City: unknown
Region: unknown
Country: None
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 194.159.42.127
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 56114
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;194.159.42.127. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020600 1800 900 604800 86400
;; Query time: 15 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 06 15:18:45 CST 2025
;; MSG SIZE rcvd: 107127.42.159.194.in-addr.arpa domain name pointer no-dns-yet.demon.co.uk.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
127.42.159.194.in-addr.arpa name = no-dns-yet.demon.co.uk.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 175.211.112.250 | attack | /var/log/messages:Jul 15 22:09:13 sanyalnet-cloud-vps audispd: node=sanyalnet-cloud-vps.freeddns.org type=CRYPTO_SESSION msg=audhostname(1563228553.146:30036): pid=17045 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-server cipher=aes256-ctr ksize=256 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=17046 suid=74 rport=44526 laddr=104.167.106.93 lport=23 exe="/usr/sbin/sshd" hostname=? addr=175.211.112.250 terminal=? res=success' /var/log/messages:Jul 15 22:09:13 sanyalnet-cloud-vps audispd: node=sanyalnet-cloud-vps.freeddns.org type=CRYPTO_SESSION msg=audhostname(1563228553.149:30037): pid=17045 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-client cipher=aes256-ctr ksize=256 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=17046 suid=74 rport=44526 laddr=104.167.106.93 lport=23 exe="/usr/sbin/sshd" hostname=? addr=175.211.112.250 terminal=? res=success' /var/log/messages:Jul 15 22:09:20 sanyalnet-cloud-vps fail2ban.filter[5325]: INFO ........ ------------------------------- |
2019-07-19 19:19:03 |
| 85.21.200.36 | attackspam | SMB Server BruteForce Attack |
2019-07-19 19:00:59 |
| 182.156.78.150 | attackbots | 2019-07-19T09:05:31.200596abusebot-6.cloudsearch.cf sshd\[13556\]: Invalid user thomas from 182.156.78.150 port 33388 |
2019-07-19 19:38:15 |
| 36.233.24.202 | attackspambots | Honeypot attack, port: 23, PTR: 36-233-24-202.dynamic-ip.hinet.net. |
2019-07-19 19:26:43 |
| 114.32.230.189 | attack | Jul 19 12:13:20 v22019058497090703 sshd[29860]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.32.230.189 Jul 19 12:13:22 v22019058497090703 sshd[29860]: Failed password for invalid user nie from 114.32.230.189 port 31948 ssh2 Jul 19 12:18:47 v22019058497090703 sshd[30682]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.32.230.189 ... |
2019-07-19 19:38:43 |
| 217.113.24.210 | attackspambots | Honeypot attack, port: 23, PTR: PTR record not found |
2019-07-19 19:11:36 |
| 167.99.156.157 | attackbotsspam | 167.99.156.157 - - \[19/Jul/2019:10:50:20 +0200\] "POST /wp-login.php HTTP/1.1" 200 2091 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 167.99.156.157 - - \[19/Jul/2019:10:50:24 +0200\] "POST /wp-login.php HTTP/1.1" 200 2091 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" ... |
2019-07-19 19:51:39 |
| 92.14.96.64 | attack | Honeypot attack, port: 23, PTR: host-92-14-96-64.as43234.net. |
2019-07-19 19:44:11 |
| 119.196.83.26 | attack | 2019-07-19T07:57:08.751403abusebot-3.cloudsearch.cf sshd\[20903\]: Invalid user Admin from 119.196.83.26 port 48570 2019-07-19T07:57:08.755449abusebot-3.cloudsearch.cf sshd\[20903\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.196.83.26 |
2019-07-19 19:49:02 |
| 62.232.93.51 | attackbotsspam | NAME : UK-GLOBAL-980602 CIDR : 62.232.0.0/16 | STATUS : 403 {Looking for resource vulnerabilities} DDoS Attack United Kingdom - block certain countries :) IP: 62.232.93.51 Denial-of-Service Attack (DoS) Detected and Blocked by ADMIN - data recovery https://help-dysk.pl |
2019-07-19 19:40:34 |
| 159.65.153.163 | attackbots | Jul 19 11:20:56 tux-35-217 sshd\[28388\]: Invalid user admin from 159.65.153.163 port 46742 Jul 19 11:20:56 tux-35-217 sshd\[28388\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.153.163 Jul 19 11:20:59 tux-35-217 sshd\[28388\]: Failed password for invalid user admin from 159.65.153.163 port 46742 ssh2 Jul 19 11:29:47 tux-35-217 sshd\[28412\]: Invalid user sai from 159.65.153.163 port 42584 Jul 19 11:29:47 tux-35-217 sshd\[28412\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.153.163 ... |
2019-07-19 19:21:42 |
| 61.219.246.61 | attackspam | Portscan or hack attempt detected by psad/fwsnort |
2019-07-19 19:03:47 |
| 116.213.41.105 | attack | Jul 19 11:01:06 localhost sshd\[52911\]: Invalid user wayne from 116.213.41.105 port 44656 Jul 19 11:01:06 localhost sshd\[52911\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.213.41.105 ... |
2019-07-19 18:58:14 |
| 117.93.189.54 | attackbotsspam | Honeypot attack, port: 23, PTR: 54.189.93.117.broad.yc.js.dynamic.163data.com.cn. |
2019-07-19 19:35:01 |
| 188.105.105.239 | attackbots | no |
2019-07-19 19:52:25 |