City: Pretoria
Region: Gauteng
Country: South Africa
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 105.245.108.189 | attackspambots | TCP Port Scanning |
2020-05-20 02:09:44 |
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 105.245.108.198
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 12342
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;105.245.108.198. IN A
;; AUTHORITY SECTION:
. 516 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020111500 1800 900 604800 86400
;; Query time: 37 msec
;; SERVER: 183.60.82.98#53(183.60.82.98)
;; WHEN: Sun Nov 15 19:42:18 CST 2020
;; MSG SIZE rcvd: 119
198.108.245.105.in-addr.arpa has no PTR recordServer: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
198.108.245.105.in-addr.arpa name = vc-gp-n-105-245-108-198.umts.vodacom.co.za.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 202.29.220.182 | attackbots | SmallBizIT.US 1 packets to tcp(22) |
2020-05-17 08:00:30 |
| 185.173.35.21 | attackspam |
|
2020-05-17 08:04:37 |
| 217.111.239.37 | attackspambots | [ssh] SSH attack |
2020-05-17 07:38:39 |
| 14.98.213.14 | attackspambots | May 17 00:24:14 prox sshd[25053]: Failed password for root from 14.98.213.14 port 46890 ssh2 |
2020-05-17 07:56:17 |
| 221.194.44.208 | attackbots |
|
2020-05-17 07:57:38 |
| 36.189.255.162 | attack | Invalid user yuanwd from 36.189.255.162 port 38012 |
2020-05-17 07:37:15 |
| 189.145.95.229 | attackspambots | ET SCAN Suspicious inbound to MSSQL port 1433 - port: 1433 proto: TCP cat: Potentially Bad Traffic |
2020-05-17 08:02:23 |
| 62.234.114.92 | attackspam | fail2ban/May 17 01:23:23 h1962932 sshd[2097]: Invalid user postgres from 62.234.114.92 port 50300 May 17 01:23:23 h1962932 sshd[2097]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.114.92 May 17 01:23:23 h1962932 sshd[2097]: Invalid user postgres from 62.234.114.92 port 50300 May 17 01:23:26 h1962932 sshd[2097]: Failed password for invalid user postgres from 62.234.114.92 port 50300 ssh2 May 17 01:28:41 h1962932 sshd[2207]: Invalid user deploy from 62.234.114.92 port 46904 |
2020-05-17 07:35:34 |
| 185.175.93.37 | attack |
|
2020-05-17 08:03:07 |
| 220.168.85.116 | attackspam | ET SCAN Suspicious inbound to MSSQL port 1433 - port: 1433 proto: TCP cat: Potentially Bad Traffic |
2020-05-17 07:58:14 |
| 45.178.3.37 | attack | Invalid user airadmin from 45.178.3.37 port 60696 |
2020-05-17 07:54:27 |
| 186.3.131.100 | attackspambots | SSH Brute Force |
2020-05-17 07:41:39 |
| 192.144.183.188 | attack | SSH Brute Force |
2020-05-17 07:39:50 |
| 218.29.188.139 | attack | May 16 22:26:22 localhost sshd[17139]: Invalid user xw4 from 218.29.188.139 port 59418 May 16 22:26:22 localhost sshd[17139]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.29.188.139 May 16 22:26:22 localhost sshd[17139]: Invalid user xw4 from 218.29.188.139 port 59418 May 16 22:26:25 localhost sshd[17139]: Failed password for invalid user xw4 from 218.29.188.139 port 59418 ssh2 May 16 22:30:38 localhost sshd[17585]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.29.188.139 user=root May 16 22:30:40 localhost sshd[17585]: Failed password for root from 218.29.188.139 port 57032 ssh2 ... |
2020-05-17 07:38:08 |
| 146.88.240.22 | attack | ET DROP Dshield Block Listed Source group 1 - port: 443 proto: TCP cat: Misc Attack |
2020-05-17 08:07:25 |