City: unknown
Region: unknown
Country: South Africa
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 105.213.65.42
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 31401
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;105.213.65.42. IN A
;; AUTHORITY SECTION:
. 594 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022022801 1800 900 604800 86400
;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Mar 01 03:16:39 CST 2022
;; MSG SIZE rcvd: 10642.65.213.105.in-addr.arpa domain name pointer 105-213-65-42.access.mtnbusiness.co.za.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
42.65.213.105.in-addr.arpa name = 105-213-65-42.access.mtnbusiness.co.za.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 106.13.31.119 | attack | Apr 21 21:31:01 server4-pi sshd[12439]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.31.119 Apr 21 21:31:04 server4-pi sshd[12439]: Failed password for invalid user ubuntu from 106.13.31.119 port 47850 ssh2 |
2020-04-26 04:11:29 |
| 194.146.110.10 | attackbots | Apr 25 16:43:18 mout sshd[26010]: Invalid user db2yccm from 194.146.110.10 port 34700 |
2020-04-26 04:09:13 |
| 185.50.149.2 | attack | 2020-04-25 dovecot_login authenticator failed for \(\[185.50.149.2\]\) \[185.50.149.2\]: 535 Incorrect authentication data \(set_id=sys@**REMOVED**.org\) 2020-04-25 dovecot_login authenticator failed for \(\[185.50.149.2\]\) \[185.50.149.2\]: 535 Incorrect authentication data 2020-04-25 dovecot_login authenticator failed for \(\[185.50.149.2\]\) \[185.50.149.2\]: 535 Incorrect authentication data |
2020-04-26 03:43:50 |
| 151.80.42.186 | attackspam | Apr 25 21:12:19 nextcloud sshd\[10623\]: Invalid user factorio from 151.80.42.186 Apr 25 21:12:19 nextcloud sshd\[10623\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=151.80.42.186 Apr 25 21:12:21 nextcloud sshd\[10623\]: Failed password for invalid user factorio from 151.80.42.186 port 46114 ssh2 |
2020-04-26 04:17:25 |
| 120.53.9.188 | attackspam | (sshd) Failed SSH login from 120.53.9.188 (CN/China/-): 5 in the last 3600 secs |
2020-04-26 03:39:24 |
| 192.241.237.108 | attack | Unauthorized connection attempt
IP: 192.241.237.108
Ports affected
IMAP over TLS protocol (993)
Abuse Confidence rating 100%
ASN Details
AS14061 DIGITALOCEAN-ASN
United States (US)
CIDR 192.241.128.0/17
Log Date: 25/04/2020 5:47:33 PM UTC |
2020-04-26 04:04:03 |
| 83.30.65.134 | attack | Apr 25 14:12:26 nxxxxxxx sshd[5549]: Invalid user sylwester from 83.30.65.134 Apr 25 14:12:28 nxxxxxxx sshd[5549]: Failed password for invalid user sylwester from 83.30.65.134 port 39810 ssh2 Apr 25 14:17:13 nxxxxxxx sshd[6072]: Invalid user spotlight from 83.30.65.134 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=83.30.65.134 |
2020-04-26 04:03:39 |
| 198.108.67.42 | attack | port |
2020-04-26 04:01:49 |
| 185.176.27.246 | attackspam | 04/25/2020-15:43:02.415550 185.176.27.246 Protocol: 6 ET SCAN NMAP -sS window 1024 |
2020-04-26 03:47:22 |
| 165.227.15.44 | attackspam | " " |
2020-04-26 04:10:04 |
| 49.235.23.20 | attack | Apr 25 20:07:45 roki-contabo sshd\[17743\]: Invalid user ym from 49.235.23.20 Apr 25 20:07:45 roki-contabo sshd\[17743\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.23.20 Apr 25 20:07:47 roki-contabo sshd\[17743\]: Failed password for invalid user ym from 49.235.23.20 port 60096 ssh2 Apr 25 20:09:30 roki-contabo sshd\[17778\]: Invalid user vagrant from 49.235.23.20 Apr 25 20:09:30 roki-contabo sshd\[17778\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.23.20 ... |
2020-04-26 03:39:44 |
| 119.97.164.245 | attackspambots | ... |
2020-04-26 04:00:52 |
| 222.186.180.17 | attackspambots | Apr 25 21:50:29 vpn01 sshd[25796]: Failed password for root from 222.186.180.17 port 20190 ssh2 Apr 25 21:50:32 vpn01 sshd[25796]: Failed password for root from 222.186.180.17 port 20190 ssh2 ... |
2020-04-26 03:53:44 |
| 91.121.175.138 | attackbotsspam | Apr 25 14:10:11 vmd48417 sshd[9643]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.121.175.138 |
2020-04-26 04:14:26 |
| 162.243.130.8 | attackspam | firewall-block, port(s): 5672/tcp |
2020-04-26 04:13:37 |