城市(city): unknown
省份(region): Gauteng
国家(country): South Africa
运营商(isp): Telkom
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
% This is the AfriNIC Whois server.
% The AFRINIC whois database is subject to the following terms of Use. See https://afrinic.net/whois/terms
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '105.224.0.0 - 105.225.255.255'
% No abuse contact registered for 105.224.0.0 - 105.225.255.255
inetnum: 105.224.0.0 - 105.225.255.255
netname: Telkom_Internet_Broadband_105_224
descr: Addresses used to provide Broadband access to Telkom Internet customer
descr: Abuse Contact: abuse@telkomsa.net
descr: Tel: +27 12 3523661
country: ZA
admin-c: pb455-afrinic
tech-c: pb455-afrinic
status: ASSIGNED PA
remarks: Abuse Contact: abuse@telkomsa.net
remarks: Tel: +27 12 3523661
mnt-by: TF-165-143-0-0-165-149-255-255-MNT
source: AFRINIC # Filtered
parent: 105.224.0.0 - 105.227.255.255
person: Pieter Bezuidenhout
address: Telkom SA Ltd
address: PO Box 2753
address: Pretoria
address: Gauteng
address: 0001
address: ZA
phone: tel:+1-111-111-1111
fax-no: tel:+27-21-311-1111
nic-hdl: PB455-AFRINIC
remarks: Abuse complaints can be directed to abuse@saix.net
remarks: DNS Issues can be directed to dnsadmin@saix.net. Alex, can you see this
abuse-mailbox: abuse@saix.net
mnt-by: GENERATED-VBGUTFTPI6D5BTFKNJLKEZOJLKKWX2IX-MNT
source: AFRINIC # Filtered; <<>> DiG 9.10.3-P4-Ubuntu <<>> 105.225.72.123
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 52547
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;105.225.72.123. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026101402 1800 900 604800 86400
;; Query time: 12 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Oct 15 10:00:34 CST 2026
;; MSG SIZE rcvd: 107123.72.225.105.in-addr.arpa domain name pointer 72-225-105-123.south.dsl.telkomsa.net.b'123.72.225.105.in-addr.arpa name = 72-225-105-123.south.dsl.telkomsa.net.
Authoritative answers can be found from:
'| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 191.102.28.96 | attackbots | Jul 14 22:54:27 rigel postfix/smtpd[10406]: connect from unknown[191.102.28.96] Jul 14 22:54:31 rigel postfix/smtpd[10406]: warning: unknown[191.102.28.96]: SASL CRAM-MD5 authentication failed: authentication failure Jul 14 22:54:32 rigel postfix/smtpd[10406]: warning: unknown[191.102.28.96]: SASL PLAIN authentication failed: authentication failure Jul 14 22:54:34 rigel postfix/smtpd[10406]: warning: unknown[191.102.28.96]: SASL LOGIN authentication failed: authentication failure ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=191.102.28.96 |
2019-07-15 13:27:15 |
| 138.68.57.99 | attackspambots | Jul 15 07:09:46 mout sshd[12007]: Invalid user admin from 138.68.57.99 port 44478 |
2019-07-15 13:18:41 |
| 194.230.79.209 | attackbotsspam | firewall-block, port(s): 445/tcp |
2019-07-15 14:05:24 |
| 196.205.110.229 | attack | Jul 15 03:26:44 server sshd\[21002\]: User root from 196.205.110.229 not allowed because listed in DenyUsers Jul 15 03:26:44 server sshd\[21002\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.205.110.229 user=root Jul 15 03:26:45 server sshd\[21002\]: Failed password for invalid user root from 196.205.110.229 port 35766 ssh2 Jul 15 03:34:40 server sshd\[23816\]: Invalid user support from 196.205.110.229 port 62506 Jul 15 03:34:40 server sshd\[23816\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.205.110.229 |
