City: Kempton Park
Region: Gauteng
Country: South Africa
Internet Service Provider: MTN
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 105.213.95.254
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 43299
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;105.213.95.254. IN A
;; AUTHORITY SECTION:
. 535 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2023010800 1800 900 604800 86400
;; Query time: 30 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jan 08 21:50:20 CST 2023
;; MSG SIZE rcvd: 107254.95.213.105.in-addr.arpa domain name pointer 105-213-95-254.access.mtnbusiness.co.za.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
254.95.213.105.in-addr.arpa name = 105-213-95-254.access.mtnbusiness.co.za.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 115.78.232.152 | attack | Aug 16 00:59:35 ns41 sshd[29262]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.78.232.152 |
2019-08-16 08:02:44 |
| 148.70.71.137 | attack | Aug 16 00:41:50 hosting sshd[3769]: Invalid user up2date from 148.70.71.137 port 46402 ... |
2019-08-16 07:53:26 |
| 187.32.125.210 | attack | 445/tcp [2019-08-15]1pkt |
2019-08-16 07:29:33 |
| 54.36.150.20 | attack | Automatic report - Banned IP Access |
2019-08-16 07:36:52 |
| 203.29.27.64 | attackbots | 445/tcp [2019-08-15]1pkt |
2019-08-16 08:04:36 |
| 111.183.121.44 | attack | DATE:2019-08-15 22:17:42, IP:111.183.121.44, PORT:ssh SSH brute force auth (ermes) |
2019-08-16 08:01:29 |
| 111.231.222.173 | attackspambots | Aug 16 00:15:33 server sshd\[20722\]: Invalid user 123456 from 111.231.222.173 port 33904 Aug 16 00:15:33 server sshd\[20722\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.222.173 Aug 16 00:15:35 server sshd\[20722\]: Failed password for invalid user 123456 from 111.231.222.173 port 33904 ssh2 Aug 16 00:19:35 server sshd\[22859\]: Invalid user 123456 from 111.231.222.173 port 42144 Aug 16 00:19:35 server sshd\[22859\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.222.173 |
2019-08-16 08:00:39 |
| 58.87.106.183 | attackspambots | 2019-08-15T20:17:57.468242abusebot-7.cloudsearch.cf sshd\[18146\]: Invalid user lorelei from 58.87.106.183 port 39840 |
2019-08-16 07:49:28 |
| 190.200.165.114 | attackspambots | 445/tcp [2019-08-15]1pkt |
2019-08-16 07:45:15 |
| 129.28.166.212 | attackspambots | Automatic report |
2019-08-16 07:35:10 |
| 201.140.122.242 | attackspam | Unauthorised access (Aug 15) SRC=201.140.122.242 LEN=52 TTL=117 ID=23255 DF TCP DPT=445 WINDOW=8192 SYN |
2019-08-16 08:10:27 |
| 159.65.6.57 | attackbotsspam | Invalid user penelope from 159.65.6.57 port 51844 |
2019-08-16 08:02:13 |
| 162.220.165.170 | attackspam | Splunk® : port scan detected: Aug 15 17:55:02 testbed kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=82:c6:52:d1:6e:53:64:c3:d6:0b:ef:f0:08:00 SRC=162.220.165.170 DST=104.248.11.191 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=54321 PROTO=TCP SPT=55482 DPT=8088 WINDOW=65535 RES=0x00 SYN URGP=0 |
2019-08-16 07:41:50 |
| 82.118.242.128 | attackbots | SSH Brute-Force attacks |
2019-08-16 07:53:54 |
| 81.183.213.222 | attack | Aug 16 01:25:02 eventyay sshd[13556]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.183.213.222 Aug 16 01:25:05 eventyay sshd[13556]: Failed password for invalid user andi from 81.183.213.222 port 34017 ssh2 Aug 16 01:29:30 eventyay sshd[14881]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.183.213.222 ... |
2019-08-16 07:29:50 |