41.162.104.98 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: South Africa

Internet Service Provider: Liquid Telecommunications South Africa (Pty) Ltd

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspam	1576990531 - 12/22/2019 05:55:31 Host: 41.162.104.98/41.162.104.98 Port: 445 TCP Blocked	2019-12-22 13:11:20
attackbots	Unauthorized connection attempt from IP address 41.162.104.98 on Port 445(SMB)	2019-09-24 03:25:40
attack	445/tcp 445/tcp 445/tcp [2019-07-06/11]3pkt	2019-07-11 15:58:54

Type

Details

Datetime

attackspam

1576990531 - 12/22/2019 05:55:31 Host: 41.162.104.98/41.162.104.98 Port: 445 TCP Blocked

2019-12-22 13:11:20

attackbots

Unauthorized connection attempt from IP address 41.162.104.98 on Port 445(SMB)

2019-09-24 03:25:40

attack

445/tcp 445/tcp 445/tcp
[2019-07-06/11]3pkt

2019-07-11 15:58:54

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 41.162.104.98
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11995
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;41.162.104.98.			IN	A

;; AUTHORITY SECTION:
.			2124	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019071002 1800 900 604800 86400

;; Query time: 1 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Thu Jul 11 15:58:48 CST 2019
;; MSG SIZE  rcvd: 117

Host info

Host 98.104.162.41.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 98.104.162.41.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
103.61.102.73	attack	Invalid user test from 103.61.102.73 port 60430	2020-08-30 04:14:49
174.138.37.229	attack	xmlrpc attack	2020-08-30 04:23:59
223.242.229.176	attackspambots	Aug 29 15:02:47 elektron postfix/smtpd\[20762\]: NOQUEUE: reject: RCPT from unknown\[223.242.229.176\]: 450 4.7.1 Client host rejected: cannot find your hostname, \[223.242.229.176\]\; from=\ to=\ proto=ESMTP helo=\ Aug 29 15:03:43 elektron postfix/smtpd\[20762\]: NOQUEUE: reject: RCPT from unknown\[223.242.229.176\]: 450 4.7.1 Client host rejected: cannot find your hostname, \[223.242.229.176\]\; from=\ to=\ proto=ESMTP helo=\ Aug 29 15:04:51 elektron postfix/smtpd\[20762\]: NOQUEUE: reject: RCPT from unknown\[223.242.229.176\]: 450 4.7.1 Client host rejected: cannot find your hostname, \[223.242.229.176\]\; from=\ to=\ proto=ESMTP helo=\ Aug 29 15:05:54 elektron postfix/smtpd\[20762\]: NOQUEUE: reject: RCPT from unknown\[223.242.229.176\]: 450 4.7.1 Client host rejected: cannot find your hostname, \[223.242.229.176\]\; from=\ to=\ proto=ESMT	2020-08-30 04:23:41
192.144.216.70	attackspam	Aug 29 09:56:52 vps46666688 sshd[13827]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.144.216.70 Aug 29 09:56:53 vps46666688 sshd[13827]: Failed password for invalid user ts from 192.144.216.70 port 38970 ssh2 ...	2020-08-30 04:17:39
165.22.35.21	attack	165.22.35.21 - - [29/Aug/2020:16:20:02 +0100] "POST /wp-login.php HTTP/1.1" 200 2081 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 165.22.35.21 - - [29/Aug/2020:16:20:04 +0100] "POST /wp-login.php HTTP/1.1" 200 2059 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 165.22.35.21 - - [29/Aug/2020:16:20:05 +0100] "POST /wp-login.php HTTP/1.1" 200 2062 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-08-30 03:57:42
36.112.131.217	attackspam	Unwanted checking 80 or 443 port ...	2020-08-30 04:05:46
97.90.110.160	attack	Too many connections or unauthorized access detected from Arctic banned ip	2020-08-30 04:11:48
49.233.3.177	attackbots	SSH Brute-Forcing (server1)	2020-08-30 04:00:29
180.182.47.132	attackspambots	Banned for a week because repeated abuses, for example SSH, but not only	2020-08-30 04:31:06
102.36.164.141	attackspam	Aug 29 16:15:38 pkdns2 sshd\[37888\]: Invalid user z from 102.36.164.141Aug 29 16:15:39 pkdns2 sshd\[37888\]: Failed password for invalid user z from 102.36.164.141 port 38522 ssh2Aug 29 16:16:48 pkdns2 sshd\[37919\]: Invalid user anthony from 102.36.164.141Aug 29 16:16:50 pkdns2 sshd\[37919\]: Failed password for invalid user anthony from 102.36.164.141 port 53216 ssh2Aug 29 16:18:03 pkdns2 sshd\[37959\]: Failed password for root from 102.36.164.141 port 39680 ssh2Aug 29 16:19:13 pkdns2 sshd\[38028\]: Failed password for root from 102.36.164.141 port 54378 ssh2 ...	2020-08-30 04:21:29
187.144.215.213	attackbots	Invalid user ypf from 187.144.215.213 port 43456	2020-08-30 03:54:13
182.68.121.112	attack	Port Scan ...	2020-08-30 04:25:27
195.154.48.39	attackbots	195.154.48.39 - - [27/Aug/2020:20:16:16 +0200] "www.ruhnke.cloud" "POST /wp-login.php HTTP/1.1" 200 4982 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "-" 0.813 195.154.48.39 - - [27/Aug/2020:20:16:19 +0200] "www.ruhnke.cloud" "POST /xmlrpc.php HTTP/1.1" 200 473 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "-" 2.785 195.154.48.39 - - [28/Aug/2020:06:55:23 +0200] "www.ruhnke.cloud" "POST /wp-login.php HTTP/1.1" 200 4989 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "-" 0.793 195.154.48.39 - - [28/Aug/2020:06:55:25 +0200] "www.ruhnke.cloud" "POST /xmlrpc.php HTTP/1.1" 200 473 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "-" 2.254 195.154.48.39 - - [29/Aug/2020:20:55:48 +0200] "www.ruhnke.cloud" "POST /wp-login.php HTTP/1.1" 401 3593 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "-" 3.113 ...	2020-08-30 03:59:10
106.55.37.132	attackspam	Aug 29 14:35:13 vps639187 sshd\[3239\]: Invalid user pandora from 106.55.37.132 port 40052 Aug 29 14:35:13 vps639187 sshd\[3239\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.55.37.132 Aug 29 14:35:16 vps639187 sshd\[3239\]: Failed password for invalid user pandora from 106.55.37.132 port 40052 ssh2 ...	2020-08-30 04:00:15
118.68.111.226	attackspambots	Brute forcing RDP port 3389	2020-08-30 04:18:05

Recently Reported IPs

78.36.16.159	72.189.40.87	50.245.68.246	177.70.135.179
138.122.36.13	125.161.137.202	177.154.237.187	164.70.159.85
12.234.17.205	61.55.105.21	192.169.255.17	113.181.200.200
183.68.245.50	78.96.32.107	37.104.227.44	23.236.254.51
96.28.99.244	154.219.195.206	3.66.150.7	210.115.227.90