City: unknown
Region: unknown
Country: South Africa
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 105.213.109.33
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 60651
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;105.213.109.33. IN A
;; AUTHORITY SECTION:
. 596 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022022800 1800 900 604800 86400
;; Query time: 66 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 28 16:16:27 CST 2022
;; MSG SIZE rcvd: 10733.109.213.105.in-addr.arpa domain name pointer 105-213-109-33.access.mtnbusiness.co.za.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
33.109.213.105.in-addr.arpa name = 105-213-109-33.access.mtnbusiness.co.za.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 58.39.51.161 | attack | Unauthorized connection attempt from IP address 58.39.51.161 on Port 445(SMB) |
2019-09-05 17:21:11 |
| 1.179.167.197 | attackbots | Unauthorized connection attempt from IP address 1.179.167.197 on Port 445(SMB) |
2019-09-05 16:54:04 |
| 185.176.27.178 | attack | Sep 5 10:19:57 h2177944 kernel: \[548206.440906\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.176.27.178 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=7904 PROTO=TCP SPT=51912 DPT=13746 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 5 10:25:10 h2177944 kernel: \[548519.150167\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.176.27.178 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=32902 PROTO=TCP SPT=51912 DPT=35334 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 5 10:28:54 h2177944 kernel: \[548743.214432\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.176.27.178 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=50006 PROTO=TCP SPT=51912 DPT=52908 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 5 10:29:55 h2177944 kernel: \[548804.339444\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.176.27.178 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=37620 PROTO=TCP SPT=51912 DPT=39878 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 5 10:34:50 h2177944 kernel: \[549099.596132\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.176.27.178 DST=85.214.11 |
2019-09-05 16:59:06 |
| 89.36.215.178 | attackbotsspam | Sep 5 08:36:24 hcbbdb sshd\[24224\]: Invalid user user from 89.36.215.178 Sep 5 08:36:24 hcbbdb sshd\[24224\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.36.215.178 Sep 5 08:36:26 hcbbdb sshd\[24224\]: Failed password for invalid user user from 89.36.215.178 port 40742 ssh2 Sep 5 08:40:41 hcbbdb sshd\[24661\]: Invalid user ts from 89.36.215.178 Sep 5 08:40:41 hcbbdb sshd\[24661\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.36.215.178 |
2019-09-05 16:44:23 |
| 178.128.170.202 | attackspambots | /wp-login.php |
2019-09-05 17:18:56 |
| 59.83.214.10 | attack | Sep 5 11:04:01 OPSO sshd\[6992\]: Invalid user developer from 59.83.214.10 port 53163 Sep 5 11:04:01 OPSO sshd\[6992\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.83.214.10 Sep 5 11:04:03 OPSO sshd\[6992\]: Failed password for invalid user developer from 59.83.214.10 port 53163 ssh2 Sep 5 11:08:23 OPSO sshd\[7549\]: Invalid user developer from 59.83.214.10 port 41538 Sep 5 11:08:23 OPSO sshd\[7549\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.83.214.10 |
2019-09-05 17:20:20 |
| 41.84.228.65 | attack | Sep 4 22:26:08 web1 sshd\[13486\]: Invalid user kafka from 41.84.228.65 Sep 4 22:26:08 web1 sshd\[13486\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.84.228.65 Sep 4 22:26:09 web1 sshd\[13486\]: Failed password for invalid user kafka from 41.84.228.65 port 57228 ssh2 Sep 4 22:34:41 web1 sshd\[14233\]: Invalid user sinusbot from 41.84.228.65 Sep 4 22:34:41 web1 sshd\[14233\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.84.228.65 |
2019-09-05 17:13:47 |
| 112.85.42.171 | attackbots | Sep 5 10:37:47 MK-Soft-Root2 sshd\[32115\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.171 user=root Sep 5 10:37:49 MK-Soft-Root2 sshd\[32115\]: Failed password for root from 112.85.42.171 port 36139 ssh2 Sep 5 10:37:52 MK-Soft-Root2 sshd\[32115\]: Failed password for root from 112.85.42.171 port 36139 ssh2 ... |
2019-09-05 17:07:58 |
| 125.27.157.78 | attack | Unauthorized connection attempt from IP address 125.27.157.78 on Port 445(SMB) |
2019-09-05 16:42:04 |
| 51.79.65.158 | attackspambots | Sep 5 12:08:37 www sshd\[117237\]: Invalid user temp from 51.79.65.158 Sep 5 12:08:37 www sshd\[117237\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.79.65.158 Sep 5 12:08:39 www sshd\[117237\]: Failed password for invalid user temp from 51.79.65.158 port 49224 ssh2 ... |
2019-09-05 17:18:05 |
| 45.33.19.168 | attackbotsspam | scan z |
2019-09-05 16:58:17 |
| 213.6.8.38 | attackspambots | Sep 5 08:29:53 hb sshd\[1295\]: Invalid user hadoopuser from 213.6.8.38 Sep 5 08:29:53 hb sshd\[1295\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.6.8.38 Sep 5 08:29:55 hb sshd\[1295\]: Failed password for invalid user hadoopuser from 213.6.8.38 port 37382 ssh2 Sep 5 08:35:06 hb sshd\[1767\]: Invalid user teamspeak from 213.6.8.38 Sep 5 08:35:06 hb sshd\[1767\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.6.8.38 |
2019-09-05 16:42:49 |
| 123.232.139.99 | attackbots | Sep 5 10:34:16 icinga sshd[13537]: Failed password for root from 123.232.139.99 port 52370 ssh2 Sep 5 10:34:29 icinga sshd[13537]: error: maximum authentication attempts exceeded for root from 123.232.139.99 port 52370 ssh2 [preauth] ... |
2019-09-05 17:25:51 |
| 60.29.241.2 | attackbotsspam | Sep 5 11:04:03 lnxmysql61 sshd[9773]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.29.241.2 Sep 5 11:04:04 lnxmysql61 sshd[9773]: Failed password for invalid user user from 60.29.241.2 port 21355 ssh2 Sep 5 11:08:39 lnxmysql61 sshd[10291]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.29.241.2 |
2019-09-05 17:12:43 |
| 165.169.241.28 | attackbotsspam | Sep 4 23:06:33 php1 sshd\[5395\]: Invalid user test from 165.169.241.28 Sep 4 23:06:33 php1 sshd\[5395\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.169.241.28 Sep 4 23:06:35 php1 sshd\[5395\]: Failed password for invalid user test from 165.169.241.28 port 53372 ssh2 Sep 4 23:12:48 php1 sshd\[6021\]: Invalid user teamspeak3 from 165.169.241.28 Sep 4 23:12:48 php1 sshd\[6021\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.169.241.28 |
2019-09-05 17:16:29 |