City: unknown
Region: unknown
Country: Afghanistan
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 103.42.162.30 | attackbots | Sep 1 13:27:22 shivevps sshd[27916]: Bad protocol version identification '\024' from 103.42.162.30 port 50060 ... |
2020-09-02 03:57:47 |
| 103.42.124.205 | attackspam | Honeypot attack, port: 81, PTR: PTR record not found |
2020-06-22 01:05:47 |
| 103.42.172.167 | attackspambots | firewall-block, port(s): 445/tcp |
2020-05-04 00:46:12 |
| 103.42.172.167 | attackspam | Unauthorized connection attempt from IP address 103.42.172.167 on Port 445(SMB) |
2020-04-24 22:14:10 |
| 103.42.115.118 | attack | Wed, 25 Mar 2020 02:48:26 -0400 Received: from traffic-manage.photon-5.eth01.trafficpollutioncontrol.online ([103.42.115.118]:2625) From: "Tech Smart Card" |
2020-03-26 14:36:58 |
| 103.42.158.73 | attack | Mar 1 14:16:53 debian-2gb-nbg1-2 kernel: \[5327800.230257\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=103.42.158.73 DST=195.201.40.59 LEN=44 TOS=0x00 PREC=0x20 TTL=44 ID=42309 PROTO=TCP SPT=52104 DPT=23 WINDOW=53392 RES=0x00 SYN URGP=0 |
2020-03-02 05:07:17 |
| 103.42.172.167 | attack | 20/2/21@23:45:21: FAIL: Alarm-Intrusion address from=103.42.172.167 ... |
2020-02-22 19:11:22 |
| 103.42.16.254 | attack | Host Scan |
2019-12-26 17:28:24 |
| 103.42.173.80 | attackspam | Attempt to attack host OS, exploiting network vulnerabilities, on 19-12-2019 15:05:15. |
2019-12-20 02:36:48 |
| 103.42.127.35 | attackspam | 1576252666 - 12/13/2019 16:57:46 Host: 103.42.127.35/103.42.127.35 Port: 445 TCP Blocked |
2019-12-14 01:44:07 |
| 103.42.127.223 | attackbots | 2019-12-04T07:28:34.5313711240 sshd\[29848\]: Invalid user avanthi from 103.42.127.223 port 61951 2019-12-04T07:28:40.5487051240 sshd\[29848\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.42.127.223 2019-12-04T07:28:42.2632631240 sshd\[29848\]: Failed password for invalid user avanthi from 103.42.127.223 port 61951 ssh2 ... |
2019-12-04 16:39:18 |
| 103.42.126.254 | attack | Automatic report - Banned IP Access |
2019-10-25 21:31:40 |
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 103.42.1.3
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 54207
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;103.42.1.3. IN A
;; AUTHORITY SECTION:
. 328 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022022501 1800 900 604800 86400
;; Query time: 19 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 26 02:24:43 CST 2022
;; MSG SIZE rcvd: 103
3.1.42.103.in-addr.arpa domain name pointer 103-42-1-3-awcc-mobility-customer.as38742.net.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
3.1.42.103.in-addr.arpa name = 103-42-1-3-awcc-mobility-customer.as38742.net.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 201.39.70.186 | attack | Dec 22 05:34:51 eddieflores sshd\[13754\]: Invalid user chapelain from 201.39.70.186 Dec 22 05:34:51 eddieflores sshd\[13754\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=cs-201-39-70-186.embratelcloud.com.br Dec 22 05:34:53 eddieflores sshd\[13754\]: Failed password for invalid user chapelain from 201.39.70.186 port 46902 ssh2 Dec 22 05:40:14 eddieflores sshd\[14316\]: Invalid user vicinity from 201.39.70.186 Dec 22 05:40:14 eddieflores sshd\[14316\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=cs-201-39-70-186.embratelcloud.com.br |
2019-12-23 01:05:58 |
