City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 137.212.196.242
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49528
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;137.212.196.242. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022703 1800 900 604800 86400
;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 28 13:06:30 CST 2025
;; MSG SIZE rcvd: 108Host 242.196.212.137.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 242.196.212.137.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 54.36.149.15 | attack | Automated report (2020-06-17T20:05:31+08:00). Scraper detected at this address. |
2020-06-17 20:22:45 |
| 218.22.36.135 | attackspam | Brute-force attempt banned |
2020-06-17 20:27:39 |
| 185.110.95.13 | attackbots | DATE:2020-06-17 14:05:09,IP:185.110.95.13,MATCHES:10,PORT:ssh |
2020-06-17 20:47:07 |
| 107.170.254.146 | attackbotsspam | Jun 17 14:05:23 mail sshd[26803]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.170.254.146 Jun 17 14:05:24 mail sshd[26803]: Failed password for invalid user qiuhong from 107.170.254.146 port 34552 ssh2 ... |
2020-06-17 20:32:08 |
| 210.97.40.36 | attackbots | Jun 17 10:36:31 ovpn sshd\[3591\]: Invalid user shield from 210.97.40.36 Jun 17 10:36:31 ovpn sshd\[3591\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.97.40.36 Jun 17 10:36:34 ovpn sshd\[3591\]: Failed password for invalid user shield from 210.97.40.36 port 37340 ssh2 Jun 17 10:51:23 ovpn sshd\[7081\]: Invalid user superman from 210.97.40.36 Jun 17 10:51:23 ovpn sshd\[7081\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.97.40.36 |
2020-06-17 20:07:57 |
| 45.125.66.205 | attackspam | [2020-06-17 08:05:13] NOTICE[1273][C-00001dce] chan_sip.c: Call from '' (45.125.66.205:5070) to extension '442037697412' rejected because extension not found in context 'public'. [2020-06-17 08:05:13] SECURITY[1288] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-06-17T08:05:13.562-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="442037697412",SessionID="0x7f31c02f97a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.125.66.205/5070",ACLName="no_extension_match" [2020-06-17 08:05:13] NOTICE[1273][C-00001dcf] chan_sip.c: Call from '' (45.125.66.205:5070) to extension '00442037697412' rejected because extension not found in context 'public'. [2020-06-17 08:05:13] SECURITY[1288] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-06-17T08:05:13.905-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="00442037697412",SessionID="0x7f31c02f97a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.125.66.2 ... |
2020-06-17 20:44:21 |
| 110.50.85.28 | attackspambots | Jun 17 13:56:25 vps687878 sshd\[29156\]: Invalid user a from 110.50.85.28 port 48480 Jun 17 13:56:25 vps687878 sshd\[29156\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.50.85.28 Jun 17 13:56:27 vps687878 sshd\[29156\]: Failed password for invalid user a from 110.50.85.28 port 48480 ssh2 Jun 17 14:04:51 vps687878 sshd\[29859\]: Invalid user oracle from 110.50.85.28 port 50002 Jun 17 14:04:51 vps687878 sshd\[29859\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.50.85.28 ... |
2020-06-17 20:18:50 |
| 218.92.0.247 | attackbots | Lines containing failures of 218.92.0.247 Jun 16 15:30:13 kopano sshd[12906]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.247 user=r.r Jun 16 15:30:15 kopano sshd[12906]: Failed password for r.r from 218.92.0.247 port 12543 ssh2 Jun 16 15:30:18 kopano sshd[12906]: Failed password for r.r from 218.92.0.247 port 12543 ssh2 Jun 16 15:30:21 kopano sshd[12906]: Failed password for r.r from 218.92.0.247 port 12543 ssh2 Jun 16 15:30:29 kopano sshd[12906]: message repeated 2 serveres: [ Failed password for r.r from 218.92.0.247 port 12543 ssh2] Jun 16 15:30:29 kopano sshd[12906]: error: maximum authentication attempts exceeded for r.r from 218.92.0.247 port 12543 ssh2 [preauth] Jun 16 15:30:29 kopano sshd[12906]: Disconnecting authenticating user r.r 218.92.0.247 port 12543: Too many authentication failures [preauth] Jun 16 15:30:29 kopano sshd[12906]: PAM 4 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= r........ ------------------------------ |
2020-06-17 20:39:15 |
| 2.80.168.28 | attack | Jun 17 14:05:44 sip sshd[683009]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.80.168.28 Jun 17 14:05:44 sip sshd[683009]: Invalid user devuser from 2.80.168.28 port 35956 Jun 17 14:05:46 sip sshd[683009]: Failed password for invalid user devuser from 2.80.168.28 port 35956 ssh2 ... |
2020-06-17 20:10:51 |
| 119.29.173.247 | attack | Jun 17 14:01:42 nas sshd[27474]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.29.173.247 Jun 17 14:01:44 nas sshd[27474]: Failed password for invalid user data01 from 119.29.173.247 port 38028 ssh2 Jun 17 14:05:33 nas sshd[27627]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.29.173.247 ... |
2020-06-17 20:20:21 |
| 37.235.226.134 | attackspambots | DATE:2020-06-17 14:05:07, IP:37.235.226.134, PORT:telnet - Telnet brute force auth on a honeypot server (epe-dc) |
2020-06-17 20:48:24 |
| 122.51.31.60 | attackbots | $f2bV_matches |
2020-06-17 20:26:18 |
| 128.1.34.12 | attackbots | Jun 17 14:00:26 mxgate1 postfix/postscreen[9373]: CONNECT from [128.1.34.12]:63893 to [176.31.12.44]:25 Jun 17 14:00:26 mxgate1 postfix/dnsblog[9423]: addr 128.1.34.12 listed by domain zen.spamhaus.org as 127.0.0.4 Jun 17 14:00:26 mxgate1 postfix/dnsblog[9424]: addr 128.1.34.12 listed by domain cbl.abuseat.org as 127.0.0.2 Jun 17 14:00:32 mxgate1 postfix/postscreen[9373]: DNSBL rank 3 for [128.1.34.12]:63893 Jun 17 14:00:32 mxgate1 postfix/postscreen[9373]: NOQUEUE: reject: RCPT from [128.1.34.12]:63893: 550 5.7.1 Service unavailable; client [128.1.34.12] blocked using zen.spamhaus.org; from=x@x helo= |
2020-06-17 20:25:56 |
| 167.99.66.158 | attackbotsspam | Jun 17 14:43:12 sip sshd[683163]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.66.158 Jun 17 14:43:12 sip sshd[683163]: Invalid user natalia from 167.99.66.158 port 52658 Jun 17 14:43:14 sip sshd[683163]: Failed password for invalid user natalia from 167.99.66.158 port 52658 ssh2 ... |
2020-06-17 20:52:28 |
| 15.206.14.199 | attackspam | 2020-06-17T12:15:19.720551shield sshd\[4147\]: Invalid user greg from 15.206.14.199 port 34982 2020-06-17T12:15:19.724988shield sshd\[4147\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ec2-15-206-14-199.ap-south-1.compute.amazonaws.com 2020-06-17T12:15:21.632136shield sshd\[4147\]: Failed password for invalid user greg from 15.206.14.199 port 34982 ssh2 2020-06-17T12:19:05.295786shield sshd\[4840\]: Invalid user rs from 15.206.14.199 port 41624 2020-06-17T12:19:05.299630shield sshd\[4840\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ec2-15-206-14-199.ap-south-1.compute.amazonaws.com |
2020-06-17 20:23:17 |