200.115.25.141

Basic Info

City: Concepción del Uruguay

Region: Entre Rios

Country: Argentina

Internet Service Provider: Internet Services S.A.

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspambots	Oct 12 05:33:21 Ubuntu-1404-trusty-64-minimal sshd\[28204\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.115.25.141 user=root Oct 12 05:33:23 Ubuntu-1404-trusty-64-minimal sshd\[28204\]: Failed password for root from 200.115.25.141 port 47980 ssh2 Oct 12 05:47:15 Ubuntu-1404-trusty-64-minimal sshd\[860\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.115.25.141 user=root Oct 12 05:47:18 Ubuntu-1404-trusty-64-minimal sshd\[860\]: Failed password for root from 200.115.25.141 port 58050 ssh2 Oct 12 05:51:46 Ubuntu-1404-trusty-64-minimal sshd\[3074\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.115.25.141 user=root	2020-10-12 12:02:15

Type

Details

Datetime

attackspambots

Oct 12 05:33:21 Ubuntu-1404-trusty-64-minimal sshd\[28204\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.115.25.141  user=root
Oct 12 05:33:23 Ubuntu-1404-trusty-64-minimal sshd\[28204\]: Failed password for root from 200.115.25.141 port 47980 ssh2
Oct 12 05:47:15 Ubuntu-1404-trusty-64-minimal sshd\[860\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.115.25.141  user=root
Oct 12 05:47:18 Ubuntu-1404-trusty-64-minimal sshd\[860\]: Failed password for root from 200.115.25.141 port 58050 ssh2
Oct 12 05:51:46 Ubuntu-1404-trusty-64-minimal sshd\[3074\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.115.25.141  user=root

2020-10-12 12:02:15

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 200.115.25.141
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 19585
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;200.115.25.141.			IN	A

;; AUTHORITY SECTION:
.			191	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020101101 1800 900 604800 86400

;; Query time: 18 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Oct 12 12:02:08 CST 2020
;; MSG SIZE  rcvd: 118

Host info

141.25.115.200.in-addr.arpa domain name pointer cdelu141.is.net.ar.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
141.25.115.200.in-addr.arpa	name = cdelu141.is.net.ar.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
211.80.102.187	attackspam	bruteforce detected	2020-08-22 18:05:08
103.242.56.182	attackbotsspam	Aug 22 02:37:44 ny01 sshd[8184]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.242.56.182 Aug 22 02:37:46 ny01 sshd[8184]: Failed password for invalid user mes from 103.242.56.182 port 51762 ssh2 Aug 22 02:40:35 ny01 sshd[8622]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.242.56.182	2020-08-22 17:52:33
162.243.128.133	attackbotsspam	" "	2020-08-22 17:56:38
2.180.17.1	attackbots	Attempted connection to port 23.	2020-08-22 18:14:24
132.232.108.149	attack	Aug 22 05:58:36 mail sshd\[60130\]: Invalid user testuser from 132.232.108.149 Aug 22 05:58:36 mail sshd\[60130\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.108.149 ...	2020-08-22 18:08:06
45.176.40.169	attackspam	Attempted connection to port 23.	2020-08-22 18:11:03
110.225.82.70	attack	2020-08-21 22:34:16.762770-0500 localhost smtpd[59946]: NOQUEUE: reject: RCPT from unknown[110.225.82.70]: 554 5.7.1 Service unavailable; Client host [110.225.82.70] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS / https://www.spamhaus.org/query/ip/110.225.82.70; from= to= proto=ESMTP helo=<[110.225.82.70]>	2020-08-22 18:00:51
80.65.96.115	attackspam	80.65.96.115 - - [22/Aug/2020:10:47:39 +0200] "POST /wp-login.php HTTP/1.0" 200 4748 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-08-22 17:36:15
218.173.154.15	attackspambots	23/tcp 37215/tcp [2020-08-21/22]2pkt	2020-08-22 18:11:23
185.202.2.42	attackbotsspam	1598068096 - 08/22/2020 10:48:16 Host: 185.202.2.42/185.202.2.42 Port: 3000 TCP Blocked ...	2020-08-22 17:52:09
185.234.218.68	attackspam	2020-08-22T02:57:14.632234linuxbox-skyline auth[46706]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=tech-support rhost=185.234.218.68 ...	2020-08-22 17:47:01
66.45.251.154	attackbots	failed root login	2020-08-22 17:47:17
89.212.227.136	attackspam	Attempted connection to port 8080.	2020-08-22 18:08:57
187.190.182.191	attackspam	2020-08-21 22:36:17.529706-0500 localhost smtpd[59946]: NOQUEUE: reject: RCPT from fixed-187-190-182-191.totalplay.net[187.190.182.191]: 554 5.7.1 Service unavailable; Client host [187.190.182.191] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/187.190.182.191; from= to= proto=ESMTP helo=	2020-08-22 17:59:44
132.232.66.238	attackbots	Aug 22 10:43:25 abendstille sshd\[11927\]: Invalid user faisal from 132.232.66.238 Aug 22 10:43:25 abendstille sshd\[11927\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.66.238 Aug 22 10:43:27 abendstille sshd\[11927\]: Failed password for invalid user faisal from 132.232.66.238 port 50192 ssh2 Aug 22 10:46:04 abendstille sshd\[16203\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.66.238 user=root Aug 22 10:46:06 abendstille sshd\[16203\]: Failed password for root from 132.232.66.238 port 49652 ssh2 ...	2020-08-22 17:39:28

Recently Reported IPs

95.24.24.101	34.77.93.233	128.199.66.19	51.211.168.47
23.233.30.150	180.177.24.153	134.175.218.239	72.129.173.2
42.118.1.184	156.217.185.128	119.45.223.42	119.28.90.103
96.240.21.77	36.94.169.115	47.30.141.9	37.133.49.231
197.40.82.197	123.157.112.208	172.96.172.2	158.69.76.108