City: unknown
Region: unknown
Country: South Africa
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 105.213.119.96
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 28634
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;105.213.119.96. IN A
;; AUTHORITY SECTION:
. 304 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022020702 1800 900 604800 86400
;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 08 11:40:41 CST 2022
;; MSG SIZE rcvd: 10796.119.213.105.in-addr.arpa domain name pointer 105-213-119-96.access.mtnbusiness.co.za.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
96.119.213.105.in-addr.arpa name = 105-213-119-96.access.mtnbusiness.co.za.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 211.252.87.90 | attack | Apr 24 14:20:39 server sshd[24856]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.252.87.90 Apr 24 14:20:41 server sshd[24856]: Failed password for invalid user libuuid from 211.252.87.90 port 46899 ssh2 Apr 24 14:25:50 server sshd[25291]: Failed password for root from 211.252.87.90 port 29438 ssh2 ... |
2020-04-24 20:35:04 |
| 201.249.99.238 | attack | firewall-block, port(s): 1433/tcp |
2020-04-24 20:32:12 |
| 80.82.77.240 | attackbotsspam | firewall-block, port(s): 80/tcp |
2020-04-24 20:56:15 |
| 89.248.160.150 | attackbotsspam | scans 12 times in preceeding hours on the ports (in chronological order) 7936 7954 7994 8500 10006 10008 10016 19222 19222 25159 27015 28003 resulting in total of 143 scans from 89.248.160.0-89.248.174.255 block. |
2020-04-24 20:26:26 |
| 60.13.231.87 | attackbotsspam | 1587730218 - 04/24/2020 14:10:18 Host: 60.13.231.87/60.13.231.87 Port: 445 TCP Blocked |
2020-04-24 20:38:02 |
| 195.54.160.243 | attack | 04/24/2020-08:17:29.532709 195.54.160.243 Protocol: 6 ET SCAN NMAP -sS window 1024 |
2020-04-24 20:36:25 |
| 142.93.145.158 | attackspam | Apr 24 13:58:07 xeon sshd[33804]: Failed password for invalid user riakcs from 142.93.145.158 port 46658 ssh2 |
2020-04-24 20:55:22 |
| 222.186.15.115 | attackbots | Apr 24 08:21:15 NPSTNNYC01T sshd[6228]: Failed password for root from 222.186.15.115 port 19710 ssh2 Apr 24 08:21:18 NPSTNNYC01T sshd[6228]: Failed password for root from 222.186.15.115 port 19710 ssh2 Apr 24 08:21:20 NPSTNNYC01T sshd[6228]: Failed password for root from 222.186.15.115 port 19710 ssh2 ... |
2020-04-24 20:22:37 |
| 122.51.167.63 | attackspambots | Apr 24 14:02:28 srv-ubuntu-dev3 sshd[7854]: Invalid user lteapp from 122.51.167.63 Apr 24 14:02:28 srv-ubuntu-dev3 sshd[7854]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.167.63 Apr 24 14:02:28 srv-ubuntu-dev3 sshd[7854]: Invalid user lteapp from 122.51.167.63 Apr 24 14:02:30 srv-ubuntu-dev3 sshd[7854]: Failed password for invalid user lteapp from 122.51.167.63 port 60792 ssh2 Apr 24 14:06:38 srv-ubuntu-dev3 sshd[8480]: Invalid user fpzsgroup from 122.51.167.63 Apr 24 14:06:38 srv-ubuntu-dev3 sshd[8480]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.167.63 Apr 24 14:06:38 srv-ubuntu-dev3 sshd[8480]: Invalid user fpzsgroup from 122.51.167.63 Apr 24 14:06:39 srv-ubuntu-dev3 sshd[8480]: Failed password for invalid user fpzsgroup from 122.51.167.63 port 49628 ssh2 Apr 24 14:10:35 srv-ubuntu-dev3 sshd[9033]: Invalid user student10 from 122.51.167.63 ... |
2020-04-24 20:20:44 |
| 122.137.180.142 | attack | firewall-block, port(s): 23/tcp |
2020-04-24 20:47:56 |
| 106.13.41.87 | attackbots | Apr 24 14:59:50 ncomp sshd[10776]: Invalid user mc2 from 106.13.41.87 Apr 24 14:59:50 ncomp sshd[10776]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.41.87 Apr 24 14:59:50 ncomp sshd[10776]: Invalid user mc2 from 106.13.41.87 Apr 24 14:59:52 ncomp sshd[10776]: Failed password for invalid user mc2 from 106.13.41.87 port 40410 ssh2 |
2020-04-24 21:00:33 |
| 103.145.13.12 | attack | Apr 24 14:12:49 debian-2gb-nbg1-2 kernel: \[9989314.302649\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=103.145.13.12 DST=195.201.40.59 LEN=441 TOS=0x08 PREC=0x20 TTL=51 ID=35745 DF PROTO=UDP SPT=5074 DPT=5060 LEN=421 |
2020-04-24 20:50:45 |
| 222.186.30.112 | attack | Apr 24 14:52:41 minden010 sshd[28499]: Failed password for root from 222.186.30.112 port 11192 ssh2 Apr 24 14:52:43 minden010 sshd[28499]: Failed password for root from 222.186.30.112 port 11192 ssh2 Apr 24 14:52:46 minden010 sshd[28499]: Failed password for root from 222.186.30.112 port 11192 ssh2 ... |
2020-04-24 20:55:57 |
| 123.207.156.64 | attackbots | Apr 24 14:00:25 h2779839 sshd[29404]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.207.156.64 user=root Apr 24 14:00:27 h2779839 sshd[29404]: Failed password for root from 123.207.156.64 port 34144 ssh2 Apr 24 14:05:19 h2779839 sshd[29492]: Invalid user vpopmail from 123.207.156.64 port 57268 Apr 24 14:05:19 h2779839 sshd[29492]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.207.156.64 Apr 24 14:05:19 h2779839 sshd[29492]: Invalid user vpopmail from 123.207.156.64 port 57268 Apr 24 14:05:21 h2779839 sshd[29492]: Failed password for invalid user vpopmail from 123.207.156.64 port 57268 ssh2 Apr 24 14:09:57 h2779839 sshd[29580]: Invalid user mac from 123.207.156.64 port 52160 Apr 24 14:09:57 h2779839 sshd[29580]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.207.156.64 Apr 24 14:09:57 h2779839 sshd[29580]: Invalid user mac from 123.207.156.64 port 521 ... |
2020-04-24 20:56:41 |
| 47.94.155.233 | attack | 47.94.155.233 - - [24/Apr/2020:14:10:03 +0200] "GET /wp-login.php HTTP/1.1" 200 5686 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 47.94.155.233 - - [24/Apr/2020:14:10:12 +0200] "POST /wp-login.php HTTP/1.1" 200 5937 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 47.94.155.233 - - [24/Apr/2020:14:10:15 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-04-24 20:40:51 |