City: unknown
Region: unknown
Country: South Africa
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 105.213.147.221
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 59889
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;105.213.147.221. IN A
;; AUTHORITY SECTION:
. 298 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022022701 1800 900 604800 86400
;; Query time: 19 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 28 14:17:11 CST 2022
;; MSG SIZE rcvd: 108221.147.213.105.in-addr.arpa domain name pointer 105-213-147-221.access.mtnbusiness.co.za.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
221.147.213.105.in-addr.arpa name = 105-213-147-221.access.mtnbusiness.co.za.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 222.186.180.6 | attackbots | Failed password for root from 222.186.180.6 port 7568 ssh2 Failed password for root from 222.186.180.6 port 7568 ssh2 Failed password for root from 222.186.180.6 port 7568 ssh2 Failed password for root from 222.186.180.6 port 7568 ssh2 |
2020-09-03 20:59:14 |
| 165.22.113.66 | attackspam | Invalid user admin from 165.22.113.66 port 58954 |
2020-09-03 20:38:57 |
| 103.206.121.103 | attack | ASP vulnerability scan - POST /FCKeditor/editor/filemanager/connectors/asp/connector.asp?Command=FileUpload&Type=File&CurrentFolder=%2F; GET /index.php?m=member&c=index&a=register&siteid=1; POST /admin_aspcms/_system/AspCms_SiteSetting.asp; GET /plus/moon.php; POST /plus/90sec.php; POST /utility/convert/index.php?a=config&source=d7.2_x2.0; POST /utility/convert/data/config.inc.php; GET /uploads/dede/sys_verifies.php?action=getfiles&refiles%5B0%5D=123&refiles%5B1%5D=%5C%22;eval$_POST%5Bysy%5D;die;//; POST /uploads/dede/sys_verifies.php?action=down; POST /index.php/api/Uploadify/preview; GET /user.php?act=login; POST /fdgq.php; POST /ufcwd.php; GET /user.php?act=login; POST /ysyqq.php; POST /zmkeq.php; GET /plus/mytag_js.php?dopost=saveedit&arrs1%5B%5D=99&arrs1%5B%5D=102&arrs1%5B%5D=103&arrs1%5B%5D=95&arrs1%5B%5D=100&arrs1%5B%5D=98&arrs1%5B%5D=112&arrs1%5B%5D=114&arrs1%5B%5D=101&arrs1%5B%5D=102&arrs1%5B%5D=105&arrs1%5B%5D=120&arrs2%5B%5D=109&arrs2%5B%5D=121&arrs2%5B%5D=116&arrs2%5B%5D=97&arrs2%5B%5D=103&arrs... |
2020-09-03 20:28:33 |
| 222.186.42.7 | attackbotsspam | Sep 3 14:15:24 minden010 sshd[26904]: Failed password for root from 222.186.42.7 port 60048 ssh2 Sep 3 14:15:26 minden010 sshd[26904]: Failed password for root from 222.186.42.7 port 60048 ssh2 Sep 3 14:15:28 minden010 sshd[26904]: Failed password for root from 222.186.42.7 port 60048 ssh2 ... |
2020-09-03 20:25:29 |
| 42.2.223.60 | attackbots | Sep 2 23:32:57 logopedia-1vcpu-1gb-nyc1-01 sshd[200771]: Failed password for root from 42.2.223.60 port 40572 ssh2 ... |
2020-09-03 20:42:44 |
| 68.183.178.111 | attack | TCP ports : 3196 / 11298 / 32452 |
2020-09-03 20:25:51 |
| 142.4.213.28 | attackbots | 142.4.213.28 - - [03/Sep/2020:12:20:42 +0000] "POST /wp-login.php HTTP/1.1" 200 2077 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "-" 142.4.213.28 - - [03/Sep/2020:12:20:44 +0000] "POST /wp-login.php HTTP/1.1" 200 2055 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "-" 142.4.213.28 - - [03/Sep/2020:12:20:46 +0000] "POST /wp-login.php HTTP/1.1" 200 2052 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "-" 142.4.213.28 - - [03/Sep/2020:12:20:49 +0000] "POST /wp-login.php HTTP/1.1" 200 2052 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "-" 142.4.213.28 - - [03/Sep/2020:12:20:50 +0000] "POST /xmlrpc.php HTTP/1.1" 200 236 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "-" |
2020-09-03 20:35:15 |
| 35.154.98.105 | attack | Sep 3 09:52:24 ns392434 sshd[11264]: Invalid user ftp1 from 35.154.98.105 port 46968 Sep 3 09:52:24 ns392434 sshd[11264]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.154.98.105 Sep 3 09:52:24 ns392434 sshd[11264]: Invalid user ftp1 from 35.154.98.105 port 46968 Sep 3 09:52:25 ns392434 sshd[11264]: Failed password for invalid user ftp1 from 35.154.98.105 port 46968 ssh2 Sep 3 09:59:41 ns392434 sshd[11355]: Invalid user pokus from 35.154.98.105 port 3416 Sep 3 09:59:41 ns392434 sshd[11355]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.154.98.105 Sep 3 09:59:41 ns392434 sshd[11355]: Invalid user pokus from 35.154.98.105 port 3416 Sep 3 09:59:43 ns392434 sshd[11355]: Failed password for invalid user pokus from 35.154.98.105 port 3416 ssh2 Sep 3 10:01:37 ns392434 sshd[11389]: Invalid user oracle from 35.154.98.105 port 34558 |
2020-09-03 20:34:28 |
| 69.63.172.88 | attackspambots | 69.63.172.88 - - [02/Sep/2020:18:49:44 +0200] "GET /awstats.pl?lang=en&output=main HTTP/1.0" 404 280 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36(KHTML, like Gecko) Chrome/61.0.3116.0 Safari/537.36 Chrome-Lighthouse" |
2020-09-03 20:31:03 |
| 149.34.19.165 | attackbots | Sep 2 22:42:12 sip sshd[18127]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.34.19.165 Sep 2 22:42:14 sip sshd[18127]: Failed password for invalid user guest from 149.34.19.165 port 53714 ssh2 Sep 3 14:03:32 sip sshd[3074]: Failed password for root from 149.34.19.165 port 41526 ssh2 |
2020-09-03 20:58:02 |
| 80.67.172.162 | attack | (sshd) Failed SSH login from 80.67.172.162 (FR/France/algrothendieck.nos-oignons.net): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 3 07:14:47 server sshd[17600]: Failed password for root from 80.67.172.162 port 40872 ssh2 Sep 3 07:14:50 server sshd[17600]: Failed password for root from 80.67.172.162 port 40872 ssh2 Sep 3 07:14:52 server sshd[17600]: Failed password for root from 80.67.172.162 port 40872 ssh2 Sep 3 07:14:55 server sshd[17600]: Failed password for root from 80.67.172.162 port 40872 ssh2 Sep 3 07:14:58 server sshd[17600]: Failed password for root from 80.67.172.162 port 40872 ssh2 |
2020-09-03 20:38:14 |
| 182.155.118.118 | attackbots | SSH_attack |
2020-09-03 20:41:38 |
| 45.40.166.136 | attack | Automatic report - XMLRPC Attack |
2020-09-03 20:48:30 |
| 168.195.244.22 | attackbotsspam | 1599065375 - 09/02/2020 18:49:35 Host: 168.195.244.22/168.195.244.22 Port: 445 TCP Blocked |
2020-09-03 20:36:50 |
| 37.235.142.10 | attackspam | Unauthorized connection attempt detected from IP address 37.235.142.10 to port 23 [T] |
2020-09-03 20:23:48 |