City: Johannesburg
Region: Gauteng
Country: South Africa
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.57.5.13
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 35674
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;45.57.5.13. IN A
;; AUTHORITY SECTION:
. 510 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2023082300 1800 900 604800 86400
;; Query time: 74 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Aug 23 23:22:57 CST 2023
;; MSG SIZE rcvd: 10313.5.57.45.in-addr.arpa domain name pointer partner-network-device.nflxvideo.net.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
13.5.57.45.in-addr.arpa name = partner-network-device.nflxvideo.net.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 46.38.145.6 | attack | Mar 31 22:13:28 srv01 postfix/smtpd\[1018\]: warning: unknown\[46.38.145.6\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Mar 31 22:14:40 srv01 postfix/smtpd\[1018\]: warning: unknown\[46.38.145.6\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Mar 31 22:15:54 srv01 postfix/smtpd\[25259\]: warning: unknown\[46.38.145.6\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Mar 31 22:17:07 srv01 postfix/smtpd\[3256\]: warning: unknown\[46.38.145.6\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Mar 31 22:18:20 srv01 postfix/smtpd\[3256\]: warning: unknown\[46.38.145.6\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2020-04-01 04:21:40 |
| 185.176.27.90 | attackbots | 03/31/2020-15:10:31.805014 185.176.27.90 Protocol: 6 ET SCAN NMAP -sS window 1024 |
2020-04-01 04:12:23 |
| 165.227.113.2 | attackspambots | Mar 31 18:43:50 localhost sshd\[6556\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.113.2 user=root Mar 31 18:43:52 localhost sshd\[6556\]: Failed password for root from 165.227.113.2 port 41002 ssh2 Mar 31 18:47:45 localhost sshd\[6807\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.113.2 user=root Mar 31 18:47:48 localhost sshd\[6807\]: Failed password for root from 165.227.113.2 port 53638 ssh2 Mar 31 18:51:37 localhost sshd\[7092\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.113.2 user=root ... |
2020-04-01 04:29:24 |
| 185.220.103.7 | attack | Mar 31 18:48:28 srv-ubuntu-dev3 sshd[128289]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.220.103.7 user=root Mar 31 18:48:30 srv-ubuntu-dev3 sshd[128289]: Failed password for root from 185.220.103.7 port 59182 ssh2 Mar 31 18:48:40 srv-ubuntu-dev3 sshd[128289]: Failed password for root from 185.220.103.7 port 59182 ssh2 Mar 31 18:48:28 srv-ubuntu-dev3 sshd[128289]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.220.103.7 user=root Mar 31 18:48:30 srv-ubuntu-dev3 sshd[128289]: Failed password for root from 185.220.103.7 port 59182 ssh2 Mar 31 18:48:40 srv-ubuntu-dev3 sshd[128289]: Failed password for root from 185.220.103.7 port 59182 ssh2 Mar 31 18:48:28 srv-ubuntu-dev3 sshd[128289]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.220.103.7 user=root Mar 31 18:48:30 srv-ubuntu-dev3 sshd[128289]: Failed password for root from 185.220.103.7 port 5918 ... |
2020-04-01 04:42:05 |
| 203.162.166.17 | attackspam | Mar 31 19:14:10 host5 sshd[12499]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.162.166.17 user=root Mar 31 19:14:12 host5 sshd[12499]: Failed password for root from 203.162.166.17 port 40564 ssh2 ... |
2020-04-01 04:23:51 |
| 104.131.97.47 | attackbotsspam | Mar 31 20:54:15 vps sshd[24373]: Failed password for root from 104.131.97.47 port 45546 ssh2 Mar 31 21:11:22 vps sshd[25537]: Failed password for root from 104.131.97.47 port 39602 ssh2 ... |
2020-04-01 04:17:30 |
| 41.65.213.234 | attackbotsspam | Honeypot attack, port: 445, PTR: HOST-234-213.65.41.nile-online.net. |
2020-04-01 04:24:37 |
| 69.28.235.203 | attackbots | Mar 31 14:36:36 Tower sshd[28559]: Connection from 69.28.235.203 port 42213 on 192.168.10.220 port 22 rdomain "" Mar 31 14:36:37 Tower sshd[28559]: Failed password for root from 69.28.235.203 port 42213 ssh2 Mar 31 14:36:37 Tower sshd[28559]: Received disconnect from 69.28.235.203 port 42213:11: Bye Bye [preauth] Mar 31 14:36:37 Tower sshd[28559]: Disconnected from authenticating user root 69.28.235.203 port 42213 [preauth] |
