Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: South Africa

Internet Service Provider: Vodacom

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 41.9.112.12
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 45245
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;41.9.112.12.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025021002 1800 900 604800 86400

;; Query time: 61 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 11 12:38:58 CST 2025
;; MSG SIZE  rcvd: 104
Host info
12.112.9.41.in-addr.arpa domain name pointer vc-kzn-41-9-112-12.umts.vodacom.co.za.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
12.112.9.41.in-addr.arpa	name = vc-kzn-41-9-112-12.umts.vodacom.co.za.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
142.93.226.235 attackbots
142.93.226.235 - - [12/Aug/2020:16:13:23 +0100] "POST /wp-login.php HTTP/1.1" 200 1969 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
142.93.226.235 - - [12/Aug/2020:16:13:32 +0100] "POST /wp-login.php HTTP/1.1" 200 1954 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
142.93.226.235 - - [12/Aug/2020:16:13:34 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-08-13 00:34:58
178.33.12.237 attackspam
Aug 12 18:30:24 piServer sshd[10470]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.33.12.237 
Aug 12 18:30:26 piServer sshd[10470]: Failed password for invalid user 123456 from 178.33.12.237 port 47102 ssh2
Aug 12 18:36:39 piServer sshd[11063]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.33.12.237 
...
2020-08-13 00:46:51
196.200.181.3 attack
Lines containing failures of 196.200.181.3
Jul 30 23:05:36 server-name sshd[25858]: User r.r from 196.200.181.3 not allowed because not listed in AllowUsers
Jul 30 23:05:36 server-name sshd[25858]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.200.181.3  user=r.r
Jul 30 23:05:38 server-name sshd[25858]: Failed password for invalid user r.r from 196.200.181.3 port 52280 ssh2
Jul 30 23:05:40 server-name sshd[25858]: Received disconnect from 196.200.181.3 port 52280:11: Bye Bye [preauth]
Jul 30 23:05:40 server-name sshd[25858]: Disconnected from invalid user r.r 196.200.181.3 port 52280 [preauth]
Jul 31 00:07:14 server-name sshd[28218]: User r.r from 196.200.181.3 not allowed because not listed in AllowUsers
Jul 31 00:07:14 server-name sshd[28218]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.200.181.3  user=r.r
Jul 31 00:07:16 server-name sshd[28218]: Failed password for invalid us........
------------------------------
2020-08-13 00:35:44
92.63.196.27 attackspambots
SmallBizIT.US 6 packets to tcp(2233,3003,6565,40004,44000,55015)
2020-08-13 00:27:23
118.172.188.85 attackbotsspam
firewall-block, port(s): 445/tcp
2020-08-13 00:26:01
45.129.33.11 attackbotsspam
 TCP (SYN) 45.129.33.11:51240 -> port 36013, len 44
2020-08-13 00:33:10
51.77.151.175 attack
Failed password for root from 51.77.151.175 port 53906 ssh2
2020-08-13 00:26:49
141.98.80.22 attack
[Fri Jul 31 09:11:47 2020] - Syn Flood From IP: 141.98.80.22 Port: 65531
2020-08-13 00:23:00
179.54.90.120 attackspam
Attempts against non-existent wp-login
2020-08-13 00:54:14
85.206.38.111 attackbots
Unauthorised access (Aug 12) SRC=85.206.38.111 LEN=44 TTL=248 ID=8838 TCP DPT=8080 WINDOW=1300 SYN 
Unauthorised access (Aug 10) SRC=85.206.38.111 LEN=44 TTL=248 ID=8838 TCP DPT=8080 WINDOW=1300 SYN 
Unauthorised access (Aug  9) SRC=85.206.38.111 LEN=44 TTL=248 ID=8838 TCP DPT=8080 WINDOW=1300 SYN
2020-08-13 00:47:12
184.174.8.11 attackspam
Fail2Ban Ban Triggered
HTTP SQL Injection Attempt
2020-08-13 00:30:36
5.196.8.72 attack
Auto Fail2Ban report, multiple SSH login attempts.
2020-08-13 00:33:26
114.32.145.159 attackspam
[N10.H2.VM2] Port Scanner Detected Blocked by UFW
2020-08-13 01:03:17
67.219.23.161 attackbotsspam
Fail2Ban Ban Triggered
HTTP SQL Injection Attempt
2020-08-13 00:56:35
51.83.33.202 attackbots
Aug 12 18:10:45 buvik sshd[1657]: Failed password for root from 51.83.33.202 port 58328 ssh2
Aug 12 18:14:00 buvik sshd[2048]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.83.33.202  user=root
Aug 12 18:14:02 buvik sshd[2048]: Failed password for root from 51.83.33.202 port 54610 ssh2
...
2020-08-13 00:20:48

Recently Reported IPs

12.25.137.60 86.141.5.216 41.78.42.139 208.244.130.143
181.247.212.100 7.208.165.22 224.58.164.9 124.238.82.71
166.62.84.192 136.137.151.34 95.182.240.12 103.62.163.240
175.51.109.19 8.228.72.169 201.29.23.99 36.230.6.61
191.71.40.186 253.213.124.244 8.227.21.4 22.204.63.29