City: Johannesburg
Region: Gauteng
Country: South Africa
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 196.214.100.74
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 62848
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;196.214.100.74. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025030702 1800 900 604800 86400
;; Query time: 39 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Mar 08 06:25:36 CST 2025
;; MSG SIZE rcvd: 107Host 74.100.214.196.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 74.100.214.196.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 119.200.186.168 | attackspambots | SSH Bruteforce attack |
2020-03-22 09:18:45 |
| 129.204.188.93 | attackspam | Mar 22 02:18:39 plex sshd[2146]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.188.93 Mar 22 02:18:39 plex sshd[2146]: Invalid user r from 129.204.188.93 port 47352 Mar 22 02:18:41 plex sshd[2146]: Failed password for invalid user r from 129.204.188.93 port 47352 ssh2 Mar 22 02:22:20 plex sshd[2263]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.188.93 user=sys Mar 22 02:22:22 plex sshd[2263]: Failed password for sys from 129.204.188.93 port 38530 ssh2 |
2020-03-22 09:32:29 |
| 95.84.146.201 | attackbots | SSH-BruteForce |
2020-03-22 09:52:20 |
| 172.245.25.215 | attackspam | Automatic report - XMLRPC Attack |
2020-03-22 09:39:11 |
| 170.231.59.37 | attack | Mar 20 19:43:22 server6 sshd[15269]: reveeclipse mapping checking getaddrinfo for static-gcnetprovedor.com.br [170.231.59.37] failed - POSSIBLE BREAK-IN ATTEMPT! Mar 20 19:43:24 server6 sshd[15269]: Failed password for invalid user ptech from 170.231.59.37 port 44524 ssh2 Mar 20 19:43:24 server6 sshd[15269]: Received disconnect from 170.231.59.37: 11: Bye Bye [preauth] Mar 20 19:48:26 server6 sshd[21056]: reveeclipse mapping checking getaddrinfo for static-gcnetprovedor.com.br [170.231.59.37] failed - POSSIBLE BREAK-IN ATTEMPT! Mar 20 19:48:28 server6 sshd[21056]: Failed password for invalid user cisco from 170.231.59.37 port 26690 ssh2 Mar 20 19:48:28 server6 sshd[21056]: Received disconnect from 170.231.59.37: 11: Bye Bye [preauth] Mar 20 19:53:14 server6 sshd[26152]: reveeclipse mapping checking getaddrinfo for static-gcnetprovedor.com.br [170.231.59.37] failed - POSSIBLE BREAK-IN ATTEMPT! Mar 20 19:53:16 server6 sshd[26152]: Failed password for invalid user ms from ........ ------------------------------- |
2020-03-22 09:35:51 |
| 113.11.255.28 | attack | $f2bV_matches |
2020-03-22 09:39:58 |
| 222.186.15.10 | attack | Mar 22 03:25:59 server2 sshd\[5908\]: User root from 222.186.15.10 not allowed because not listed in AllowUsers Mar 22 03:28:32 server2 sshd\[6001\]: User root from 222.186.15.10 not allowed because not listed in AllowUsers Mar 22 03:28:33 server2 sshd\[5999\]: User root from 222.186.15.10 not allowed because not listed in AllowUsers Mar 22 03:28:52 server2 sshd\[6006\]: User root from 222.186.15.10 not allowed because not listed in AllowUsers Mar 22 03:34:39 server2 sshd\[6394\]: User root from 222.186.15.10 not allowed because not listed in AllowUsers Mar 22 03:34:39 server2 sshd\[6396\]: User root from 222.186.15.10 not allowed because not listed in AllowUsers |
2020-03-22 09:34:59 |
| 185.151.242.185 | attack | Port scan: Attack repeated for 24 hours |
2020-03-22 09:59:34 |
| 91.103.248.40 | attack | 1584824735 - 03/21/2020 22:05:35 Host: 91.103.248.40/91.103.248.40 Port: 445 TCP Blocked |
2020-03-22 09:47:27 |
| 106.12.142.52 | attackbots | 2020-03-22T00:20:34.902210upcloud.m0sh1x2.com sshd[22424]: Invalid user rz from 106.12.142.52 port 59008 |
2020-03-22 09:49:56 |
| 178.62.33.138 | attackspam | $f2bV_matches_ltvn |
2020-03-22 09:58:58 |
| 112.35.9.247 | attack | Mar 21 22:06:13 debian-2gb-nbg1-2 kernel: \[7083869.779713\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=112.35.9.247 DST=195.201.40.59 LEN=40 TOS=0x04 PREC=0x00 TTL=238 ID=50764 PROTO=TCP SPT=49343 DPT=1433 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-03-22 09:16:24 |
| 192.166.218.34 | attack | Mar 21 22:35:07 vps46666688 sshd[26259]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.166.218.34 Mar 21 22:35:09 vps46666688 sshd[26259]: Failed password for invalid user carol from 192.166.218.34 port 46132 ssh2 ... |
2020-03-22 09:48:59 |
| 139.59.3.114 | attack | Mar 22 03:19:35 pkdns2 sshd\[20110\]: Invalid user svnadmin from 139.59.3.114Mar 22 03:19:37 pkdns2 sshd\[20110\]: Failed password for invalid user svnadmin from 139.59.3.114 port 40186 ssh2Mar 22 03:23:54 pkdns2 sshd\[20315\]: Invalid user cron from 139.59.3.114Mar 22 03:23:56 pkdns2 sshd\[20315\]: Failed password for invalid user cron from 139.59.3.114 port 48660 ssh2Mar 22 03:28:11 pkdns2 sshd\[20522\]: Invalid user media from 139.59.3.114Mar 22 03:28:13 pkdns2 sshd\[20522\]: Failed password for invalid user media from 139.59.3.114 port 57131 ssh2 ... |
2020-03-22 09:50:55 |
| 218.50.52.241 | attack | xmlrpc attack |
2020-03-22 09:33:19 |