City: Kempton Park
Region: Gauteng
Country: South Africa
Internet Service Provider: unknown
Hostname: unknown
Organization: Active-Fibre
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 196.61.225.214
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 46455
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;196.61.225.214. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019042600 1800 900 604800 86400
;; Query time: 2 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Fri Apr 26 20:34:58 +08 2019
;; MSG SIZE rcvd: 118
214.225.61.196.in-addr.arpa domain name pointer 196-61-225-214.afbus-jhb.activefibre.co.za.
Server: 67.207.67.3
Address: 67.207.67.3#53
Non-authoritative answer:
214.225.61.196.in-addr.arpa name = 196-61-225-214.afbus-jhb.activefibre.co.za.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 23.129.64.202 | attackspam | GET /wp-config.php.old HTTP/1.1 |
2020-08-07 03:51:57 |
| 51.75.202.218 | attack | Aug 6 15:15:35 vps639187 sshd\[3206\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.202.218 user=root Aug 6 15:15:37 vps639187 sshd\[3206\]: Failed password for root from 51.75.202.218 port 34220 ssh2 Aug 6 15:19:52 vps639187 sshd\[3296\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.202.218 user=root ... |
2020-08-07 03:41:42 |
| 187.235.8.101 | attackspam | k+ssh-bruteforce |
2020-08-07 03:56:01 |
| 62.210.25.243 | attackspam | 62.210.25.243 - - [06/Aug/2020:19:29:23 +0200] "POST /wp-login.php HTTP/1.1" 200 3434 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-08-07 04:02:41 |
| 148.70.93.108 | attackbotsspam | Attempts to probe for or exploit a Drupal 7.69 site on url: /wp-login.php. Reported by the module https://www.drupal.org/project/abuseipdb. |
2020-08-07 03:50:09 |
| 131.196.93.131 | attackbotsspam | (smtpauth) Failed SMTP AUTH login from 131.196.93.131 (BR/Brazil/static-131-196-93-131.globaltelecombr.com.br): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-08-06 17:49:23 plain authenticator failed for ([131.196.93.131]) [131.196.93.131]: 535 Incorrect authentication data (set_id=info@taninsanat.com) |
2020-08-07 03:59:56 |
| 5.32.175.72 | attackspambots | GET /wp-login.php HTTP/1.1 |
2020-08-07 04:03:58 |
| 49.0.64.223 | attackbots | firewall-block, port(s): 1433/tcp |
2020-08-07 03:34:40 |
| 185.220.102.254 | attackbotsspam | Automatic report - Banned IP Access |
2020-08-07 03:53:26 |
| 31.31.74.131 | attackbotsspam | GET /wp-config.phporiginal HTTP/1.1 |
2020-08-07 03:50:59 |
| 185.220.101.14 | attackspam | GET /wp-config.php.1 HTTP/1.1 |
2020-08-07 03:54:27 |
| 34.76.63.237 | attackspambots | Tried to find non-existing directory/file on the server |
2020-08-07 04:08:17 |
| 82.99.206.18 | attack | Aug 6 18:46:43 scw-focused-cartwright sshd[13154]: Failed password for root from 82.99.206.18 port 38284 ssh2 |
2020-08-07 03:35:09 |
| 178.62.0.215 | attackbots | $f2bV_matches |
2020-08-07 03:44:57 |
| 218.92.0.224 | attackbotsspam | Aug 6 21:44:37 vps639187 sshd\[8195\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.224 user=root Aug 6 21:44:39 vps639187 sshd\[8195\]: Failed password for root from 218.92.0.224 port 13564 ssh2 Aug 6 21:44:43 vps639187 sshd\[8195\]: Failed password for root from 218.92.0.224 port 13564 ssh2 ... |
2020-08-07 03:45:30 |