City: Pretoria
Region: Gauteng
Country: South Africa
Internet Service Provider: Telkom
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 102.252.64.63 | attackspambots | php WP PHPmyadamin ABUSE blocked for 12h |
2020-08-26 06:51:47 |
| 102.252.64.77 | attackspam | php WP PHPmyadamin ABUSE blocked for 12h |
2020-08-13 18:08:08 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 102.252.64.106
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 30949
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;102.252.64.106. IN A
;; AUTHORITY SECTION:
. 600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021202 1800 900 604800 86400
;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 13 09:30:27 CST 2022
;; MSG SIZE rcvd: 107106.64.252.102.in-addr.arpa domain name pointer 8ta-252-64-106.telkomadsl.co.za.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
106.64.252.102.in-addr.arpa name = 8ta-252-64-106.telkomadsl.co.za.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 209.141.57.211 | attack | Feb 25 09:44:38 mail sshd\[4711\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.141.57.211 user=root Feb 25 09:44:39 mail sshd\[4711\]: Failed password for root from 209.141.57.211 port 45924 ssh2 Feb 25 09:52:41 mail sshd\[4822\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.141.57.211 user=root ... |
2020-02-25 20:07:49 |
| 104.37.47.7 | attack | this URL continuously (CONTINUOUSLY) attempts to send TROJAN material on an INCOMING attack :-( |
2020-02-25 20:35:33 |
| 162.243.136.126 | attackbotsspam | MultiHost/MultiPort Probe, Scan, Hack - |
2020-02-25 20:39:36 |
| 187.94.210.37 | attack | Automatic report - Port Scan Attack |
2020-02-25 20:34:13 |
| 190.219.30.119 | attack | Automatic report - Port Scan Attack |
2020-02-25 20:36:05 |
| 162.243.253.67 | attack | Feb 25 12:07:47 zeus sshd[20211]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.243.253.67 Feb 25 12:07:49 zeus sshd[20211]: Failed password for invalid user kristof from 162.243.253.67 port 36244 ssh2 Feb 25 12:16:48 zeus sshd[20448]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.243.253.67 Feb 25 12:16:49 zeus sshd[20448]: Failed password for invalid user jupiter from 162.243.253.67 port 56006 ssh2 |
2020-02-25 20:17:09 |
| 85.105.134.121 | attackbotsspam | DATE:2020-02-25 08:19:06, IP:85.105.134.121, PORT:telnet Telnet brute force auth on honeypot server (epe-honey1-hq) |
2020-02-25 20:16:00 |
| 171.237.4.183 | attack | Email rejected due to spam filtering |
2020-02-25 20:31:34 |
| 129.204.180.130 | attackspam | Feb 25 07:11:01 server sshd\[14021\]: Failed password for mysql from 129.204.180.130 port 42762 ssh2 Feb 25 13:39:51 server sshd\[24028\]: Invalid user db2inst1 from 129.204.180.130 Feb 25 13:39:51 server sshd\[24028\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.180.130 Feb 25 13:39:53 server sshd\[24028\]: Failed password for invalid user db2inst1 from 129.204.180.130 port 39844 ssh2 Feb 25 14:01:09 server sshd\[28300\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.180.130 user=adm ... |
2020-02-25 20:37:24 |
| 218.92.0.178 | attackspambots | Feb 25 06:35:59 debian sshd[26883]: Unable to negotiate with 218.92.0.178 port 46065: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 [preauth] Feb 25 07:23:44 debian sshd[29052]: Unable to negotiate with 218.92.0.178 port 57989: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 [preauth] ... |
2020-02-25 20:28:37 |
| 2.35.124.159 | attackbotsspam | Feb 25 12:23:07 hcbbdb sshd\[14161\]: Invalid user administrator from 2.35.124.159 Feb 25 12:23:07 hcbbdb sshd\[14161\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=net-2-35-124-159.cust.vodafonedsl.it Feb 25 12:23:13 hcbbdb sshd\[14161\]: Failed password for invalid user administrator from 2.35.124.159 port 41098 ssh2 Feb 25 12:24:56 hcbbdb sshd\[14353\]: Invalid user angel from 2.35.124.159 Feb 25 12:24:56 hcbbdb sshd\[14353\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=net-2-35-124-159.cust.vodafonedsl.it |
2020-02-25 20:25:31 |
| 39.42.71.26 | attack | Email rejected due to spam filtering |
2020-02-25 20:14:16 |
| 212.64.57.24 | attackbotsspam | Feb 25 12:10:47 server sshd[1429476]: Failed password for invalid user chef from 212.64.57.24 port 40166 ssh2 Feb 25 12:21:36 server sshd[1431628]: Failed password for invalid user anne from 212.64.57.24 port 43567 ssh2 Feb 25 12:32:24 server sshd[1433664]: Failed password for invalid user msfuser from 212.64.57.24 port 46962 ssh2 |
2020-02-25 20:34:00 |
| 198.108.67.85 | attackspambots | firewall-block, port(s): 9026/tcp |
2020-02-25 20:26:16 |
| 186.193.194.122 | attackbotsspam | Automatic report - Port Scan Attack |
2020-02-25 20:24:10 |