City: unknown
Region: unknown
Country: None
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 103.94.67.194
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 56852
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;103.94.67.194.			IN	A
;; AUTHORITY SECTION:
.			219	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022600 1800 900 604800 86400
;; Query time: 82 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 27 00:11:56 CST 2022
;; MSG SIZE  rcvd: 106Host 194.67.94.103.in-addr.arpa. not found: 3(NXDOMAIN)Server:		183.60.83.19
Address:	183.60.83.19#53
** server can't find 194.67.94.103.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime | 
|---|---|---|---|
| 91.121.103.175 | attack | Dec 27 01:00:53 plusreed sshd[15067]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.121.103.175 user=root Dec 27 01:00:55 plusreed sshd[15067]: Failed password for root from 91.121.103.175 port 48958 ssh2 ... | 2019-12-27 14:09:42 | 
| 42.113.246.128 | attackspam | 1577422548 - 12/27/2019 05:55:48 Host: 42.113.246.128/42.113.246.128 Port: 23 TCP Blocked | 2019-12-27 14:12:11 | 
| 222.186.175.140 | attackbotsspam | " " | 2019-12-27 14:24:14 | 
| 218.92.0.189 | attackspambots | 12/27/2019-01:30:29.235223 218.92.0.189 Protocol: 6 ET SCAN Potential SSH Scan | 2019-12-27 14:46:18 | 
| 90.68.252.222 | attackbotsspam | Attempt to attack host OS, exploiting network vulnerabilities, on 27-12-2019 04:55:09. | 2019-12-27 14:28:03 | 
| 190.152.221.82 | attack | Autoban 190.152.221.82 AUTH/CONNECT | 2019-12-27 14:48:50 | 
| 202.9.40.150 | attackbots | $f2bV_matches | 2019-12-27 14:18:28 | 
| 186.67.248.5 | attackspambots | Dec 27 06:24:51 web8 sshd\[17403\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.67.248.5 user=root Dec 27 06:24:53 web8 sshd\[17403\]: Failed password for root from 186.67.248.5 port 57389 ssh2 Dec 27 06:30:34 web8 sshd\[20265\]: Invalid user frazer from 186.67.248.5 Dec 27 06:30:34 web8 sshd\[20265\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.67.248.5 Dec 27 06:30:36 web8 sshd\[20265\]: Failed password for invalid user frazer from 186.67.248.5 port 56527 ssh2 | 2019-12-27 14:49:42 | 
| 45.125.66.58 | attack | Rude login attack (2 tries in 1d) | 2019-12-27 14:16:58 | 
| 138.36.204.234 | attackspam | Dec 27 05:55:15 odroid64 sshd\[30018\]: Invalid user informix from 138.36.204.234 Dec 27 05:55:16 odroid64 sshd\[30018\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.36.204.234 ... | 2019-12-27 14:26:25 | 
| 222.186.180.223 | attackspam | Dec 26 20:30:14 auw2 sshd\[12761\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.223 user=root Dec 26 20:30:16 auw2 sshd\[12761\]: Failed password for root from 222.186.180.223 port 44786 ssh2 Dec 26 20:30:33 auw2 sshd\[12769\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.223 user=root Dec 26 20:30:35 auw2 sshd\[12769\]: Failed password for root from 222.186.180.223 port 52884 ssh2 Dec 26 20:30:55 auw2 sshd\[12804\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.223 user=root | 2019-12-27 14:41:57 | 
| 80.82.77.245 | attackspam | Dec 27 07:54:52 debian-2gb-nbg1-2 kernel: \[1082417.124583\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=80.82.77.245 DST=195.201.40.59 LEN=29 TOS=0x00 PREC=0x00 TTL=247 ID=54321 PROTO=UDP SPT=51593 DPT=1285 LEN=9 | 2019-12-27 14:55:11 | 
| 175.158.40.97 | attackspambots | Dec 27 07:30:13 debian-2gb-nbg1-2 kernel: \[1080938.428606\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=175.158.40.97 DST=195.201.40.59 LEN=44 TOS=0x00 PREC=0x00 TTL=49 ID=33685 PROTO=TCP SPT=42084 DPT=23 WINDOW=40106 RES=0x00 SYN URGP=0 | 2019-12-27 14:50:45 | 
| 148.70.250.207 | attackbots | Dec 27 07:09:18 sd-53420 sshd\[2329\]: User root from 148.70.250.207 not allowed because none of user's groups are listed in AllowGroups Dec 27 07:09:18 sd-53420 sshd\[2329\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.250.207 user=root Dec 27 07:09:20 sd-53420 sshd\[2329\]: Failed password for invalid user root from 148.70.250.207 port 35561 ssh2 Dec 27 07:13:12 sd-53420 sshd\[3960\]: Invalid user ossa from 148.70.250.207 Dec 27 07:13:12 sd-53420 sshd\[3960\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.250.207 ... | 2019-12-27 14:24:58 | 
| 175.16.138.160 | attackbotsspam | Unauthorised access (Dec 27) SRC=175.16.138.160 LEN=40 TTL=49 ID=42441 TCP DPT=8080 WINDOW=37711 SYN Unauthorised access (Dec 24) SRC=175.16.138.160 LEN=40 TTL=49 ID=28788 TCP DPT=8080 WINDOW=19056 SYN Unauthorised access (Dec 24) SRC=175.16.138.160 LEN=40 TTL=49 ID=54998 TCP DPT=8080 WINDOW=14847 SYN Unauthorised access (Dec 24) SRC=175.16.138.160 LEN=40 TTL=49 ID=51293 TCP DPT=8080 WINDOW=37711 SYN Unauthorised access (Dec 24) SRC=175.16.138.160 LEN=40 TTL=49 ID=11751 TCP DPT=8080 WINDOW=19056 SYN Unauthorised access (Dec 23) SRC=175.16.138.160 LEN=40 TTL=49 ID=56531 TCP DPT=8080 WINDOW=19056 SYN Unauthorised access (Dec 23) SRC=175.16.138.160 LEN=40 TTL=49 ID=62740 TCP DPT=8080 WINDOW=37711 SYN Unauthorised access (Dec 22) SRC=175.16.138.160 LEN=40 TTL=49 ID=8589 TCP DPT=8080 WINDOW=14847 SYN Unauthorised access (Dec 22) SRC=175.16.138.160 LEN=40 TTL=49 ID=25075 TCP DPT=8080 WINDOW=14847 SYN | 2019-12-27 14:51:02 |