City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 16.193.138.34
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 32654
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;16.193.138.34. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020500 1800 900 604800 86400
;; Query time: 38 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 06 00:41:12 CST 2025
;; MSG SIZE rcvd: 106Host 34.138.193.16.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 34.138.193.16.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 112.85.42.229 | attackbotsspam | Jul 11 21:04:41 ArkNodeAT sshd\[563\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.229 user=root Jul 11 21:04:43 ArkNodeAT sshd\[563\]: Failed password for root from 112.85.42.229 port 50378 ssh2 Jul 11 21:05:41 ArkNodeAT sshd\[994\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.229 user=root |
2019-07-12 04:49:45 |
| 46.101.88.10 | attack | Jul 11 22:17:09 ArkNodeAT sshd\[7733\]: Invalid user jeremy from 46.101.88.10 Jul 11 22:17:09 ArkNodeAT sshd\[7733\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.88.10 Jul 11 22:17:11 ArkNodeAT sshd\[7733\]: Failed password for invalid user jeremy from 46.101.88.10 port 34199 ssh2 |
2019-07-12 04:52:38 |
| 142.93.164.7 | attackspambots | Apr 10 04:35:01 server sshd\[57855\]: Invalid user manager from 142.93.164.7 Apr 10 04:35:01 server sshd\[57855\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.164.7 Apr 10 04:35:03 server sshd\[57855\]: Failed password for invalid user manager from 142.93.164.7 port 54730 ssh2 ... |
2019-07-12 05:05:52 |
| 142.93.198.152 | attack | May 24 15:16:51 server sshd\[177642\]: Invalid user merje from 142.93.198.152 May 24 15:16:51 server sshd\[177642\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.198.152 May 24 15:16:53 server sshd\[177642\]: Failed password for invalid user merje from 142.93.198.152 port 54392 ssh2 ... |
2019-07-12 05:02:35 |
| 80.250.11.105 | attackspambots | Jul 11 16:01:41 rigel postfix/smtpd[18540]: connect from unknown[80.250.11.105] Jul 11 16:01:41 rigel postfix/smtpd[18540]: warning: unknown[80.250.11.105]: SASL CRAM-MD5 authentication failed: authentication failure Jul 11 16:01:41 rigel postfix/smtpd[18540]: warning: unknown[80.250.11.105]: SASL PLAIN authentication failed: authentication failure Jul 11 16:01:41 rigel postfix/smtpd[18540]: warning: unknown[80.250.11.105]: SASL LOGIN authentication failed: authentication failure Jul 11 16:01:41 rigel postfix/smtpd[18540]: disconnect from unknown[80.250.11.105] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=80.250.11.105 |
2019-07-12 04:29:57 |
| 134.209.157.62 | attackbots | Jul 11 16:09:23 albuquerque sshd\[28319\]: Invalid user master from 134.209.157.62Jul 11 16:09:26 albuquerque sshd\[28319\]: Failed password for invalid user master from 134.209.157.62 port 38232 ssh2Jul 11 16:09:46 albuquerque sshd\[28329\]: Invalid user operations from 134.209.157.62 ... |
2019-07-12 04:35:21 |
| 142.93.245.174 | attackspam | May 6 12:59:51 server sshd\[153739\]: Invalid user test from 142.93.245.174 May 6 12:59:51 server sshd\[153739\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.245.174 May 6 12:59:53 server sshd\[153739\]: Failed password for invalid user test from 142.93.245.174 port 36206 ssh2 ... |
2019-07-12 04:47:22 |
