City: Cape Town
Region: Western Cape
Country: South Africa
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 102.67.140.215
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 32146
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;102.67.140.215. IN A
;; AUTHORITY SECTION:
. 600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022030800 1800 900 604800 86400
;; Query time: 58 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Mar 08 13:25:34 CST 2022
;; MSG SIZE rcvd: 107215.140.67.102.in-addr.arpa domain name pointer aivar.co.za.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
215.140.67.102.in-addr.arpa name = aivar.co.za.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 182.50.130.27 | attackbots | Automatic report - XMLRPC Attack |
2019-10-22 15:21:34 |
| 95.6.86.143 | attackbotsspam | UTC: 2019-10-21 port: 23/tcp |
2019-10-22 14:52:43 |
| 123.145.117.73 | attackspam | UTC: 2019-10-21 port: 23/tcp |
2019-10-22 15:12:16 |
| 193.70.2.117 | attackbots | *Port Scan* detected from 193.70.2.117 (FR/France/117.ip-193-70-2.eu). 4 hits in the last 10 seconds |
2019-10-22 14:58:56 |
| 198.27.66.144 | attack | Automatic report - XMLRPC Attack |
2019-10-22 15:20:40 |
| 159.65.155.227 | attackbots | Oct 22 02:43:02 xtremcommunity sshd\[768332\]: Invalid user 1234$ABCD from 159.65.155.227 port 57436 Oct 22 02:43:02 xtremcommunity sshd\[768332\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.155.227 Oct 22 02:43:04 xtremcommunity sshd\[768332\]: Failed password for invalid user 1234$ABCD from 159.65.155.227 port 57436 ssh2 Oct 22 02:47:32 xtremcommunity sshd\[768426\]: Invalid user 1 from 159.65.155.227 port 39126 Oct 22 02:47:32 xtremcommunity sshd\[768426\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.155.227 ... |
2019-10-22 15:01:21 |
| 107.6.171.133 | attackspam | UTC: 2019-10-21 port: 53/tcp |
2019-10-22 15:02:04 |
| 45.136.109.251 | attackbots | Oct 22 06:59:09 h2177944 kernel: \[4596222.936639\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.109.251 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=9051 PROTO=TCP SPT=53757 DPT=7488 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 22 07:02:49 h2177944 kernel: \[4596443.752480\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.109.251 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=13665 PROTO=TCP SPT=53757 DPT=7835 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 22 07:19:25 h2177944 kernel: \[4597439.469146\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.109.251 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=50828 PROTO=TCP SPT=53757 DPT=7691 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 22 07:35:55 h2177944 kernel: \[4598429.271622\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.109.251 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=40517 PROTO=TCP SPT=53757 DPT=7919 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 22 07:51:37 h2177944 kernel: \[4599370.815943\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.109.251 DST=85.214.1 |
2019-10-22 15:02:32 |
| 67.205.139.165 | attackspam | Oct 21 20:12:51 php1 sshd\[22827\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=67.205.139.165 user=root Oct 21 20:12:53 php1 sshd\[22827\]: Failed password for root from 67.205.139.165 port 48772 ssh2 Oct 21 20:16:32 php1 sshd\[23283\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=67.205.139.165 user=root Oct 21 20:16:34 php1 sshd\[23283\]: Failed password for root from 67.205.139.165 port 59470 ssh2 Oct 21 20:20:04 php1 sshd\[24701\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=67.205.139.165 user=root |
2019-10-22 14:51:02 |
| 78.29.41.121 | attack | UTC: 2019-10-21 port: 80/tcp |
2019-10-22 14:56:55 |
| 94.50.253.213 | attack | Chat Spam |
2019-10-22 15:23:02 |
| 103.37.82.118 | attack | Sent mail to target address hacked/leaked from abandonia in 2016 |
2019-10-22 14:52:15 |
| 222.186.173.154 | attackspam | Oct 22 08:52:46 tux-35-217 sshd\[23112\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.154 user=root Oct 22 08:52:48 tux-35-217 sshd\[23112\]: Failed password for root from 222.186.173.154 port 53728 ssh2 Oct 22 08:52:53 tux-35-217 sshd\[23112\]: Failed password for root from 222.186.173.154 port 53728 ssh2 Oct 22 08:52:56 tux-35-217 sshd\[23112\]: Failed password for root from 222.186.173.154 port 53728 ssh2 ... |
2019-10-22 15:03:48 |
| 185.176.27.18 | attack | 10/22/2019-02:46:33.971942 185.176.27.18 Protocol: 6 ET SCAN NMAP -sS window 1024 |
2019-10-22 14:58:20 |
| 192.99.57.32 | attackspambots | Oct 22 07:22:07 server sshd\[22262\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=32.ip-192-99-57.net user=root Oct 22 07:22:09 server sshd\[22262\]: Failed password for root from 192.99.57.32 port 41200 ssh2 Oct 22 07:27:51 server sshd\[23672\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=32.ip-192-99-57.net user=root Oct 22 07:27:53 server sshd\[23672\]: Failed password for root from 192.99.57.32 port 35326 ssh2 Oct 22 07:31:27 server sshd\[24746\]: Invalid user vncuser from 192.99.57.32 Oct 22 07:31:27 server sshd\[24746\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=32.ip-192-99-57.net ... |
2019-10-22 14:55:25 |