City: Katlehong
Region: Gauteng
Country: South Africa
Internet Service Provider: Vodacom
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 41.29.4.239
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 60047
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;41.29.4.239. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025053100 1800 900 604800 86400
;; Query time: 37 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat May 31 21:43:30 CST 2025
;; MSG SIZE rcvd: 104239.4.29.41.in-addr.arpa domain name pointer vc-gp-s-41-29-4-239.umts.vodacom.co.za.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
239.4.29.41.in-addr.arpa name = vc-gp-s-41-29-4-239.umts.vodacom.co.za.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 123.207.78.83 | attack | $f2bV_matches |
2020-07-28 23:35:25 |
| 122.51.87.224 | attackbots | 122.51.87.224 - - [28/Jul/2020:14:56:05 +0100] "POST /wp-login.php HTTP/1.1" 200 2121 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 122.51.87.224 - - [28/Jul/2020:14:56:11 +0100] "POST /wp-login.php HTTP/1.1" 200 2091 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 122.51.87.224 - - [28/Jul/2020:14:56:15 +0100] "POST /wp-login.php HTTP/1.1" 200 2092 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-07-28 23:36:54 |
| 150.136.241.199 | attackspam | SSH Brute-Force. Ports scanning. |
2020-07-28 23:52:12 |
| 120.52.139.130 | attack | k+ssh-bruteforce |
2020-07-28 23:39:27 |
| 128.199.84.251 | attackspambots | Unauthorised connection attempt detected at AUO NODE 4. System is sshd. Protected by AUO Stack Web Application Firewall (WAF) |
2020-07-28 23:16:45 |
| 218.92.0.190 | attackspambots | Jul 28 17:42:44 dcd-gentoo sshd[2536]: User root from 218.92.0.190 not allowed because none of user's groups are listed in AllowGroups Jul 28 17:42:46 dcd-gentoo sshd[2536]: error: PAM: Authentication failure for illegal user root from 218.92.0.190 Jul 28 17:42:46 dcd-gentoo sshd[2536]: Failed keyboard-interactive/pam for invalid user root from 218.92.0.190 port 10619 ssh2 ... |
2020-07-28 23:46:55 |
| 96.18.126.239 | attackbots | Jul 28 13:04:04 lvps5-35-247-183 sshd[9228]: Invalid user admin from 96.18.126.239 Jul 28 13:04:05 lvps5-35-247-183 sshd[9228]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=96-18-126-239.cpe.sparklight.net Jul 28 13:04:07 lvps5-35-247-183 sshd[9228]: Failed password for invalid user admin from 96.18.126.239 port 38885 ssh2 Jul 28 13:04:07 lvps5-35-247-183 sshd[9228]: Received disconnect from 96.18.126.239: 11: Bye Bye [preauth] Jul 28 13:04:09 lvps5-35-247-183 sshd[9230]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=96-18-126-239.cpe.sparklight.net user=r.r Jul 28 13:04:12 lvps5-35-247-183 sshd[9230]: Failed password for r.r from 96.18.126.239 port 39083 ssh2 Jul 28 13:04:12 lvps5-35-247-183 sshd[9230]: Received disconnect from 96.18.126.239: 11: Bye Bye [preauth] Jul 28 13:04:14 lvps5-35-247-183 sshd[9232]: Invalid user admin from 96.18.126.239 Jul 28 13:04:14 lvps5-35-247-183 sshd[........ ------------------------------- |
2020-07-28 23:29:05 |
| 37.187.75.16 | attack | 37.187.75.16 - - [28/Jul/2020:16:42:08 +0100] "POST /wp-login.php HTTP/1.1" 200 5799 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" 37.187.75.16 - - [28/Jul/2020:16:44:09 +0100] "POST /wp-login.php HTTP/1.1" 200 5799 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" 37.187.75.16 - - [28/Jul/2020:16:46:14 +0100] "POST /wp-login.php HTTP/1.1" 200 5799 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" ... |
2020-07-28 23:49:22 |
| 122.51.177.151 | attackspam | Jul 28 15:39:17 abendstille sshd\[30752\]: Invalid user zyhu from 122.51.177.151 Jul 28 15:39:17 abendstille sshd\[30752\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.177.151 Jul 28 15:39:19 abendstille sshd\[30752\]: Failed password for invalid user zyhu from 122.51.177.151 port 58254 ssh2 Jul 28 15:44:03 abendstille sshd\[3157\]: Invalid user zzk from 122.51.177.151 Jul 28 15:44:03 abendstille sshd\[3157\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.177.151 ... |
2020-07-28 23:32:48 |
| 14.169.139.82 | attack | xmlrpc attack |
2020-07-28 23:20:30 |
| 222.186.42.7 | attack | 2020-07-28T18:09:39.726466lavrinenko.info sshd[18949]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.7 user=root 2020-07-28T18:09:41.758250lavrinenko.info sshd[18949]: Failed password for root from 222.186.42.7 port 20918 ssh2 2020-07-28T18:09:39.726466lavrinenko.info sshd[18949]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.7 user=root 2020-07-28T18:09:41.758250lavrinenko.info sshd[18949]: Failed password for root from 222.186.42.7 port 20918 ssh2 2020-07-28T18:09:45.920004lavrinenko.info sshd[18949]: Failed password for root from 222.186.42.7 port 20918 ssh2 ... |
2020-07-28 23:15:15 |
| 50.62.160.239 | attack | LGS,WP GET /www/wp-includes/wlwmanifest.xml |
2020-07-28 23:44:12 |
| 61.177.172.142 | attack | Jul 28 15:29:22 marvibiene sshd[4967]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.142 user=root Jul 28 15:29:24 marvibiene sshd[4967]: Failed password for root from 61.177.172.142 port 22511 ssh2 Jul 28 15:29:27 marvibiene sshd[4967]: Failed password for root from 61.177.172.142 port 22511 ssh2 Jul 28 15:29:22 marvibiene sshd[4967]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.142 user=root Jul 28 15:29:24 marvibiene sshd[4967]: Failed password for root from 61.177.172.142 port 22511 ssh2 Jul 28 15:29:27 marvibiene sshd[4967]: Failed password for root from 61.177.172.142 port 22511 ssh2 |
2020-07-28 23:31:10 |
| 168.187.100.61 | attackspam | Jul 28 15:33:33 sshgateway sshd\[11961\]: Invalid user npe from 168.187.100.61 Jul 28 15:33:33 sshgateway sshd\[11961\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.187.100.61 Jul 28 15:33:35 sshgateway sshd\[11961\]: Failed password for invalid user npe from 168.187.100.61 port 59000 ssh2 |
2020-07-28 23:42:09 |
| 42.159.228.125 | attackspam | Jul 28 17:03:37 mout sshd[17530]: Invalid user fjseclib from 42.159.228.125 port 62168 |
2020-07-28 23:51:17 |