City: Johannesburg
Region: Gauteng
Country: South Africa
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 196.37.70.35
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 54309
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;196.37.70.35. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022000 1800 900 604800 86400
;; Query time: 75 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 20 18:12:01 CST 2025
;; MSG SIZE rcvd: 105Host 35.70.37.196.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 35.70.37.196.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 180.65.167.61 | attackbots | Automatic report BANNED IP |
2020-05-30 05:33:55 |
| 160.124.140.178 | attackspambots | May 29 23:18:22 legacy sshd[25262]: Failed password for root from 160.124.140.178 port 46450 ssh2 May 29 23:21:22 legacy sshd[25330]: Failed password for root from 160.124.140.178 port 35246 ssh2 ... |
2020-05-30 05:46:40 |
| 185.180.196.9 | attackbots | xmlrpc attack |
2020-05-30 05:41:48 |
| 89.144.47.246 | attackbots | firewall-block, port(s): 3389/tcp |
2020-05-30 05:53:22 |
| 181.30.28.201 | attack | May 29 23:01:59 inter-technics sshd[20642]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.30.28.201 user=root May 29 23:02:01 inter-technics sshd[20642]: Failed password for root from 181.30.28.201 port 53878 ssh2 May 29 23:06:14 inter-technics sshd[20968]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.30.28.201 user=root May 29 23:06:16 inter-technics sshd[20968]: Failed password for root from 181.30.28.201 port 58336 ssh2 May 29 23:10:20 inter-technics sshd[23967]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.30.28.201 user=root May 29 23:10:21 inter-technics sshd[23967]: Failed password for root from 181.30.28.201 port 34560 ssh2 ... |
2020-05-30 05:56:11 |
| 185.143.74.73 | attackspam | May 29 23:46:46 srv01 postfix/smtpd\[914\]: warning: unknown\[185.143.74.73\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 May 29 23:47:01 srv01 postfix/smtpd\[31779\]: warning: unknown\[185.143.74.73\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 May 29 23:47:05 srv01 postfix/smtpd\[6910\]: warning: unknown\[185.143.74.73\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 May 29 23:47:16 srv01 postfix/smtpd\[9079\]: warning: unknown\[185.143.74.73\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 May 29 23:48:26 srv01 postfix/smtpd\[6910\]: warning: unknown\[185.143.74.73\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2020-05-30 05:49:36 |
| 40.114.39.133 | attackspambots | Brute forcing RDP port 3389 |
2020-05-30 05:42:32 |
| 24.7.248.54 | attack | May 29 16:50:19 mail sshd\[56602\]: Invalid user minecraft from 24.7.248.54 May 29 16:50:19 mail sshd\[56602\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=24.7.248.54 ... |
2020-05-30 05:40:44 |
| 132.148.244.122 | attack | 132.148.244.122 - - [29/May/2020:22:50:39 +0200] "GET /wp-login.php HTTP/1.1" 200 6042 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 132.148.244.122 - - [29/May/2020:22:50:41 +0200] "POST /wp-login.php HTTP/1.1" 200 6293 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 132.148.244.122 - - [29/May/2020:22:50:42 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-05-30 05:20:30 |
| 222.186.15.115 | attack | honeypot 22 port |
2020-05-30 05:48:50 |
| 159.65.176.156 | attackbotsspam | Automatic report BANNED IP |
2020-05-30 05:29:40 |
| 106.12.215.118 | attackbots | " " |
2020-05-30 05:39:45 |
| 91.100.102.72 | attackspam | firewall-block, port(s): 80/tcp |
2020-05-30 05:51:49 |
| 195.158.8.206 | attackspambots | [ssh] SSH attack |
2020-05-30 05:54:31 |
| 111.93.235.74 | attackspam | $f2bV_matches |
2020-05-30 05:34:14 |