City: unknown
Region: unknown
Country: IANA Special-Purpose Address
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 245.42.158.249
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 55868
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;245.42.158.249. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025013100 1800 900 604800 86400
;; Query time: 38 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jan 31 15:08:36 CST 2025
;; MSG SIZE rcvd: 107Host 249.158.42.245.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 249.158.42.245.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 69.167.1.228 | attackbotsspam | RDP Brute-Force (Grieskirchen RZ1) |
2019-12-16 08:07:35 |
| 111.72.194.173 | attack | 2019-12-15 16:48:36 H=(ylmf-pc) [111.72.194.173]:64579 I=[192.147.25.65]:25 rejected EHLO or HELO ylmf-pc: CHECK_HELO: ylmf-pc 2019-12-15 16:48:36 H=(ylmf-pc) [111.72.194.173]:64362 I=[192.147.25.65]:25 rejected EHLO or HELO ylmf-pc: CHECK_HELO: ylmf-pc 2019-12-15 16:48:37 H=(ylmf-pc) [111.72.194.173]:65494 I=[192.147.25.65]:25 rejected EHLO or HELO ylmf-pc: CHECK_HELO: ylmf-pc ... |
2019-12-16 08:29:18 |
| 83.15.162.141 | attack | 85/tcp 9000/tcp [2019-11-04/12-15]2pkt |
2019-12-16 08:15:17 |
| 103.111.86.241 | attackbots | SSH brute-force: detected 8 distinct usernames within a 24-hour window. |
2019-12-16 08:10:41 |
| 144.217.243.216 | attackspambots | Nov 12 21:22:21 vtv3 sshd[28945]: Invalid user ******** from 144.217.243.216 port 40232 Nov 12 21:22:21 vtv3 sshd[28945]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.217.243.216 Nov 12 21:32:38 vtv3 sshd[1488]: Invalid user flakes from 144.217.243.216 port 35028 Nov 12 21:32:38 vtv3 sshd[1488]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.217.243.216 Nov 12 21:32:40 vtv3 sshd[1488]: Failed password for invalid user flakes from 144.217.243.216 port 35028 ssh2 Nov 12 21:36:08 vtv3 sshd[3478]: Invalid user test444 from 144.217.243.216 port 42710 Nov 12 21:36:08 vtv3 sshd[3478]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.217.243.216 Nov 12 21:46:32 vtv3 sshd[8924]: Invalid user grovestine from 144.217.243.216 port 37550 Nov 12 21:46:32 vtv3 sshd[8924]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.217.243.216 Nov 12 21:46:35 v |
2019-12-16 08:18:12 |
| 178.62.90.135 | attackspam | $f2bV_matches |
2019-12-16 08:16:40 |
| 187.61.213.171 | attack | 23/tcp 81/tcp [2019-12-02/15]2pkt |
2019-12-16 07:49:47 |
| 78.187.139.110 | attackspambots | 119/tcp 81/tcp [2019-10-25/12-15]2pkt |
2019-12-16 08:12:26 |
| 176.192.109.142 | attackbotsspam | 1576450145 - 12/15/2019 23:49:05 Host: 176.192.109.142/176.192.109.142 Port: 445 TCP Blocked |
2019-12-16 07:59:20 |
| 138.197.152.113 | attack | Dec 15 18:34:43 ny01 sshd[19667]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.152.113 Dec 15 18:34:45 ny01 sshd[19667]: Failed password for invalid user mysql from 138.197.152.113 port 56276 ssh2 Dec 15 18:39:51 ny01 sshd[20214]: Failed password for root from 138.197.152.113 port 34440 ssh2 |
2019-12-16 07:54:01 |
| 85.24.163.227 | attack | Dec 15 23:48:55 web2 sshd[13227]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.24.163.227 Dec 15 23:48:56 web2 sshd[13227]: Failed password for invalid user instrument from 85.24.163.227 port 58902 ssh2 |
2019-12-16 08:11:38 |
| 106.54.185.31 | attack | Dec 15 23:36:33 ns382633 sshd\[23269\]: Invalid user collings from 106.54.185.31 port 57836 Dec 15 23:36:33 ns382633 sshd\[23269\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.185.31 Dec 15 23:36:35 ns382633 sshd\[23269\]: Failed password for invalid user collings from 106.54.185.31 port 57836 ssh2 Dec 15 23:48:35 ns382633 sshd\[25270\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.185.31 user=root Dec 15 23:48:37 ns382633 sshd\[25270\]: Failed password for root from 106.54.185.31 port 40590 ssh2 |
2019-12-16 08:28:01 |
| 54.39.44.47 | attackspam | Dec 16 00:49:09 ncomp sshd[17220]: Invalid user foisy from 54.39.44.47 Dec 16 00:49:09 ncomp sshd[17220]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.39.44.47 Dec 16 00:49:09 ncomp sshd[17220]: Invalid user foisy from 54.39.44.47 Dec 16 00:49:11 ncomp sshd[17220]: Failed password for invalid user foisy from 54.39.44.47 port 50198 ssh2 |
2019-12-16 07:52:37 |
| 125.253.116.134 | attack | WordPress login Brute force / Web App Attack on client site. |
2019-12-16 08:25:54 |
| 104.244.75.244 | attackspambots | Dec 15 23:30:54 localhost sshd\[125377\]: Invalid user hiscox from 104.244.75.244 port 44212 Dec 15 23:30:54 localhost sshd\[125377\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.244.75.244 Dec 15 23:30:56 localhost sshd\[125377\]: Failed password for invalid user hiscox from 104.244.75.244 port 44212 ssh2 Dec 15 23:35:44 localhost sshd\[125543\]: Invalid user rambo from 104.244.75.244 port 51588 Dec 15 23:35:44 localhost sshd\[125543\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.244.75.244 ... |
2019-12-16 08:20:14 |