197.39.104.54 - IPInfo

Basic Info

City: Mallawi

Region: Minya

Country: Egypt

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
197.39.104.74	attack	Unauthorized connection attempt detected from IP address 197.39.104.74 to port 23 [J]	2020-01-07 14:04:00

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 197.39.104.54
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 56737
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;197.39.104.54.			IN	A

;; AUTHORITY SECTION:
.			164	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022031700 1800 900 604800 86400

;; Query time: 60 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Mar 17 19:34:17 CST 2022
;; MSG SIZE  rcvd: 106

Host info

54.104.39.197.in-addr.arpa domain name pointer host-197.39.104.54.tedata.net.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
54.104.39.197.in-addr.arpa	name = host-197.39.104.54.tedata.net.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
137.74.173.182	attack	2019-12-18T03:52:40.646595suse-nuc sshd[2353]: Invalid user nectar from 137.74.173.182 port 32968 ...	2020-02-25 12:09:04
140.143.189.177	attackspambots	$f2bV_matches	2020-02-25 12:00:38
122.175.42.19	attackspambots	Honeypot attack, port: 445, PTR: abts-ap-static-019.42.175.122.airtelbroadband.in.	2020-02-25 12:29:35
178.62.251.130	attack	FTP Brute-Force reported by Fail2Ban	2020-02-25 12:20:25
46.219.3.139	attackbotsspam	Feb 25 02:43:56 vps647732 sshd[25399]: Failed password for nobody from 46.219.3.139 port 46862 ssh2 ...	2020-02-25 12:08:11
223.17.28.200	attackbots	Honeypot attack, port: 5555, PTR: 200-28-17-223-on-nets.com.	2020-02-25 12:09:33
220.90.5.73	attackbots	Honeypot attack, port: 81, PTR: PTR record not found	2020-02-25 12:17:37
45.64.1.183	attack	45.64.1.183 - - \[25/Feb/2020:00:20:51 +0100\] "POST /wp-login.php HTTP/1.0" 200 7427 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0" 45.64.1.183 - - \[25/Feb/2020:00:20:54 +0100\] "POST /wp-login.php HTTP/1.0" 200 7242 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0" 45.64.1.183 - - \[25/Feb/2020:00:20:56 +0100\] "POST /wp-login.php HTTP/1.0" 200 7239 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0"	2020-02-25 12:27:40
112.80.26.82	attack	fail2ban	2020-02-25 11:56:19
186.10.172.71	attackbotsspam	Unauthorized connection attempt detected from IP address 186.10.172.71 to port 5555 [J]	2020-02-25 12:13:43
138.0.60.6	attackspambots	Feb 25 03:22:40 * sshd[14366]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.0.60.6 Feb 25 03:22:43 * sshd[14366]: Failed password for invalid user yuchen from 138.0.60.6 port 57466 ssh2	2020-02-25 11:59:28
113.200.60.74	attackspam	2020-02-17T18:09:24.103953suse-nuc sshd[3811]: Invalid user newuser from 113.200.60.74 port 55689 ...	2020-02-25 12:02:12
77.247.110.39	attackspambots	[2020-02-24 18:21:08] NOTICE[1148] chan_sip.c: Registration from '"9999" ' failed for '77.247.110.39:5986' - Wrong password [2020-02-24 18:21:08] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-02-24T18:21:08.820-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="9999",SessionID="0x7fd82cb725a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.110.39/5986",Challenge="226060e1",ReceivedChallenge="226060e1",ReceivedHash="06e7714117c3c41a87d34bc4a17f5921" [2020-02-24 18:21:08] NOTICE[1148] chan_sip.c: Registration from '"9999" ' failed for '77.247.110.39:5986' - Wrong password [2020-02-24 18:21:08] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-02-24T18:21:08.923-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="9999",SessionID="0x7fd82c80d368",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77 ...	2020-02-25 12:16:24
170.84.183.34	attackbots	suspicious action Mon, 24 Feb 2020 20:21:06 -0300	2020-02-25 12:19:39
222.124.169.179	attack	RDP Scan	2020-02-25 12:30:16

Recently Reported IPs

195.200.221.168	18.60.188.189	185.245.131.218	228.86.102.108
212.243.100.48	168.184.43.142	162.158.129.146	53.11.242.183
138.7.62.220	209.186.164.109	206.29.210.45	17.192.55.182
31.60.78.19	220.90.103.251	41.11.145.183	183.63.253.125
1.15.174.131	52.224.200.129	211.147.6.3	183.102.124.129