City: Durban
Region: KwaZulu-Natal
Country: South Africa
Internet Service Provider: unknown
Hostname: unknown
Organization: Vox-Telecom
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 197.245.44.69
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 19878
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;197.245.44.69. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019042300 1800 900 604800 86400
;; Query time: 2 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Tue Apr 23 18:38:44 +08 2019
;; MSG SIZE rcvd: 117
69.44.245.197.in-addr.arpa domain name pointer dsl-197-245-44-69.voxdsl.co.za.
Server: 67.207.67.3
Address: 67.207.67.3#53
Non-authoritative answer:
69.44.245.197.in-addr.arpa name = dsl-197-245-44-69.voxdsl.co.za.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 125.124.215.222 | attack | Lines containing failures of 125.124.215.222 Aug 11 20:35:05 nbi-636 sshd[11163]: User r.r from 125.124.215.222 not allowed because not listed in AllowUsers Aug 11 20:35:05 nbi-636 sshd[11163]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.124.215.222 user=r.r Aug 11 20:35:07 nbi-636 sshd[11163]: Failed password for invalid user r.r from 125.124.215.222 port 44182 ssh2 Aug 11 20:35:08 nbi-636 sshd[11163]: Received disconnect from 125.124.215.222 port 44182:11: Bye Bye [preauth] Aug 11 20:35:08 nbi-636 sshd[11163]: Disconnected from invalid user r.r 125.124.215.222 port 44182 [preauth] Aug 11 20:36:35 nbi-636 sshd[11427]: User r.r from 125.124.215.222 not allowed because not listed in AllowUsers Aug 11 20:36:35 nbi-636 sshd[11427]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.124.215.222 user=r.r Aug 11 20:36:37 nbi-636 sshd[11427]: Failed password for invalid user r.r from 125......... ------------------------------ |
2020-08-16 06:04:29 |
| 197.248.132.197 | attackbotsspam | [Sat Aug 15 15:50:07 2020] - Syn Flood From IP: 197.248.132.197 Port: 10704 |
2020-08-16 06:06:09 |
| 37.115.199.198 | attackbotsspam | Unauthorized connection attempt from IP address 37.115.199.198 on Port 445(SMB) |
2020-08-16 06:28:25 |
| 185.2.140.155 | attackbots | 2020-08-16T00:24:04.444045vps751288.ovh.net sshd\[16666\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.2.140.155 user=root 2020-08-16T00:24:06.286797vps751288.ovh.net sshd\[16666\]: Failed password for root from 185.2.140.155 port 55890 ssh2 2020-08-16T00:27:45.575550vps751288.ovh.net sshd\[16712\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.2.140.155 user=root 2020-08-16T00:27:47.092140vps751288.ovh.net sshd\[16712\]: Failed password for root from 185.2.140.155 port 38080 ssh2 2020-08-16T00:31:15.352092vps751288.ovh.net sshd\[16780\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.2.140.155 user=root |
2020-08-16 06:41:37 |
| 190.77.38.44 | attackspam | Attempted connection to port 445. |
2020-08-16 06:17:48 |
| 201.59.218.34 | attackbotsspam | Unauthorized connection attempt from IP address 201.59.218.34 on Port 445(SMB) |
2020-08-16 06:14:17 |
| 62.102.148.68 | attackspambots | 2020-08-15T22:25:44+0000 Failed SSH Authentication/Brute Force Attack. (Server 6) |
2020-08-16 06:36:51 |
| 222.186.175.216 | attack | Aug 16 00:38:51 abendstille sshd\[7147\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.216 user=root Aug 16 00:38:52 abendstille sshd\[7145\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.216 user=root Aug 16 00:38:53 abendstille sshd\[7147\]: Failed password for root from 222.186.175.216 port 3310 ssh2 Aug 16 00:38:54 abendstille sshd\[7145\]: Failed password for root from 222.186.175.216 port 24108 ssh2 Aug 16 00:38:56 abendstille sshd\[7147\]: Failed password for root from 222.186.175.216 port 3310 ssh2 ... |
2020-08-16 06:40:48 |
| 197.45.105.69 | attackbotsspam | Attempted connection to port 445. |
2020-08-16 06:15:18 |
| 35.222.233.150 | attackbots | Attempted connection to port 7007. |
2020-08-16 06:09:33 |
| 95.70.159.148 | attackbotsspam | Attempted connection to port 23. |
2020-08-16 06:07:57 |
| 122.60.87.193 | attackspambots | Lines containing failures of 122.60.87.193 Aug 13 06:48:39 shared12 sshd[9036]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.60.87.193 user=r.r Aug 13 06:48:42 shared12 sshd[9036]: Failed password for r.r from 122.60.87.193 port 42214 ssh2 Aug 13 06:48:42 shared12 sshd[9036]: Received disconnect from 122.60.87.193 port 42214:11: Bye Bye [preauth] Aug 13 06:48:42 shared12 sshd[9036]: Disconnected from authenticating user r.r 122.60.87.193 port 42214 [preauth] Aug 13 07:03:02 shared12 sshd[14649]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.60.87.193 user=r.r Aug 13 07:03:04 shared12 sshd[14649]: Failed password for r.r from 122.60.87.193 port 37616 ssh2 Aug 13 07:03:04 shared12 sshd[14649]: Received disconnect from 122.60.87.193 port 37616:11: Bye Bye [preauth] Aug 13 07:03:04 shared12 sshd[14649]: Disconnected from authenticating user r.r 122.60.87.193 port 37616 [preauth] Au........ ------------------------------ |
2020-08-16 06:39:43 |
| 37.16.81.207 | attackbots | Unauthorized connection attempt from IP address 37.16.81.207 on Port 445(SMB) |
2020-08-16 06:33:19 |
| 14.47.229.118 | attack | [Sat Aug 15 15:59:40 2020] - Syn Flood From IP: 14.47.229.118 Port: 46592 |
2020-08-16 06:05:15 |
| 177.39.32.151 | attackbotsspam | Unauthorized connection attempt from IP address 177.39.32.151 on Port 445(SMB) |
2020-08-16 06:20:58 |