City: Kloof
Region: KwaZulu-Natal
Country: South Africa
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 102.65.138.208
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 43216
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;102.65.138.208. IN A
;; AUTHORITY SECTION:
. 565 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2023102100 1800 900 604800 86400
;; Query time: 150 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Oct 21 19:55:34 CST 2023
;; MSG SIZE rcvd: 107208.138.65.102.in-addr.arpa domain name pointer 102-65-138-208.dsl.web.africa.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
208.138.65.102.in-addr.arpa name = 102-65-138-208.dsl.web.africa.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 94.177.176.230 | attackspam | firewall-block, port(s): 5003/tcp, 5011/tcp, 5040/tcp, 5054/tcp, 5066/tcp, 5091/tcp, 5097/tcp, 5108/tcp, 5109/tcp, 5116/tcp, 5171/tcp |
2020-01-02 17:32:51 |
| 117.4.104.159 | attackspambots | Host Scan |
2020-01-02 18:00:27 |
| 159.192.142.124 | attackbotsspam | Unauthorised access (Jan 2) SRC=159.192.142.124 LEN=52 PREC=0x20 TTL=115 ID=10491 DF TCP DPT=445 WINDOW=8192 SYN |
2020-01-02 18:01:33 |
| 93.105.58.83 | attack | Jan 2 06:34:31 ns382633 sshd\[22959\]: Invalid user admin from 93.105.58.83 port 11082 Jan 2 06:34:31 ns382633 sshd\[22959\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.105.58.83 Jan 2 06:34:33 ns382633 sshd\[22959\]: Failed password for invalid user admin from 93.105.58.83 port 11082 ssh2 Jan 2 07:27:06 ns382633 sshd\[31790\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.105.58.83 user=root Jan 2 07:27:08 ns382633 sshd\[31790\]: Failed password for root from 93.105.58.83 port 30247 ssh2 |
2020-01-02 17:33:04 |
| 86.83.195.94 | attackspam | port 23 |
2020-01-02 17:56:31 |
| 195.154.29.10 | attack | Host Scan |
2020-01-02 17:46:30 |
| 168.205.38.137 | attack | Honeypot attack, port: 81, PTR: 168-205-38-137.wantel.net.br. |
2020-01-02 17:39:28 |
| 113.118.188.247 | attackspam | Honeypot attack, port: 445, PTR: PTR record not found |
2020-01-02 18:03:49 |
| 86.59.220.126 | attackspam | Dec 31 20:28:12 mailrelay sshd[806]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=86.59.220.126 user=mysql Dec 31 20:28:14 mailrelay sshd[806]: Failed password for mysql from 86.59.220.126 port 44565 ssh2 Dec 31 20:28:14 mailrelay sshd[806]: Received disconnect from 86.59.220.126 port 44565:11: Bye Bye [preauth] Dec 31 20:28:14 mailrelay sshd[806]: Disconnected from 86.59.220.126 port 44565 [preauth] Dec 31 20:36:02 mailrelay sshd[877]: Invalid user absolute from 86.59.220.126 port 45890 Dec 31 20:36:02 mailrelay sshd[877]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=86.59.220.126 Dec 31 20:36:04 mailrelay sshd[877]: Failed password for invalid user absolute from 86.59.220.126 port 45890 ssh2 Dec 31 20:36:04 mailrelay sshd[877]: Received disconnect from 86.59.220.126 port 45890:11: Bye Bye [preauth] Dec 31 20:36:04 mailrelay sshd[877]: Disconnected from 86.59.220.126 port 45890 [prea........ ------------------------------- |
2020-01-02 17:44:58 |
| 37.187.3.53 | attackspambots | Jan 2 02:58:38 plusreed sshd[8831]: Invalid user perlick from 37.187.3.53 ... |
2020-01-02 18:06:18 |
| 125.161.136.153 | attackspam | Jan 2 08:55:11 MK-Soft-VM5 sshd[12558]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.161.136.153 Jan 2 08:55:13 MK-Soft-VM5 sshd[12558]: Failed password for invalid user administrator from 125.161.136.153 port 2328 ssh2 ... |
2020-01-02 18:02:06 |
| 189.6.45.130 | attackspam | (sshd) Failed SSH login from 189.6.45.130 (BR/Brazil/bd062d82.virtua.com.br): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jan 2 10:45:45 blur sshd[21380]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.6.45.130 user=root Jan 2 10:45:47 blur sshd[21380]: Failed password for root from 189.6.45.130 port 55589 ssh2 Jan 2 10:51:39 blur sshd[22293]: Invalid user dovecot from 189.6.45.130 port 46201 Jan 2 10:51:41 blur sshd[22293]: Failed password for invalid user dovecot from 189.6.45.130 port 46201 ssh2 Jan 2 10:55:16 blur sshd[22836]: Invalid user server from 189.6.45.130 port 59147 |
2020-01-02 17:55:46 |
| 222.186.180.142 | attackbots | Jan 2 09:41:08 *** sshd[13850]: User root from 222.186.180.142 not allowed because not listed in AllowUsers |
2020-01-02 17:43:07 |
| 218.206.233.198 | attack | smtp probe/invalid login attempt |
2020-01-02 17:51:19 |
| 95.178.157.213 | attackbotsspam | Telnetd brute force attack detected by fail2ban |
2020-01-02 17:36:47 |