City: unknown
Region: unknown
Country: South Africa
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 41.11.121.189
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 56080
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;41.11.121.189. IN A
;; AUTHORITY SECTION:
. 230 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022011000 1800 900 604800 86400
;; Query time: 22 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jan 10 18:17:43 CST 2022
;; MSG SIZE rcvd: 106b'189.121.11.41.in-addr.arpa domain name pointer vc-kzn-41-11-121-189.umts.vodacom.co.za.
'Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
189.121.11.41.in-addr.arpa name = vc-kzn-41-11-121-189.umts.vodacom.co.za.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 185.176.27.6 | attackspambots | Nov 20 18:53:57 mc1 kernel: \[5558688.155790\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=185.176.27.6 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=1249 PROTO=TCP SPT=49226 DPT=39660 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 20 18:55:48 mc1 kernel: \[5558799.377658\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=185.176.27.6 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=33558 PROTO=TCP SPT=49226 DPT=35875 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 20 18:58:47 mc1 kernel: \[5558977.899328\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=185.176.27.6 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=64111 PROTO=TCP SPT=49226 DPT=36142 WINDOW=1024 RES=0x00 SYN URGP=0 ... |
2019-11-21 02:12:46 |
| 195.225.49.20 | attackspambots | Unauthorised access (Nov 20) SRC=195.225.49.20 LEN=52 TTL=117 ID=9142 DF TCP DPT=445 WINDOW=8192 SYN |
2019-11-21 02:13:53 |
| 185.156.73.52 | attackbots | 11/20/2019-13:33:04.012482 185.156.73.52 Protocol: 6 ET SCAN NMAP -sS window 1024 |
2019-11-21 02:34:32 |
| 197.45.155.12 | attack | 2019-11-20T16:30:11.899260ns386461 sshd\[21816\]: Invalid user admin from 197.45.155.12 port 36961 2019-11-20T16:30:11.904190ns386461 sshd\[21816\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.45.155.12 2019-11-20T16:30:13.386595ns386461 sshd\[21816\]: Failed password for invalid user admin from 197.45.155.12 port 36961 ssh2 2019-11-20T16:41:24.260223ns386461 sshd\[31642\]: Invalid user kanssas from 197.45.155.12 port 18037 2019-11-20T16:41:24.265227ns386461 sshd\[31642\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.45.155.12 ... |
2019-11-21 02:46:53 |
| 158.69.121.179 | attack | 0,51-00/00 [bc00/m07] PostRequest-Spammer scoring: maputo01_x2b |
2019-11-21 02:24:51 |
| 178.128.93.50 | attack | Nov 20 07:11:57 kapalua sshd\[26686\]: Invalid user edwin from 178.128.93.50 Nov 20 07:11:57 kapalua sshd\[26686\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=npl.com.tw Nov 20 07:11:59 kapalua sshd\[26686\]: Failed password for invalid user edwin from 178.128.93.50 port 51068 ssh2 Nov 20 07:16:03 kapalua sshd\[26988\]: Invalid user nsa from 178.128.93.50 Nov 20 07:16:03 kapalua sshd\[26988\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=npl.com.tw |
2019-11-21 02:22:17 |
| 168.195.236.179 | attack | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/168.195.236.179/ BR - 1H : (100) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : BR NAME ASN : ASN53143 IP : 168.195.236.179 CIDR : 168.195.236.0/22 PREFIX COUNT : 12 UNIQUE IP COUNT : 14336 ATTACKS DETECTED ASN53143 : 1H - 1 3H - 1 6H - 1 12H - 1 24H - 1 DateTime : 2019-11-20 15:41:29 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery |
2019-11-21 02:46:02 |
| 106.12.214.128 | attackspambots | Nov 20 11:49:12 Tower sshd[28021]: Connection from 106.12.214.128 port 43649 on 192.168.10.220 port 22 Nov 20 11:49:16 Tower sshd[28021]: Invalid user fricke from 106.12.214.128 port 43649 Nov 20 11:49:16 Tower sshd[28021]: error: Could not get shadow information for NOUSER Nov 20 11:49:16 Tower sshd[28021]: Failed password for invalid user fricke from 106.12.214.128 port 43649 ssh2 Nov 20 11:49:17 Tower sshd[28021]: Received disconnect from 106.12.214.128 port 43649:11: Bye Bye [preauth] Nov 20 11:49:17 Tower sshd[28021]: Disconnected from invalid user fricke 106.12.214.128 port 43649 [preauth] |
2019-11-21 02:50:20 |
| 110.86.178.156 | attackspambots | Fake GoogleBot |
2019-11-21 02:49:23 |
| 144.217.80.190 | attack | WordPress login Brute force / Web App Attack on client site. |
2019-11-21 02:47:15 |
| 46.219.3.139 | attack | SSH Brute Force |
2019-11-21 02:23:39 |
| 200.78.207.209 | attackbotsspam | Automatic report - Port Scan Attack |
2019-11-21 02:36:50 |
| 181.115.249.209 | attackbots | $f2bV_matches |
2019-11-21 02:36:05 |
| 104.245.145.57 | attackbots | 0,52-04/04 [bc03/m62] PostRequest-Spammer scoring: maputo01_x2b |
2019-11-21 02:13:40 |
| 119.1.238.156 | attack | (sshd) Failed SSH login from 119.1.238.156 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Nov 20 17:30:34 elude sshd[27447]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.1.238.156 user=root Nov 20 17:30:36 elude sshd[27447]: Failed password for root from 119.1.238.156 port 48182 ssh2 Nov 20 17:39:20 elude sshd[28769]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.1.238.156 user=root Nov 20 17:39:22 elude sshd[28769]: Failed password for root from 119.1.238.156 port 39035 ssh2 Nov 20 17:44:46 elude sshd[29574]: Invalid user comrade from 119.1.238.156 port 56095 |
2019-11-21 02:23:12 |