City: unknown
Region: unknown
Country: Hong Kong
Internet Service Provider: Hong Kong Telecommunications (HKT) Limited
Hostname: unknown
Organization: unknown
Usage Type: unknown
| Type | Details | Datetime |
|---|---|---|
| attack | Unauthorized connection attempt detected from IP address 42.2.175.75 to port 5555 [J] |
2020-02-05 09:01:19 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 42.2.175.57 | attackspambots | 5555/tcp [2020-09-07]1pkt |
2020-09-09 02:44:12 |
| 42.2.175.57 | attack | 5555/tcp [2020-09-07]1pkt |
2020-09-08 18:15:44 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.2.175.75
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 46161
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.2.175.75. IN A
;; AUTHORITY SECTION:
. 505 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020020401 1800 900 604800 86400
;; Query time: 66 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 05 09:01:16 CST 2020
;; MSG SIZE rcvd: 11575.175.2.42.in-addr.arpa domain name pointer 42-2-175-075.static.netvigator.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
75.175.2.42.in-addr.arpa name = 42-2-175-075.static.netvigator.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 121.33.247.107 | attackspambots | Dec 28 07:53:42 web1 postfix/smtpd[7808]: warning: unknown[121.33.247.107]: SASL LOGIN authentication failed: authentication failure ... |
2019-12-28 21:21:11 |
| 182.30.93.240 | attack | firewall-block, port(s): 445/tcp |
2019-12-28 21:35:35 |
| 113.69.207.165 | attack | Dec 28 07:20:10 mail postfix/smtpd[28122]: warning: unknown[113.69.207.165]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Dec 28 07:20:20 mail postfix/smtpd[28122]: warning: unknown[113.69.207.165]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Dec 28 07:20:32 mail postfix/smtpd[28122]: warning: unknown[113.69.207.165]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2019-12-28 21:25:52 |
| 91.173.121.137 | attackspam | Dec 28 14:04:13 MK-Soft-VM7 sshd[24368]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.173.121.137 ... |
2019-12-28 21:36:20 |
| 51.91.10.156 | attack | SSH auth scanning - multiple failed logins |
2019-12-28 21:30:19 |
| 106.53.90.75 | attack | Invalid user zhon from 106.53.90.75 port 42392 |
2019-12-28 21:29:37 |
| 106.12.13.247 | attackbots | Dec 28 09:07:23 serwer sshd\[11979\]: Invalid user zut from 106.12.13.247 port 41850 Dec 28 09:07:23 serwer sshd\[11979\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.13.247 Dec 28 09:07:25 serwer sshd\[11979\]: Failed password for invalid user zut from 106.12.13.247 port 41850 ssh2 ... |
2019-12-28 21:51:59 |
| 66.147.237.34 | attackspam | firewall-block, port(s): 1433/tcp |
2019-12-28 21:34:23 |
| 111.230.73.133 | attackbotsspam | Invalid user aimo from 111.230.73.133 port 57502 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.230.73.133 Failed password for invalid user aimo from 111.230.73.133 port 57502 ssh2 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.230.73.133 user=root Failed password for root from 111.230.73.133 port 53770 ssh2 |
2019-12-28 21:57:20 |
| 151.185.15.90 | attackspambots | Honeypot attack, port: 445, PTR: admissionspfaids.pba.edu. |
2019-12-28 21:24:07 |
| 121.78.129.147 | attackspambots | Invalid user mcwhinnie from 121.78.129.147 port 60034 |
2019-12-28 21:36:06 |
| 47.74.223.87 | attackbotsspam | Honeypot attack, port: 23, PTR: PTR record not found |
2019-12-28 21:31:13 |
| 122.241.28.145 | attackbotsspam | SSH invalid-user multiple login try |
2019-12-28 21:29:16 |
| 85.242.242.102 | attack | Automatic report - SSH Brute-Force Attack |
2019-12-28 21:53:15 |
| 193.70.39.175 | attackspambots | Dec 28 14:34:39 server sshd\[8905\]: Invalid user yo from 193.70.39.175 Dec 28 14:34:39 server sshd\[8905\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.ip-193-70-39.eu Dec 28 14:34:41 server sshd\[8905\]: Failed password for invalid user yo from 193.70.39.175 port 39522 ssh2 Dec 28 14:38:31 server sshd\[9804\]: Invalid user backup from 193.70.39.175 Dec 28 14:38:31 server sshd\[9804\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.ip-193-70-39.eu ... |
2019-12-28 21:20:58 |