City: unknown
Region: unknown
Country: South Africa
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 105.244.182.42
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 31055
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;105.244.182.42. IN A
;; AUTHORITY SECTION:
. 141 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022020701 1800 900 604800 86400
;; Query time: 19 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 08 04:29:24 CST 2022
;; MSG SIZE rcvd: 10742.182.244.105.in-addr.arpa domain name pointer vc-gp-n-105-244-182-42.umts.vodacom.co.za.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
42.182.244.105.in-addr.arpa name = vc-gp-n-105-244-182-42.umts.vodacom.co.za.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 177.130.2.189 | attack | Repeated RDP login failures. Last user: User |
2020-03-10 21:02:47 |
| 125.64.94.221 | attack | 125.64.94.221 was recorded 14 times by 9 hosts attempting to connect to the following ports: 2086,2601,36,32795,1042,11211,8765,6080,28017,8885,32750,8025,2052. Incident counter (4h, 24h, all-time): 14, 60, 3949 |
2020-03-10 20:20:22 |
| 121.46.29.116 | attack | $f2bV_matches |
2020-03-10 20:35:39 |
| 77.70.96.195 | attackbots | Mar 10 09:49:46 *** sshd[17243]: User root from 77.70.96.195 not allowed because not listed in AllowUsers |
2020-03-10 20:24:16 |
| 218.92.0.145 | attackspam | Automatic report BANNED IP |
2020-03-10 20:17:15 |
| 185.176.27.18 | attackspam | firewall-block, port(s): 46143/tcp, 46145/tcp, 46150/tcp, 46199/tcp, 46206/tcp, 46208/tcp, 46235/tcp |
2020-03-10 20:22:09 |
| 1.53.250.136 | attackspambots | Automatic report - Port Scan Attack |
2020-03-10 20:29:47 |
| 154.124.254.49 | attackbots | Email rejected due to spam filtering |
2020-03-10 21:04:30 |
| 49.88.112.113 | attackbots | March 10 2020, 12:37:40 [sshd] - Banned from the Cipher Host hosting platform by Fail2ban. |
2020-03-10 20:42:50 |
| 140.143.151.93 | attackspambots | Mar 10 05:41:29 mockhub sshd[22550]: Failed password for root from 140.143.151.93 port 53500 ssh2 ... |
2020-03-10 20:56:15 |
| 2001:41d0:700:1337::1 | attackbotsspam | xmlrpc attack |
2020-03-10 20:38:05 |
| 211.147.216.19 | attackbotsspam | Mar 10 06:59:27 vps46666688 sshd[10463]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.147.216.19 Mar 10 06:59:29 vps46666688 sshd[10463]: Failed password for invalid user qwerty from 211.147.216.19 port 43566 ssh2 ... |
2020-03-10 20:27:32 |
| 180.76.153.46 | attackspam | ... |
2020-03-10 20:35:16 |
| 64.225.104.142 | attackspam | Lines containing failures of 64.225.104.142 (max 1000) Mar 10 07:17:14 localhost sshd[22438]: Invalid user rizon from 64.225.104.142 port 42898 Mar 10 07:17:14 localhost sshd[22438]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.225.104.142 Mar 10 07:17:16 localhost sshd[22438]: Failed password for invalid user rizon from 64.225.104.142 port 42898 ssh2 Mar 10 07:17:16 localhost sshd[22438]: Received disconnect from 64.225.104.142 port 42898:11: Bye Bye [preauth] Mar 10 07:17:16 localhost sshd[22438]: Disconnected from invalid user rizon 64.225.104.142 port 42898 [preauth] Mar 10 07:28:54 localhost sshd[25791]: Invalid user xbmc from 64.225.104.142 port 45784 Mar 10 07:28:54 localhost sshd[25791]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.225.104.142 Mar 10 07:28:56 localhost sshd[25791]: Failed password for invalid user xbmc from 64.225.104.142 port 45784 ssh2 Mar 10 07:28:57 ........ ------------------------------ |
2020-03-10 20:50:22 |
| 14.29.249.248 | attackbots | Lines containing failures of 14.29.249.248 Mar 10 02:44:05 smtp-out sshd[11173]: Invalid user kelly from 14.29.249.248 port 48202 Mar 10 02:44:05 smtp-out sshd[11173]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.29.249.248 Mar 10 02:44:07 smtp-out sshd[11173]: Failed password for invalid user kelly from 14.29.249.248 port 48202 ssh2 Mar 10 02:44:09 smtp-out sshd[11173]: Received disconnect from 14.29.249.248 port 48202:11: Bye Bye [preauth] Mar 10 02:44:09 smtp-out sshd[11173]: Disconnected from invalid user kelly 14.29.249.248 port 48202 [preauth] Mar 10 02:53:46 smtp-out sshd[11499]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.29.249.248 user=r.r Mar 10 02:53:48 smtp-out sshd[11499]: Failed password for r.r from 14.29.249.248 port 52340 ssh2 Mar 10 02:53:48 smtp-out sshd[11499]: Received disconnect from 14.29.249.248 port 52340:11: Bye Bye [preauth] Mar 10 02:53:48 smtp-out ........ ------------------------------ |
2020-03-10 20:29:14 |