City: unknown
Region: unknown
Country: South Africa
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 41.147.42.4
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 56383
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;41.147.42.4. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021500 1800 900 604800 86400
;; Query time: 45 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 15 15:03:30 CST 2025
;; MSG SIZE rcvd: 1044.42.147.41.in-addr.arpa domain name pointer 8ta-147-42-04.telkomadsl.co.za.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
4.42.147.41.in-addr.arpa name = 8ta-147-42-04.telkomadsl.co.za.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 124.156.181.66 | attack | Tried sshing with brute force. |
2019-10-21 15:24:03 |
| 94.102.63.51 | attackbotsspam | smtp brute force login |
2019-10-21 15:17:40 |
| 54.39.193.26 | attackbots | <6 unauthorized SSH connections |
2019-10-21 15:27:56 |
| 160.16.94.134 | attack | Oct 21 06:42:13 www sshd\[60986\]: Failed password for root from 160.16.94.134 port 37174 ssh2Oct 21 06:46:32 www sshd\[61190\]: Failed password for root from 160.16.94.134 port 48998 ssh2Oct 21 06:50:42 www sshd\[61388\]: Invalid user mailtest from 160.16.94.134 ... |
2019-10-21 15:25:12 |
| 186.236.15.186 | attackbotsspam | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/186.236.15.186/ BR - 1H : (240) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : BR NAME ASN : ASN53206 IP : 186.236.15.186 CIDR : 186.236.15.0/24 PREFIX COUNT : 31 UNIQUE IP COUNT : 8192 ATTACKS DETECTED ASN53206 : 1H - 1 3H - 1 6H - 1 12H - 1 24H - 1 DateTime : 2019-10-21 05:50:38 INFO : HACK ! - Looking for resource vulnerabilities Scan Detected and Blocked by ADMIN - data recovery |
2019-10-21 15:26:40 |
| 81.92.149.60 | attackspam | Oct 21 04:56:06 web8 sshd\[8573\]: Invalid user paul from 81.92.149.60 Oct 21 04:56:06 web8 sshd\[8573\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.92.149.60 Oct 21 04:56:08 web8 sshd\[8573\]: Failed password for invalid user paul from 81.92.149.60 port 51715 ssh2 Oct 21 05:00:15 web8 sshd\[10454\]: Invalid user tasatje from 81.92.149.60 Oct 21 05:00:15 web8 sshd\[10454\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.92.149.60 |
2019-10-21 15:06:42 |
| 190.131.203.90 | attack | Honeypot attack, port: 445, PTR: PTR record not found |
2019-10-21 14:58:58 |
| 200.41.86.59 | attack | Oct 20 20:57:15 kapalua sshd\[29138\]: Invalid user daredevilz from 200.41.86.59 Oct 20 20:57:15 kapalua sshd\[29138\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.41.86.59 Oct 20 20:57:17 kapalua sshd\[29138\]: Failed password for invalid user daredevilz from 200.41.86.59 port 48792 ssh2 Oct 20 21:01:39 kapalua sshd\[29653\]: Invalid user 12345678 from 200.41.86.59 Oct 20 21:01:39 kapalua sshd\[29653\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.41.86.59 |
2019-10-21 15:12:47 |
| 193.70.86.97 | attack | (sshd) Failed SSH login from 193.70.86.97 (FR/France/97.ip-193-70-86.eu): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct 21 05:26:21 server2 sshd[23850]: Failed password for root from 193.70.86.97 port 38268 ssh2 Oct 21 05:40:28 server2 sshd[24221]: Failed password for root from 193.70.86.97 port 49698 ssh2 Oct 21 05:43:57 server2 sshd[24281]: Failed password for root from 193.70.86.97 port 60848 ssh2 Oct 21 05:47:34 server2 sshd[24405]: Failed password for root from 193.70.86.97 port 43754 ssh2 Oct 21 05:51:13 server2 sshd[24502]: Invalid user clock from 193.70.86.97 port 54916 |
2019-10-21 15:11:31 |
| 146.120.17.141 | attackspambots | Multiple failed RDP login attempts |
2019-10-21 15:19:31 |
| 202.151.30.141 | attack | Oct 21 07:26:23 vps01 sshd[32164]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.151.30.141 Oct 21 07:26:25 vps01 sshd[32164]: Failed password for invalid user qiidc2011 from 202.151.30.141 port 44906 ssh2 |
2019-10-21 15:13:03 |
| 179.180.239.169 | attackbots | Automatic report - Port Scan Attack |
2019-10-21 15:02:04 |
| 221.224.194.83 | attack | Oct 21 08:45:34 markkoudstaal sshd[32222]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.224.194.83 Oct 21 08:45:36 markkoudstaal sshd[32222]: Failed password for invalid user oracle from 221.224.194.83 port 42984 ssh2 Oct 21 08:51:17 markkoudstaal sshd[32700]: Failed password for root from 221.224.194.83 port 51132 ssh2 |
2019-10-21 15:08:07 |
| 206.81.7.42 | attack | Oct 21 05:13:31 marvibiene sshd[5513]: Invalid user poxy from 206.81.7.42 port 39294 Oct 21 05:13:31 marvibiene sshd[5513]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.81.7.42 Oct 21 05:13:31 marvibiene sshd[5513]: Invalid user poxy from 206.81.7.42 port 39294 Oct 21 05:13:32 marvibiene sshd[5513]: Failed password for invalid user poxy from 206.81.7.42 port 39294 ssh2 ... |
2019-10-21 14:59:53 |
| 162.243.58.222 | attackspam | SSH Brute-Force reported by Fail2Ban |
2019-10-21 15:19:08 |