City: unknown
Region: unknown
Country: South Africa
Internet Service Provider: Afrihost (Pty) Ltd
Hostname: unknown
Organization: unknown
Usage Type: Data Center/Web Hosting/Transit
| Type | Details | Datetime |
|---|---|---|
| attackspam | TCP port 445 (SMB) attempt blocked by firewall. [2019-07-09 15:19:43] |
2019-07-10 07:21:24 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 165.255.139.2
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 19261
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;165.255.139.2. IN A
;; AUTHORITY SECTION:
. 2639 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019070901 1800 900 604800 86400
;; Query time: 1 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Wed Jul 10 07:21:19 CST 2019
;; MSG SIZE rcvd: 1172.139.255.165.in-addr.arpa domain name pointer 165-255-139-2.ip.adsl.co.za.Server: 67.207.67.2
Address: 67.207.67.2#53
Non-authoritative answer:
2.139.255.165.in-addr.arpa name = 165-255-139-2.ip.adsl.co.za.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 175.24.138.30 | attackbots | Unauthorized connection attempt detected from IP address 175.24.138.30 to port 80 [T] |
2020-10-12 14:57:14 |
| 188.166.235.22 | attackbots | ssh brute force |
2020-10-12 14:49:57 |
| 198.12.248.100 | attackspambots | Oct 12 03:07:39 django-0 sshd[20897]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip-198-12-248-100.ip.secureserver.net user=root Oct 12 03:07:41 django-0 sshd[20897]: Failed password for root from 198.12.248.100 port 52714 ssh2 ... |
2020-10-12 14:36:17 |
| 82.65.86.43 | attack | Automatic report - Banned IP Access |
2020-10-12 14:39:40 |
| 134.122.31.107 | attackbots | (sshd) Failed SSH login from 134.122.31.107 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct 12 02:39:16 server4 sshd[14358]: Invalid user teamspeak3 from 134.122.31.107 Oct 12 02:39:16 server4 sshd[14358]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.122.31.107 Oct 12 02:39:19 server4 sshd[14358]: Failed password for invalid user teamspeak3 from 134.122.31.107 port 41936 ssh2 Oct 12 02:45:42 server4 sshd[17949]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.122.31.107 user=mysql Oct 12 02:45:44 server4 sshd[17949]: Failed password for mysql from 134.122.31.107 port 43414 ssh2 |
2020-10-12 14:52:38 |
| 112.85.42.47 | attackbotsspam | Oct 12 08:29:43 melroy-server sshd[6799]: Failed password for root from 112.85.42.47 port 5382 ssh2 Oct 12 08:29:47 melroy-server sshd[6799]: Failed password for root from 112.85.42.47 port 5382 ssh2 ... |
2020-10-12 14:30:38 |
| 211.168.108.124 | attackbots | Oct 12 02:44:27 scw-focused-cartwright sshd[18215]: Failed password for root from 211.168.108.124 port 63098 ssh2 |
2020-10-12 14:48:28 |
| 42.194.142.143 | attackspam | Oct 12 06:43:31 eventyay sshd[31874]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.194.142.143 Oct 12 06:43:33 eventyay sshd[31874]: Failed password for invalid user acount from 42.194.142.143 port 38154 ssh2 Oct 12 06:45:57 eventyay sshd[31935]: Failed password for root from 42.194.142.143 port 34636 ssh2 ... |
2020-10-12 14:30:58 |
| 61.177.172.89 | attackbotsspam | 2020-10-12T08:45:07.524079centos sshd[7494]: Failed password for root from 61.177.172.89 port 50510 ssh2 2020-10-12T08:45:12.902051centos sshd[7494]: Failed password for root from 61.177.172.89 port 50510 ssh2 2020-10-12T08:45:20.137259centos sshd[7494]: Failed password for root from 61.177.172.89 port 50510 ssh2 ... |
2020-10-12 14:46:42 |
| 220.249.114.237 | attack | 2020-10-11 23:52:30.825819-0500 localhost sshd[4221]: Failed password for root from 220.249.114.237 port 41782 ssh2 |
2020-10-12 14:35:46 |
| 2.226.179.79 | attackbotsspam | ET CINS Active Threat Intelligence Poor Reputation IP group 3 |
2020-10-12 14:34:38 |
| 93.149.180.144 | attackbotsspam | Failed password for invalid user fevronia from 93.149.180.144 port 58603 ssh2 |
2020-10-12 14:29:11 |
| 49.232.34.247 | attackspam | $f2bV_matches |
2020-10-12 14:42:44 |
| 106.12.125.241 | attack | ssh brute force |
2020-10-12 15:02:58 |
| 175.193.13.3 | attackbots | $f2bV_matches |
2020-10-12 14:32:17 |