City: unknown
Region: unknown
Country: South Africa
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 41.150.161.249
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 18453
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;41.150.161.249. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012400 1800 900 604800 86400
;; Query time: 270 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jan 24 14:16:54 CST 2025
;; MSG SIZE rcvd: 107249.161.150.41.in-addr.arpa domain name pointer 8ta-150-161-249.telkomadsl.co.za.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
249.161.150.41.in-addr.arpa name = 8ta-150-161-249.telkomadsl.co.za.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 125.124.152.59 | attackbotsspam | pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.124.152.59 Failed password for invalid user cinstall from 125.124.152.59 port 52030 ssh2 Invalid user hn from 125.124.152.59 port 34802 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.124.152.59 Failed password for invalid user hn from 125.124.152.59 port 34802 ssh2 |
2020-02-15 06:36:35 |
| 89.248.168.87 | attackspambots | 02/14/2020-23:43:56.562421 89.248.168.87 Protocol: 6 ET DROP Dshield Block Listed Source group 1 |
2020-02-15 06:48:10 |
| 45.82.255.201 | attackspambots | Feb 14 23:25:58 plex sshd[24144]: Invalid user cliente from 45.82.255.201 port 53460 |
2020-02-15 06:39:35 |
| 64.68.228.156 | attackbotsspam | Unauthorised access (Feb 15) SRC=64.68.228.156 LEN=40 TTL=54 ID=453 TCP DPT=8080 WINDOW=49348 SYN |
2020-02-15 07:06:58 |
| 187.188.201.11 | attackspam | Honeypot attack, port: 445, PTR: fixed-187-188-201-11.totalplay.net. |
2020-02-15 07:02:20 |
| 52.83.45.206 | attack | Feb 11 20:58:01 web1 sshd[6782]: Invalid user hdfs from 52.83.45.206 Feb 11 20:58:01 web1 sshd[6782]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=em3-52-83-45-206.cn-northwest-1.compute.amazonaws.com.cn Feb 11 20:58:03 web1 sshd[6782]: Failed password for invalid user hdfs from 52.83.45.206 port 56158 ssh2 Feb 11 20:58:03 web1 sshd[6782]: Received disconnect from 52.83.45.206: 11: Bye Bye [preauth] Feb 11 21:13:11 web1 sshd[8034]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=em3-52-83-45-206.cn-northwest-1.compute.amazonaws.com.cn user=r.r Feb 11 21:13:14 web1 sshd[8034]: Failed password for r.r from 52.83.45.206 port 44202 ssh2 Feb 11 21:13:14 web1 sshd[8034]: Received disconnect from 52.83.45.206: 11: Bye Bye [preauth] Feb 11 21:15:58 web1 sshd[8370]: Invalid user role1 from 52.83.45.206 Feb 11 21:15:58 web1 sshd[8370]: pam_unix(sshd:auth): authentication failure; logname= uid=0 e........ ------------------------------- |
2020-02-15 07:03:21 |
| 1.246.222.249 | attackspam | MultiHost/MultiPort Probe, Scan, Hack - |
2020-02-15 06:47:26 |
| 200.116.226.180 | attackspam | Honeypot attack, port: 445, PTR: static-200-116-226-180.une.net.co. |
2020-02-15 06:54:48 |
| 110.170.166.101 | attackspambots | Invalid user ethos from 110.170.166.101 port 50471 |
2020-02-15 06:53:43 |
| 60.190.249.121 | attack | Unauthorized access or intrusion attempt detected from Thor banned IP |
2020-02-15 06:56:01 |
| 95.85.9.94 | attackbots | Feb 11 14:06:50 finn sshd[7985]: Invalid user stanna from 95.85.9.94 port 53375 Feb 11 14:06:50 finn sshd[7985]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.85.9.94 Feb 11 14:06:53 finn sshd[7985]: Failed password for invalid user stanna from 95.85.9.94 port 53375 ssh2 Feb 11 14:06:53 finn sshd[7985]: Received disconnect from 95.85.9.94 port 53375:11: Bye Bye [preauth] Feb 11 14:06:53 finn sshd[7985]: Disconnected from 95.85.9.94 port 53375 [preauth] Feb 11 14:29:29 finn sshd[12827]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.85.9.94 user=r.r Feb 11 14:29:32 finn sshd[12827]: Failed password for r.r from 95.85.9.94 port 53690 ssh2 Feb 11 14:29:32 finn sshd[12827]: Received disconnect from 95.85.9.94 port 53690:11: Bye Bye [preauth] Feb 11 14:29:32 finn sshd[12827]: Disconnected from 95.85.9.94 port 53690 [preauth] Feb 11 14:33:22 finn sshd[13947]: Invalid user nexus from 95.8........ ------------------------------- |
2020-02-15 06:52:28 |
| 190.246.155.29 | attackbots | 2020-02-14T22:55:35.247102homeassistant sshd[22685]: Invalid user fu from 190.246.155.29 port 52352 2020-02-14T22:55:35.254431homeassistant sshd[22685]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.246.155.29 ... |
2020-02-15 07:06:36 |
| 128.199.142.0 | attackbots | Feb 14 12:52:47 sachi sshd\[25114\]: Invalid user gal from 128.199.142.0 Feb 14 12:52:47 sachi sshd\[25114\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.142.0 Feb 14 12:52:49 sachi sshd\[25114\]: Failed password for invalid user gal from 128.199.142.0 port 46848 ssh2 Feb 14 12:55:49 sachi sshd\[25395\]: Invalid user iemergen from 128.199.142.0 Feb 14 12:55:49 sachi sshd\[25395\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.142.0 |
2020-02-15 06:56:15 |
| 45.134.179.57 | attack | Feb 14 23:32:16 h2177944 kernel: \[4917485.974326\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.134.179.57 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=44013 PROTO=TCP SPT=46149 DPT=61389 WINDOW=1024 RES=0x00 SYN URGP=0 Feb 14 23:32:16 h2177944 kernel: \[4917485.974339\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.134.179.57 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=44013 PROTO=TCP SPT=46149 DPT=61389 WINDOW=1024 RES=0x00 SYN URGP=0 Feb 14 23:34:26 h2177944 kernel: \[4917615.319900\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.134.179.57 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=64919 PROTO=TCP SPT=46149 DPT=51789 WINDOW=1024 RES=0x00 SYN URGP=0 Feb 14 23:34:26 h2177944 kernel: \[4917615.319913\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.134.179.57 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=64919 PROTO=TCP SPT=46149 DPT=51789 WINDOW=1024 RES=0x00 SYN URGP=0 Feb 14 23:38:35 h2177944 kernel: \[4917864.004213\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.134.179.57 DST=85.214.1 |
2020-02-15 06:42:48 |
| 51.68.189.69 | attack | Feb 14 12:38:17 auw2 sshd\[20759\]: Invalid user wu!@\# from 51.68.189.69 Feb 14 12:38:17 auw2 sshd\[20759\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.ip-51-68-189.eu Feb 14 12:38:19 auw2 sshd\[20759\]: Failed password for invalid user wu!@\# from 51.68.189.69 port 60498 ssh2 Feb 14 12:41:27 auw2 sshd\[21230\]: Invalid user woaini1314 from 51.68.189.69 Feb 14 12:41:27 auw2 sshd\[21230\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.ip-51-68-189.eu |
2020-02-15 06:47:03 |