City: unknown
Region: unknown
Country: South Africa
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 105.213.74.21
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 46311
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;105.213.74.21. IN A
;; AUTHORITY SECTION:
. 505 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022022701 1800 900 604800 86400
;; Query time: 74 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 28 14:04:35 CST 2022
;; MSG SIZE rcvd: 10621.74.213.105.in-addr.arpa domain name pointer 105-213-74-21.access.mtnbusiness.co.za.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
21.74.213.105.in-addr.arpa name = 105-213-74-21.access.mtnbusiness.co.za.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 46.217.163.158 | attackbots | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/46.217.163.158/ MK - 1H : (5) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : MK NAME ASN : ASN6821 IP : 46.217.163.158 CIDR : 46.217.163.0/24 PREFIX COUNT : 263 UNIQUE IP COUNT : 314624 ATTACKS DETECTED ASN6821 : 1H - 1 3H - 1 6H - 1 12H - 2 24H - 2 DateTime : 2019-11-10 17:06:14 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery |
2019-11-11 04:28:44 |
| 37.59.119.181 | attackbots | 2019-11-10T17:43:57.234564abusebot-7.cloudsearch.cf sshd\[13377\]: Invalid user testwww123 from 37.59.119.181 port 56088 |
2019-11-11 04:34:02 |
| 39.87.124.149 | attackbotsspam | Connection by 39.87.124.149 on port: 23 got caught by honeypot at 11/10/2019 3:05:59 PM |
2019-11-11 04:35:56 |
| 35.205.240.168 | attack | invalid login attempt |
2019-11-11 04:15:39 |
| 200.35.50.97 | attackspambots | Nov 10 12:50:47 HOSTNAME sshd[27098]: Connection closed by 200.35.50.97 port 41134 [preauth] Nov 10 16:10:23 HOSTNAME sshd[27827]: Connection closed by 200.35.50.97 port 59030 [preauth] Nov 10 16:52:24 HOSTNAME sshd[27964]: Invalid user mustaqh01 from 200.35.50.97 port 56092 Nov 10 16:52:24 HOSTNAME sshd[27964]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.35.50.97 Nov 10 16:52:26 HOSTNAME sshd[27964]: Failed password for invalid user mustaqh01 from 200.35.50.97 port 56092 ssh2 Nov 10 16:52:26 HOSTNAME sshd[27964]: Connection closed by 200.35.50.97 port 56092 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=200.35.50.97 |
2019-11-11 04:09:54 |
| 106.13.143.111 | attackbotsspam | Nov 10 20:59:58 MK-Soft-VM8 sshd[20530]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.143.111 Nov 10 21:00:01 MK-Soft-VM8 sshd[20530]: Failed password for invalid user xiao from 106.13.143.111 port 34320 ssh2 ... |
2019-11-11 04:36:57 |
| 142.93.33.62 | attackbots | Fail2Ban - SSH Bruteforce Attempt |
2019-11-11 04:29:40 |
| 125.118.104.237 | attackspambots | SSH/22 MH Probe, BF, Hack - |
2019-11-11 04:30:55 |
| 185.212.170.139 | attackspam | Lines containing failures of 185.212.170.139 Nov 10 16:52:14 shared06 sshd[11854]: Bad protocol version identification '\026\003\001' from 185.212.170.139 port 53661 Nov 10 16:52:15 shared06 sshd[11857]: Bad protocol version identification 'GET / HTTP/1.0' from 185.212.170.139 port 56721 Nov 10 16:52:41 shared06 proftpd: pam_unix(proftpd:auth): authentication failure; logname= uid=0 euid=0 tty=/dev/ftpd11888 ruser=ftp rhost=185.212.170.139 user=ftp Nov 10 16:53:27 shared06 sshd[11952]: Did not receive identification string from 185.212.170.139 port 46219 Nov 10 16:53:29 shared06 sshd[11953]: Invalid user OpenVAS-VT from 185.212.170.139 port 40025 Nov 10 16:53:29 shared06 sshd[11953]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.212.170.139 Nov 10 16:53:31 shared06 sshd[11953]: Failed password for invalid user OpenVAS-VT from 185.212.170.139 port 40025 ssh2 Nov 10 16:53:31 shared06 sshd[11953]: Received disconnect from 185.2........ ------------------------------ |
