City: Kimberley
Region: Northern Cape
Country: South Africa
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 102.134.3.93
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 40269
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;102.134.3.93. IN A
;; AUTHORITY SECTION:
. 390 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022051902 1800 900 604800 86400
;; Query time: 68 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri May 20 09:05:23 CST 2022
;; MSG SIZE rcvd: 105
Host 93.3.134.102.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 93.3.134.102.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 142.44.202.51 | attackspam | 142.44.202.51 - - [21/Jun/2019:11:14:16 +0200] "GET /wp-includes/css/modules.php HTTP/1.1" 404 16363 "-" "python-requests/2.18.4" 142.44.202.51 - - [21/Jun/2019:11:14:20 +0200] "GET /wso.php HTTP/1.1" 404 16525 "-" "python-requests/2.18.4" 142.44.202.51 - - [21/Jun/2019:11:14:24 +0200] "GET /wp-content/plugins/upspy/ HTTP/1.1" 404 11538 "-" "python-requests/2.18.4" 142.44.202.51 - - [21/Jun/2019:11:14:28 +0200] "GET /wp-content/plugins/ubh/ HTTP/1.1" 404 11682 "-" "python-requests/2.18.4" 142.44.202.51 - - [21/Jun/2019:11:14:34 +0200] "GET /wp-content/plugins/vwcleanerplugin/bump.php?cache HTTP/1.1" 404 16592 "-" "python-requests/2.18.4" ... |
2019-06-21 21:14:06 |
| 217.125.101.178 | attackbotsspam | 23/tcp [2019-06-21]1pkt |
2019-06-21 21:57:20 |
| 201.81.14.177 | attackbotsspam | Jun 21 13:46:03 dedicated sshd[16488]: Invalid user django from 201.81.14.177 port 57248 Jun 21 13:46:05 dedicated sshd[16488]: Failed password for invalid user django from 201.81.14.177 port 57248 ssh2 Jun 21 13:46:03 dedicated sshd[16488]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.81.14.177 Jun 21 13:46:03 dedicated sshd[16488]: Invalid user django from 201.81.14.177 port 57248 Jun 21 13:46:05 dedicated sshd[16488]: Failed password for invalid user django from 201.81.14.177 port 57248 ssh2 |
2019-06-21 21:11:57 |
| 110.140.0.81 | attack | Looking for resource vulnerabilities |
2019-06-21 21:45:29 |
| 54.39.98.253 | attackbots | Jun 21 12:55:35 host sshd\[49366\]: Invalid user testsite from 54.39.98.253 port 44952 Jun 21 12:55:37 host sshd\[49366\]: Failed password for invalid user testsite from 54.39.98.253 port 44952 ssh2 ... |
2019-06-21 20:55:46 |
| 2607:5300:60:7a6::1 | attack | Wordpress attack |
2019-06-21 20:58:03 |
| 45.163.109.156 | attackspambots | Unauthorised access (Jun 21) SRC=45.163.109.156 LEN=44 TTL=46 ID=25217 TCP DPT=23 WINDOW=22993 SYN |
2019-06-21 20:57:34 |
| 112.91.58.238 | attackbotsspam | Brute force attempt |
2019-06-21 20:58:30 |
| 14.177.148.144 | attackbots | 445/tcp [2019-06-21]1pkt |
2019-06-21 21:46:37 |
| 84.238.240.171 | attackbotsspam | [portscan] tcp/23 [TELNET] *(RWIN=31544)(06211034) |
2019-06-21 21:40:06 |
| 67.27.153.126 | attack | TCP Port: 80 _ invalid blocked zen-spamhaus rbldns-ru _ _ Client xx.xx.7.214 _ _ (328) |
2019-06-21 20:57:00 |
| 58.218.66.7 | attackspam | Portscan or hack attempt detected by psad/fwsnort |
2019-06-21 21:09:33 |
| 76.91.235.209 | attackspambots | Attempted login to invalid user |
2019-06-21 21:04:12 |
| 103.57.38.129 | attackspambots | Jun 18 13:31:01 our-server-hostname postfix/smtpd[19665]: connect from unknown[103.57.38.129] Jun x@x Jun x@x Jun x@x Jun 18 13:31:04 our-server-hostname postfix/smtpd[19665]: lost connection after RCPT from unknown[103.57.38.129] Jun 18 13:31:04 our-server-hostname postfix/smtpd[19665]: disconnect from unknown[103.57.38.129] Jun 18 16:17:29 our-server-hostname postfix/smtpd[3484]: connect from unknown[103.57.38.129] Jun x@x Jun 18 16:17:30 our-server-hostname postfix/smtpd[3484]: lost connection after RCPT from unknown[103.57.38.129] Jun 18 16:17:30 our-server-hostname postfix/smtpd[3484]: disconnect from unknown[103.57.38.129] Jun 18 16:20:49 our-server-hostname postfix/smtpd[3206]: connect from unknown[103.57.38.129] Jun x@x Jun x@x Jun x@x Jun 18 16:20:52 our-server-hostname postfix/smtpd[3206]: lost connection after RCPT from unknown[103.57.38.129] Jun 18 16:20:52 our-server-hostname postfix/smtpd[3206]: disconnect from unknown[103.57.38.129] Jun 18 16:59:54 our-se........ ------------------------------- |
2019-06-21 21:33:07 |
| 49.128.171.203 | attackspambots | 445/tcp [2019-06-21]1pkt |
2019-06-21 21:23:37 |