City: Cape Town
Region: Western Cape
Country: South Africa
Internet Service Provider: MTN
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 105.209.145.159
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49358
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;105.209.145.159. IN A
;; AUTHORITY SECTION:
. 384 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2021072301 1800 900 604800 86400
;; Query time: 16 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jul 24 05:16:22 CST 2021
;; MSG SIZE rcvd: 108b'159.145.209.105.in-addr.arpa domain name pointer 105-209-145-159.access.mtnbusiness.co.za.
'Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
159.145.209.105.in-addr.arpa name = 105-209-145-159.access.mtnbusiness.co.za.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 49.88.112.111 | attackspam | $f2bV_matches |
2020-05-14 18:49:53 |
| 201.187.110.98 | attackspambots | Unauthorized connection attempt from IP address 201.187.110.98 on Port 445(SMB) |
2020-05-14 19:01:12 |
| 14.1.224.110 | attackbotsspam | SSH Brute-Force reported by Fail2Ban |
2020-05-14 18:33:39 |
| 114.141.57.12 | attack | Lines containing failures of 114.141.57.12 (max 1000) May 14 05:08:36 HOSTNAME sshd[30865]: Did not receive identification string from 114.141.57.12 port 59837 May 14 05:08:39 HOSTNAME sshd[30866]: Address 114.141.57.12 maps to opis.smartlinkgm.net.id, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! May 14 05:08:39 HOSTNAME sshd[30866]: Invalid user 888888 from 114.141.57.12 port 60066 May 14 05:08:39 HOSTNAME sshd[30866]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.141.57.12 May 14 05:08:41 HOSTNAME sshd[30866]: Failed password for invalid user 888888 from 114.141.57.12 port 60066 ssh2 May 14 05:08:41 HOSTNAME sshd[30866]: Connection closed by 114.141.57.12 port 60066 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=114.141.57.12 |
2020-05-14 18:49:37 |
| 49.233.159.65 | attackspam | 2020-05-14T12:24:56.790007vps773228.ovh.net sshd[3140]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.159.65 2020-05-14T12:24:56.781066vps773228.ovh.net sshd[3140]: Invalid user test from 49.233.159.65 port 39546 2020-05-14T12:24:59.151098vps773228.ovh.net sshd[3140]: Failed password for invalid user test from 49.233.159.65 port 39546 ssh2 2020-05-14T12:28:13.910405vps773228.ovh.net sshd[3178]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.159.65 user=root 2020-05-14T12:28:15.649352vps773228.ovh.net sshd[3178]: Failed password for root from 49.233.159.65 port 43162 ssh2 ... |
2020-05-14 19:11:33 |
| 14.239.35.39 | attackspambots | May 14 05:07:04 vbuntu sshd[7099]: warning: /etc/hosts.allow, line 11: host name/address mismatch: 14.239.35.39 != static.vnpt.vn May 14 05:07:04 vbuntu sshd[7099]: refused connect from 14.239.35.39 (14.239.35.39) May 14 05:07:04 vbuntu sshd[7100]: warning: /etc/hosts.allow, line 11: host name/address mismatch: 14.239.35.39 != static.vnpt.vn May 14 05:07:04 vbuntu sshd[7100]: refused connect from 14.239.35.39 (14.239.35.39) ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=14.239.35.39 |
2020-05-14 18:31:57 |
| 222.186.173.180 | attackspambots | May 14 10:57:16 124388 sshd[14592]: Failed password for root from 222.186.173.180 port 48708 ssh2 May 14 10:57:19 124388 sshd[14592]: Failed password for root from 222.186.173.180 port 48708 ssh2 May 14 10:57:22 124388 sshd[14592]: Failed password for root from 222.186.173.180 port 48708 ssh2 May 14 10:57:25 124388 sshd[14592]: Failed password for root from 222.186.173.180 port 48708 ssh2 May 14 10:57:25 124388 sshd[14592]: error: maximum authentication attempts exceeded for root from 222.186.173.180 port 48708 ssh2 [preauth] |
2020-05-14 19:05:45 |
| 103.210.106.208 | attackbots | May 14 08:27:09 124388 sshd[11199]: Invalid user tortoisesvn from 103.210.106.208 port 53742 May 14 08:27:09 124388 sshd[11199]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.210.106.208 May 14 08:27:09 124388 sshd[11199]: Invalid user tortoisesvn from 103.210.106.208 port 53742 May 14 08:27:11 124388 sshd[11199]: Failed password for invalid user tortoisesvn from 103.210.106.208 port 53742 ssh2 May 14 08:31:39 124388 sshd[11319]: Invalid user ubuntu from 103.210.106.208 port 36260 |
2020-05-14 18:38:44 |
| 103.10.44.31 | attackspambots | Invalid user aws from 103.10.44.31 port 38282 |
2020-05-14 18:37:23 |
| 31.220.1.210 | attackbotsspam | May 14 10:30:42 srv2 sshd\[23269\]: Invalid user admin from 31.220.1.210 port 42178 May 14 10:30:46 srv2 sshd\[23273\]: Invalid user ubuntu from 31.220.1.210 port 46984 May 14 10:30:52 srv2 sshd\[23275\]: Invalid user oracle from 31.220.1.210 port 53490 |
2020-05-14 18:29:02 |
| 23.129.64.202 | attack | IDS admin |
2020-05-14 18:53:07 |
| 130.162.64.72 | attackbotsspam | May 14 07:58:58 rotator sshd\[30699\]: Failed password for root from 130.162.64.72 port 9247 ssh2May 14 08:02:02 rotator sshd\[31498\]: Invalid user ts3server4 from 130.162.64.72May 14 08:02:03 rotator sshd\[31498\]: Failed password for invalid user ts3server4 from 130.162.64.72 port 35348 ssh2May 14 08:05:11 rotator sshd\[31834\]: Invalid user donna from 130.162.64.72May 14 08:05:13 rotator sshd\[31834\]: Failed password for invalid user donna from 130.162.64.72 port 61450 ssh2May 14 08:08:28 rotator sshd\[32329\]: Invalid user susan from 130.162.64.72 ... |
2020-05-14 18:54:24 |
| 27.72.124.168 | attackbotsspam | Invalid user tit0nich from 27.72.124.168 port 56438 |
2020-05-14 18:43:55 |
| 14.231.168.237 | attackbotsspam | Triggered: repeated knocking on closed ports. |
2020-05-14 19:00:13 |
| 162.158.62.45 | attackbotsspam | WEB SPAM: Contact your doctor or health care provider right away if any of these apply to you. buy doxycycline boots Buy Doxycycline 100mg Capsules Online. doxycycline 100mg for sale - antibiotics doxycycline |
2020-05-14 18:30:16 |