City: unknown
Region: unknown
Country: South Africa
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 41.193.242.195
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 44386
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;41.193.242.195. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020300 1800 900 604800 86400
;; Query time: 39 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 03 23:58:39 CST 2025
;; MSG SIZE rcvd: 107Host 195.242.193.41.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 195.242.193.41.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 128.14.209.155 | attackbots |
|
2020-08-07 07:40:23 |
| 45.176.208.50 | attack | Aug 7 00:54:19 server sshd[21974]: Failed password for root from 45.176.208.50 port 34285 ssh2 Aug 7 00:56:25 server sshd[24521]: Failed password for root from 45.176.208.50 port 46890 ssh2 Aug 7 00:58:25 server sshd[26988]: Failed password for root from 45.176.208.50 port 59496 ssh2 |
2020-08-07 08:01:56 |
| 114.32.251.76 | attackbotsspam | Port probing on unauthorized port 23 |
2020-08-07 07:42:13 |
| 80.82.65.90 | attackspam | ET CINS Active Threat Intelligence Poor Reputation IP group 77 - port: 389 proto: udp cat: Misc Attackbytes: 94 |
2020-08-07 08:00:16 |
| 211.137.254.221 | attackspam | Aug 6 16:10:47 propaganda sshd[94680]: Connection from 211.137.254.221 port 47326 on 10.0.0.160 port 22 rdomain "" Aug 6 16:10:47 propaganda sshd[94680]: Connection closed by 211.137.254.221 port 47326 [preauth] |
2020-08-07 07:36:38 |
| 1.186.248.30 | attackbotsspam | k+ssh-bruteforce |
2020-08-07 07:25:46 |
| 176.10.99.200 | attackspambots | Aug 7 01:34:08 *hidden* kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3f:fd:58:00:08:e3:ff:fd:90:08:00 SRC=176.10.99.200 DST=79.143.186.54 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=12762 DF PROTO=TCP SPT=37304 DPT=2087 WINDOW=64240 RES=0x00 SYN URGP=0 Aug 7 01:34:09 *hidden* kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3f:fd:58:00:08:e3:ff:fd:90:08:00 SRC=176.10.99.200 DST=79.143.186.54 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=12763 DF PROTO=TCP SPT=37304 DPT=2087 WINDOW=64240 RES=0x00 SYN URGP=0 Aug 7 01:34:11 *hidden* kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3f:fd:58:00:08:e3:ff:fd:90:08:00 SRC=176.10.99.200 DST=79.143.186.54 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=12764 DF PROTO=TCP SPT=37304 DPT=2087 WINDOW=64240 RES=0x00 SYN URGP=0 |
2020-08-07 07:48:04 |
| 212.70.149.82 | attackbotsspam | Aug 7 01:56:42 srv01 postfix/smtpd\[17576\]: warning: unknown\[212.70.149.82\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 7 01:56:51 srv01 postfix/smtpd\[18737\]: warning: unknown\[212.70.149.82\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 7 01:56:51 srv01 postfix/smtpd\[18739\]: warning: unknown\[212.70.149.82\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 7 01:56:52 srv01 postfix/smtpd\[18740\]: warning: unknown\[212.70.149.82\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 7 01:57:11 srv01 postfix/smtpd\[18739\]: warning: unknown\[212.70.149.82\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2020-08-07 08:01:38 |
| 207.46.13.153 | attackspam | Automatic report - Banned IP Access |
2020-08-07 07:39:44 |
| 218.78.213.143 | attack | 2020-08-07T01:31:51.472370amanda2.illicoweb.com sshd\[35657\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.78.213.143 user=root 2020-08-07T01:31:53.374622amanda2.illicoweb.com sshd\[35657\]: Failed password for root from 218.78.213.143 port 17009 ssh2 2020-08-07T01:33:48.073356amanda2.illicoweb.com sshd\[35991\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.78.213.143 user=root 2020-08-07T01:33:50.035947amanda2.illicoweb.com sshd\[35991\]: Failed password for root from 218.78.213.143 port 37254 ssh2 2020-08-07T01:35:37.461496amanda2.illicoweb.com sshd\[36254\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.78.213.143 user=root ... |
2020-08-07 07:45:54 |
| 103.96.220.115 | attackbotsspam | 2020-08-06T23:45:43.523692amanda2.illicoweb.com sshd\[16585\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.96.220.115 user=root 2020-08-06T23:45:46.206959amanda2.illicoweb.com sshd\[16585\]: Failed password for root from 103.96.220.115 port 54964 ssh2 2020-08-06T23:49:19.392979amanda2.illicoweb.com sshd\[17063\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.96.220.115 user=root 2020-08-06T23:49:21.730959amanda2.illicoweb.com sshd\[17063\]: Failed password for root from 103.96.220.115 port 41480 ssh2 2020-08-06T23:53:15.049895amanda2.illicoweb.com sshd\[17715\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.96.220.115 user=root ... |
2020-08-07 07:48:26 |
| 27.1.253.142 | attackspambots | Aug 7 01:06:00 vpn01 sshd[17529]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.1.253.142 Aug 7 01:06:02 vpn01 sshd[17529]: Failed password for invalid user enkjidc from 27.1.253.142 port 49670 ssh2 ... |
2020-08-07 07:45:07 |
| 182.23.103.50 | attackspam | Unauthorised access (Aug 7) SRC=182.23.103.50 LEN=52 TOS=0x08 PREC=0x20 TTL=111 ID=12576 DF TCP DPT=445 WINDOW=8192 SYN |
2020-08-07 07:51:49 |
| 142.93.173.214 | attackspambots | Aug 6 16:04:50 mockhub sshd[14290]: Failed password for root from 142.93.173.214 port 45210 ssh2 ... |
2020-08-07 07:31:12 |
| 222.186.180.6 | attackbots | Aug 6 20:22:47 firewall sshd[28309]: Failed password for root from 222.186.180.6 port 58662 ssh2 Aug 6 20:22:51 firewall sshd[28309]: Failed password for root from 222.186.180.6 port 58662 ssh2 Aug 6 20:22:55 firewall sshd[28309]: Failed password for root from 222.186.180.6 port 58662 ssh2 ... |
2020-08-07 07:34:05 |