City: Klerksdorp
Region: Province of North West
Country: South Africa
Internet Service Provider: Telkom SA Ltd.
Hostname: unknown
Organization: unknown
Usage Type: unknown
| Type | Details | Datetime |
|---|---|---|
| attack | Automatic report - Port Scan Attack |
2019-11-06 13:57:29 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 105.225.139.21
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 31581
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;105.225.139.21. IN A
;; AUTHORITY SECTION:
. 469 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019110501 1800 900 604800 86400
;; Query time: 129 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Nov 06 13:57:24 CST 2019
;; MSG SIZE rcvd: 11821.139.225.105.in-addr.arpa domain name pointer 139-225-105-21.north.dsl.telkomsa.net.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
21.139.225.105.in-addr.arpa name = 139-225-105-21.north.dsl.telkomsa.net.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 222.186.169.194 | attack | Mar 22 00:12:06 sso sshd[22180]: Failed password for root from 222.186.169.194 port 25732 ssh2 Mar 22 00:12:16 sso sshd[22180]: Failed password for root from 222.186.169.194 port 25732 ssh2 ... |
2020-03-22 07:27:14 |
| 10.132.72.92 | normal | Admin |
2020-03-22 07:30:01 |
| 114.67.68.30 | attackbotsspam | Invalid user marva from 114.67.68.30 port 58744 |
2020-03-22 07:21:01 |
| 42.104.97.228 | attackbotsspam | Invalid user protocol from 42.104.97.228 port 26093 |
2020-03-22 07:30:56 |
| 123.195.99.9 | attackbotsspam | Mar 22 00:33:01 lukav-desktop sshd\[22094\]: Invalid user ix from 123.195.99.9 Mar 22 00:33:01 lukav-desktop sshd\[22094\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.195.99.9 Mar 22 00:33:03 lukav-desktop sshd\[22094\]: Failed password for invalid user ix from 123.195.99.9 port 57880 ssh2 Mar 22 00:37:29 lukav-desktop sshd\[31405\]: Invalid user iq from 123.195.99.9 Mar 22 00:37:29 lukav-desktop sshd\[31405\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.195.99.9 |
2020-03-22 06:59:50 |
| 109.173.40.60 | attack | (sshd) Failed SSH login from 109.173.40.60 (RU/Russia/broadband-109-173-40-60.ip.moscow.rt.ru): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Mar 21 22:04:49 elude sshd[18974]: Invalid user crystle from 109.173.40.60 port 60536 Mar 21 22:04:51 elude sshd[18974]: Failed password for invalid user crystle from 109.173.40.60 port 60536 ssh2 Mar 21 22:16:27 elude sshd[19702]: Invalid user zm from 109.173.40.60 port 57774 Mar 21 22:16:28 elude sshd[19702]: Failed password for invalid user zm from 109.173.40.60 port 57774 ssh2 Mar 21 22:20:08 elude sshd[19925]: Invalid user potsdam from 109.173.40.60 port 45386 |
2020-03-22 06:56:02 |
| 157.245.179.203 | attack | Invalid user vagrant from 157.245.179.203 port 45596 |
2020-03-22 07:17:18 |
| 91.243.167.131 | attackbotsspam | Automatic report - Port Scan Attack |
2020-03-22 07:00:07 |
| 222.186.173.201 | attackspam | 2020-03-21T22:25:18.556720shield sshd\[27893\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.201 user=root 2020-03-21T22:25:20.591137shield sshd\[27893\]: Failed password for root from 222.186.173.201 port 31756 ssh2 2020-03-21T22:25:24.310289shield sshd\[27893\]: Failed password for root from 222.186.173.201 port 31756 ssh2 2020-03-21T22:25:27.579889shield sshd\[27893\]: Failed password for root from 222.186.173.201 port 31756 ssh2 2020-03-21T22:25:30.595025shield sshd\[27893\]: Failed password for root from 222.186.173.201 port 31756 ssh2 |
2020-03-22 07:04:09 |
| 218.92.0.171 | attackspam | Mar 22 00:25:12 SilenceServices sshd[20617]: Failed password for root from 218.92.0.171 port 55316 ssh2 Mar 22 00:25:25 SilenceServices sshd[20617]: error: maximum authentication attempts exceeded for root from 218.92.0.171 port 55316 ssh2 [preauth] Mar 22 00:25:30 SilenceServices sshd[22087]: Failed password for root from 218.92.0.171 port 22209 ssh2 |
2020-03-22 07:25:45 |
| 222.186.42.75 | attack | $f2bV_matches |
2020-03-22 07:03:07 |
| 118.27.16.74 | attack | 2020-03-21T23:16:08.263831rocketchat.forhosting.nl sshd[32719]: Invalid user raph from 118.27.16.74 port 38174 2020-03-21T23:16:10.463724rocketchat.forhosting.nl sshd[32719]: Failed password for invalid user raph from 118.27.16.74 port 38174 ssh2 2020-03-21T23:26:25.858511rocketchat.forhosting.nl sshd[434]: Invalid user melis from 118.27.16.74 port 35216 ... |
2020-03-22 07:12:08 |
| 106.12.21.124 | attack | Invalid user larisa from 106.12.21.124 port 54968 |
2020-03-22 07:16:47 |
| 165.227.77.120 | attack | $f2bV_matches |
2020-03-22 07:11:55 |
| 59.0.99.94 | attackbots | Mar 21 22:08:30 mout sshd[12325]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.0.99.94 user=pi Mar 21 22:08:32 mout sshd[12325]: Failed password for pi from 59.0.99.94 port 46830 ssh2 Mar 21 22:08:33 mout sshd[12325]: Connection closed by 59.0.99.94 port 46830 [preauth] |
2020-03-22 07:19:03 |