City: Pretoria
Region: Gauteng
Country: South Africa
Internet Service Provider: Telkom
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 41.146.29.103
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 36611
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;41.146.29.103. IN A
;; AUTHORITY SECTION:
. 527 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020091802 1800 900 604800 86400
;; Query time: 117 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Sep 19 08:55:17 CST 2020
;; MSG SIZE rcvd: 117103.29.146.41.in-addr.arpa domain name pointer 8ta-146-29-103.telkomadsl.co.za.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
103.29.146.41.in-addr.arpa name = 8ta-146-29-103.telkomadsl.co.za.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 212.92.122.196 | attack | GET /wp/ HTTP/1.1
GET /temp/ HTTP/1.1
GET /main/ HTTP/1.1
GET /backup/ HTTP/1.1
GET /wordpress/ HTTP/1.1
GET /site/ HTTP/1.1
GET /tmp/ HTTP/1.1
GET /portal/ HTTP/1.1
GET /blog/ HTTP/1.1
GET /cms/ HTTP/1.1
GET /test/ HTTP/1.1
GET /new/ HTTP/1.1
GET /web/ HTTP/1.1
GET /demo/ HTTP/1.1
GET /home/ HTTP/1.1
GET /dev/ HTTP/1.1
GET /old/ HTTP/1.1 |
2020-03-06 03:55:40 |
| 2.139.215.255 | attack | Mar 6 01:49:44 webhost01 sshd[21247]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.139.215.255 Mar 6 01:49:45 webhost01 sshd[21247]: Failed password for invalid user user from 2.139.215.255 port 46182 ssh2 ... |
2020-03-06 03:35:10 |
| 51.254.59.113 | attack | Fail2Ban Ban Triggered |
2020-03-06 03:16:57 |
| 177.139.177.94 | attack | $f2bV_matches |
2020-03-06 03:17:54 |
| 49.235.75.19 | attackbots | Mar 5 16:34:15 MK-Soft-VM3 sshd[6551]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.75.19 Mar 5 16:34:18 MK-Soft-VM3 sshd[6551]: Failed password for invalid user nagios from 49.235.75.19 port 56735 ssh2 ... |
2020-03-06 03:39:07 |
| 104.37.187.18 | attackbots | Port 81 (TorPark onion routing) access denied |
2020-03-06 03:34:16 |
| 183.193.234.142 | attack | port scan and connect, tcp 23 (telnet) |
2020-03-06 03:40:04 |
| 104.248.37.196 | attack | SIP/5060 Probe, BF, Hack - |
2020-03-06 03:28:03 |
| 163.172.204.185 | attack | (sshd) Failed SSH login from 163.172.204.185 (FR/France/163-172-204-185.rev.poneytelecom.eu): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Mar 5 19:28:04 amsweb01 sshd[10649]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.204.185 user=root Mar 5 19:28:06 amsweb01 sshd[10649]: Failed password for root from 163.172.204.185 port 48097 ssh2 Mar 5 19:32:08 amsweb01 sshd[10978]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.204.185 user=root Mar 5 19:32:10 amsweb01 sshd[10978]: Failed password for root from 163.172.204.185 port 55989 ssh2 Mar 5 19:35:32 amsweb01 sshd[11258]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.204.185 user=root |
2020-03-06 03:23:53 |
| 162.244.78.193 | attackbotsspam | Nov 7 14:28:19 odroid64 sshd\[9245\]: User root from 162.244.78.193 not allowed because not listed in AllowUsers Nov 7 14:28:19 odroid64 sshd\[9245\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.244.78.193 user=root ... |
2020-03-06 03:56:14 |
| 109.123.117.231 | attackbotsspam | SIP/5060 Probe, BF, Hack - |
2020-03-06 03:52:54 |
| 128.199.178.188 | attack | Mar 5 17:03:12 163-172-32-151 sshd[7558]: Invalid user D-Link from 128.199.178.188 port 35974 ... |
2020-03-06 03:47:17 |
| 125.214.56.143 | attackbotsspam | Email rejected due to spam filtering |
2020-03-06 03:59:15 |
| 104.244.79.235 | attack | " " |
2020-03-06 03:24:37 |
| 124.11.81.6 | attack | Telnet/23 MH Probe, Scan, BF, Hack - |
2020-03-06 03:24:18 |