City: unknown
Region: unknown
Country: South Africa
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 105.212.66.91
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 43444
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;105.212.66.91. IN A
;; AUTHORITY SECTION:
. 447 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2023112203 1800 900 604800 86400
;; Query time: 16 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Nov 23 09:29:38 CST 2023
;; MSG SIZE rcvd: 10691.66.212.105.in-addr.arpa domain name pointer 105-212-66-91.access.supersonic.co.za.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
91.66.212.105.in-addr.arpa name = 105-212-66-91.access.supersonic.co.za.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 103.76.22.141 | attackspambots | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-11 02:21:33,316 INFO [amun_request_handler] PortScan Detected on Port: 445 (103.76.22.141) |
2019-07-11 16:51:19 |
| 201.245.1.107 | attackspam | Invalid user randy from 201.245.1.107 port 33320 |
2019-07-11 16:50:16 |
| 124.248.178.239 | attack | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-11 02:23:14,328 INFO [amun_request_handler] PortScan Detected on Port: 445 (124.248.178.239) |
2019-07-11 16:45:38 |
| 113.160.173.44 | attackspambots | Trying to (more than 3 packets) bruteforce (not open) Samba/Microsoft-DS port 445 |
2019-07-11 16:08:52 |
| 58.64.171.69 | attack | 445/tcp 445/tcp 445/tcp... [2019-05-11/07-11]17pkt,1pt.(tcp) |
2019-07-11 15:59:48 |
| 61.220.74.62 | attackbotsspam | 445/tcp 445/tcp 445/tcp... [2019-06-01/07-11]11pkt,1pt.(tcp) |
2019-07-11 16:11:24 |
| 77.247.110.191 | attack | Jul 11 09:29:24 h2177944 kernel: \[1154436.739175\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=77.247.110.191 DST=85.214.117.9 LEN=443 TOS=0x00 PREC=0x00 TTL=58 ID=25437 DF PROTO=UDP SPT=5069 DPT=65111 LEN=423 Jul 11 09:29:52 h2177944 kernel: \[1154464.436401\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=77.247.110.191 DST=85.214.117.9 LEN=441 TOS=0x00 PREC=0x00 TTL=58 ID=31113 DF PROTO=UDP SPT=5092 DPT=65221 LEN=421 Jul 11 09:30:07 h2177944 kernel: \[1154479.786271\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=77.247.110.191 DST=85.214.117.9 LEN=443 TOS=0x00 PREC=0x00 TTL=58 ID=34270 DF PROTO=UDP SPT=5070 DPT=65102 LEN=423 Jul 11 09:30:18 h2177944 kernel: \[1154490.973628\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=77.247.110.191 DST=85.214.117.9 LEN=441 TOS=0x00 PREC=0x00 TTL=58 ID=36530 DF PROTO=UDP SPT=5077 DPT=65030 LEN=421 Jul 11 09:30:43 h2177944 kernel: \[1154515.509588\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=77.247.110.191 DST=85.214.117.9 LEN=441 TOS=0x00 PREC=0x00 TTL=58 ID=41461 DF PROTO=UDP SPT=5063 DPT=65171 LEN |
2019-07-11 16:24:07 |
| 207.154.209.159 | attack | Jul 11 09:41:50 vps647732 sshd[21600]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.154.209.159 Jul 11 09:41:52 vps647732 sshd[21600]: Failed password for invalid user sai from 207.154.209.159 port 39948 ssh2 ... |
2019-07-11 16:20:40 |
| 190.13.149.117 | attackspambots | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-11 02:22:09,402 INFO [amun_request_handler] PortScan Detected on Port: 445 (190.13.149.117) |
2019-07-11 16:47:41 |
| 124.243.198.187 | attackspambots | Invalid user tester from 124.243.198.187 port 39758 |
2019-07-11 15:59:21 |
| 192.169.255.17 | attackspambots | [ThuJul1105:50:40.9566012019][:error][pid990:tid47793951520512][client192.169.255.17:35316][client192.169.255.17]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"\(\?:\<\|script\|\>\)"atARGS:domain.[file"/usr/local/apache.ea3/conf/modsec_rules/99_asl_jitp.conf"][line"318"][id"347147"][rev"1"][msg"Atomicorp.comWAFRules:Wordpressadmin-ajaxXSSattack"][data"admin-ajax.php"][severity"CRITICAL"][hostname"trulox.ch"][uri"/wp-admin/admin-ajax.php"][unique_id"XSayEJso6Mc81z7Me3RihQAAANg"][ThuJul1105:50:51.5634652019][:error][pid19846:tid47793945216768][client192.169.255.17:36334][client192.169.255.17]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"miglaa\?_"atARGS:action.[file"/usr/local/apache.ea3/conf/modsec_rules/99_asl_jitp.conf"][line"60"][id"334072"][rev"5"][msg"Atomicorp.comWAFRules:CVE-2019-6703Attackblocked"][severity"ALERT"][hostname"trulox.ch"][uri"/wp-admin/admin-ajax.php"][unique_id"XSayG-VLYmvG5FY1Zn3d6QAAAJU"][ThuJul1105:50:51.9962572019][:e |
2019-07-11 16:21:36 |
| 111.225.110.173 | attackbotsspam | [portscan] tcp/21 [FTP] [scan/connect: 2 time(s)] *(RWIN=65535)(07111009) |
2019-07-11 16:32:12 |
| 159.65.84.164 | attack | Jul 11 09:36:36 ns37 sshd[15775]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.84.164 Jul 11 09:36:36 ns37 sshd[15775]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.84.164 |
2019-07-11 16:20:07 |
| 180.247.250.70 | attackbotsspam | SMB Server BruteForce Attack |
2019-07-11 16:00:17 |
| 125.64.94.220 | attackbots | 11.07.2019 07:47:03 Connection to port 5901 blocked by firewall |
2019-07-11 16:18:44 |