194.166.255.53

Basic Info

City: unknown

Region: unknown

Country: Austria

Internet Service Provider: A1 Telekom Austria AG

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbots	Feb 13 07:38:48 ns sshd[15838]: Connection from 194.166.255.53 port 33774 on 134.119.39.98 port 22 Feb 13 07:38:48 ns sshd[15838]: Invalid user damica from 194.166.255.53 port 33774 Feb 13 07:38:48 ns sshd[15838]: Failed password for invalid user damica from 194.166.255.53 port 33774 ssh2 Feb 13 07:38:48 ns sshd[15838]: Received disconnect from 194.166.255.53 port 33774:11: Bye Bye [preauth] Feb 13 07:38:48 ns sshd[15838]: Disconnected from 194.166.255.53 port 33774 [preauth] Feb 13 08:33:37 ns sshd[11658]: Connection from 194.166.255.53 port 45894 on 134.119.39.98 port 22 Feb 13 08:33:38 ns sshd[11658]: Invalid user glavbuh from 194.166.255.53 port 45894 Feb 13 08:33:38 ns sshd[11658]: Failed password for invalid user glavbuh from 194.166.255.53 port 45894 ssh2 Feb 13 08:33:38 ns sshd[11658]: Received disconnect from 194.166.255.53 port 45894:11: Bye Bye [preauth] Feb 13 08:33:38 ns sshd[11658]: Disconnected from 194.166.255.53 port 45894 [preauth] Feb 13 08:43:31 ns s........ -------------------------------	2020-02-14 20:29:57
attack	Feb 13 12:58:15 www sshd\[55840\]: Invalid user denis from 194.166.255.53Feb 13 12:58:17 www sshd\[55840\]: Failed password for invalid user denis from 194.166.255.53 port 45276 ssh2Feb 13 13:08:06 www sshd\[55874\]: Failed password for root from 194.166.255.53 port 55630 ssh2 ...	2020-02-13 19:22:46

Type

Details

Datetime

attackbots

Feb 13 07:38:48 ns sshd[15838]: Connection from 194.166.255.53 port 33774 on 134.119.39.98 port 22
Feb 13 07:38:48 ns sshd[15838]: Invalid user damica from 194.166.255.53 port 33774
Feb 13 07:38:48 ns sshd[15838]: Failed password for invalid user damica from 194.166.255.53 port 33774 ssh2
Feb 13 07:38:48 ns sshd[15838]: Received disconnect from 194.166.255.53 port 33774:11: Bye Bye [preauth]
Feb 13 07:38:48 ns sshd[15838]: Disconnected from 194.166.255.53 port 33774 [preauth]
Feb 13 08:33:37 ns sshd[11658]: Connection from 194.166.255.53 port 45894 on 134.119.39.98 port 22
Feb 13 08:33:38 ns sshd[11658]: Invalid user glavbuh from 194.166.255.53 port 45894
Feb 13 08:33:38 ns sshd[11658]: Failed password for invalid user glavbuh from 194.166.255.53 port 45894 ssh2
Feb 13 08:33:38 ns sshd[11658]: Received disconnect from 194.166.255.53 port 45894:11: Bye Bye [preauth]
Feb 13 08:33:38 ns sshd[11658]: Disconnected from 194.166.255.53 port 45894 [preauth]
Feb 13 08:43:31 ns s........
-------------------------------

2020-02-14 20:29:57

attack

Feb 13 12:58:15 www sshd\[55840\]: Invalid user denis from 194.166.255.53Feb 13 12:58:17 www sshd\[55840\]: Failed password for invalid user denis from 194.166.255.53 port 45276 ssh2Feb 13 13:08:06 www sshd\[55874\]: Failed password for root from 194.166.255.53 port 55630 ssh2
...

2020-02-13 19:22:46

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 194.166.255.53
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 20560
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;194.166.255.53.			IN	A

;; AUTHORITY SECTION:
.			552	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020021300 1800 900 604800 86400

;; Query time: 420 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 13 19:22:38 CST 2020
;; MSG SIZE  rcvd: 118

