City: Pretoria
Region: Gauteng
Country: South Africa
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 196.38.97.30
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 63449
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;196.38.97.30. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012902 1800 900 604800 86400
;; Query time: 18 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jan 30 08:41:18 CST 2025
;; MSG SIZE rcvd: 105b'Host 30.97.38.196.in-addr.arpa. not found: 3(NXDOMAIN)
'Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 30.97.38.196.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 124.42.117.243 | attackbotsspam | 2019-11-01T05:13:18.253412shield sshd\[11102\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.42.117.243 user=root 2019-11-01T05:13:20.739730shield sshd\[11102\]: Failed password for root from 124.42.117.243 port 49866 ssh2 2019-11-01T05:18:52.606892shield sshd\[11500\]: Invalid user 123 from 124.42.117.243 port 38625 2019-11-01T05:18:52.613334shield sshd\[11500\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.42.117.243 2019-11-01T05:18:54.953889shield sshd\[11500\]: Failed password for invalid user 123 from 124.42.117.243 port 38625 ssh2 |
2019-11-01 13:24:38 |
| 185.176.27.118 | attack | 11/01/2019-00:59:16.793388 185.176.27.118 Protocol: 6 ET SCAN NMAP -sS window 1024 |
2019-11-01 13:02:49 |
| 103.47.237.75 | attack | postfix (unknown user, SPF fail or relay access denied) |
2019-11-01 13:29:25 |
| 185.24.235.140 | attack | 1433/tcp 445/tcp [2019-09-11/11-01]2pkt |
2019-11-01 13:04:39 |
| 151.80.155.98 | attack | Nov 1 05:58:28 tux-35-217 sshd\[25869\]: Invalid user ulva from 151.80.155.98 port 46188 Nov 1 05:58:28 tux-35-217 sshd\[25869\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=151.80.155.98 Nov 1 05:58:30 tux-35-217 sshd\[25869\]: Failed password for invalid user ulva from 151.80.155.98 port 46188 ssh2 Nov 1 06:02:09 tux-35-217 sshd\[25876\]: Invalid user admin123 from 151.80.155.98 port 55474 Nov 1 06:02:09 tux-35-217 sshd\[25876\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=151.80.155.98 ... |
2019-11-01 13:21:39 |
| 148.70.18.221 | attackbots | 2019-11-01T05:00:46.490661abusebot-3.cloudsearch.cf sshd\[8255\]: Invalid user sha from 148.70.18.221 port 58870 |
2019-11-01 13:22:20 |
| 78.128.113.120 | attackspam | 2019-11-01T05:59:39.392866mail01 postfix/smtpd[26060]: warning: unknown[78.128.113.120]: SASL PLAIN authentication failed: 2019-11-01T05:59:46.060213mail01 postfix/smtpd[25842]: warning: unknown[78.128.113.120]: SASL PLAIN authentication failed: 2019-11-01T06:00:01.079123mail01 postfix/smtpd[26060]: warning: unknown[78.128.113.120]: SASL PLAIN authentication failed: |
2019-11-01 13:18:12 |
| 207.81.150.73 | attack | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/207.81.150.73/ CA - 1H : (16) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : CA NAME ASN : ASN25668 IP : 207.81.150.73 CIDR : 207.81.148.0/22 PREFIX COUNT : 48 UNIQUE IP COUNT : 85504 ATTACKS DETECTED ASN25668 : 1H - 1 3H - 1 6H - 1 12H - 1 24H - 1 DateTime : 2019-11-01 04:55:10 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery |
2019-11-01 13:43:18 |
| 117.201.250.194 | attackbotsspam | Nov 1 05:37:17 SilenceServices sshd[26294]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.201.250.194 Nov 1 05:37:19 SilenceServices sshd[26294]: Failed password for invalid user td from 117.201.250.194 port 52900 ssh2 Nov 1 05:41:54 SilenceServices sshd[27580]: Failed password for root from 117.201.250.194 port 35530 ssh2 |
2019-11-01 12:53:22 |
| 122.248.32.54 | attackspam | 445/tcp 1433/tcp... [2019-10-08/11-01]6pkt,2pt.(tcp) |
2019-11-01 13:14:23 |
| 80.88.90.86 | attackspam | Nov 1 04:55:57 [munged] sshd[4928]: Failed password for root from 80.88.90.86 port 33762 ssh2 |
2019-11-01 13:05:07 |
| 198.143.155.142 | attackspam | 143/tcp 2222/tcp 81/tcp... [2019-09-15/11-01]9pkt,8pt.(tcp) |
2019-11-01 13:21:56 |
| 165.22.114.237 | attackbots | Nov 1 05:47:45 ArkNodeAT sshd\[3361\]: Invalid user stephanie from 165.22.114.237 Nov 1 05:47:45 ArkNodeAT sshd\[3361\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.114.237 Nov 1 05:47:47 ArkNodeAT sshd\[3361\]: Failed password for invalid user stephanie from 165.22.114.237 port 47142 ssh2 |
2019-11-01 13:27:02 |
| 159.205.82.134 | attackspam | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/159.205.82.134/ AU - 1H : (46) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : AU NAME ASN : ASN12741 IP : 159.205.82.134 CIDR : 159.205.0.0/16 PREFIX COUNT : 95 UNIQUE IP COUNT : 1590528 ATTACKS DETECTED ASN12741 : 1H - 1 3H - 1 6H - 1 12H - 4 24H - 5 DateTime : 2019-11-01 04:55:33 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery |
2019-11-01 13:21:04 |
| 89.108.84.80 | attack | 2019-11-01T04:40:42.094801shield sshd\[8358\]: Invalid user Admin2017 from 89.108.84.80 port 52952 2019-11-01T04:40:42.101877shield sshd\[8358\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.108.84.80 2019-11-01T04:40:44.397596shield sshd\[8358\]: Failed password for invalid user Admin2017 from 89.108.84.80 port 52952 ssh2 2019-11-01T04:44:46.303423shield sshd\[8963\]: Invalid user lmondon from 89.108.84.80 port 34114 2019-11-01T04:44:46.308936shield sshd\[8963\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.108.84.80 |
2019-11-01 12:56:37 |