City: unknown
Region: unknown
Country: South Africa
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 196.45.25.48
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 12154
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;196.45.25.48. IN A
;; AUTHORITY SECTION:
. 127 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022022300 1800 900 604800 86400
;; Query time: 65 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 23 18:27:37 CST 2022
;; MSG SIZE rcvd: 10548.25.45.196.in-addr.arpa domain name pointer 196-45-25-48-ub.amobia.co.za.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
48.25.45.196.in-addr.arpa name = 196-45-25-48-ub.amobia.co.za.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 113.183.74.64 | attackspam | 8080/tcp [2019-09-12]1pkt |
2019-09-13 07:17:10 |
| 92.46.58.110 | attackspam | SPAM Delivery Attempt |
2019-09-13 07:23:26 |
| 40.73.77.70 | attackbots | Sep 12 22:47:21 hcbbdb sshd\[8685\]: Invalid user ts from 40.73.77.70 Sep 12 22:47:21 hcbbdb sshd\[8685\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.73.77.70 Sep 12 22:47:23 hcbbdb sshd\[8685\]: Failed password for invalid user ts from 40.73.77.70 port 45220 ssh2 Sep 12 22:55:14 hcbbdb sshd\[9526\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.73.77.70 user=www-data Sep 12 22:55:15 hcbbdb sshd\[9526\]: Failed password for www-data from 40.73.77.70 port 53304 ssh2 |
2019-09-13 07:06:01 |
| 39.106.227.80 | attack | CN - 1H : (337) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : CN NAME ASN : ASN37963 IP : 39.106.227.80 CIDR : 39.106.0.0/15 PREFIX COUNT : 303 UNIQUE IP COUNT : 6062848 WYKRYTE ATAKI Z ASN37963 : 1H - 1 3H - 1 6H - 4 12H - 9 24H - 23 INFO : SYN Flood DDoS Attack Denial-of-Service Attack (DoS) Detected and Blocked by ADMIN - data recovery https://help-dysk.pl |
2019-09-13 07:09:21 |
| 202.74.243.106 | attackspambots | Sep 12 19:28:05 ny01 sshd[7437]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.74.243.106 Sep 12 19:28:07 ny01 sshd[7437]: Failed password for invalid user ts from 202.74.243.106 port 34121 ssh2 Sep 12 19:34:46 ny01 sshd[8561]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.74.243.106 |
2019-09-13 07:36:58 |
| 45.119.212.105 | attackspam | 19/9/12@19:35:12: FAIL: IoT-SSH address from=45.119.212.105 ... |
2019-09-13 07:38:32 |
| 106.12.33.57 | attackspambots | Automated report - ssh fail2ban: Sep 12 22:15:06 authentication failure Sep 12 22:15:08 wrong password, user=vnc, port=42356, ssh2 Sep 12 22:19:04 authentication failure |
2019-09-13 07:42:33 |
| 145.239.8.229 | attackbots | Sep 12 21:40:00 MK-Soft-VM7 sshd\[14800\]: Invalid user jenkins from 145.239.8.229 port 53136 Sep 12 21:40:00 MK-Soft-VM7 sshd\[14800\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=145.239.8.229 Sep 12 21:40:03 MK-Soft-VM7 sshd\[14800\]: Failed password for invalid user jenkins from 145.239.8.229 port 53136 ssh2 ... |
2019-09-13 07:32:03 |
| 124.156.181.66 | attack | Sep 12 19:39:19 ns3110291 sshd\[9773\]: Invalid user developer from 124.156.181.66 Sep 12 19:39:19 ns3110291 sshd\[9773\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.156.181.66 Sep 12 19:39:22 ns3110291 sshd\[9773\]: Failed password for invalid user developer from 124.156.181.66 port 53818 ssh2 Sep 12 19:44:06 ns3110291 sshd\[10155\]: Invalid user sinusbot from 124.156.181.66 Sep 12 19:44:06 ns3110291 sshd\[10155\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.156.181.66 ... |
2019-09-13 07:07:30 |
| 141.98.9.67 | attackspambots | 2019-09-05 12:46:37 -> 2019-09-12 19:08:57 : 13019 login attempts (141.98.9.67) |
2019-09-13 07:33:49 |
| 139.199.88.93 | attackbots | Sep 12 05:45:26 hiderm sshd\[15446\]: Invalid user teste from 139.199.88.93 Sep 12 05:45:26 hiderm sshd\[15446\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.88.93 Sep 12 05:45:29 hiderm sshd\[15446\]: Failed password for invalid user teste from 139.199.88.93 port 37002 ssh2 Sep 12 05:55:13 hiderm sshd\[16302\]: Invalid user teamspeak from 139.199.88.93 Sep 12 05:55:13 hiderm sshd\[16302\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.88.93 |
2019-09-13 07:42:15 |
| 122.176.122.232 | attack | (mod_security) mod_security (id:222390) triggered by 122.176.122.232 (IN/India/abts-north-static-232.122.176.122.airtelbroadband.in): 5 in the last 3600 secs |
2019-09-13 07:04:59 |
| 188.131.216.109 | attack | 2019-09-12T15:48:19.424099abusebot-8.cloudsearch.cf sshd\[7919\]: Invalid user deployer from 188.131.216.109 port 35372 |
2019-09-13 07:27:36 |
| 115.231.231.3 | attack | Sep 12 20:00:18 microserver sshd[24270]: Invalid user sftpuser from 115.231.231.3 port 52694 Sep 12 20:00:18 microserver sshd[24270]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.231.231.3 Sep 12 20:00:20 microserver sshd[24270]: Failed password for invalid user sftpuser from 115.231.231.3 port 52694 ssh2 Sep 12 20:05:16 microserver sshd[24874]: Invalid user www from 115.231.231.3 port 57968 Sep 12 20:05:16 microserver sshd[24874]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.231.231.3 Sep 12 20:19:38 microserver sshd[26847]: Invalid user ts3bot from 115.231.231.3 port 45560 Sep 12 20:19:38 microserver sshd[26847]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.231.231.3 Sep 12 20:19:40 microserver sshd[26847]: Failed password for invalid user ts3bot from 115.231.231.3 port 45560 ssh2 Sep 12 20:24:30 microserver sshd[27561]: Invalid user bot1 from 115.231.231.3 port 50834 |
2019-09-13 07:16:46 |
| 159.203.201.234 | attack | 53673/tcp [2019-09-12]1pkt |
2019-09-13 07:31:47 |