City: unknown
Region: unknown
Country: South Africa
Internet Service Provider: Afrihost (Pty) Ltd
Hostname: unknown
Organization: Afrihost
Usage Type: Data Center/Web Hosting/Transit
| Type | Details | Datetime |
|---|---|---|
| spam | This address sent an email requesting my company to buy IT equipment with a stolen credit card |
2020-12-05 08:16:27 |
| attack | Jan 28 10:54:21 ms-srv sshd[40891]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.242.145.186 Jan 28 10:54:23 ms-srv sshd[40891]: Failed password for invalid user web from 197.242.145.186 port 54274 ssh2 |
2020-03-10 09:03:58 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 197.242.145.97 | attackspambots | SSH/22 MH Probe, BF, Hack - |
2019-11-02 23:28:16 |
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 197.242.145.186
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 14387
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;197.242.145.186. IN A
;; AUTHORITY SECTION:
. 3228 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019042800 1800 900 604800 86400
;; Query time: 0 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Sun Apr 28 20:21:02 +08 2019
;; MSG SIZE rcvd: 119
186.145.242.197.in-addr.arpa domain name pointer handlit.dedicated.co.za.
Server: 67.207.67.3
Address: 67.207.67.3#53
Non-authoritative answer:
186.145.242.197.in-addr.arpa name = handlit.dedicated.co.za.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 77.245.35.170 | attackbotsspam | Sep 27 01:45:24 server sshd\[26363\]: Invalid user jmeter from 77.245.35.170 port 47674 Sep 27 01:45:24 server sshd\[26363\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.245.35.170 Sep 27 01:45:26 server sshd\[26363\]: Failed password for invalid user jmeter from 77.245.35.170 port 47674 ssh2 Sep 27 01:49:44 server sshd\[5607\]: Invalid user fog from 77.245.35.170 port 40075 Sep 27 01:49:44 server sshd\[5607\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.245.35.170 |
2019-09-27 06:55:03 |
| 93.115.28.55 | attack | Sep 26 22:49:46 www_kotimaassa_fi sshd[13732]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.115.28.55 Sep 26 22:49:48 www_kotimaassa_fi sshd[13732]: Failed password for invalid user ubnt from 93.115.28.55 port 41176 ssh2 ... |
2019-09-27 07:04:05 |
| 41.207.182.133 | attackbotsspam | Sep 26 17:36:57 aat-srv002 sshd[23851]: Failed password for root from 41.207.182.133 port 46276 ssh2 Sep 26 17:41:36 aat-srv002 sshd[23969]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.207.182.133 Sep 26 17:41:37 aat-srv002 sshd[23969]: Failed password for invalid user admin from 41.207.182.133 port 59176 ssh2 ... |
2019-09-27 07:09:47 |
| 118.24.37.81 | attack | Sep 27 05:40:31 webhost01 sshd[9085]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.37.81 Sep 27 05:40:32 webhost01 sshd[9085]: Failed password for invalid user ts3 from 118.24.37.81 port 46380 ssh2 ... |
2019-09-27 06:58:49 |
| 177.236.47.37 | attack | SASL Brute Force |
2019-09-27 06:48:22 |
| 139.199.6.107 | attackspambots | Sep 27 00:47:30 vps691689 sshd[23936]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.6.107 Sep 27 00:47:32 vps691689 sshd[23936]: Failed password for invalid user ay from 139.199.6.107 port 39011 ssh2 Sep 27 00:52:36 vps691689 sshd[24015]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.6.107 ... |
2019-09-27 07:06:21 |
| 77.247.109.31 | attack | 26.09.2019 22:47:02 Connection to port 5563 blocked by firewall |
2019-09-27 07:18:57 |
| 150.95.140.160 | attack | Sep 26 22:34:03 localhost sshd\[100004\]: Invalid user xrdp from 150.95.140.160 port 51360 Sep 26 22:34:03 localhost sshd\[100004\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.95.140.160 Sep 26 22:34:05 localhost sshd\[100004\]: Failed password for invalid user xrdp from 150.95.140.160 port 51360 ssh2 Sep 26 22:38:41 localhost sshd\[100207\]: Invalid user min6 from 150.95.140.160 port 36608 Sep 26 22:38:41 localhost sshd\[100207\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.95.140.160 ... |
2019-09-27 06:51:38 |
| 117.50.46.176 | attack | Sep 27 00:46:16 vps691689 sshd[23909]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.46.176 Sep 27 00:46:18 vps691689 sshd[23909]: Failed password for invalid user info from 117.50.46.176 port 41998 ssh2 Sep 27 00:50:53 vps691689 sshd[23973]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.46.176 ... |
2019-09-27 06:59:49 |
| 187.0.211.99 | attack | Sep 27 01:00:19 meumeu sshd[25280]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.0.211.99 Sep 27 01:00:21 meumeu sshd[25280]: Failed password for invalid user administrador from 187.0.211.99 port 46597 ssh2 Sep 27 01:06:05 meumeu sshd[26017]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.0.211.99 ... |
2019-09-27 07:23:26 |
| 5.57.71.100 | attackbotsspam | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/5.57.71.100/ UA - 1H : (184) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : UA NAME ASN : ASN49332 IP : 5.57.71.100 CIDR : 5.57.64.0/21 PREFIX COUNT : 5 UNIQUE IP COUNT : 16640 WYKRYTE ATAKI Z ASN49332 : 1H - 1 3H - 1 6H - 1 12H - 1 24H - 1 INFO : SERVER - Looking for resource vulnerabilities Detected and Blocked by ADMIN - data recovery |
2019-09-27 07:01:36 |
| 133.130.119.178 | attackspambots | Sep 26 18:26:50 TORMINT sshd\[7144\]: Invalid user olya from 133.130.119.178 Sep 26 18:26:50 TORMINT sshd\[7144\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=133.130.119.178 Sep 26 18:26:52 TORMINT sshd\[7144\]: Failed password for invalid user olya from 133.130.119.178 port 57348 ssh2 ... |
2019-09-27 06:47:00 |
| 149.202.35.165 | attack | May 4 20:25:02 sshd[1965]: Received disconnect from 149.202.35.165: 11: Normal Shutdown, Thank you for playing [preauth] |
2019-09-27 07:00:22 |
| 222.186.15.101 | attackbotsspam | Sep 27 01:09:33 localhost sshd\[11937\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.101 user=root Sep 27 01:09:35 localhost sshd\[11937\]: Failed password for root from 222.186.15.101 port 27309 ssh2 Sep 27 01:09:37 localhost sshd\[11937\]: Failed password for root from 222.186.15.101 port 27309 ssh2 |
2019-09-27 07:13:38 |
| 110.43.34.48 | attack | Sep 26 13:09:47 eddieflores sshd\[6719\]: Invalid user dx from 110.43.34.48 Sep 26 13:09:47 eddieflores sshd\[6719\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.43.34.48 Sep 26 13:09:49 eddieflores sshd\[6719\]: Failed password for invalid user dx from 110.43.34.48 port 32362 ssh2 Sep 26 13:15:08 eddieflores sshd\[7177\]: Invalid user kj from 110.43.34.48 Sep 26 13:15:08 eddieflores sshd\[7177\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.43.34.48 |
2019-09-27 07:18:37 |