City: Pretoria
Region: Gauteng
Country: South Africa
Internet Service Provider: Clear Access (Pty) Ltd
Hostname: unknown
Organization: unknown
Usage Type: Data Center/Web Hosting/Transit
| Type | Details | Datetime |
|---|---|---|
| attackspam | IDS |
2019-12-11 03:34:57 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.221.92.199
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 1354
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.221.92.199. IN A
;; AUTHORITY SECTION:
. 345 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019121001 1800 900 604800 86400
;; Query time: 135 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Dec 11 03:34:52 CST 2019
;; MSG SIZE rcvd: 117199.92.221.45.in-addr.arpa domain name pointer 45-221-92-199.clearaccess.co.za.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
199.92.221.45.in-addr.arpa name = 45-221-92-199.clearaccess.co.za.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 221.156.126.1 | attack | Bruteforce detected by fail2ban |
2020-04-20 23:43:22 |
| 165.22.77.163 | attack | 2020-04-20T11:26:39.0520931495-001 sshd[32902]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.77.163 2020-04-20T11:26:39.0489811495-001 sshd[32902]: Invalid user kc from 165.22.77.163 port 54650 2020-04-20T11:26:41.4744501495-001 sshd[32902]: Failed password for invalid user kc from 165.22.77.163 port 54650 ssh2 2020-04-20T11:33:00.6074111495-001 sshd[33244]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.77.163 user=root 2020-04-20T11:33:02.6683351495-001 sshd[33244]: Failed password for root from 165.22.77.163 port 45058 ssh2 2020-04-20T11:38:38.2648031495-001 sshd[33587]: Invalid user webmaster from 165.22.77.163 port 35458 ... |
2020-04-21 00:04:52 |
| 218.75.62.132 | attackbotsspam | Apr 20 14:38:57 ns392434 sshd[12625]: Invalid user yy from 218.75.62.132 port 36094 Apr 20 14:38:57 ns392434 sshd[12625]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.75.62.132 Apr 20 14:38:57 ns392434 sshd[12625]: Invalid user yy from 218.75.62.132 port 36094 Apr 20 14:38:58 ns392434 sshd[12625]: Failed password for invalid user yy from 218.75.62.132 port 36094 ssh2 Apr 20 14:45:20 ns392434 sshd[12957]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.75.62.132 user=root Apr 20 14:45:22 ns392434 sshd[12957]: Failed password for root from 218.75.62.132 port 51918 ssh2 Apr 20 14:51:08 ns392434 sshd[13256]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.75.62.132 user=root Apr 20 14:51:10 ns392434 sshd[13256]: Failed password for root from 218.75.62.132 port 60944 ssh2 Apr 20 14:56:46 ns392434 sshd[13502]: Invalid user admin from 218.75.62.132 port 41732 |
2020-04-20 23:45:21 |
| 221.140.151.235 | attack | $f2bV_matches |
2020-04-20 23:43:49 |
| 121.229.52.13 | attackspam | Invalid user test from 121.229.52.13 port 33246 |
2020-04-21 00:20:42 |
| 14.169.183.50 | attack | 2020-04-2016:49:011jQXjI-0004ly-02\<=info@whatsup2013.chH=\(localhost\)[14.169.183.50]:41260P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=3072id=ad26a6f5fed5000c2b6ed88b7fb8c2cefddac6f9@whatsup2013.chT="fromLondatochilingo.1979am"forchilingo.1979am@gmail.comarog7165@gmail.com2020-04-2016:47:511jQXi9-0004fH-Jz\<=info@whatsup2013.chH=\(localhost\)[197.217.70.169]:40190P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=3043id=aab402515a715b53cfca7cd037b3998516407e@whatsup2013.chT="fromNicholtorocketflame12"forrocketflame12@gmail.comshon.baxter@gmail.com2020-04-2016:48:281jQXil-0004jl-KB\<=info@whatsup2013.chH=\(localhost\)[123.21.125.129]:41613P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=3057id=22289ecdc6edc7cf5356e04cab2f05195f257c@whatsup2013.chT="NewlikefromRana"formatthewodougherty9@gmail.combrokedicdawg54@gmail.com2020-04-2016:48:411jQXiz-0004lI-BH\<=info@whatsup2013.chH=\ |
2020-04-20 23:38:40 |
| 161.132.194.132 | attackspam | Invalid user tm from 161.132.194.132 port 41236 |
2020-04-21 00:07:09 |
| 180.76.173.189 | attackspambots | Invalid user admin from 180.76.173.189 port 43832 |
2020-04-21 00:00:14 |
| 200.146.215.26 | attackbots | 2020-04-20T13:33:56.940555ionos.janbro.de sshd[33575]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.146.215.26 2020-04-20T13:33:56.422408ionos.janbro.de sshd[33575]: Invalid user git from 200.146.215.26 port 12812 2020-04-20T13:33:58.977590ionos.janbro.de sshd[33575]: Failed password for invalid user git from 200.146.215.26 port 12812 ssh2 2020-04-20T13:37:54.408529ionos.janbro.de sshd[33602]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.146.215.26 user=root 2020-04-20T13:37:56.396114ionos.janbro.de sshd[33602]: Failed password for root from 200.146.215.26 port 16655 ssh2 2020-04-20T13:42:02.539252ionos.janbro.de sshd[33641]: Invalid user ph from 200.146.215.26 port 17806 2020-04-20T13:42:02.908676ionos.janbro.de sshd[33641]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.146.215.26 2020-04-20T13:42:02.539252ionos.janbro.de sshd[33641]: Invalid use ... |
2020-04-20 23:49:42 |
| 128.199.91.233 | attackbotsspam | $f2bV_matches |
2020-04-21 00:16:32 |
| 138.97.23.190 | attackspam | Apr 20 12:45:03 vps46666688 sshd[20853]: Failed password for root from 138.97.23.190 port 57260 ssh2 Apr 20 12:54:55 vps46666688 sshd[21036]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.23.190 ... |
2020-04-21 00:14:32 |
| 212.156.249.174 | attack | SSH brute-force attempt |
2020-04-20 23:46:47 |
| 157.230.48.124 | attack | Apr 20 18:54:30 lukav-desktop sshd\[18143\]: Invalid user tk from 157.230.48.124 Apr 20 18:54:30 lukav-desktop sshd\[18143\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.48.124 Apr 20 18:54:32 lukav-desktop sshd\[18143\]: Failed password for invalid user tk from 157.230.48.124 port 51276 ssh2 Apr 20 18:58:36 lukav-desktop sshd\[18309\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.48.124 user=root Apr 20 18:58:38 lukav-desktop sshd\[18309\]: Failed password for root from 157.230.48.124 port 40552 ssh2 |
2020-04-21 00:08:11 |
| 163.44.149.235 | attackbots | Apr 20 16:51:51 l03 sshd[27486]: Invalid user oracle from 163.44.149.235 port 39534 ... |
2020-04-21 00:06:19 |
| 123.21.183.244 | attackbotsspam | Invalid user admin from 123.21.183.244 port 59084 |
2020-04-21 00:18:58 |