City: Johannesburg
Region: Gauteng
Country: South Africa
Internet Service Provider: Telkom
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 165.144.173.90
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 53367
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;165.144.173.90. IN A
;; AUTHORITY SECTION:
. 600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020042101 1800 900 604800 86400
;; Query time: 131 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Apr 22 07:05:53 CST 2020
;; MSG SIZE rcvd: 11890.173.144.165.in-addr.arpa domain name pointer 8ta-165-144-173-90.telkomadsl.co.za.Server: 100.100.2.138
Address: 100.100.2.138#53
Non-authoritative answer:
90.173.144.165.in-addr.arpa name = 8ta-165-144-173-90.telkomadsl.co.za.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 202.47.32.156 | attackspam | 445/tcp [2019-12-12]1pkt |
2019-12-13 01:45:30 |
| 124.132.215.152 | attack | 23/tcp [2019-12-12]1pkt |
2019-12-13 01:37:17 |
| 63.80.189.153 | attackspam | Autoban 63.80.189.153 AUTH/CONNECT |
2019-12-13 01:48:56 |
| 14.143.187.214 | attackbots | 1433/tcp [2019-12-12]1pkt |
2019-12-13 01:32:59 |
| 118.24.108.205 | attack | SSH invalid-user multiple login attempts |
2019-12-13 01:41:10 |
| 185.176.27.118 | attack | Dec 12 18:26:03 mc1 kernel: \[330397.811031\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=185.176.27.118 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=56271 PROTO=TCP SPT=59769 DPT=29231 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 12 18:30:35 mc1 kernel: \[330669.755181\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=185.176.27.118 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=64098 PROTO=TCP SPT=59769 DPT=51003 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 12 18:32:39 mc1 kernel: \[330793.810936\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=185.176.27.118 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=60953 PROTO=TCP SPT=59769 DPT=20345 WINDOW=1024 RES=0x00 SYN URGP=0 ... |
2019-12-13 01:42:50 |
| 106.13.43.117 | attackbotsspam | Dec 12 07:51:07 eddieflores sshd\[28650\]: Invalid user AA123321 from 106.13.43.117 Dec 12 07:51:07 eddieflores sshd\[28650\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.43.117 Dec 12 07:51:09 eddieflores sshd\[28650\]: Failed password for invalid user AA123321 from 106.13.43.117 port 34734 ssh2 Dec 12 07:57:29 eddieflores sshd\[29244\]: Invalid user okokokok from 106.13.43.117 Dec 12 07:57:29 eddieflores sshd\[29244\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.43.117 |
2019-12-13 01:58:56 |
| 164.77.119.18 | attackspambots | web-1 [ssh_2] SSH Attack |
2019-12-13 01:57:03 |
| 188.147.161.162 | attackbotsspam | Dec 12 18:19:28 herz-der-gamer sshd[3357]: Invalid user weblogic from 188.147.161.162 port 49682 Dec 12 18:19:28 herz-der-gamer sshd[3357]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.147.161.162 Dec 12 18:19:28 herz-der-gamer sshd[3357]: Invalid user weblogic from 188.147.161.162 port 49682 Dec 12 18:19:30 herz-der-gamer sshd[3357]: Failed password for invalid user weblogic from 188.147.161.162 port 49682 ssh2 ... |
2019-12-13 01:20:30 |
| 221.195.1.201 | attack | Dec 12 18:09:03 [host] sshd[23797]: Invalid user smuda from 221.195.1.201 Dec 12 18:09:03 [host] sshd[23797]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.195.1.201 Dec 12 18:09:05 [host] sshd[23797]: Failed password for invalid user smuda from 221.195.1.201 port 57626 ssh2 |
2019-12-13 01:31:10 |
| 190.117.62.241 | attack | Dec 12 22:58:51 vibhu-HP-Z238-Microtower-Workstation sshd\[5922\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.117.62.241 user=root Dec 12 22:58:53 vibhu-HP-Z238-Microtower-Workstation sshd\[5922\]: Failed password for root from 190.117.62.241 port 50972 ssh2 Dec 12 23:08:14 vibhu-HP-Z238-Microtower-Workstation sshd\[6563\]: Invalid user test from 190.117.62.241 Dec 12 23:08:14 vibhu-HP-Z238-Microtower-Workstation sshd\[6563\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.117.62.241 Dec 12 23:08:16 vibhu-HP-Z238-Microtower-Workstation sshd\[6563\]: Failed password for invalid user test from 190.117.62.241 port 60078 ssh2 ... |
2019-12-13 01:45:47 |
| 63.80.189.167 | attackspam | Autoban 63.80.189.167 AUTH/CONNECT |
2019-12-13 01:38:05 |
| 63.80.189.184 | attackbots | Autoban 63.80.189.184 AUTH/CONNECT |
2019-12-13 01:27:37 |
| 63.81.87.103 | attack | Autoban 63.81.87.103 AUTH/CONNECT |
2019-12-13 01:19:30 |
| 63.80.189.164 | attackspam | Autoban 63.80.189.164 AUTH/CONNECT |
2019-12-13 01:38:55 |