Host info

53.255.166.194.in-addr.arpa domain name pointer 194-166-255-53.adsl.highway.telekom.at.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
53.255.166.194.in-addr.arpa	name = 194-166-255-53.adsl.highway.telekom.at.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
84.42.75.84	attackbotsspam	xmlrpc attack	2020-07-07 16:38:03
106.13.190.148	attack	Jul 7 06:51:56 vps687878 sshd\[19146\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.190.148 user=root Jul 7 06:51:58 vps687878 sshd\[19146\]: Failed password for root from 106.13.190.148 port 40700 ssh2 Jul 7 06:55:19 vps687878 sshd\[19458\]: Invalid user edwin from 106.13.190.148 port 55020 Jul 7 06:55:19 vps687878 sshd\[19458\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.190.148 Jul 7 06:55:21 vps687878 sshd\[19458\]: Failed password for invalid user edwin from 106.13.190.148 port 55020 ssh2 ...	2020-07-07 16:25:37
222.186.42.155	attack	Jul 7 10:29:11 v22018053744266470 sshd[22790]: Failed password for root from 222.186.42.155 port 43864 ssh2 Jul 7 10:29:21 v22018053744266470 sshd[22802]: Failed password for root from 222.186.42.155 port 11810 ssh2 ...	2020-07-07 16:34:55
2.190.227.137	attackspam	IP 2.190.227.137 attacked honeypot on port: 8080 at 7/6/2020 8:50:47 PM	2020-07-07 16:45:16
106.12.86.205	attack	sshd jail - ssh hack attempt	2020-07-07 16:54:28
183.88.179.247	attack	ssh brute force	2020-07-07 16:46:04
177.22.91.247	attack	Jul 7 08:54:48 pkdns2 sshd\[62055\]: Invalid user hl from 177.22.91.247Jul 7 08:54:50 pkdns2 sshd\[62055\]: Failed password for invalid user hl from 177.22.91.247 port 35064 ssh2Jul 7 08:56:27 pkdns2 sshd\[62202\]: Failed password for root from 177.22.91.247 port 57828 ssh2Jul 7 08:58:01 pkdns2 sshd\[62243\]: Invalid user apollo from 177.22.91.247Jul 7 08:58:03 pkdns2 sshd\[62243\]: Failed password for invalid user apollo from 177.22.91.247 port 52358 ssh2Jul 7 08:59:38 pkdns2 sshd\[62346\]: Invalid user tzhang from 177.22.91.247 ...	2020-07-07 16:50:24
41.45.126.123	attack	xmlrpc attack	2020-07-07 16:57:55
106.53.19.186	attackbotsspam	2020-07-07T03:32:22.055821na-vps210223 sshd[31904]: Invalid user transfer from 106.53.19.186 port 52855 2020-07-07T03:32:22.062905na-vps210223 sshd[31904]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.53.19.186 2020-07-07T03:32:22.055821na-vps210223 sshd[31904]: Invalid user transfer from 106.53.19.186 port 52855 2020-07-07T03:32:24.621294na-vps210223 sshd[31904]: Failed password for invalid user transfer from 106.53.19.186 port 52855 ssh2 2020-07-07T03:35:26.788663na-vps210223 sshd[7961]: Invalid user link from 106.53.19.186 port 43437 ...	2020-07-07 16:28:31
156.96.56.122	attack	SMTP brute-force	2020-07-07 16:52:51
202.171.78.156	attack	(imapd) Failed IMAP login from 202.171.78.156 (NC/New Caledonia/202-171-78-156.h15.canl.nc): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Jul 7 08:20:44 ir1 dovecot[2885757]: imap-login: Disconnected (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=202.171.78.156, lip=5.63.12.44, TLS, session=	2020-07-07 16:55:48
190.144.79.157	attack	Jul 7 09:23:10 h1745522 sshd[27961]: Invalid user ernesto from 190.144.79.157 port 50228 Jul 7 09:23:10 h1745522 sshd[27961]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.144.79.157 Jul 7 09:23:10 h1745522 sshd[27961]: Invalid user ernesto from 190.144.79.157 port 50228 Jul 7 09:23:11 h1745522 sshd[27961]: Failed password for invalid user ernesto from 190.144.79.157 port 50228 ssh2 Jul 7 09:28:54 h1745522 sshd[28131]: Invalid user kir from 190.144.79.157 port 50150 Jul 7 09:28:54 h1745522 sshd[28131]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.144.79.157 Jul 7 09:28:54 h1745522 sshd[28131]: Invalid user kir from 190.144.79.157 port 50150 Jul 7 09:28:56 h1745522 sshd[28131]: Failed password for invalid user kir from 190.144.79.157 port 50150 ssh2 Jul 7 09:31:43 h1745522 sshd[28217]: Invalid user ftpdata from 190.144.79.157 port 34586 ...	2020-07-07 16:42:05
37.239.237.224	attackspam	(smtpauth) Failed SMTP AUTH login from 37.239.237.224 (IQ/Iraq/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-07-07 08:21:25 plain authenticator failed for ([37.239.237.224]) [37.239.237.224]: 535 Incorrect authentication data (set_id=info)	2020-07-07 16:27:09
192.35.169.17	attackspambots	[MySQL inject/portscan] tcp/3306 *(RWIN=1024)(07071112)	2020-07-07 16:47:48
42.123.99.67	attackspam	Jul 7 06:53:13 nextcloud sshd\[25095\]: Invalid user oscar from 42.123.99.67 Jul 7 06:53:13 nextcloud sshd\[25095\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.123.99.67 Jul 7 06:53:15 nextcloud sshd\[25095\]: Failed password for invalid user oscar from 42.123.99.67 port 47076 ssh2	2020-07-07 16:33:45

Recently Reported IPs

1.2.237.225	133.203.58.185	183.91.4.208	2607:f298:5:100f::2de:63f6
171.242.112.177	110.137.82.209	50.239.145.20	186.72.199.180
192.241.227.75	5.101.59.70	93.40.3.134	14.177.71.83
182.74.138.252	165.22.121.64	4.66.47.79	52.196.165.109
46.221.46.250	128.72.204.173	196.43.155.209	184.22.19.182