Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: South Africa

Internet Service Provider: Dimension Data (Pty) Ltd - Optinet

Hostname: unknown

Organization: OPTINET

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackspam
" "
2020-05-31 13:52:40
attackbots
 TCP (SYN) 196.44.202.122:50642 -> port 445, len 44
2020-05-14 19:28:52
attack
Scanning random ports - tries to find possible vulnerable services
2020-02-21 09:08:13
attackbotsspam
Unauthorized connection attempt from IP address 196.44.202.122 on Port 445(SMB)
2019-11-19 23:50:50
attackbotsspam
445/tcp 445/tcp 445/tcp...
[2019-06-11/08-12]12pkt,1pt.(tcp)
2019-08-13 04:46:22
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 196.44.202.122
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 32366
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;196.44.202.122.			IN	A

;; AUTHORITY SECTION:
.			1507	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019041500 1800 900 604800 86400

;; Query time: 0 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Mon Apr 15 21:32:06 +08 2019
;; MSG SIZE  rcvd: 118

Host info
122.202.44.196.in-addr.arpa domain name pointer mail.erpm.co.za.
Nslookup info:
Server:		67.207.67.3
Address:	67.207.67.3#53

Non-authoritative answer:
122.202.44.196.in-addr.arpa	name = mail.erpm.co.za.

Authoritative answers can be found from:

Related IP info:
Related comments:
IP Type Details Datetime
49.75.54.214 attack
5x Failed Password
2020-10-08 13:44:56
106.13.175.126 attackspam
106.13.175.126 (CN/China/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Oct  8 00:51:12 server4 sshd[20211]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.79.24  user=root
Oct  8 00:41:35 server4 sshd[15076]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.175.126  user=root
Oct  8 00:41:38 server4 sshd[15076]: Failed password for root from 106.13.175.126 port 49102 ssh2
Oct  8 00:44:10 server4 sshd[16329]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.211.88.113  user=root
Oct  8 00:44:12 server4 sshd[16329]: Failed password for root from 91.211.88.113 port 40724 ssh2
Oct  8 00:42:15 server4 sshd[15482]: Failed password for root from 51.83.40.227 port 54844 ssh2

IP Addresses Blocked:

139.155.79.24 (CN/China/-)
2020-10-08 13:31:17
121.15.2.178 attack
Oct  8 05:48:09 server sshd[8145]: Failed password for root from 121.15.2.178 port 53570 ssh2
Oct  8 05:50:57 server sshd[8708]: Failed password for root from 121.15.2.178 port 36728 ssh2
Oct  8 05:53:39 server sshd[9289]: Failed password for root from 121.15.2.178 port 48114 ssh2
2020-10-08 13:38:20
111.121.78.79 attackspam
Oct  8 00:24:41 host sshd\[11086\]: Invalid user dnsadrc from 111.121.78.79
Oct  8 00:24:41 host sshd\[11086\]: Failed password for invalid user dnsadrc from 111.121.78.79 port 8595 ssh2
Oct  8 00:25:53 host sshd\[11966\]: Failed password for root from 111.121.78.79 port 7211 ssh2
...
2020-10-08 13:26:00
106.13.231.103 attackbots
Oct  7 20:40:21 localhost sshd[101788]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.231.103  user=root
Oct  7 20:40:23 localhost sshd[101788]: Failed password for root from 106.13.231.103 port 56326 ssh2
Oct  7 20:43:35 localhost sshd[102102]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.231.103  user=root
Oct  7 20:43:37 localhost sshd[102102]: Failed password for root from 106.13.231.103 port 41860 ssh2
Oct  7 20:46:36 localhost sshd[102379]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.231.103  user=root
Oct  7 20:46:38 localhost sshd[102379]: Failed password for root from 106.13.231.103 port 55618 ssh2
...
2020-10-08 13:17:32
159.203.114.189 attack
Hacking
2020-10-08 13:16:36
116.196.72.227 attackbotsspam
$f2bV_matches
2020-10-08 14:00:43
115.74.10.28 attack
 TCP (SYN) 115.74.10.28:27615 -> port 23, len 44
2020-10-08 14:05:27
5.39.88.60 attackspam
2020-10-08T10:41:32.684043billing sshd[14409]: Failed password for root from 5.39.88.60 port 49656 ssh2
2020-10-08T10:45:02.238205billing sshd[22310]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns3033121.ip-5-39-88.eu  user=root
2020-10-08T10:45:04.289417billing sshd[22310]: Failed password for root from 5.39.88.60 port 56732 ssh2
...
2020-10-08 13:48:19
13.85.27.116 attackspambots
Oct  7 23:52:52 cdc sshd[31628]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.85.27.116  user=root
Oct  7 23:52:55 cdc sshd[31628]: Failed password for invalid user root from 13.85.27.116 port 32774 ssh2
2020-10-08 13:50:01
183.82.122.109 attackspambots
Unauthorized connection attempt from IP address 183.82.122.109 on Port 445(SMB)
2020-10-08 13:50:48
200.245.206.82 attackspam
Unauthorized connection attempt from IP address 200.245.206.82 on Port 445(SMB)
2020-10-08 13:21:19
34.93.0.165 attackbotsspam
SSH Invalid Login
2020-10-08 13:28:58
60.167.177.172 attackbotsspam
Oct  7 16:34:22 lanister sshd[21890]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.167.177.172  user=root
Oct  7 16:34:24 lanister sshd[21890]: Failed password for root from 60.167.177.172 port 36250 ssh2
Oct  7 16:46:32 lanister sshd[22095]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.167.177.172  user=root
Oct  7 16:46:35 lanister sshd[22095]: Failed password for root from 60.167.177.172 port 42776 ssh2
2020-10-08 13:18:44
156.251.125.148 attackbots
$f2bV_matches
2020-10-08 13:43:02

Recently Reported IPs

88.67.81.180 134.209.193.198 113.170.149.186 51.79.130.153
89.248.168.219 150.246.85.185 191.193.64.34 190.104.214.188
213.82.114.206 185.126.202.222 37.198.155.108 210.245.8.110
104.203.169.111 113.110.164.46 211.72.92.124 85.206.22.33
103.86.195.230 79.134.211.250 217.165.66.85 188.19.140.75