Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: South Africa

Internet Service Provider: Sentech SOC Ltd

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:
Type Details Datetime
attackspam
Honeypot attack, port: 445, PTR: gauntlet.sentech.co.za.
2020-04-16 01:03:06
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 66.18.65.210
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 24449
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;66.18.65.210.			IN	A

;; AUTHORITY SECTION:
.			198	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020041500 1800 900 604800 86400

;; Query time: 63 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Apr 16 01:03:00 CST 2020
;; MSG SIZE  rcvd: 116
Host info
210.65.18.66.in-addr.arpa domain name pointer gauntlet.sentech.co.za.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
210.65.18.66.in-addr.arpa	name = gauntlet.sentech.co.za.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
41.228.20.37 attackspam
Unauthorized connection attempt: SRC=41.228.20.37
...
2020-06-26 23:08:50
45.143.223.154 attackbots
Jun 26 14:08:35 relay postfix/smtpd\[23493\]: warning: unknown\[45.143.223.154\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 26 14:09:01 relay postfix/smtpd\[11505\]: warning: unknown\[45.143.223.154\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 26 14:09:17 relay postfix/smtpd\[11525\]: warning: unknown\[45.143.223.154\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 26 14:09:49 relay postfix/smtpd\[11525\]: warning: unknown\[45.143.223.154\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 26 14:10:04 relay postfix/smtpd\[11505\]: warning: unknown\[45.143.223.154\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...
2020-06-26 23:15:45
35.222.194.118 attackbotsspam
2020-06-26T07:19:06.555394sorsha.thespaminator.com sshd[19176]: Failed password for root from 35.222.194.118 port 33636 ssh2
2020-06-26T07:27:12.965533sorsha.thespaminator.com sshd[19888]: Invalid user ew from 35.222.194.118 port 52354
...
2020-06-26 23:16:44
49.88.112.111 attackspambots
Jun 26 07:54:19 dignus sshd[24611]: Failed password for root from 49.88.112.111 port 57835 ssh2
Jun 26 07:55:48 dignus sshd[24733]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.111  user=root
Jun 26 07:55:51 dignus sshd[24733]: Failed password for root from 49.88.112.111 port 42826 ssh2
Jun 26 07:55:53 dignus sshd[24733]: Failed password for root from 49.88.112.111 port 42826 ssh2
Jun 26 07:55:56 dignus sshd[24733]: Failed password for root from 49.88.112.111 port 42826 ssh2
...
2020-06-26 23:13:44
61.177.172.177 attackspambots
Jun 26 14:35:05 localhost sshd[110874]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.177  user=root
Jun 26 14:35:07 localhost sshd[110874]: Failed password for root from 61.177.172.177 port 4280 ssh2
Jun 26 14:35:10 localhost sshd[110874]: Failed password for root from 61.177.172.177 port 4280 ssh2
Jun 26 14:35:05 localhost sshd[110874]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.177  user=root
Jun 26 14:35:07 localhost sshd[110874]: Failed password for root from 61.177.172.177 port 4280 ssh2
Jun 26 14:35:10 localhost sshd[110874]: Failed password for root from 61.177.172.177 port 4280 ssh2
Jun 26 14:35:05 localhost sshd[110874]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.177  user=root
Jun 26 14:35:07 localhost sshd[110874]: Failed password for root from 61.177.172.177 port 4280 ssh2
Jun 26 14:35:10 localhost sshd[110874]
...
2020-06-26 22:43:52
45.228.137.6 attack
Invalid user cvs from 45.228.137.6 port 51868
2020-06-26 22:49:30
222.186.30.35 attackspam
Jun 26 16:45:11 Ubuntu-1404-trusty-64-minimal sshd\[8518\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.35  user=root
