City: unknown
Region: unknown
Country: IANA Special-Purpose Address
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 253.67.44.142
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 8331
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;253.67.44.142. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022800 1800 900 604800 86400
;; Query time: 9 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 28 18:14:16 CST 2025
;; MSG SIZE rcvd: 106Host 142.44.67.253.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 142.44.67.253.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 216.83.57.10 | attackspam | Oct 31 10:40:33 auw2 sshd\[21217\]: Invalid user jacob from 216.83.57.10 Oct 31 10:40:33 auw2 sshd\[21217\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=216.83.57.10 Oct 31 10:40:35 auw2 sshd\[21217\]: Failed password for invalid user jacob from 216.83.57.10 port 44921 ssh2 Oct 31 10:46:22 auw2 sshd\[21691\]: Invalid user beheerder from 216.83.57.10 Oct 31 10:46:22 auw2 sshd\[21691\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=216.83.57.10 |
2019-11-01 07:48:08 |
| 45.238.122.221 | attackspam | IMAP brute force ... |
2019-11-01 07:47:26 |
| 140.114.91.94 | attackspam | Invalid user suporte from 140.114.91.94 port 47882 |
2019-11-01 08:01:00 |
| 206.246.75.217 | attackbots | Automatic report - XMLRPC Attack |
2019-11-01 07:34:35 |
| 151.80.61.103 | attackbots | Oct 31 18:07:53 askasleikir sshd[19037]: Failed password for root from 151.80.61.103 port 50622 ssh2 |
2019-11-01 07:35:35 |
| 62.210.149.30 | attackbotsspam | \[2019-10-31 19:26:03\] SECURITY\[2634\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-10-31T19:26:03.095-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="990712342174734",SessionID="0x7fdf2c364088",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/62.210.149.30/55177",ACLName="no_extension_match" \[2019-10-31 19:26:22\] SECURITY\[2634\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-10-31T19:26:22.420-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="990812342174734",SessionID="0x7fdf2c003608",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/62.210.149.30/58810",ACLName="no_extension_match" \[2019-10-31 19:26:41\] SECURITY\[2634\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-10-31T19:26:41.103-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="990912342174734",SessionID="0x7fdf2c364088",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/62.210.149.30/61643",ACLName="no_ext |
2019-11-01 07:39:05 |
| 111.93.4.174 | attackspam | Nov 1 00:27:26 host sshd[25657]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.93.4.174 user=root Nov 1 00:27:28 host sshd[25657]: Failed password for root from 111.93.4.174 port 55604 ssh2 ... |
2019-11-01 07:51:52 |
| 178.128.55.52 | attackspam | Nov 1 00:00:17 localhost sshd\[7374\]: Invalid user sammy from 178.128.55.52 Nov 1 00:00:17 localhost sshd\[7374\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.55.52 Nov 1 00:00:20 localhost sshd\[7374\]: Failed password for invalid user sammy from 178.128.55.52 port 36623 ssh2 Nov 1 00:07:21 localhost sshd\[7581\]: Invalid user oracle from 178.128.55.52 Nov 1 00:07:21 localhost sshd\[7581\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.55.52 ... |
2019-11-01 07:58:05 |
| 107.180.108.7 | attackspam | Automatic report - Banned IP Access |
2019-11-01 07:25:41 |
| 35.202.46.240 | attackbotsspam | Lines containing failures of 35.202.46.240 Oct 30 23:56:53 *** sshd[125213]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.202.46.240 user=r.r Oct 30 23:56:55 *** sshd[125213]: Failed password for r.r from 35.202.46.240 port 41006 ssh2 Oct 30 23:56:55 *** sshd[125213]: Received disconnect from 35.202.46.240 port 41006:11: Bye Bye [preauth] Oct 30 23:56:55 *** sshd[125213]: Disconnected from authenticating user r.r 35.202.46.240 port 41006 [preauth] Oct 31 00:14:55 *** sshd[126130]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.202.46.240 user=r.r Oct 31 00:14:58 *** sshd[126130]: Failed password for r.r from 35.202.46.240 port 47532 ssh2 Oct 31 00:14:58 *** sshd[126130]: Received disconnect from 35.202.46.240 port 47532:11: Bye Bye [preauth] Oct 31 00:14:58 *** sshd[126130]: Disconnected from authenticating user r.r 35.202.46.240 port 47532 [preauth] Oct 31 00:18:42 *** sshd[12628........ ------------------------------ |
2019-11-01 07:32:26 |
| 132.145.201.163 | attack | Invalid user rq from 132.145.201.163 port 52953 |
2019-11-01 08:02:03 |
| 81.22.45.116 | attackbots | 2019-11-01T00:08:06.276308+01:00 lumpi kernel: [2385676.999025] INPUT:DROP:SPAMHAUS_EDROP:IN=eth0 OUT= MAC=52:54:a2:01:a5:04:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.116 DST=172.31.1.100 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=18417 PROTO=TCP SPT=46274 DPT=37690 WINDOW=1024 RES=0x00 SYN URGP=0 ... |
2019-11-01 07:19:36 |
| 82.117.190.170 | attackbotsspam | 2019-10-31T23:26:13.855628shield sshd\[1051\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=82-117-190-170.mynts.ru user=root 2019-10-31T23:26:15.454463shield sshd\[1051\]: Failed password for root from 82.117.190.170 port 54375 ssh2 2019-10-31T23:30:24.635049shield sshd\[1812\]: Invalid user dbtest from 82.117.190.170 port 56845 2019-10-31T23:30:24.640234shield sshd\[1812\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=82-117-190-170.mynts.ru 2019-10-31T23:30:27.012403shield sshd\[1812\]: Failed password for invalid user dbtest from 82.117.190.170 port 56845 ssh2 |
2019-11-01 07:36:29 |
| 134.73.51.144 | attackbotsspam | Lines containing failures of 134.73.51.144 Oct 31 21:02:18 shared04 postfix/smtpd[379]: connect from teaching.wereviewthings.com[134.73.51.144] Oct 31 21:02:18 shared04 policyd-spf[420]: prepend Received-SPF: Pass (mailfrom) identhostnamey=mailfrom; client-ip=134.73.51.144; helo=teaching.mathieudrabik.co; envelope-from=x@x Oct x@x Oct 31 21:02:19 shared04 postfix/smtpd[379]: disconnect from teaching.wereviewthings.com[134.73.51.144] ehlo=1 mail=1 rcpt=0/1 data=0/1 quhostname=1 commands=3/5 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=134.73.51.144 |
2019-11-01 07:51:08 |
| 81.22.45.148 | attack | Port scan on 18 port(s): 4126 4129 4139 4169 4185 4228 4232 4262 4272 4274 4330 4371 4409 4411 4416 4422 4440 4494 |
2019-11-01 07:46:07 |