Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: South Africa

Internet Service Provider: Dimension Data (Pty) Ltd - Optinet

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackbots
Automatic report - Port Scan Attack
2020-08-20 06:06:32
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 197.89.71.49
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 53209
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;197.89.71.49.			IN	A

;; AUTHORITY SECTION:
.			170	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020081902 1800 900 604800 86400

;; Query time: 110 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Aug 20 06:06:28 CST 2020
;; MSG SIZE  rcvd: 116
Host info
49.71.89.197.in-addr.arpa domain name pointer 197-89-71-49.dsl.mweb.co.za.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
49.71.89.197.in-addr.arpa	name = 197-89-71-49.dsl.mweb.co.za.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
163.179.54.170 attackspambots
ICMP MH Probe, Scan /Distributed -
2020-02-07 23:29:39
125.164.218.211 attackspam
Feb  7 15:09:16 odroid64 sshd\[20660\]: User ftp from 125.164.218.211 not allowed because not listed in AllowUsers
Feb  7 15:09:16 odroid64 sshd\[20660\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.164.218.211  user=ftp
...
2020-02-07 22:50:44
1.0.146.254 attackbots
$f2bV_matches
2020-02-07 23:00:17
188.93.242.20 attackbots
Feb  7 17:09:55 lukav-desktop sshd\[23527\]: Invalid user zcr from 188.93.242.20
Feb  7 17:09:55 lukav-desktop sshd\[23527\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.93.242.20
Feb  7 17:09:57 lukav-desktop sshd\[23527\]: Failed password for invalid user zcr from 188.93.242.20 port 56940 ssh2
Feb  7 17:13:27 lukav-desktop sshd\[5629\]: Invalid user vsk from 188.93.242.20
Feb  7 17:13:27 lukav-desktop sshd\[5629\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.93.242.20
2020-02-07 23:13:35
165.22.61.82 attackspambots
fraudulent SSH attempt
2020-02-07 23:32:47
181.49.50.126 attackbots
Honeypot attack, port: 445, PTR: PTR record not found
2020-02-07 23:35:38
163.179.54.199 attackspam
ICMP MH Probe, Scan /Distributed -
2020-02-07 23:25:07
83.5.189.51 attackbots
Feb  5 22:12:27 pl3server sshd[1538]: Invalid user ugr from 83.5.189.51
Feb  5 22:12:27 pl3server sshd[1538]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=83.5.189.51.ipv4.supernova.orange.pl
Feb  5 22:12:29 pl3server sshd[1538]: Failed password for invalid user ugr from 83.5.189.51 port 53929 ssh2
Feb  5 22:12:29 pl3server sshd[1538]: Received disconnect from 83.5.189.51: 11: Bye Bye [preauth]
Feb  5 22:27:50 pl3server sshd[14146]: Invalid user myh from 83.5.189.51
Feb  5 22:27:50 pl3server sshd[14146]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=83.5.189.51.ipv4.supernova.orange.pl
Feb  5 22:27:51 pl3server sshd[14146]: Failed password for invalid user myh from 83.5.189.51 port 34603 ssh2
Feb  5 22:27:51 pl3server sshd[14146]: Received disconnect from 83.5.189.51: 11: Bye Bye [preauth]
Feb  5 22:32:41 pl3server sshd[18723]: Invalid user fmi from 83.5.189.51
Feb  5 22:32:41 pl3server........
-------------------------------
2020-02-07 23:34:51
222.186.30.35 attackspam
Feb  7 15:32:10 freya sshd[6865]: Disconnected from authenticating user root 222.186.30.35 port 25147 [preauth]
...
2020-02-07 22:52:44
169.47.140.23 attackbotsspam
ICMP MH Probe, Scan /Distributed -
2020-02-07 23:13:52
1.162.144.51 attackbotsspam
MultiHost/MultiPort Probe, Scan, Hack -
2020-02-07 22:51:46
117.99.111.21 attackbotsspam
07.02.2020 14:53:44 SSH access blocked by firewall
2020-02-07 23:25:28
190.85.93.210 attackspam
Honeypot attack, port: 445, PTR: PTR record not found
2020-02-07 23:17:26
202.46.29.28 attackbotsspam
Honeypot attack, port: 445, PTR: PTR record not found
2020-02-07 22:54:26
1.162.144.20 attackspambots
MultiHost/MultiPort Probe, Scan, Hack -
2020-02-07 23:09:41

Recently Reported IPs

113.140.207.186 34.74.227.16 156.96.61.106 74.65.55.194
109.103.178.85 205.209.166.108 212.58.121.187 74.74.152.74
105.184.84.57 73.229.90.45 74.82.195.39 45.251.35.131
89.203.137.89 173.29.101.42 164.17.182.157 185.250.47.43
42.84.169.206 204.111.209.66 88.227.145.29 91.209.168.207