2019-11-11 04:14:17 |
| 106.13.144.78 | attackspambots | Nov 10 17:06:21 vmd17057 sshd\[14367\]: Invalid user brukernavn from 106.13.144.78 port 46648 Nov 10 17:06:21 vmd17057 sshd\[14367\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.144.78 Nov 10 17:06:22 vmd17057 sshd\[14367\]: Failed password for invalid user brukernavn from 106.13.144.78 port 46648 ssh2 ... |
2019-11-11 04:21:24 |
| 202.195.100.198 | attackbots | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/202.195.100.198/ CN - 1H : (128) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : CN NAME ASN : ASN24361 IP : 202.195.100.198 CIDR : 202.195.96.0/20 PREFIX COUNT : 462 UNIQUE IP COUNT : 1265152 ATTACKS DETECTED ASN24361 : 1H - 1 3H - 1 6H - 1 12H - 1 24H - 2 DateTime : 2019-11-10 17:06:19 INFO : Port MAX SCAN Scan Detected and Blocked by ADMIN - data recovery |
2019-11-11 04:23:11 |
| 129.211.131.152 | attack | 2019-11-10T18:50:12.309179lon01.zurich-datacenter.net sshd\[15365\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.131.152 user=root 2019-11-10T18:50:13.950309lon01.zurich-datacenter.net sshd\[15365\]: Failed password for root from 129.211.131.152 port 55498 ssh2 2019-11-10T18:54:18.989202lon01.zurich-datacenter.net sshd\[15448\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.131.152 user=root 2019-11-10T18:54:21.735772lon01.zurich-datacenter.net sshd\[15448\]: Failed password for root from 129.211.131.152 port 46122 ssh2 2019-11-10T18:58:25.020710lon01.zurich-datacenter.net sshd\[15525\]: Invalid user hung from 129.211.131.152 port 36746 ... |
2019-11-11 04:35:28 |
| 123.31.29.203 | attackbotsspam | Nov 10 17:05:46 vmd17057 sshd\[14303\]: Invalid user yoyo from 123.31.29.203 port 46862 Nov 10 17:05:46 vmd17057 sshd\[14303\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.31.29.203 Nov 10 17:05:48 vmd17057 sshd\[14303\]: Failed password for invalid user yoyo from 123.31.29.203 port 46862 ssh2 ... |
2019-11-11 04:41:19 |
| 34.200.251.207 | attack | Nov 10 18:39:17 srv-ubuntu-dev3 sshd[7717]: Invalid user butt from 34.200.251.207 Nov 10 18:39:17 srv-ubuntu-dev3 sshd[7717]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.200.251.207 Nov 10 18:39:17 srv-ubuntu-dev3 sshd[7717]: Invalid user butt from 34.200.251.207 Nov 10 18:39:19 srv-ubuntu-dev3 sshd[7717]: Failed password for invalid user butt from 34.200.251.207 port 42926 ssh2 Nov 10 18:42:55 srv-ubuntu-dev3 sshd[8027]: Invalid user test from 34.200.251.207 Nov 10 18:42:55 srv-ubuntu-dev3 sshd[8027]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.200.251.207 Nov 10 18:42:55 srv-ubuntu-dev3 sshd[8027]: Invalid user test from 34.200.251.207 Nov 10 18:42:57 srv-ubuntu-dev3 sshd[8027]: Failed password for invalid user test from 34.200.251.207 port 52094 ssh2 Nov 10 18:46:35 srv-ubuntu-dev3 sshd[8306]: Invalid user synslab from 34.200.251.207 ... |
2019-11-11 04:34:51 |
| 222.186.169.194 | attackbotsspam | Nov 10 21:01:45 vpn01 sshd[3278]: Failed password for root from 222.186.169.194 port 45388 ssh2 Nov 10 21:01:48 vpn01 sshd[3278]: Failed password for root from 222.186.169.194 port 45388 ssh2 ... |
2019-11-11 04:07:24 |