City: Durban
Region: KwaZulu-Natal
Country: South Africa
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 102.249.0.81 | bots | 102.249.0.81 - - [25/Apr/2019:06:39:08 +0800] "GET /check-ip/96.248.79.45 HTTP/1.1" 200 8853 "https:/" "Mozilla/5.0 (Windows NT 5.1; rv:6.0) Gecko/20100101 Firefox/6.0 FirePHP/0.6" 102.249.0.81 - - [25/Apr/2019:06:39:08 +0800] "GET /check-ip/100.4.47.199 HTTP/1.1" 200 9297 "https:/" "Mozilla/5.0 (Windows NT 5.1; rv:6.0) Gecko/20100101 Firefox/6.0 FirePHP/0.6" 102.249.0.81 - - [25/Apr/2019:06:39:10 +0800] "GET /check-ip/108.4.32.103 HTTP/1.1" 200 8793 "https:/" "Mozilla/4.0 (Mozilla/4.0; MSIE 7.0; Windows NT 5.1; FDM; SV1)" 102.249.0.81 - - [25/Apr/2019:06:39:11 +0800] "GET /check-ip/63.117.76.126 HTTP/1.1" 200 8618 "https:/" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; yie8)" |
2019-04-25 06:42:37 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 102.249.0.135
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 47815
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;102.249.0.135. IN A
;; AUTHORITY SECTION:
. 200 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2023102100 1800 900 604800 86400
;; Query time: 55 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Oct 21 20:17:40 CST 2023
;; MSG SIZE rcvd: 106135.0.249.102.in-addr.arpa domain name pointer 8ta-249-0-135.telkomadsl.co.za.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
135.0.249.102.in-addr.arpa name = 8ta-249-0-135.telkomadsl.co.za.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 222.186.52.86 | attack | Dec 12 12:18:14 * sshd[9761]: Failed password for root from 222.186.52.86 port 25946 ssh2 Dec 12 12:18:17 * sshd[9761]: Failed password for root from 222.186.52.86 port 25946 ssh2 |
2019-12-12 19:22:17 |
| 45.93.20.151 | attackspam | firewall-block, port(s): 57946/tcp |
2019-12-12 19:02:24 |
| 182.151.209.131 | attackspam | 1576131939 - 12/12/2019 07:25:39 Host: 182.151.209.131/182.151.209.131 Port: 445 TCP Blocked |
2019-12-12 18:58:12 |
| 155.230.35.195 | attack | Automatic report: SSH brute force attempt |
2019-12-12 19:10:27 |
| 134.209.171.203 | attackspambots | Dec 12 12:26:42 lnxmysql61 sshd[13488]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.171.203 |
2019-12-12 19:35:45 |
| 59.127.228.147 | attack | Dec 12 07:26:06 debian-2gb-nbg1-2 kernel: \[24413506.095066\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=59.127.228.147 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=52 ID=24672 PROTO=TCP SPT=25865 DPT=23 WINDOW=32273 RES=0x00 SYN URGP=0 |
2019-12-12 18:56:35 |
| 209.17.96.98 | attack | 209.17.96.98 was recorded 11 times by 9 hosts attempting to connect to the following ports: 5903,9443,5984,30303,5632,5986,9002,3388,5909,6002. Incident counter (4h, 24h, all-time): 11, 42, 1528 |
2019-12-12 19:26:21 |
| 223.31.39.126 | attack | Unauthorized connection attempt from IP address 223.31.39.126 on Port 445(SMB) |
2019-12-12 19:10:00 |
| 121.58.236.115 | attack | Unauthorized connection attempt detected from IP address 121.58.236.115 to port 445 |
2019-12-12 19:03:14 |
| 170.239.101.4 | attackbots | Dec 12 07:29:04 firewall sshd[1168]: Invalid user rrrr from 170.239.101.4 Dec 12 07:29:06 firewall sshd[1168]: Failed password for invalid user rrrr from 170.239.101.4 port 33084 ssh2 Dec 12 07:35:54 firewall sshd[1330]: Invalid user doerum from 170.239.101.4 ... |
2019-12-12 19:33:32 |
| 113.190.88.244 | attackspam | 1576131924 - 12/12/2019 07:25:24 Host: 113.190.88.244/113.190.88.244 Port: 445 TCP Blocked |
2019-12-12 19:00:10 |
| 189.41.92.123 | attack | 1576131873 - 12/12/2019 07:24:33 Host: 189.41.92.123/189.41.92.123 Port: 445 TCP Blocked |
2019-12-12 19:12:00 |
| 208.58.129.131 | attack | Dec 12 10:38:28 pi sshd\[32110\]: Failed password for mysql from 208.58.129.131 port 8776 ssh2 Dec 12 10:44:51 pi sshd\[32472\]: Invalid user waw from 208.58.129.131 port 46442 Dec 12 10:44:51 pi sshd\[32472\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=208.58.129.131 Dec 12 10:44:53 pi sshd\[32472\]: Failed password for invalid user waw from 208.58.129.131 port 46442 ssh2 Dec 12 10:51:23 pi sshd\[333\]: Invalid user regional from 208.58.129.131 port 4814 ... |
2019-12-12 19:17:52 |
| 190.129.47.148 | attackspambots | Dec 12 10:47:37 game-panel sshd[11852]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.129.47.148 Dec 12 10:47:39 game-panel sshd[11852]: Failed password for invalid user admin from 190.129.47.148 port 34890 ssh2 Dec 12 10:55:14 game-panel sshd[12254]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.129.47.148 |
2019-12-12 19:13:29 |
| 163.47.214.158 | attackbots | Dec 12 10:07:19 server sshd\[8117\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.47.214.158 user=root Dec 12 10:07:22 server sshd\[8117\]: Failed password for root from 163.47.214.158 port 56098 ssh2 Dec 12 10:17:46 server sshd\[11228\]: Invalid user tubate from 163.47.214.158 Dec 12 10:17:46 server sshd\[11228\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.47.214.158 Dec 12 10:17:48 server sshd\[11228\]: Failed password for invalid user tubate from 163.47.214.158 port 33156 ssh2 ... |
2019-12-12 18:56:56 |