City: Johannesburg
Region: Gauteng
Country: South Africa
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 160.124.9.37
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 25109
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;160.124.9.37. IN A
;; AUTHORITY SECTION:
. 569 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020010201 1800 900 604800 86400
;; Query time: 846 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jan 03 06:08:15 CST 2020
;; MSG SIZE rcvd: 116Host 37.9.124.160.in-addr.arpa not found: 2(SERVFAIL)
;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server: 183.60.82.98
Address: 183.60.82.98#53
** server can't find 37.9.124.160.in-addr.arpa: SERVFAIL
| IP | Type | Details | Datetime |
|---|---|---|---|
| 184.105.139.67 | attackbotsspam | GPL SNMP public access udp - port: 161 proto: UDP cat: Attempted Information Leak |
2019-11-30 22:15:43 |
| 116.55.227.209 | attackspambots | Unauthorised access (Nov 30) SRC=116.55.227.209 LEN=40 TTL=242 ID=57515 TCP DPT=1433 WINDOW=1024 SYN |
2019-11-30 21:59:29 |
| 45.40.198.41 | attack | Invalid user mongodb from 45.40.198.41 port 60515 |
2019-11-30 21:51:36 |
| 124.152.158.62 | attack | Unauthorised access (Nov 30) SRC=124.152.158.62 LEN=44 TTL=238 ID=2045 TCP DPT=1433 WINDOW=1024 SYN |
2019-11-30 22:25:22 |
| 212.64.109.31 | attackspam | Nov 30 10:46:56 ns3042688 sshd\[28905\]: Invalid user admin from 212.64.109.31 Nov 30 10:46:56 ns3042688 sshd\[28905\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.109.31 Nov 30 10:46:58 ns3042688 sshd\[28905\]: Failed password for invalid user admin from 212.64.109.31 port 35986 ssh2 Nov 30 10:51:36 ns3042688 sshd\[30337\]: Invalid user rpm from 212.64.109.31 Nov 30 10:51:36 ns3042688 sshd\[30337\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.109.31 ... |
2019-11-30 22:25:07 |
| 159.65.4.86 | attackspam | Nov 23 13:53:26 debian sshd\[23386\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.4.86 user=backup Nov 23 13:53:28 debian sshd\[23386\]: Failed password for backup from 159.65.4.86 port 35662 ssh2 Nov 23 13:57:31 debian sshd\[23712\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.4.86 user=root Nov 23 13:57:33 debian sshd\[23712\]: Failed password for root from 159.65.4.86 port 42732 ssh2 Nov 23 14:01:37 debian sshd\[24034\]: Invalid user xuj from 159.65.4.86 port 49784 Nov 23 14:01:37 debian sshd\[24034\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.4.86 Nov 23 14:01:39 debian sshd\[24034\]: Failed password for invalid user xuj from 159.65.4.86 port 49784 ssh2 Nov 23 14:05:34 debian sshd\[24309\]: Invalid user arlinda from 159.65.4.86 port 56834 Nov 23 14:05:34 debian sshd\[24309\]: pam_unix\(sshd:auth\): authentication failu ... |
2019-11-30 22:09:02 |
| 188.26.110.11 | attack | RDP Bruteforce |
2019-11-30 22:04:32 |
| 115.62.8.239 | attackbotsspam | Telnet/23 MH Probe, BF, Hack - |
2019-11-30 21:48:53 |
| 122.224.19.21 | attackbotsspam | Unauthorized connection attempt from IP address 122.224.19.21 on Port 445(SMB) |
2019-11-30 21:56:01 |
| 121.123.86.219 | attack | Lines containing failures of 121.123.86.219 Nov 30 07:10:52 omfg postfix/smtpd[21099]: connect from unknown[121.123.86.219] Nov x@x Nov 30 07:11:04 omfg postfix/smtpd[21099]: lost connection after DATA from unknown[121.123.86.219] Nov 30 07:11:04 omfg postfix/smtpd[21099]: disconnect from unknown[121.123.86.219] ehlo=1 mail=1 rcpt=0/1 data=0/1 commands=2/4 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=121.123.86.219 |
2019-11-30 21:55:17 |
| 165.227.46.221 | attackspambots | Nov 30 13:51:09 ns382633 sshd\[25669\]: Invalid user weikert from 165.227.46.221 port 38976 Nov 30 13:51:09 ns382633 sshd\[25669\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.46.221 Nov 30 13:51:11 ns382633 sshd\[25669\]: Failed password for invalid user weikert from 165.227.46.221 port 38976 ssh2 Nov 30 14:16:23 ns382633 sshd\[30292\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.46.221 user=root Nov 30 14:16:25 ns382633 sshd\[30292\]: Failed password for root from 165.227.46.221 port 37752 ssh2 |
2019-11-30 22:09:27 |
| 59.51.103.164 | attack | FTP Brute Force |
2019-11-30 22:01:45 |
| 14.186.20.139 | attackspam | Nov 30 01:10:18 penfold postfix/smtpd[2042]: warning: hostname static.vnpt.vn does not resolve to address 14.186.20.139 Nov 30 01:10:18 penfold postfix/smtpd[2042]: connect from unknown[14.186.20.139] Nov x@x Nov x@x Nov x@x Nov x@x Nov x@x Nov x@x Nov x@x Nov x@x Nov x@x Nov x@x Nov x@x Nov x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=14.186.20.139 |
2019-11-30 22:10:05 |
| 152.32.130.99 | attack | DATE:2019-11-30 13:41:11,IP:152.32.130.99,MATCHES:10,PORT:ssh |
2019-11-30 22:12:49 |
| 51.91.122.140 | attackbots | Nov 30 15:59:08 site1 sshd\[40125\]: Invalid user yazmine from 51.91.122.140Nov 30 15:59:09 site1 sshd\[40125\]: Failed password for invalid user yazmine from 51.91.122.140 port 38016 ssh2Nov 30 16:02:12 site1 sshd\[40206\]: Failed password for root from 51.91.122.140 port 46036 ssh2Nov 30 16:05:19 site1 sshd\[40294\]: Invalid user idalia from 51.91.122.140Nov 30 16:05:21 site1 sshd\[40294\]: Failed password for invalid user idalia from 51.91.122.140 port 54052 ssh2Nov 30 16:08:30 site1 sshd\[40460\]: Invalid user test from 51.91.122.140 ... |
2019-11-30 22:24:41 |