| 37.187.120.96 | attackspambots | Dec 22 07:18:29 sachi sshd\[13456\]: Invalid user ftp7777 from 37.187.120.96 Dec 22 07:18:29 sachi sshd\[13456\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns330887.ip-37-187-120.eu Dec 22 07:18:31 sachi sshd\[13456\]: Failed password for invalid user ftp7777 from 37.187.120.96 port 42120 ssh2 Dec 22 07:24:55 sachi sshd\[14112\]: Invalid user ernst123 from 37.187.120.96 Dec 22 07:24:55 sachi sshd\[14112\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns330887.ip-37-187-120.eu |
2019-12-23 01:35:01 |
| 45.55.231.94 | attack | Dec 22 15:16:23 wh01 sshd[26311]: Invalid user edy from 45.55.231.94 port 39276 Dec 22 15:16:23 wh01 sshd[26311]: Failed password for invalid user edy from 45.55.231.94 port 39276 ssh2 Dec 22 15:16:24 wh01 sshd[26311]: Received disconnect from 45.55.231.94 port 39276:11: Bye Bye [preauth] Dec 22 15:16:24 wh01 sshd[26311]: Disconnected from 45.55.231.94 port 39276 [preauth] Dec 22 15:22:58 wh01 sshd[26829]: Invalid user apache from 45.55.231.94 port 60188 Dec 22 15:22:58 wh01 sshd[26829]: Failed password for invalid user apache from 45.55.231.94 port 60188 ssh2 Dec 22 15:22:59 wh01 sshd[26829]: Received disconnect from 45.55.231.94 port 60188:11: Bye Bye [preauth] Dec 22 15:22:59 wh01 sshd[26829]: Disconnected from 45.55.231.94 port 60188 [preauth] Dec 22 15:45:03 wh01 sshd[28773]: Invalid user bbarber from 45.55.231.94 port 50102 Dec 22 15:45:03 wh01 sshd[28773]: Failed password for invalid user bbarber from 45.55.231.94 port 50102 ssh2 Dec 22 15:45:03 wh01 sshd[28773]: Received discon |
2019-12-23 01:20:14 |
| 36.26.85.60 | attackbots | Invalid user lautman from 36.26.85.60 port 40942 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.26.85.60 Failed password for invalid user lautman from 36.26.85.60 port 40942 ssh2 Invalid user spry from 36.26.85.60 port 36443 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.26.85.60 |
2019-12-23 01:02:23 |
| 167.71.72.70 | attackbotsspam | Dec 22 17:03:05 zeus sshd[20339]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.72.70 Dec 22 17:03:07 zeus sshd[20339]: Failed password for invalid user enrique from 167.71.72.70 port 58962 ssh2 Dec 22 17:08:35 zeus sshd[20506]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.72.70 Dec 22 17:08:37 zeus sshd[20506]: Failed password for invalid user omdalen from 167.71.72.70 port 35752 ssh2 |
2019-12-23 01:27:04 |
| 41.196.0.189 | attackbotsspam | Dec 22 22:08:42 gw1 sshd[2483]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.196.0.189 Dec 22 22:08:44 gw1 sshd[2483]: Failed password for invalid user john from 41.196.0.189 port 51498 ssh2 ... |
2019-12-23 01:14:26 |
| 218.92.0.131 | attackbotsspam | Dec 22 17:51:48 serwer sshd\[19701\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.131 user=root Dec 22 17:51:49 serwer sshd\[19708\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.131 user=root Dec 22 17:51:50 serwer sshd\[19701\]: Failed password for root from 218.92.0.131 port 38318 ssh2 ... |
2019-12-23 01:00:46 |
| 210.196.163.32 | attackspam | Dec 22 17:57:19 minden010 sshd[19701]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.196.163.32 Dec 22 17:57:21 minden010 sshd[19701]: Failed password for invalid user olsgard from 210.196.163.32 port 14111 ssh2 Dec 22 18:02:33 minden010 sshd[23361]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.196.163.32 ... |
2019-12-23 01:12:14 |
| 203.114.102.69 | attack | Dec 22 17:36:54 localhost sshd\[7260\]: Invalid user Pass@word0111 from 203.114.102.69 port 46380 Dec 22 17:36:54 localhost sshd\[7260\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.114.102.69 Dec 22 17:36:56 localhost sshd\[7260\]: Failed password for invalid user Pass@word0111 from 203.114.102.69 port 46380 ssh2 |