| 188.166.105.138 | attack | Jul 11 16:31:23 novum-srv2 sshd[16499]: Invalid user admin from 188.166.105.138 port 51116 Jul 11 16:31:23 novum-srv2 sshd[16502]: Invalid user user from 188.166.105.138 port 51120 Jul 11 16:31:23 novum-srv2 sshd[16501]: Invalid user admin from 188.166.105.138 port 51114 ... |
2019-07-12 04:27:44 |
| 120.138.9.104 | attack | Jul 11 22:11:47 xeon sshd[30145]: Failed password for invalid user user from 120.138.9.104 port 16936 ssh2 |
2019-07-12 04:23:38 |
| 185.254.122.13 | attackbots | Jul 11 21:22:41 h2177944 kernel: \[1197225.936495\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.254.122.13 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=63280 PROTO=TCP SPT=47774 DPT=24045 WINDOW=1024 RES=0x00 SYN URGP=0 Jul 11 21:25:58 h2177944 kernel: \[1197422.681883\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.254.122.13 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x20 TTL=245 ID=28360 PROTO=TCP SPT=47774 DPT=22457 WINDOW=1024 RES=0x00 SYN URGP=0 Jul 11 21:45:50 h2177944 kernel: \[1198614.250267\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.254.122.13 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=2811 PROTO=TCP SPT=47774 DPT=24168 WINDOW=1024 RES=0x00 SYN URGP=0 Jul 11 21:58:30 h2177944 kernel: \[1199374.223360\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.254.122.13 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=28458 PROTO=TCP SPT=47774 DPT=23876 WINDOW=1024 RES=0x00 SYN URGP=0 Jul 11 22:04:27 h2177944 kernel: \[1199731.557544\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.254.122.13 DST=85.2 |
2019-07-12 04:46:57 |
| 59.33.140.148 | attackbotsspam | Automatic report |
2019-07-12 04:42:43 |
| 50.252.166.69 | attack | Jul 11 20:06:28 xeon cyrus/imaps[19060]: badlogin: 50-252-166-69-static.hfc.comcastbusiness.net [50.252.166.69] plain [SASL(-13): authentication failure: Password verification failed] |
2019-07-12 04:37:53 |
| 142.93.218.84 | attack | Apr 26 12:48:07 server sshd\[234295\]: Invalid user afoxson from 142.93.218.84 Apr 26 12:48:07 server sshd\[234295\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.218.84 Apr 26 12:48:09 server sshd\[234295\]: Failed password for invalid user afoxson from 142.93.218.84 port 43264 ssh2 ... |
2019-07-12 04:55:11 |
| 40.117.170.239 | attack | Jul 11 05:33:48 mxgate1 postfix/postscreen[10360]: CONNECT from [40.117.170.239]:46787 to [176.31.12.44]:25 Jul 11 05:33:54 mxgate1 postfix/postscreen[10360]: PASS NEW [40.117.170.239]:46787 Jul 11 05:33:54 mxgate1 postfix/smtpd[10366]: connect from unknown[40.117.170.239] Jul x@x Jul 11 05:33:54 mxgate1 postfix/smtpd[10366]: disconnect from unknown[40.117.170.239] ehlo=1 mail=1 rcpt=0/1 data=0/1 quhostname=1 commands=3/5 Jul 11 05:43:54 mxgate1 postfix/anvil[10369]: statistics: max connection rate 1/60s for (smtpd:40.117.170.239) at Jul 11 05:33:54 Jul 11 05:43:54 mxgate1 postfix/anvil[10369]: statistics: max connection count 1 for (smtpd:40.117.170.239) at Jul 11 05:33:54 Jul 11 05:43:54 mxgate1 postfix/anvil[10369]: statistics: max message rate 1/60s for (smtpd:40.117.170.239) at Jul 11 05:33:54 Jul 11 05:43:54 mxgate1 postfix/postscreen[10544]: CONNECT from [40.117.170.239]:55261 to [176.31.12.44]:25 Jul 11 05:43:54 mxgate1 postfix/postscreen[10544]: PASS OLD [40.11........ ------------------------------- |
2019-07-12 04:57:54 |
| 157.230.119.235 | attackspam | Scanning random ports - tries to find possible vulnerable services |
2019-07-12 04:36:11 |