2020-04-01 04:16:04 |
| 13.95.136.125 | attackbots | Brute forcing RDP port 3389 |
2020-04-01 04:44:11 |
| 138.197.163.11 | attack | Apr 1 01:06:17 gw1 sshd[7429]: Failed password for root from 138.197.163.11 port 44710 ssh2 ... |
2020-04-01 04:32:10 |
| 103.145.12.14 | attack | [2020-03-31 16:09:16] NOTICE[1148][C-00019a31] chan_sip.c: Call from '' (103.145.12.14:62437) to extension '01146406820579' rejected because extension not found in context 'public'. [2020-03-31 16:09:16] SECURITY[1163] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-03-31T16:09:16.009-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="01146406820579",SessionID="0x7fd82c530768",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/103.145.12.14/62437",ACLName="no_extension_match" [2020-03-31 16:09:16] NOTICE[1148][C-00019a32] chan_sip.c: Call from '' (103.145.12.14:49322) to extension '+46406820579' rejected because extension not found in context 'public'. [2020-03-31 16:09:16] SECURITY[1163] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-03-31T16:09:16.819-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="+46406820579",SessionID="0x7fd82c43c848",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/103.145. ... |
2020-04-01 04:28:32 |
| 111.231.71.157 | attackspambots | Mar 31 21:34:48 mail sshd[30194]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.71.157 user=root Mar 31 21:34:50 mail sshd[30194]: Failed password for root from 111.231.71.157 port 59728 ssh2 Mar 31 21:52:39 mail sshd[25942]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.71.157 user=root Mar 31 21:52:42 mail sshd[25942]: Failed password for root from 111.231.71.157 port 55322 ssh2 Mar 31 21:58:00 mail sshd[1866]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.71.157 user=root Mar 31 21:58:02 mail sshd[1866]: Failed password for root from 111.231.71.157 port 56976 ssh2 ... |
2020-04-01 04:34:06 |
| 175.145.18.15 | attackspambots | Mar 31 21:56:23 srv-ubuntu-dev3 sshd[32208]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.145.18.15 user=root Mar 31 21:56:25 srv-ubuntu-dev3 sshd[32208]: Failed password for root from 175.145.18.15 port 38575 ssh2 Mar 31 22:00:35 srv-ubuntu-dev3 sshd[33735]: Invalid user jysun from 175.145.18.15 Mar 31 22:00:35 srv-ubuntu-dev3 sshd[33735]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.145.18.15 Mar 31 22:00:35 srv-ubuntu-dev3 sshd[33735]: Invalid user jysun from 175.145.18.15 Mar 31 22:00:37 srv-ubuntu-dev3 sshd[33735]: Failed password for invalid user jysun from 175.145.18.15 port 8824 ssh2 Mar 31 22:04:47 srv-ubuntu-dev3 sshd[34485]: Invalid user cf from 175.145.18.15 Mar 31 22:04:47 srv-ubuntu-dev3 sshd[34485]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.145.18.15 Mar 31 22:04:47 srv-ubuntu-dev3 sshd[34485]: Invalid user cf from 175.145.18.15 ... |
2020-04-01 04:15:33 |
| 78.128.113.72 | attackbots | 2020-03-31 20:56:42 dovecot_login authenticator failed for \(ip-113-72.4vendeta.com.\) \[78.128.113.72\]: 535 Incorrect authentication data \(set_id=adminrus@no-server.de\) 2020-03-31 20:56:49 dovecot_login authenticator failed for \(ip-113-72.4vendeta.com.\) \[78.128.113.72\]: 535 Incorrect authentication data 2020-03-31 20:56:57 dovecot_login authenticator failed for \(ip-113-72.4vendeta.com.\) \[78.128.113.72\]: 535 Incorrect authentication data 2020-03-31 20:57:02 dovecot_login authenticator failed for \(ip-113-72.4vendeta.com.\) \[78.128.113.72\]: 535 Incorrect authentication data 2020-03-31 20:57:03 dovecot_login authenticator failed for \(ip-113-72.4vendeta.com.\) \[78.128.113.72\]: 535 Incorrect authentication data ... |
2020-04-01 04:14:30 |
| 211.20.181.186 | attack | Mar 31 21:55:06 hell sshd[3495]: Failed password for root from 211.20.181.186 port 8491 ssh2 ... |
2020-04-01 04:35:17 |