City: Alberton
Region: Gauteng
Country: South Africa
Internet Service Provider: Telkom
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 102.248.141.36
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 44017
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;102.248.141.36. IN A
;; AUTHORITY SECTION:
. 408 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020061602 1800 900 604800 86400
;; Query time: 109 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jun 17 06:39:12 CST 2020
;; MSG SIZE rcvd: 11836.141.248.102.in-addr.arpa domain name pointer 8ta-248-141-36.telkomadsl.co.za.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
36.141.248.102.in-addr.arpa name = 8ta-248-141-36.telkomadsl.co.za.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 107.170.245.41 | attackspam | 1 attack on Zyxel CVE-2017-18368 URLs like: 107.170.245.41 - - [06/Jun/2020:00:36:59 +0100] "POST /cgi-bin/ViewLog.asp HTTP/1.1" 403 9 |
2020-06-06 19:07:26 |
| 118.27.37.223 | attack | 2020-06-06T11:13:34.693171ns386461 sshd\[22186\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=v118-27-37-223.0jtl.static.cnode.io user=root 2020-06-06T11:13:36.490549ns386461 sshd\[22186\]: Failed password for root from 118.27.37.223 port 35704 ssh2 2020-06-06T11:22:38.171081ns386461 sshd\[31034\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=v118-27-37-223.0jtl.static.cnode.io user=root 2020-06-06T11:22:40.320102ns386461 sshd\[31034\]: Failed password for root from 118.27.37.223 port 59062 ssh2 2020-06-06T11:25:01.183810ns386461 sshd\[582\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=v118-27-37-223.0jtl.static.cnode.io user=root ... |
2020-06-06 19:04:59 |
| 106.75.74.225 | attack | Jun 6 12:19:43 debian kernel: [337744.241295] [UFW BLOCK] IN=eth0 OUT= MAC=52:54:00:be:e4:65:08:e8:4f:6e:48:0c:08:00 SRC=106.75.74.225 DST=89.252.131.35 LEN=44 TOS=0x00 PREC=0x00 TTL=237 ID=22123 PROTO=TCP SPT=58914 DPT=55553 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-06-06 19:11:06 |
| 106.75.21.25 | attackspam | Honeypot attack, port: 7, PTR: PTR record not found |
2020-06-06 19:17:55 |
| 220.129.54.99 | attackspam | Port probing on unauthorized port 23 |
2020-06-06 19:21:43 |
| 49.232.174.219 | attackbots | Jun 6 12:39:48 abendstille sshd\[21369\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.232.174.219 user=root Jun 6 12:39:50 abendstille sshd\[21369\]: Failed password for root from 49.232.174.219 port 15324 ssh2 Jun 6 12:44:40 abendstille sshd\[26389\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.232.174.219 user=root Jun 6 12:44:43 abendstille sshd\[26389\]: Failed password for root from 49.232.174.219 port 3515 ssh2 Jun 6 12:49:27 abendstille sshd\[30986\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.232.174.219 user=root ... |
2020-06-06 19:00:36 |
| 5.188.62.11 | attack | Cowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2020-06-06T10:30:05Z and 2020-06-06T10:54:07Z |
2020-06-06 19:26:32 |
| 160.153.154.1 | attackspam | REQUESTED PAGE: /cms/wp-includes/wlwmanifest.xml |
2020-06-06 19:32:59 |
| 106.52.243.17 | attack | Jun 6 09:18:29 sigma sshd\[13554\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.243.17 user=rootJun 6 09:28:18 sigma sshd\[13908\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.243.17 user=root ... |
2020-06-06 19:13:51 |
| 3.23.129.116 | attack | mue-0 : Trying access unauthorized files=>/images/jdownloads/screenshots/update.php() |
2020-06-06 19:34:31 |
| 129.28.29.57 | attackspambots | 2020-06-06T09:53:43.013374abusebot-6.cloudsearch.cf sshd[20026]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.28.29.57 user=root 2020-06-06T09:53:45.056030abusebot-6.cloudsearch.cf sshd[20026]: Failed password for root from 129.28.29.57 port 47786 ssh2 2020-06-06T09:57:29.986188abusebot-6.cloudsearch.cf sshd[20220]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.28.29.57 user=root 2020-06-06T09:57:31.861044abusebot-6.cloudsearch.cf sshd[20220]: Failed password for root from 129.28.29.57 port 57034 ssh2 2020-06-06T09:59:20.503018abusebot-6.cloudsearch.cf sshd[20315]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.28.29.57 user=root 2020-06-06T09:59:22.279660abusebot-6.cloudsearch.cf sshd[20315]: Failed password for root from 129.28.29.57 port 50336 ssh2 2020-06-06T10:00:57.466177abusebot-6.cloudsearch.cf sshd[20408]: pam_unix(sshd:auth): authenticat ... |
2020-06-06 19:30:45 |
| 178.32.219.209 | attack | <6 unauthorized SSH connections |
2020-06-06 19:32:29 |
| 209.17.96.18 | attackspambots | Unauthorized access to SSH at 6/Jun/2020:04:13:28 +0000. |
2020-06-06 19:24:22 |
| 112.206.174.180 | attackspambots | Automatic report - XMLRPC Attack |
2020-06-06 19:13:20 |
| 96.77.231.29 | attack | SSH Bruteforce attack |
2020-06-06 19:20:53 |