City: unknown
Region: unknown
Country: South Africa
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 169.0.61.54
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 4657
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;169.0.61.54. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021000 1800 900 604800 86400
;; Query time: 35 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 10 13:49:16 CST 2025
;; MSG SIZE rcvd: 104
54.61.0.169.in-addr.arpa domain name pointer 169-0-61-54.ip.afrihost.co.za.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
54.61.0.169.in-addr.arpa name = 169-0-61-54.ip.afrihost.co.za.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 218.92.0.141 | attack | Sep 23 23:11:52 v22018076622670303 sshd\[13352\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.141 user=root Sep 23 23:11:54 v22018076622670303 sshd\[13352\]: Failed password for root from 218.92.0.141 port 43648 ssh2 Sep 23 23:11:57 v22018076622670303 sshd\[13352\]: Failed password for root from 218.92.0.141 port 43648 ssh2 ... |
2019-09-24 05:23:48 |
| 178.19.247.25 | attackspambots | proto=tcp . spt=34524 . dpt=25 . (listed on dnsbl-sorbs plus abuseat-org and barracuda) (530) |
2019-09-24 05:14:13 |
| 92.242.240.34 | attackbots | proto=tcp . spt=41657 . dpt=25 . (listed on MailSpike (spam wave plus L3-L5) also unsubscore and rbldns-ru) (531) |
2019-09-24 05:05:20 |
| 83.10.33.151 | attackbots | Automatic report - Port Scan Attack |
2019-09-24 05:22:00 |
| 91.224.60.75 | attack | Sep 23 11:15:54 hcbb sshd\[26045\]: Invalid user temp from 91.224.60.75 Sep 23 11:15:54 hcbb sshd\[26045\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.224.60.75 Sep 23 11:15:56 hcbb sshd\[26045\]: Failed password for invalid user temp from 91.224.60.75 port 50794 ssh2 Sep 23 11:20:02 hcbb sshd\[26374\]: Invalid user ubnt from 91.224.60.75 Sep 23 11:20:02 hcbb sshd\[26374\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.224.60.75 |
2019-09-24 05:36:00 |
| 176.118.51.176 | attack | proto=tcp . spt=47371 . dpt=25 . (listed on Dark List de Sep 23) (532) |
2019-09-24 05:02:28 |
| 45.236.131.227 | attackbotsspam | Email spam for this IP |
2019-09-24 05:08:29 |
| 148.70.231.231 | attackspam | BadRequests |
2019-09-24 05:10:57 |
| 144.217.15.161 | attackspam | Sep 23 22:44:25 lnxded63 sshd[25235]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.217.15.161 |
2019-09-24 05:13:03 |
| 103.79.143.163 | attackspam | 2019-09-23T21:11:33.656334hub.schaetter.us sshd\[25395\]: Invalid user admin from 103.79.143.163 2019-09-23T21:11:33.959104hub.schaetter.us sshd\[25395\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.79.143.163 2019-09-23T21:11:35.782576hub.schaetter.us sshd\[25395\]: Failed password for invalid user admin from 103.79.143.163 port 53315 ssh2 2019-09-23T21:11:36.046825hub.schaetter.us sshd\[25395\]: Received disconnect from 103.79.143.163: 3: com.jcraft.jsch.JSchException: Auth fail \[preauth\] 2019-09-23T21:11:52.566541hub.schaetter.us sshd\[25406\]: Invalid user support from 103.79.143.163 ... |
2019-09-24 05:28:04 |
| 106.12.208.211 | attackbotsspam | Sep 23 11:26:20 php1 sshd\[30019\]: Invalid user oraapex from 106.12.208.211 Sep 23 11:26:20 php1 sshd\[30019\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.208.211 Sep 23 11:26:22 php1 sshd\[30019\]: Failed password for invalid user oraapex from 106.12.208.211 port 38080 ssh2 Sep 23 11:31:18 php1 sshd\[30641\]: Invalid user cezar from 106.12.208.211 Sep 23 11:31:18 php1 sshd\[30641\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.208.211 |
2019-09-24 05:33:59 |
| 46.38.144.17 | attackbotsspam | Sep 23 23:22:07 webserver postfix/smtpd\[30093\]: warning: unknown\[46.38.144.17\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 23 23:23:24 webserver postfix/smtpd\[29299\]: warning: unknown\[46.38.144.17\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 23 23:24:41 webserver postfix/smtpd\[30093\]: warning: unknown\[46.38.144.17\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 23 23:25:58 webserver postfix/smtpd\[29299\]: warning: unknown\[46.38.144.17\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 23 23:27:15 webserver postfix/smtpd\[29299\]: warning: unknown\[46.38.144.17\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2019-09-24 05:31:42 |
| 222.186.52.124 | attackbots | Sep 23 17:15:06 plusreed sshd[15937]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.52.124 user=root Sep 23 17:15:09 plusreed sshd[15937]: Failed password for root from 222.186.52.124 port 63218 ssh2 ... |
2019-09-24 05:21:15 |
| 128.75.129.166 | attack | Unauthorized connection attempt from IP address 128.75.129.166 on Port 445(SMB) |
2019-09-24 05:14:31 |
| 222.186.169.192 | attack | DATE:2019-09-23 23:04:36, IP:222.186.169.192, PORT:ssh SSH brute force auth on honeypot server (honey-neo-dc-bis) |
2019-09-24 05:23:27 |