City: unknown
Region: unknown
Country: South Africa
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 197.228.236.94
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 59890
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;197.228.236.94. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012400 1800 900 604800 86400
;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jan 24 16:34:55 CST 2025
;; MSG SIZE rcvd: 10794.236.228.197.in-addr.arpa domain name pointer 8ta-228-236-94.telkomadsl.co.za.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
94.236.228.197.in-addr.arpa name = 8ta-228-236-94.telkomadsl.co.za.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 188.166.42.50 | attackspam | 2019-11-04T11:53:36.413341mail01 postfix/smtpd[26849]: warning: unknown[188.166.42.50]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2019-11-04T11:56:15.315966mail01 postfix/smtpd[30424]: warning: unknown[188.166.42.50]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2019-11-04T12:01:10.485075mail01 postfix/smtpd[11968]: warning: unknown[188.166.42.50]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 |
2019-11-04 21:33:35 |
| 54.67.50.2 | attack | Connection by 54.67.50.2 on port: 6066 got caught by honeypot at 11/4/2019 5:21:21 AM |
2019-11-04 21:22:23 |
| 159.65.30.66 | attackspam | SSH Brute-Force reported by Fail2Ban |
2019-11-04 21:28:31 |
| 113.141.67.120 | attackspambots | Portscan or hack attempt detected by psad/fwsnort |
2019-11-04 21:08:54 |
| 132.145.201.163 | attackbots | Nov 4 15:19:29 gw1 sshd[25766]: Failed password for root from 132.145.201.163 port 21329 ssh2 ... |
2019-11-04 21:17:50 |
| 218.17.207.5 | attack | Nov 4 07:43:53 amit sshd\[27636\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.17.207.5 user=root Nov 4 07:43:55 amit sshd\[27636\]: Failed password for root from 218.17.207.5 port 56446 ssh2 Nov 4 07:49:51 amit sshd\[14692\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.17.207.5 user=root ... |
2019-11-04 20:59:53 |
| 159.89.188.167 | attackspambots | Nov 4 09:38:32 ns381471 sshd[28270]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.188.167 Nov 4 09:38:35 ns381471 sshd[28270]: Failed password for invalid user ltelles from 159.89.188.167 port 58936 ssh2 |
2019-11-04 21:38:29 |
| 46.38.144.202 | attackspam | 2019-11-04T13:54:28.130933mail01 postfix/smtpd[6021]: warning: unknown[46.38.144.202]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2019-11-04T13:54:51.061582mail01 postfix/smtpd[6021]: warning: unknown[46.38.144.202]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2019-11-04T13:55:15.138037mail01 postfix/smtpd[6021]: warning: unknown[46.38.144.202]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 |
2019-11-04 21:12:44 |
| 138.68.148.177 | attack | 2019-11-04T11:59:32.292766abusebot-5.cloudsearch.cf sshd\[14699\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.148.177 user=root |
2019-11-04 21:04:14 |
| 104.131.36.183 | attack | Automatic report - XMLRPC Attack |
2019-11-04 21:23:14 |
| 104.254.92.20 | attack | 1,35-01/00 [bc00/m22] PostRequest-Spammer scoring: Dodoma |
2019-11-04 21:34:08 |
| 110.164.136.205 | attack | Port 1433 Scan |
2019-11-04 21:19:55 |
| 203.205.28.116 | attackbotsspam | Unauthorised access (Nov 4) SRC=203.205.28.116 LEN=52 TTL=109 ID=26327 DF TCP DPT=445 WINDOW=8192 SYN |
2019-11-04 21:16:51 |
| 154.218.1.183 | attackbotsspam | Nov 3 20:16:15 newdogma sshd[7626]: Invalid user database from 154.218.1.183 port 38074 Nov 3 20:16:15 newdogma sshd[7626]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.218.1.183 Nov 3 20:16:18 newdogma sshd[7626]: Failed password for invalid user database from 154.218.1.183 port 38074 ssh2 Nov 3 20:16:18 newdogma sshd[7626]: Received disconnect from 154.218.1.183 port 38074:11: Bye Bye [preauth] Nov 3 20:16:18 newdogma sshd[7626]: Disconnected from 154.218.1.183 port 38074 [preauth] Nov 3 20:32:46 newdogma sshd[7748]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.218.1.183 user=r.r Nov 3 20:32:48 newdogma sshd[7748]: Failed password for r.r from 154.218.1.183 port 59614 ssh2 Nov 3 20:32:48 newdogma sshd[7748]: Received disconnect from 154.218.1.183 port 59614:11: Bye Bye [preauth] Nov 3 20:32:48 newdogma sshd[7748]: Disconnected from 154.218.1.183 port 59614 [preauth]........ ------------------------------- |
2019-11-04 21:14:36 |
| 87.236.20.239 | attack | 87.236.20.239 - - \[04/Nov/2019:12:19:36 +0000\] "POST /wp-login.php HTTP/1.1" 200 4358 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 87.236.20.239 - - \[04/Nov/2019:12:19:37 +0000\] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" ... |
2019-11-04 21:24:14 |