City: Johannesburg
Region: Gauteng
Country: South Africa
Internet Service Provider: Vodacom
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 41.192.21.70
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 51674
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;41.192.21.70. IN A
;; AUTHORITY SECTION:
. 320 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022050203 1800 900 604800 86400
;; Query time: 19 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue May 03 12:43:10 CST 2022
;; MSG SIZE rcvd: 105b'70.21.192.41.in-addr.arpa domain name pointer vc-gp-s-41-192-21-70.umts.vodacom.co.za.
'Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
70.21.192.41.in-addr.arpa name = vc-gp-s-41-192-21-70.umts.vodacom.co.za.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 3.82.42.176 | attackbots | Jun 26 22:53:45 TCP Attack: SRC=3.82.42.176 DST=[Masked] LEN=250 TOS=0x00 PREC=0x00 TTL=233 DF PROTO=TCP SPT=56432 DPT=80 WINDOW=913 RES=0x00 ACK PSH URGP=0 |
2019-06-27 08:52:16 |
| 91.205.131.124 | attack | Jun 27 00:48:35 mail kernel: \[634859.670493\] \[UFW BLOCK\] IN=eth0 OUT= MAC=00:50:56:3d:86:ee:00:08:e3:ff:fd:90:08:00 SRC=91.205.131.124 DST=91.205.173.180 LEN=44 TOS=0x00 PREC=0x00 TTL=245 ID=3704 DF PROTO=TCP SPT=26464 DPT=7547 WINDOW=14600 RES=0x00 SYN URGP=0 Jun 27 00:54:32 mail kernel: \[635216.674539\] \[UFW BLOCK\] IN=eth0 OUT= MAC=00:50:56:3d:86:ee:00:08:e3:ff:fd:90:08:00 SRC=91.205.131.124 DST=91.205.173.180 LEN=44 TOS=0x00 PREC=0x00 TTL=245 ID=34151 DF PROTO=TCP SPT=20543 DPT=8291 WINDOW=14600 RES=0x00 SYN URGP=0 Jun 27 00:55:23 mail kernel: \[635267.668908\] \[UFW BLOCK\] IN=eth0 OUT= MAC=00:50:56:3d:86:ee:00:08:e3:ff:fd:90:08:00 SRC=91.205.131.124 DST=91.205.173.180 LEN=44 TOS=0x00 PREC=0x00 TTL=245 ID=169 DF PROTO=TCP SPT=42324 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 |
2019-06-27 08:21:02 |
| 91.236.103.52 | attackbotsspam | [portscan] Port scan |
2019-06-27 08:35:22 |
| 121.226.92.12 | attack | 2019-06-26T23:58:07.454118 X postfix/smtpd[30870]: warning: unknown[121.226.92.12]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2019-06-26T23:59:04.478353 X postfix/smtpd[30870]: warning: unknown[121.226.92.12]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2019-06-27T00:55:26.490110 X postfix/smtpd[38972]: warning: unknown[121.226.92.12]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 |
2019-06-27 08:19:02 |
| 142.93.241.93 | attackspambots | 2019-06-27T05:55:13.690005enmeeting.mahidol.ac.th sshd\[2678\]: Invalid user autoroute from 142.93.241.93 port 39004 2019-06-27T05:55:13.704123enmeeting.mahidol.ac.th sshd\[2678\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=mobilia.com.pe 2019-06-27T05:55:15.633887enmeeting.mahidol.ac.th sshd\[2678\]: Failed password for invalid user autoroute from 142.93.241.93 port 39004 ssh2 ... |
2019-06-27 08:25:43 |
| 170.81.23.18 | attackspam | Jun 27 00:54:14 vps65 sshd\[23780\]: Invalid user hugo from 170.81.23.18 port 59085 Jun 27 00:54:14 vps65 sshd\[23780\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.81.23.18 ... |
2019-06-27 08:46:19 |
| 212.54.155.40 | attackspambots | Jun 27 01:24:50 lnxmail61 sshd[16560]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.54.155.40 Jun 27 01:24:50 lnxmail61 sshd[16560]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.54.155.40 |
2019-06-27 08:50:05 |
| 195.135.194.134 | attack | Jun 27 01:54:37 server sshd\[7590\]: Invalid user 666666 from 195.135.194.134 port 44897 Jun 27 01:54:37 server sshd\[7590\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.135.194.134 Jun 27 01:54:39 server sshd\[7590\]: Failed password for invalid user 666666 from 195.135.194.134 port 44897 ssh2 Jun 27 01:54:42 server sshd\[7688\]: Invalid user 888888 from 195.135.194.134 port 44125 Jun 27 01:54:42 server sshd\[7688\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.135.194.134 |
2019-06-27 08:40:49 |
| 58.87.106.183 | attackbotsspam | Jun 27 00:47:17 tux-35-217 sshd\[9647\]: Invalid user saeed from 58.87.106.183 port 33646 Jun 27 00:47:17 tux-35-217 sshd\[9647\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.87.106.183 Jun 27 00:47:19 tux-35-217 sshd\[9647\]: Failed password for invalid user saeed from 58.87.106.183 port 33646 ssh2 Jun 27 00:55:10 tux-35-217 sshd\[9676\]: Invalid user math from 58.87.106.183 port 34276 Jun 27 00:55:10 tux-35-217 sshd\[9676\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.87.106.183 ... |
2019-06-27 08:28:37 |
| 178.62.102.177 | attackspambots | Jun 27 01:16:06 localhost sshd\[14379\]: Invalid user ajay from 178.62.102.177 port 56805 Jun 27 01:16:06 localhost sshd\[14379\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.102.177 Jun 27 01:16:08 localhost sshd\[14379\]: Failed password for invalid user ajay from 178.62.102.177 port 56805 ssh2 |
2019-06-27 08:33:22 |
| 172.247.109.52 | attack | firewall-block_invalid_GET_Request |
2019-06-27 08:27:02 |
| 103.207.36.223 | attackbotsspam | Jun 27 05:55:23 lcl-usvr-02 sshd[2037]: Invalid user support from 103.207.36.223 port 60605 Jun 27 05:55:23 lcl-usvr-02 sshd[2037]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.207.36.223 Jun 27 05:55:23 lcl-usvr-02 sshd[2037]: Invalid user support from 103.207.36.223 port 60605 Jun 27 05:55:25 lcl-usvr-02 sshd[2037]: Failed password for invalid user support from 103.207.36.223 port 60605 ssh2 Jun 27 05:55:23 lcl-usvr-02 sshd[2037]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.207.36.223 Jun 27 05:55:23 lcl-usvr-02 sshd[2037]: Invalid user support from 103.207.36.223 port 60605 Jun 27 05:55:25 lcl-usvr-02 sshd[2037]: Failed password for invalid user support from 103.207.36.223 port 60605 ssh2 Jun 27 05:55:25 lcl-usvr-02 sshd[2037]: error: Received disconnect from 103.207.36.223 port 60605:3: com.jcraft.jsch.JSchException: Auth fail [preauth] ... |
2019-06-27 08:19:22 |
| 148.72.65.10 | attackspambots | v+ssh-bruteforce |
2019-06-27 08:57:09 |
| 51.15.214.231 | attackspam | Jun 27 00:54:26 lnxweb61 sshd[25622]: Failed password for daemon from 51.15.214.231 port 57180 ssh2 Jun 27 00:54:26 lnxweb61 sshd[25622]: Failed password for daemon from 51.15.214.231 port 57180 ssh2 |
2019-06-27 08:44:14 |
| 185.46.171.25 | attackspambots | firewall-block_invalid_GET_Request |
2019-06-27 08:24:52 |