:57
157.7.233.185 attackbotsspam
Aug 22 12:36:59 electroncash sshd[64550]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.7.233.185 
Aug 22 12:36:59 electroncash sshd[64550]: Invalid user demo from 157.7.233.185 port 48655
Aug 22 12:37:01 electroncash sshd[64550]: Failed password for invalid user demo from 157.7.233.185 port 48655 ssh2
Aug 22 12:41:33 electroncash sshd[512]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.7.233.185  user=lp
Aug 22 12:41:35 electroncash sshd[512]: Failed password for lp from 157.7.233.185 port 49567 ssh2
...
2020-08-22 18:45:34
190.79.66.24 attackspambots
Attempted connection to port 445.
2020-08-22 18:15:26
14.143.131.186 attackbotsspam
Attempted connection to port 445.
2020-08-22 18:20:44
189.187.240.157 attack
1598068049 - 08/22/2020 05:47:29 Host: 189.187.240.157/189.187.240.157 Port: 445 TCP Blocked
2020-08-22 18:36:17
85.105.212.240 attackspambots
Attempted connection to port 23.
2020-08-22 18:10:50
82.196.9.161 attack
Aug 22 15:38:26 dhoomketu sshd[2571106]: Invalid user steam from 82.196.9.161 port 46288
Aug 22 15:38:26 dhoomketu sshd[2571106]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.196.9.161 
Aug 22 15:38:26 dhoomketu sshd[2571106]: Invalid user steam from 82.196.9.161 port 46288
Aug 22 15:38:28 dhoomketu sshd[2571106]: Failed password for invalid user steam from 82.196.9.161 port 46288 ssh2
Aug 22 15:43:01 dhoomketu sshd[2571248]: Invalid user project from 82.196.9.161 port 56808
...
2020-08-22 18:33:57
80.83.21.61 attack
Attempting to access Wordpress login on a honeypot or private system.
2020-08-22 18:20:27
114.104.134.120 attack
Aug 22 07:36:34 srv01 postfix/smtpd\[25642\]: warning: unknown\[114.104.134.120\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug 22 07:46:53 srv01 postfix/smtpd\[5708\]: warning: unknown\[114.104.134.120\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug 22 07:47:05 srv01 postfix/smtpd\[5708\]: warning: unknown\[114.104.134.120\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug 22 07:47:21 srv01 postfix/smtpd\[5708\]: warning: unknown\[114.104.134.120\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug 22 07:47:41 srv01 postfix/smtpd\[5708\]: warning: unknown\[114.104.134.120\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...
2020-08-22 18:21:22
187.149.60.166 attackbots
2020-08-22T11:20:19.837672ns386461 sshd\[9999\]: Invalid user support from 187.149.60.166 port 50664
2020-08-22T11:20:19.842274ns386461 sshd\[9999\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.149.60.166
2020-08-22T11:20:21.810538ns386461 sshd\[9999\]: Failed password for invalid user support from 187.149.60.166 port 50664 ssh2
2020-08-22T11:25:28.943132ns386461 sshd\[15066\]: Invalid user test from 187.149.60.166 port 39882
2020-08-22T11:25:28.948333ns386461 sshd\[15066\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.149.60.166
...
2020-08-22 18:25:10
36.80.184.58 attackbotsspam
1598068042 - 08/22/2020 05:47:22 Host: 36.80.184.58/36.80.184.58 Port: 445 TCP Blocked
2020-08-22 18:43:33
36.49.158.214 attack
Cluster member 67.227.229.95 (US/United States/host.cjthedj97.me) said, DENY 36.49.158.214, Reason:[(sshd) Failed SSH login from 36.49.158.214 (CN/China/-): 1 in the last 3600 secs]; Ports: *; Direction: inout; Trigger: LF_CLUSTER
2020-08-22 18:18:43
211.198.228.71 attackbots
Attempted connection to port 23.
2020-08-22 18:12:48
109.75.37.116 attackbots
Attempted connection to port 38213.
2020-08-22 18:22:03
115.236.43.212 attack
Attempted connection to port 1433.
2020-08-22 18:20:05

Recently Reported IPs

213.232.105.130 29.78.237.225 2001:41d0:a:4d90:: 81.242.6.36
91.217.4.74 66.240.130.242 212.19.8.179 61.212.118.131
208.241.11.53 118.127.10.152 167.129.63.74 29.185.3.172
96.16.203.230 99.244.152.132 241.42.30.4 33.163.101.200
236.237.80.119 132.240.114.32 193.0.204.73 154.5.41.26