City: Johannesburg
Region: Gauteng
Country: South Africa
Internet Service Provider: MTN
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 105.213.85.188
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 7296
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;105.213.85.188. IN A
;; AUTHORITY SECTION:
. 593 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022030100 1800 900 604800 86400
;; Query time: 24 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Mar 01 15:49:05 CST 2022
;; MSG SIZE rcvd: 107188.85.213.105.in-addr.arpa domain name pointer 105-213-85-188.access.mtnbusiness.co.za.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
188.85.213.105.in-addr.arpa name = 105-213-85-188.access.mtnbusiness.co.za.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 181.49.117.31 | attackbotsspam | Repeated brute force against a port |
2019-10-31 17:37:50 |
| 118.96.150.61 | attack | 445/tcp [2019-10-31]1pkt |
2019-10-31 18:08:09 |
| 42.113.183.91 | attackspam | 445/tcp [2019-10-31]1pkt |
2019-10-31 17:46:50 |
| 117.88.220.165 | attackspambots | 1433/tcp [2019-10-31]1pkt |
2019-10-31 17:46:31 |
| 37.211.15.156 | attack | 23/tcp [2019-10-31]1pkt |
2019-10-31 17:39:24 |
| 129.204.201.9 | attackbotsspam | Oct 31 06:55:14 bouncer sshd\[32635\]: Invalid user kedacom1 from 129.204.201.9 port 35122 Oct 31 06:55:14 bouncer sshd\[32635\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.201.9 Oct 31 06:55:16 bouncer sshd\[32635\]: Failed password for invalid user kedacom1 from 129.204.201.9 port 35122 ssh2 ... |
2019-10-31 17:36:56 |
| 112.172.147.34 | attackbotsspam | 2019-10-31T03:39:59.574536shield sshd\[1815\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.172.147.34 user=root 2019-10-31T03:40:00.876458shield sshd\[1815\]: Failed password for root from 112.172.147.34 port 31954 ssh2 2019-10-31T03:44:33.225166shield sshd\[3211\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.172.147.34 user=root 2019-10-31T03:44:35.130913shield sshd\[3211\]: Failed password for root from 112.172.147.34 port 13773 ssh2 2019-10-31T03:49:07.529263shield sshd\[4499\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.172.147.34 user=root |
2019-10-31 17:51:54 |
| 46.151.210.60 | attack | ... |
2019-10-31 18:00:54 |
| 212.24.46.6 | attackspambots | 23/tcp [2019-10-31]1pkt |
2019-10-31 17:55:59 |
| 37.187.131.203 | attackspam | Oct 30 23:48:24 Tower sshd[4256]: Connection from 37.187.131.203 port 60890 on 192.168.10.220 port 22 Oct 30 23:48:25 Tower sshd[4256]: Failed password for root from 37.187.131.203 port 60890 ssh2 Oct 30 23:48:25 Tower sshd[4256]: Received disconnect from 37.187.131.203 port 60890:11: Bye Bye [preauth] Oct 30 23:48:25 Tower sshd[4256]: Disconnected from authenticating user root 37.187.131.203 port 60890 [preauth] |
2019-10-31 18:05:22 |
| 188.168.20.34 | attackspam | port scan and connect, tcp 8080 (http-proxy) |
2019-10-31 17:43:14 |
| 83.211.39.33 | attackbots | 445/tcp [2019-10-31]1pkt |
2019-10-31 17:43:51 |
| 116.58.242.174 | attack | 1433/tcp [2019-10-31]1pkt |
2019-10-31 18:02:39 |
| 131.130.9.248 | attackspam | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/131.130.9.248/ AT - 1H : (3) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : AT NAME ASN : ASN760 IP : 131.130.9.248 CIDR : 131.130.0.0/16 PREFIX COUNT : 7 UNIQUE IP COUNT : 99584 ATTACKS DETECTED ASN760 : 1H - 1 3H - 1 6H - 1 12H - 1 24H - 1 DateTime : 2019-10-31 04:48:57 INFO : HACK ! - Looking for resource vulnerabilities Scan Detected and Blocked by ADMIN - data recovery |
2019-10-31 17:58:05 |
| 118.25.125.189 | attackbotsspam | Oct 31 09:36:53 vps01 sshd[11589]: Failed password for root from 118.25.125.189 port 46786 ssh2 |
2019-10-31 17:35:05 |