City: unknown
Region: unknown
Country: Egypt
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 102.44.158.94
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 60509
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;102.44.158.94.			IN	A
;; AUTHORITY SECTION:
.			354	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022010600 1800 900 604800 86400
;; Query time: 63 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jan 06 18:10:28 CST 2022
;; MSG SIZE  rcvd: 10694.158.44.102.in-addr.arpa domain name pointer host-102.44.158.94.tedata.net.Server:		183.60.83.19
Address:	183.60.83.19#53
Non-authoritative answer:
94.158.44.102.in-addr.arpa	name = host-102.44.158.94.tedata.net.
Authoritative answers can be found from:| IP | Type | Details | Datetime | 
|---|---|---|---|
| 222.186.173.142 | attackbots | 2019-11-12T06:55:19.638817abusebot.cloudsearch.cf sshd\[21233\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.142 user=root | 2019-11-12 14:58:30 | 
| 195.230.113.240 | attackbotsspam | " " | 2019-11-12 14:24:16 | 
| 194.87.238.29 | attack | Nov 12 06:41:39 124388 sshd[32260]: Invalid user engelmann from 194.87.238.29 port 33150 Nov 12 06:41:39 124388 sshd[32260]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.87.238.29 Nov 12 06:41:39 124388 sshd[32260]: Invalid user engelmann from 194.87.238.29 port 33150 Nov 12 06:41:41 124388 sshd[32260]: Failed password for invalid user engelmann from 194.87.238.29 port 33150 ssh2 Nov 12 06:45:26 124388 sshd[32282]: Invalid user benth from 194.87.238.29 port 42358 | 2019-11-12 14:59:14 | 
| 46.38.144.32 | attackbotsspam | 2019-11-12T07:22:06.264353mail01 postfix/smtpd[12869]: warning: unknown[46.38.144.32]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2019-11-12T07:22:15.220762mail01 postfix/smtpd[32054]: warning: unknown[46.38.144.32]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2019-11-12T07:22:28.324445mail01 postfix/smtpd[22357]: warning: unknown[46.38.144.32]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 | 2019-11-12 14:25:02 | 
| 222.186.169.194 | attackbotsspam | Nov 12 06:46:52 work-partkepr sshd\[7891\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.169.194 user=root Nov 12 06:46:55 work-partkepr sshd\[7891\]: Failed password for root from 222.186.169.194 port 36374 ssh2 ... | 2019-11-12 14:50:06 | 
| 69.220.89.173 | attackbotsspam | Nov 12 06:33:54 venus sshd\[9040\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.220.89.173 user=root Nov 12 06:33:56 venus sshd\[9040\]: Failed password for root from 69.220.89.173 port 54949 ssh2 Nov 12 06:37:35 venus sshd\[9107\]: Invalid user guest from 69.220.89.173 port 39925 ... | 2019-11-12 14:47:00 | 
| 222.187.200.229 | attack | Nov 12 06:14:02 marvibiene sshd[11243]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.187.200.229 user=root Nov 12 06:14:05 marvibiene sshd[11243]: Failed password for root from 222.187.200.229 port 53386 ssh2 Nov 12 06:38:04 marvibiene sshd[11483]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.187.200.229 user=root Nov 12 06:38:06 marvibiene sshd[11483]: Failed password for root from 222.187.200.229 port 52022 ssh2 ... | 2019-11-12 14:40:49 | 
| 213.91.179.246 | attackbotsspam | Nov 12 07:33:18 vmanager6029 sshd\[12233\]: Invalid user test from 213.91.179.246 port 52979 Nov 12 07:33:18 vmanager6029 sshd\[12233\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.91.179.246 Nov 12 07:33:20 vmanager6029 sshd\[12233\]: Failed password for invalid user test from 213.91.179.246 port 52979 ssh2 | 2019-11-12 15:09:45 | 
| 123.11.57.4 | attack | Fail2Ban Ban Triggered | 2019-11-12 14:21:57 | 
| 103.106.58.42 | attackspam | Unauthorized IMAP connection attempt | 2019-11-12 14:54:20 | 
| 207.154.229.50 | attackspambots | 2019-11-12T06:36:34.430978shield sshd\[4661\]: Invalid user katatae from 207.154.229.50 port 49276 2019-11-12T06:36:34.435156shield sshd\[4661\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.154.229.50 2019-11-12T06:36:36.819326shield sshd\[4661\]: Failed password for invalid user katatae from 207.154.229.50 port 49276 ssh2 2019-11-12T06:40:26.097191shield sshd\[4725\]: Invalid user webmaster from 207.154.229.50 port 58100 2019-11-12T06:40:26.101549shield sshd\[4725\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.154.229.50 | 2019-11-12 14:45:20 | 
| 104.197.155.193 | attackspambots | 104.197.155.193 - - \[12/Nov/2019:07:34:46 +0100\] "POST /wp-login.php HTTP/1.0" 200 5507 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 104.197.155.193 - - \[12/Nov/2019:07:34:48 +0100\] "POST /xmlrpc.php HTTP/1.0" 200 736 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 104.197.155.193 - - \[12/Nov/2019:07:34:49 +0100\] "POST /wp-login.php HTTP/1.0" 200 5494 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" | 2019-11-12 15:04:26 | 
| 171.251.29.248 | attackspam | Nov 12 07:50:26 andromeda sshd\[50905\]: Invalid user admin from 171.251.29.248 port 49142 Nov 12 07:50:27 andromeda sshd\[50905\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.251.29.248 Nov 12 07:50:28 andromeda sshd\[50905\]: Failed password for invalid user admin from 171.251.29.248 port 49142 ssh2 | 2019-11-12 14:51:32 | 
| 218.211.169.103 | attackspambots | Invalid user cvsuser from 218.211.169.103 port 35040 | 2019-11-12 14:26:12 | 
| 210.56.63.119 | attackspambots | 11/12/2019-07:31:13.378608 210.56.63.119 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433 | 2019-11-12 15:10:20 |