City: Cairo
Region: Al Qahirah
Country: Egypt
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 41.38.56.34 | attackbots | [portscan] tcp/1433 [MsSQL] *(RWIN=8192)(11190859) |
2019-11-19 19:57:12 |
% This is the AfriNIC Whois server.
% The AFRINIC whois database is subject to the following terms of Use. See https://afrinic.net/whois/terms
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '41.38.0.0 - 41.39.255.255'
% No abuse contact registered for 41.38.0.0 - 41.39.255.255
inetnum: 41.38.0.0 - 41.39.255.255
netname: All-03
descr: TE Data
country: EG
admin-c: TDCR1-AFRINIC
tech-c: TDCR2-AFRINIC
status: ASSIGNED PA
remarks: ====================================================
remarks: For Internet Abuse & Spam reports : admins@tedata.net
remarks: ====================================================
mnt-by: GEGA-MNT
source: AFRINIC # Filtered
parent: 41.32.0.0 - 41.47.255.255
role: TE Data Contact Role
address: TE Data, Smart Village, Building A11-B90, Alex Desert Road,
address: 28 Km, 6th October 12577, Giza, Egypt
phone: tel:+20-2-33320700
fax-no: tel:+20-2-33320800
admin-c: MH7-AFRINIC
tech-c: TDCR2-AFRINIC
nic-hdl: TDCR1-AFRINIC
abuse-mailbox: abuse@te.eg
mnt-by: TE-Data-MNT
source: AFRINIC # Filtered
role: TE Data Contact Role-2
address: TE Data, Smart Village, Building A11-B90, Alex Desert Road,
address: 28 Km, 6th October 12577, Giza, Egypt
phone: tel:+20-2-33320700
fax-no: tel:+20-2-33320800
admin-c: MH7-AFRINIC
tech-c: TDCR1-AFRINIC
nic-hdl: TDCR2-AFRINIC
abuse-mailbox: abuse@te.eg
mnt-by: TE-Data-MNT
source: AFRINIC # Filtered
% Information related to '41.38.0.0/16AS8452'
route: 41.38.0.0/16
descr: Telecom-Egypt-Data
origin: AS8452
mnt-lower: GEGA-MNT
mnt-by: AFRINIC-HM-MNT
source: AFRINIC # Filtered
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 41.38.56.232
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 58939
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;41.38.56.232. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026020504 1800 900 604800 86400
;; Query time: 7 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 06 09:30:38 CST 2026
;; MSG SIZE rcvd: 105
Host 232.56.38.41.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 232.56.38.41.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 104.200.110.184 | attack | Nov 14 01:38:57 microserver sshd[8666]: Invalid user pamax from 104.200.110.184 port 46720 Nov 14 01:38:57 microserver sshd[8666]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.200.110.184 Nov 14 01:38:59 microserver sshd[8666]: Failed password for invalid user pamax from 104.200.110.184 port 46720 ssh2 Nov 14 01:42:41 microserver sshd[9248]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.200.110.184 user=root Nov 14 01:42:43 microserver sshd[9248]: Failed password for root from 104.200.110.184 port 54922 ssh2 Nov 14 01:52:54 microserver sshd[10613]: Invalid user yuet from 104.200.110.184 port 43100 Nov 14 01:52:54 microserver sshd[10613]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.200.110.184 Nov 14 01:52:56 microserver sshd[10613]: Failed password for invalid user yuet from 104.200.110.184 port 43100 ssh2 Nov 14 01:56:39 microserver sshd[11191]: Invalid user korelich f |
2019-11-14 08:23:02 |
| 190.131.229.202 | attackbots | 445/tcp [2019-11-13]1pkt |
2019-11-14 08:22:47 |
| 77.42.76.167 | attackspam | 37215/tcp [2019-11-13]1pkt |
2019-11-14 08:15:23 |
| 89.248.169.95 | attackbots | Brute force attack stopped by firewall |
2019-11-14 07:56:15 |
| 167.114.210.127 | attackspambots | fail2ban honeypot |
2019-11-14 08:00:41 |
| 36.236.9.241 | attackbots | 23/tcp [2019-11-13]1pkt |
2019-11-14 08:13:18 |
| 182.113.36.117 | attackbotsspam | 2223/tcp [2019-11-13]1pkt |
2019-11-14 07:57:48 |
| 59.149.237.145 | attack | $f2bV_matches |
2019-11-14 08:10:18 |
| 104.32.73.224 | attack | 8000/tcp [2019-11-13]1pkt |
2019-11-14 07:53:23 |
| 52.151.20.147 | attackspam | SSH bruteforce (Triggered fail2ban) |
2019-11-14 08:13:39 |
| 160.20.109.31 | attackbots | Nov 14 09:12:38 our-server-hostname postfix/smtpd[12941]: connect from unknown[160.20.109.31] Nov x@x Nov x@x Nov 14 09:12:41 our-server-hostname postfix/smtpd[12941]: 19CA4A4001C: client=unknown[160.20.109.31] Nov 14 09:12:41 our-server-hostname postfix/smtpd[19541]: 90F51A4008E: client=unknown[127.0.0.1], orig_client=unknown[160.20.109.31] Nov 14 09:12:41 our-server-hostname amavis[10108]: (10108-16) Passed CLEAN, [160.20.109.31] [160.20.109.31] |
2019-11-14 08:06:38 |
| 5.145.39.54 | attack | " " |
2019-11-14 07:53:08 |
| 106.12.215.118 | attack | Nov 13 14:00:00 server sshd\[1740\]: Failed password for invalid user admin from 106.12.215.118 port 48386 ssh2 Nov 14 02:43:05 server sshd\[4269\]: Invalid user vagrant from 106.12.215.118 Nov 14 02:43:05 server sshd\[4269\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.215.118 Nov 14 02:43:08 server sshd\[4269\]: Failed password for invalid user vagrant from 106.12.215.118 port 40032 ssh2 Nov 14 03:00:21 server sshd\[9155\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.215.118 user=root ... |
2019-11-14 08:01:40 |
| 14.169.192.87 | attackspambots | Nov 14 01:15:51 master sshd[28372]: Failed password for invalid user admin from 14.169.192.87 port 49233 ssh2 |
2019-11-14 07:49:59 |
| 211.143.184.223 | attackbots | 23/tcp [2019-11-13]1pkt |
2019-11-14 07:50:30 |