Jun 26 16:45:13 Ubuntu-1404-trusty-64-minimal sshd\[8518\]: Failed password for root from 222.186.30.35 port 17437 ssh2
Jun 26 16:45:20 Ubuntu-1404-trusty-64-minimal sshd\[8555\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.35  user=root
Jun 26 16:45:22 Ubuntu-1404-trusty-64-minimal sshd\[8555\]: Failed password for root from 222.186.30.35 port 51814 ssh2
Jun 26 16:45:31 Ubuntu-1404-trusty-64-minimal sshd\[8607\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.35  user=root
2020-06-26 22:51:04
139.155.21.186 attack
$f2bV_matches
2020-06-26 22:47:59
160.124.50.93 attackspambots
(sshd) Failed SSH login from 160.124.50.93 (ZA/South Africa/-): 5 in the last 3600 secs
2020-06-26 22:43:03
172.245.185.212 attackbotsspam
Jun 26 05:10:22 dignus sshd[9937]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.245.185.212
Jun 26 05:10:24 dignus sshd[9937]: Failed password for invalid user git from 172.245.185.212 port 44886 ssh2
Jun 26 05:15:13 dignus sshd[10397]: Invalid user test from 172.245.185.212 port 44042
Jun 26 05:15:13 dignus sshd[10397]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.245.185.212
Jun 26 05:15:15 dignus sshd[10397]: Failed password for invalid user test from 172.245.185.212 port 44042 ssh2
...
2020-06-26 22:57:03
89.232.192.75 attackbots
20/6/26@07:49:57: FAIL: Alarm-Network address from=89.232.192.75
...
2020-06-26 23:16:15
125.160.196.89 attackbotsspam
 TCP (SYN) 125.160.196.89:25976 -> port 23, len 44
2020-06-26 23:12:24
46.101.43.224 attackspam
Jun 26 18:21:24 itv-usvr-02 sshd[3767]: Invalid user dennis from 46.101.43.224 port 57152
Jun 26 18:21:24 itv-usvr-02 sshd[3767]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.43.224
Jun 26 18:21:24 itv-usvr-02 sshd[3767]: Invalid user dennis from 46.101.43.224 port 57152
Jun 26 18:21:25 itv-usvr-02 sshd[3767]: Failed password for invalid user dennis from 46.101.43.224 port 57152 ssh2
Jun 26 18:28:04 itv-usvr-02 sshd[3942]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.43.224  user=root
Jun 26 18:28:06 itv-usvr-02 sshd[3942]: Failed password for root from 46.101.43.224 port 57106 ssh2
2020-06-26 22:33:19
185.108.106.251 attackspambots
[2020-06-26 11:03:48] NOTICE[1273] chan_sip.c: Registration from '' failed for '185.108.106.251:54409' - Wrong password
[2020-06-26 11:03:48] SECURITY[1288] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-26T11:03:48.052-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="5645",SessionID="0x7f31c018ea98",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.108.106.251/54409",Challenge="176afc0f",ReceivedChallenge="176afc0f",ReceivedHash="bee2ab0598b808f5c50725df8c959b26"
[2020-06-26 11:04:21] NOTICE[1273] chan_sip.c: Registration from '' failed for '185.108.106.251:65197' - Wrong password
[2020-06-26 11:04:21] SECURITY[1288] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-26T11:04:21.243-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="6882",SessionID="0x7f31c018ea98",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.108
...
2020-06-26 23:10:20
190.226.248.10 attackbotsspam
Jun 26 14:48:13 jumpserver sshd[226864]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.226.248.10 
Jun 26 14:48:13 jumpserver sshd[226864]: Invalid user dag from 190.226.248.10 port 47694
Jun 26 14:48:15 jumpserver sshd[226864]: Failed password for invalid user dag from 190.226.248.10 port 47694 ssh2
...
2020-06-26 23:09:57

Recently Reported IPs

59.63.109.148 118.17.49.13 191.209.28.183 49.149.96.110
62.133.138.216 190.218.119.174 223.17.92.20 210.1.226.2
47.202.166.179 177.36.251.5 12.28.50.210 157.245.36.182
52.167.175.135 213.180.203.122 61.52.82.150 46.226.67.242
59.148.21.4 37.26.86.178 148.72.64.32 49.36.140.58