City: unknown
Region: unknown
Country: South Africa
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 196.25.244.14
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 42850
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;196.25.244.14. IN A
;; AUTHORITY SECTION:
. 597 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021300 1800 900 604800 86400
;; Query time: 16 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 13 16:22:25 CST 2022
;; MSG SIZE rcvd: 106
14.244.25.196.in-addr.arpa domain name pointer sainet-internet-gw.telkom-ipnet.co.za.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
14.244.25.196.in-addr.arpa name = sainet-internet-gw.telkom-ipnet.co.za.
Authoritative answers can be found from:
IP | Type | Details | Datetime |
---|---|---|---|
142.252.251.74 | attackspambots | Sep 23 05:48:17 mail kernel: [399870.312453] [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:05:0d:89:f8:66:f2:68:66:ff:08:00 SRC=142.252.251.74 DST=77.73.69.240 LEN=40 TOS=0x00 PREC=0x00 TTL=106 ID=256 PROTO=TCP SPT=6000 DPT=8888 WINDOW=16384 RES=0x00 SYN URGP=0 Sep 23 05:48:17 mail kernel: [399870.313147] [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:05:0d:89:f8:66:f2:68:66:ff:08:00 SRC=142.252.251.74 DST=77.73.69.240 LEN=40 TOS=0x00 PREC=0x00 TTL=106 ID=256 PROTO=TCP SPT=6000 DPT=8088 WINDOW=16384 RES=0x00 SYN URGP=0 Sep 23 05:48:17 mail kernel: [399870.314607] [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:05:0d:89:f8:66:f2:68:66:ff:08:00 SRC=142.252.251.74 DST=77.73.69.240 LEN=40 TOS=0x00 PREC=0x00 TTL=106 ID=256 PROTO=TCP SPT=6000 DPT=8000 WINDOW=16384 RES=0x00 SYN URGP=0 Sep 23 05:48:17 mail kernel: [399870.313147] [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:05:0d:89:f8:66:f2:68:66:ff:08:00 SRC=142.252.251.74 DST=77.73.69.240 LEN=40 TOS=0x00 PREC=0x00 TTL=106 ID=256 PROTO=TCP SPT=6000 DPT=8088 WINDOW=16384 RES=0x00 SYN URGP=0 Sep |
2019-09-23 20:08:48 |
3.16.78.108 | attack | Sep 23 07:48:24 dev0-dcde-rnet sshd[29490]: Failed password for root from 3.16.78.108 port 44012 ssh2 Sep 23 07:52:58 dev0-dcde-rnet sshd[29530]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=3.16.78.108 Sep 23 07:53:00 dev0-dcde-rnet sshd[29530]: Failed password for invalid user wsupgrade from 3.16.78.108 port 57498 ssh2 |
2019-09-23 20:19:41 |
151.80.144.255 | attackspam | Sep 23 00:03:32 aiointranet sshd\[32392\]: Invalid user arkserver from 151.80.144.255 Sep 23 00:03:32 aiointranet sshd\[32392\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=255.ip-151-80-144.eu Sep 23 00:03:34 aiointranet sshd\[32392\]: Failed password for invalid user arkserver from 151.80.144.255 port 56347 ssh2 Sep 23 00:07:25 aiointranet sshd\[32746\]: Invalid user of from 151.80.144.255 Sep 23 00:07:25 aiointranet sshd\[32746\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=255.ip-151-80-144.eu |
2019-09-23 20:19:23 |
183.232.210.133 | attack | Sep 23 19:10:57 webhost01 sshd[18707]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.232.210.133 Sep 23 19:10:59 webhost01 sshd[18707]: Failed password for invalid user johan from 183.232.210.133 port 45128 ssh2 ... |
2019-09-23 20:22:42 |
52.231.33.96 | attackspam | $f2bV_matches |
2019-09-23 20:25:06 |
192.227.252.19 | attack | Sep 23 07:09:32 lnxmysql61 sshd[9849]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.227.252.19 |
2019-09-23 20:11:47 |
169.197.97.34 | attackspambots | Sep 23 14:41:45 rotator sshd\[25007\]: Invalid user admin from 169.197.97.34Sep 23 14:41:47 rotator sshd\[25007\]: Failed password for invalid user admin from 169.197.97.34 port 41338 ssh2Sep 23 14:41:49 rotator sshd\[25007\]: Failed password for invalid user admin from 169.197.97.34 port 41338 ssh2Sep 23 14:41:52 rotator sshd\[25007\]: Failed password for invalid user admin from 169.197.97.34 port 41338 ssh2Sep 23 14:41:54 rotator sshd\[25007\]: Failed password for invalid user admin from 169.197.97.34 port 41338 ssh2Sep 23 14:41:56 rotator sshd\[25007\]: Failed password for invalid user admin from 169.197.97.34 port 41338 ssh2 ... |
2019-09-23 20:45:31 |
211.35.76.241 | attackbotsspam | Sep 23 07:06:57 www sshd\[12043\]: Invalid user student from 211.35.76.241Sep 23 07:06:59 www sshd\[12043\]: Failed password for invalid user student from 211.35.76.241 port 51587 ssh2Sep 23 07:11:44 www sshd\[12113\]: Invalid user wordpress from 211.35.76.241 ... |
2019-09-23 20:15:59 |
222.186.173.238 | attack | Sep 23 14:32:08 srv sshd[27754]: refused connect from 222.186.173.238 (222.186.173.238) |
2019-09-23 20:33:46 |
111.223.115.66 | attackspam | SMTP:25. Blocked 15 login attempts in 4.9 days. |
2019-09-23 20:29:15 |
37.228.139.235 | attackbotsspam | Automatic report - SSH Brute-Force Attack |
2019-09-23 20:33:55 |
185.14.194.49 | attackbotsspam | 4.264.425,96-03/02 [bc18/m44] concatform PostRequest-Spammer scoring: Durban02 |
2019-09-23 20:34:31 |
60.250.23.233 | attack | Sep 23 13:44:48 saschabauer sshd[13659]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.250.23.233 Sep 23 13:44:50 saschabauer sshd[13659]: Failed password for invalid user kp from 60.250.23.233 port 33529 ssh2 |
2019-09-23 20:10:32 |
222.188.187.194 | attack | 2019-09-23 x@x 2019-09-23 x@x 2019-09-23 x@x 2019-09-23 x@x 2019-09-23 x@x 2019-09-23 x@x 2019-09-23 x@x 2019-09-23 x@x 2019-09-23 x@x 2019-09-23 x@x 2019-09-23 x@x 2019-09-23 x@x 2019-09-23 x@x 2019-09-23 x@x 2019-09-23 x@x 2019-09-23 x@x 2019-09-23 x@x 2019-09-23 x@x 2019-09-23 x@x 2019-09-23 x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=222.188.187.194 |
2019-09-23 20:43:29 |
112.166.68.193 | attackbots | 2019-09-23T12:01:33.848646abusebot-2.cloudsearch.cf sshd\[4157\]: Invalid user laboratory from 112.166.68.193 port 52176 |
2019-09-23 20:12:57 |