2019-12-23 00:55:17 |
| 139.59.56.121 | attackbotsspam | 2019-12-23T02:34:36.167963luisaranguren sshd[1181993]: Connection from 139.59.56.121 port 51902 on 10.10.10.6 port 22 rdomain "" 2019-12-23T02:34:42.707871luisaranguren sshd[1181993]: Invalid user test from 139.59.56.121 port 51902 2019-12-23T02:34:42.717736luisaranguren sshd[1181993]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.56.121 2019-12-23T02:34:36.167963luisaranguren sshd[1181993]: Connection from 139.59.56.121 port 51902 on 10.10.10.6 port 22 rdomain "" 2019-12-23T02:34:42.707871luisaranguren sshd[1181993]: Invalid user test from 139.59.56.121 port 51902 2019-12-23T02:34:45.290690luisaranguren sshd[1181993]: Failed password for invalid user test from 139.59.56.121 port 51902 ssh2 ... |
2019-12-23 01:08:22 |
| 165.22.213.24 | attackspambots | Dec 22 11:52:52 ny01 sshd[20900]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.213.24 Dec 22 11:52:54 ny01 sshd[20900]: Failed password for invalid user com from 165.22.213.24 port 55110 ssh2 Dec 22 11:59:04 ny01 sshd[22046]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.213.24 |
2019-12-23 01:10:04 |
| 104.244.79.146 | attack | Dec 22 17:46:09 rotator sshd\[28640\]: Invalid user fake from 104.244.79.146Dec 22 17:46:10 rotator sshd\[28640\]: Failed password for invalid user fake from 104.244.79.146 port 50624 ssh2Dec 22 17:46:11 rotator sshd\[28642\]: Invalid user ubnt from 104.244.79.146Dec 22 17:46:12 rotator sshd\[28642\]: Failed password for invalid user ubnt from 104.244.79.146 port 53540 ssh2Dec 22 17:46:13 rotator sshd\[28646\]: Invalid user admin from 104.244.79.146Dec 22 17:46:15 rotator sshd\[28646\]: Failed password for invalid user admin from 104.244.79.146 port 56420 ssh2 ... |
2019-12-23 01:01:48 |
| 138.204.24.121 | attack | Dec 22 08:08:10 pi01 sshd[12144]: Connection from 138.204.24.121 port 50964 on 192.168.1.10 port 22 Dec 22 08:08:11 pi01 sshd[12144]: User r.r from 138.204.24.121 not allowed because not listed in AllowUsers Dec 22 08:08:11 pi01 sshd[12144]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.204.24.121 user=r.r Dec 22 08:08:13 pi01 sshd[12144]: Failed password for invalid user r.r from 138.204.24.121 port 50964 ssh2 Dec 22 08:08:13 pi01 sshd[12144]: Received disconnect from 138.204.24.121 port 50964:11: Bye Bye [preauth] Dec 22 08:08:13 pi01 sshd[12144]: Disconnected from 138.204.24.121 port 50964 [preauth] Dec 22 08:15:19 pi01 sshd[12523]: Connection from 138.204.24.121 port 4662 on 192.168.1.10 port 22 Dec 22 08:15:20 pi01 sshd[12523]: Invalid user test from 138.204.24.121 port 4662 Dec 22 08:15:20 pi01 sshd[12523]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.204.24.121 Dec 22 08........ ------------------------------- |
2019-12-23 01:34:12 |
| 218.249.69.210 | attackbotsspam | Dec 22 17:49:07 nextcloud sshd\[4550\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.249.69.210 user=mysql Dec 22 17:49:09 nextcloud sshd\[4550\]: Failed password for mysql from 218.249.69.210 port 10009 ssh2 Dec 22 17:54:37 nextcloud sshd\[13602\]: Invalid user saree from 218.249.69.210 Dec 22 17:54:37 nextcloud sshd\[13602\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.249.69.210 ... |
2019-12-23 01:02:39 |
| 49.234.44.48 | attackbotsspam | Dec 22 21:50:43 itv-usvr-01 sshd[18341]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.44.48 user=root Dec 22 21:50:45 itv-usvr-01 sshd[18341]: Failed password for root from 49.234.44.48 port 48059 ssh2 |
2019-12-23 01:30:53 |