City: unknown
Region: unknown
Country: Andorra
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 194.158.75.42
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 5572
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;194.158.75.42. IN A
;; AUTHORITY SECTION:
. 561 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022020702 1800 900 604800 86400
;; Query time: 67 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 08 12:36:03 CST 2022
;; MSG SIZE rcvd: 10642.75.158.194.in-addr.arpa domain name pointer m194-158-75-42.andorpac.ad.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
42.75.158.194.in-addr.arpa name = m194-158-75-42.andorpac.ad.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 193.42.96.97 | attackbots | SSH_attack |
2020-10-13 23:53:26 |
| 112.85.42.237 | attackspambots | Oct 13 15:54:54 ip-172-31-61-156 sshd[11554]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.237 user=root Oct 13 15:54:56 ip-172-31-61-156 sshd[11554]: Failed password for root from 112.85.42.237 port 24713 ssh2 ... |
2020-10-14 00:14:07 |
| 212.64.14.185 | attackspam | Oct 13 09:24:35 hosting sshd[21926]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.14.185 user=root Oct 13 09:24:37 hosting sshd[21926]: Failed password for root from 212.64.14.185 port 39692 ssh2 ... |
2020-10-14 00:06:16 |
| 159.65.84.183 | attackspambots | Oct 13 17:55:32 vps208890 sshd[31411]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.84.183 |
2020-10-14 00:03:25 |
| 111.231.63.42 | attack | (sshd) Failed SSH login from 111.231.63.42 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct 13 10:40:36 server2 sshd[28345]: Invalid user www-data from 111.231.63.42 Oct 13 10:40:36 server2 sshd[28345]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.63.42 Oct 13 10:40:38 server2 sshd[28345]: Failed password for invalid user www-data from 111.231.63.42 port 47396 ssh2 Oct 13 10:54:15 server2 sshd[3853]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.63.42 user=root Oct 13 10:54:17 server2 sshd[3853]: Failed password for root from 111.231.63.42 port 39252 ssh2 |
2020-10-13 23:45:37 |
| 95.216.101.117 | attack | RDP brute forcing (d) |
2020-10-14 00:12:58 |
| 180.166.240.99 | attackbots | k+ssh-bruteforce |
2020-10-13 23:53:46 |
| 140.143.26.171 | attack | (sshd) Failed SSH login from 140.143.26.171 (CN/China/Guangdong/Shenzhen/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct 13 11:13:24 atlas sshd[10966]: Invalid user jensen from 140.143.26.171 port 46304 Oct 13 11:13:27 atlas sshd[10966]: Failed password for invalid user jensen from 140.143.26.171 port 46304 ssh2 Oct 13 11:33:11 atlas sshd[15760]: Invalid user prueba from 140.143.26.171 port 46736 Oct 13 11:33:13 atlas sshd[15760]: Failed password for invalid user prueba from 140.143.26.171 port 46736 ssh2 Oct 13 11:38:21 atlas sshd[17117]: Invalid user baldomero from 140.143.26.171 port 42406 |
2020-10-14 00:16:13 |
| 218.91.2.32 | attackspambots | spam (f2b h2) |
2020-10-13 23:40:50 |
| 122.194.229.54 | attackspam | 2020-10-13T18:02:16.335720news0 sshd[28778]: User root from 122.194.229.54 not allowed because not listed in AllowUsers 2020-10-13T18:02:16.653543news0 sshd[28778]: Failed none for invalid user root from 122.194.229.54 port 5450 ssh2 2020-10-13T18:02:19.007956news0 sshd[28778]: Failed password for invalid user root from 122.194.229.54 port 5450 ssh2 ... |
2020-10-14 00:12:05 |
| 161.35.162.20 | attackspambots | 20 attempts against mh-ssh on mist |
2020-10-13 23:33:53 |
| 178.159.60.165 | attackspambots | 1602535642 - 10/12/2020 22:47:22 Host: 178.159.60.165/178.159.60.165 Port: 445 TCP Blocked ... |
2020-10-13 23:54:01 |
| 128.199.107.111 | attack | 2020-10-13T15:49:16.580760mail0 sshd[5162]: Invalid user yogesh from 128.199.107.111 port 54070 2020-10-13T15:49:18.739259mail0 sshd[5162]: Failed password for invalid user yogesh from 128.199.107.111 port 54070 ssh2 2020-10-13T15:53:02.458972mail0 sshd[5251]: Invalid user teamspeak from 128.199.107.111 port 54044 ... |
2020-10-14 00:07:32 |
| 102.165.30.13 | attackspam | " " |
2020-10-14 00:20:17 |
| 62.234.124.76 | attack | Lines containing failures of 62.234.124.76 Oct 12 22:13:24 shared02 sshd[16981]: Invalid user admin from 62.234.124.76 port 60836 Oct 12 22:13:24 shared02 sshd[16981]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.124.76 Oct 12 22:13:26 shared02 sshd[16981]: Failed password for invalid user admin from 62.234.124.76 port 60836 ssh2 Oct 12 22:13:26 shared02 sshd[16981]: Connection closed by invalid user admin 62.234.124.76 port 60836 [preauth] Oct 12 22:13:27 shared02 sshd[16986]: Invalid user solr from 62.234.124.76 port 60926 Oct 12 22:13:27 shared02 sshd[16986]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.124.76 Oct 12 22:13:30 shared02 sshd[16986]: Failed password for invalid user solr from 62.234.124.76 port 60926 ssh2 Oct 12 22:13:30 shared02 sshd[16986]: Connection closed by invalid user solr 62.234.124.76 port 60926 [preauth] Oct 12 22:13:31 shared02 sshd[16996]: pam........ ------------------------------ |
2020-10-13 23:40:33 |