City: unknown
Region: Gauteng
Country: South Africa
Internet Service Provider: Telkom
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 102.252.64.63 | attackspambots | php WP PHPmyadamin ABUSE blocked for 12h |
2020-08-26 06:51:47 |
| 102.252.64.77 | attackspam | php WP PHPmyadamin ABUSE blocked for 12h |
2020-08-13 18:08:08 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 102.252.64.82
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 62354
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;102.252.64.82. IN A
;; AUTHORITY SECTION:
. 387 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022012500 1800 900 604800 86400
;; Query time: 56 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jan 26 00:31:47 CST 2022
;; MSG SIZE rcvd: 10682.64.252.102.in-addr.arpa domain name pointer 8ta-252-64-82.telkomadsl.co.za.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
82.64.252.102.in-addr.arpa name = 8ta-252-64-82.telkomadsl.co.za.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 103.10.61.114 | attack | Oct 27 00:53:56 firewall sshd[27021]: Invalid user web1g from 103.10.61.114 Oct 27 00:53:59 firewall sshd[27021]: Failed password for invalid user web1g from 103.10.61.114 port 47752 ssh2 Oct 27 00:58:40 firewall sshd[27237]: Invalid user sw2aq1sw2aq1 from 103.10.61.114 ... |
2019-10-27 12:16:15 |
| 113.88.13.227 | attackspambots | DATE:2019-10-27 04:58:40, IP:113.88.13.227, PORT:1433 MSSQL brute force auth on honeypot server (honey-neo-dc) |
2019-10-27 12:17:41 |
| 101.1.143.36 | attackspam | Oct 27 04:58:42 MK-Soft-Root1 sshd[12886]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.1.143.36 ... |
2019-10-27 12:14:59 |
| 123.1.154.224 | attackspambots | ET SCAN Suspicious inbound to MSSQL port 1433 - port: 1433 proto: TCP cat: Potentially Bad Traffic |
2019-10-27 08:10:36 |
| 88.254.111.116 | attack | Automatic report - Banned IP Access |
2019-10-27 08:24:02 |
| 73.93.102.54 | attack | 2019-10-26T23:44:59.7570621495-001 sshd\[12508\]: Invalid user hewitt from 73.93.102.54 port 57744 2019-10-26T23:44:59.7611341495-001 sshd\[12508\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=c-73-93-102-54.hsd1.ca.comcast.net 2019-10-26T23:45:02.0612971495-001 sshd\[12508\]: Failed password for invalid user hewitt from 73.93.102.54 port 57744 ssh2 2019-10-26T23:48:51.4085121495-001 sshd\[12691\]: Invalid user kenken from 73.93.102.54 port 39796 2019-10-26T23:48:51.4157721495-001 sshd\[12691\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=c-73-93-102-54.hsd1.ca.comcast.net 2019-10-26T23:48:53.2188341495-001 sshd\[12691\]: Failed password for invalid user kenken from 73.93.102.54 port 39796 ssh2 ... |
2019-10-27 12:09:00 |
| 51.83.73.160 | attackbots | Invalid user com from 51.83.73.160 port 35076 |
2019-10-27 08:28:43 |
| 189.112.109.185 | attackspam | Oct 27 05:54:06 www5 sshd\[24165\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.112.109.185 user=root Oct 27 05:54:09 www5 sshd\[24165\]: Failed password for root from 189.112.109.185 port 40228 ssh2 Oct 27 05:58:56 www5 sshd\[24893\]: Invalid user ubnt from 189.112.109.185 Oct 27 05:58:56 www5 sshd\[24893\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.112.109.185 ... |
2019-10-27 12:07:50 |
| 177.128.70.240 | attack | Oct 27 09:28:44 areeb-Workstation sshd[21599]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.128.70.240 Oct 27 09:28:46 areeb-Workstation sshd[21599]: Failed password for invalid user lxp0914 from 177.128.70.240 port 44907 ssh2 ... |
2019-10-27 12:13:41 |
| 83.249.145.81 | attackspambots | Invalid user admin from 83.249.145.81 port 59688 |
2019-10-27 08:24:33 |
| 185.153.196.80 | attack | 10/27/2019-00:02:34.890846 185.153.196.80 Protocol: 6 ET SCAN NMAP -sS window 1024 |
2019-10-27 12:15:23 |
| 59.56.74.165 | attackspam | Oct 27 04:54:19 meumeu sshd[9745]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.56.74.165 Oct 27 04:54:21 meumeu sshd[9745]: Failed password for invalid user elsje from 59.56.74.165 port 44410 ssh2 Oct 27 04:59:18 meumeu sshd[10669]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.56.74.165 ... |
2019-10-27 12:01:14 |
| 202.98.67.95 | attack | port scan and connect, tcp 23 (telnet) |
2019-10-27 12:08:11 |
| 49.232.35.211 | attack | Oct 27 05:58:46 www5 sshd\[24879\]: Invalid user giacomini from 49.232.35.211 Oct 27 05:58:46 www5 sshd\[24879\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.232.35.211 Oct 27 05:58:49 www5 sshd\[24879\]: Failed password for invalid user giacomini from 49.232.35.211 port 57540 ssh2 ... |
2019-10-27 12:11:03 |
| 114.67.80.161 | attack | Oct 27 05:54:43 site3 sshd\[23505\]: Invalid user nw from 114.67.80.161 Oct 27 05:54:43 site3 sshd\[23505\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.67.80.161 Oct 27 05:54:45 site3 sshd\[23505\]: Failed password for invalid user nw from 114.67.80.161 port 34764 ssh2 Oct 27 05:58:46 site3 sshd\[23578\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.67.80.161 user=root Oct 27 05:58:48 site3 sshd\[23578\]: Failed password for root from 114.67.80.161 port 52363 ssh2 ... |
2019-10-27 12:10:32 |