2019-07-15 13:15:49 |
| 37.139.21.75 | attackbotsspam | 15.07.2019 05:50:05 SSH access blocked by firewall |
2019-07-15 13:57:31 |
| 151.80.144.187 | attack | 2019-07-15 06:54:06 dovecot_login authenticator failed for 187.ip-151-80-144.eu \(ADMIN\) \[151.80.144.187\]: 535 Incorrect authentication data \(set_id=support@opso.it\) 2019-07-15 06:56:44 dovecot_login authenticator failed for 187.ip-151-80-144.eu \(ADMIN\) \[151.80.144.187\]: 535 Incorrect authentication data \(set_id=support@opso.it\) 2019-07-15 06:59:06 dovecot_login authenticator failed for 187.ip-151-80-144.eu \(ADMIN\) \[151.80.144.187\]: 535 Incorrect authentication data \(set_id=support@opso.it\) 2019-07-15 07:01:32 dovecot_login authenticator failed for 187.ip-151-80-144.eu \(ADMIN\) \[151.80.144.187\]: 535 Incorrect authentication data \(set_id=support@opso.it\) 2019-07-15 07:04:02 dovecot_login authenticator failed for 187.ip-151-80-144.eu \(ADMIN\) \[151.80.144.187\]: 535 Incorrect authentication data \(set_id=support@opso.it\) |
2019-07-15 13:56:01 |
| 178.211.94.25 | attack | Jul 15 05:45:26 mail sshd\[30343\]: Failed password for invalid user fy from 178.211.94.25 port 46334 ssh2 Jul 15 06:00:53 mail sshd\[30621\]: Invalid user build from 178.211.94.25 port 45214 Jul 15 06:00:53 mail sshd\[30621\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.211.94.25 ... |
2019-07-15 13:46:46 |
| 213.182.93.172 | attackbots | Jul 15 07:36:53 OPSO sshd\[11990\]: Invalid user smbuser from 213.182.93.172 port 43778 Jul 15 07:36:53 OPSO sshd\[11990\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.182.93.172 Jul 15 07:36:56 OPSO sshd\[11990\]: Failed password for invalid user smbuser from 213.182.93.172 port 43778 ssh2 Jul 15 07:41:40 OPSO sshd\[12554\]: Invalid user testftp from 213.182.93.172 port 42569 Jul 15 07:41:40 OPSO sshd\[12554\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.182.93.172 |
2019-07-15 13:49:48 |
| 139.219.10.63 | attackbotsspam | Jul 15 06:43:48 localhost sshd\[60944\]: Invalid user ubuntu from 139.219.10.63 port 47716 Jul 15 06:43:48 localhost sshd\[60944\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.219.10.63 ... |
2019-07-15 13:58:30 |
| 213.150.207.5 | attackbotsspam | Jul 15 06:17:05 localhost sshd\[59213\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.150.207.5 user=root Jul 15 06:17:07 localhost sshd\[59213\]: Failed password for root from 213.150.207.5 port 54054 ssh2 ... |
2019-07-15 13:35:42 |
| 140.143.228.67 | attackbots | Jul 15 01:08:25 lnxmail61 sshd[2426]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.228.67 |
2019-07-15 13:54:40 |
| 114.32.173.86 | attackspambots | Automatic report - Port Scan Attack |
2019-07-15 13:59:02 |
| 117.206.51.100 | attackspambots | Caught in portsentry honeypot |
2019-07-15 13:09:25 |
| 177.67.165.47 | attack | Excessive failed login attempts on port 587 |
2019-07-15 13:47:15 |
| 122.195.200.36 | attackspambots | Jul 15 07:13:31 ubuntu-2gb-nbg1-dc3-1 sshd[22218]: Failed password for root from 122.195.200.36 port 18416 ssh2 Jul 15 07:13:36 ubuntu-2gb-nbg1-dc3-1 sshd[22218]: error: maximum authentication attempts exceeded for root from 122.195.200.36 port 18416 ssh2 [preauth] ... |
2019-07-15 13:26:44 |