City: unknown
Region: unknown
Country: IANA Special-Purpose Address
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 254.199.149.94
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 61384
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;254.199.149.94. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012400 1800 900 604800 86400
;; Query time: 12 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jan 24 13:53:52 CST 2025
;; MSG SIZE rcvd: 107Host 94.149.199.254.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 94.149.199.254.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 160.176.33.239 | attack | 2019-10-21 x@x 2019-10-21 20:44:03 unexpected disconnection while reading SMTP command from ([160.176.33.239]) [160.176.33.239]:34063 I=[10.100.18.20]:25 (error: Connection reset by peer) 2019-10-21 x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=160.176.33.239 |
2019-10-22 06:56:35 |
| 167.99.65.138 | attack | Oct 21 22:50:07 ns381471 sshd[4509]: Failed password for root from 167.99.65.138 port 49536 ssh2 Oct 21 22:54:18 ns381471 sshd[4629]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.65.138 Oct 21 22:54:20 ns381471 sshd[4629]: Failed password for invalid user yuanwd from 167.99.65.138 port 59170 ssh2 |
2019-10-22 06:39:07 |
| 31.178.109.84 | attack | 2019-10-21 x@x 2019-10-21 21:43:45 unexpected disconnection while reading SMTP command from 31-178-109-84.dynamic.chello.pl [31.178.109.84]:47986 I=[10.100.18.22]:25 (error: Connection reset by peer) 2019-10-21 x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=31.178.109.84 |
2019-10-22 06:52:59 |
| 197.148.30.49 | attackspam | 2019-10-21 x@x 2019-10-21 21:02:15 unexpected disconnection while reading SMTP command from (cust49-30.148.197.tvcabo.ao) [197.148.30.49]:36998 I=[10.100.18.21]:25 (error: Connection reset by peer) 2019-10-21 x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=197.148.30.49 |
2019-10-22 06:46:02 |
| 46.245.179.222 | attackspam | $f2bV_matches |
2019-10-22 06:42:54 |
| 203.130.192.242 | attackbots | 2019-10-22T05:08:34.811537enmeeting.mahidol.ac.th sshd\[30570\]: Invalid user leticia from 203.130.192.242 port 34186 2019-10-22T05:08:34.825585enmeeting.mahidol.ac.th sshd\[30570\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.130.192.242 2019-10-22T05:08:36.317462enmeeting.mahidol.ac.th sshd\[30570\]: Failed password for invalid user leticia from 203.130.192.242 port 34186 ssh2 ... |
2019-10-22 06:45:29 |
| 190.43.94.124 | attack | 2019-10-21 x@x 2019-10-21 21:39:06 unexpected disconnection while reading SMTP command from ([190.43.94.124]) [190.43.94.124]:4677 I=[10.100.18.20]:25 (error: Connection reset by peer) 2019-10-21 x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=190.43.94.124 |
2019-10-22 06:19:07 |
| 37.212.133.174 | attack | failed_logins |
2019-10-22 06:52:01 |
| 171.239.254.206 | attackbots | Oct 22 00:48:15 rotator sshd\[13005\]: Address 171.239.254.206 maps to dynamic-adsl.viettel.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!Oct 22 00:48:15 rotator sshd\[13005\]: Invalid user ubnt from 171.239.254.206Oct 22 00:48:17 rotator sshd\[13005\]: Failed password for invalid user ubnt from 171.239.254.206 port 10446 ssh2Oct 22 00:48:18 rotator sshd\[13007\]: Address 171.239.254.206 maps to dynamic-adsl.viettel.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!Oct 22 00:48:18 rotator sshd\[13007\]: Invalid user admin from 171.239.254.206Oct 22 00:48:21 rotator sshd\[13007\]: Failed password for invalid user admin from 171.239.254.206 port 16368 ssh2 ... |
2019-10-22 06:52:18 |
| 140.207.114.222 | attackbotsspam | Oct 21 19:09:38 firewall sshd[23129]: Failed password for invalid user test from 140.207.114.222 port 48676 ssh2 Oct 21 19:12:55 firewall sshd[23189]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.207.114.222 user=root Oct 21 19:12:58 firewall sshd[23189]: Failed password for root from 140.207.114.222 port 28259 ssh2 ... |
2019-10-22 06:55:16 |
| 202.137.240.189 | attack | Oct 21 22:31:38 s1 sshd\[2802\]: User root from 202.137.240.189 not allowed because not listed in AllowUsers Oct 21 22:31:38 s1 sshd\[2802\]: Failed password for invalid user root from 202.137.240.189 port 42400 ssh2 Oct 21 22:32:24 s1 sshd\[2854\]: User root from 202.137.240.189 not allowed because not listed in AllowUsers Oct 21 22:32:24 s1 sshd\[2854\]: Failed password for invalid user root from 202.137.240.189 port 38126 ssh2 Oct 21 22:33:11 s1 sshd\[2918\]: User root from 202.137.240.189 not allowed because not listed in AllowUsers Oct 21 22:33:11 s1 sshd\[2918\]: Failed password for invalid user root from 202.137.240.189 port 33866 ssh2 ... |
2019-10-22 06:33:26 |
| 82.131.207.76 | attackbots | Automatic report - Port Scan Attack |
2019-10-22 06:57:04 |
| 188.68.0.87 | attackbots | Name: 'gekllokjwer' Street: 'VXZwsgijzZICCDxHx' City: 'SlZERrJMOanPXU' Zip: 'DCYZzYnKKp' Message: 'êóïèòü êîêàèí àìô ìåô ñê êóïèòü êîêàèí àìô ìåô ñê êóïèòü êîêàèí àìô ìåô ñê êóïèòü êîêàèí àìô ìåô ñê êóïèòü êîêàèí àìô ìåô ñê êóïèòü êîêàèí àìô ìåô ñê êóïèòü êîêàèí àìô ìåô ñê êóïèòü êîêàèí àìô ìåô ñê |
2019-10-22 06:47:39 |
| 212.179.230.235 | attack | (Oct 21) LEN=44 TTL=55 ID=34310 TCP DPT=8080 WINDOW=33192 SYN (Oct 21) LEN=44 TTL=54 ID=28514 TCP DPT=8080 WINDOW=35513 SYN (Oct 21) LEN=44 TTL=53 ID=40954 TCP DPT=8080 WINDOW=33192 SYN (Oct 19) LEN=44 TTL=53 ID=25066 TCP DPT=8080 WINDOW=35513 SYN (Oct 19) LEN=44 TTL=55 ID=4187 TCP DPT=8080 WINDOW=33192 SYN (Oct 18) LEN=44 TTL=53 ID=9318 TCP DPT=8080 WINDOW=33192 SYN (Oct 18) LEN=44 TTL=53 ID=55414 TCP DPT=8080 WINDOW=35513 SYN (Oct 18) LEN=44 TTL=55 ID=23643 TCP DPT=8080 WINDOW=33192 SYN (Oct 17) LEN=44 TTL=53 ID=36152 TCP DPT=8080 WINDOW=35513 SYN (Oct 16) LEN=44 TTL=53 ID=13590 TCP DPT=8080 WINDOW=33192 SYN |
2019-10-22 06:20:08 |
| 37.187.79.117 | attackbots | Oct 21 20:03:27 unicornsoft sshd\[27070\]: User root from 37.187.79.117 not allowed because not listed in AllowUsers Oct 21 20:03:27 unicornsoft sshd\[27070\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.79.117 user=root Oct 21 20:03:29 unicornsoft sshd\[27070\]: Failed password for invalid user root from 37.187.79.117 port 40776 ssh2 |
2019-10-22 06:57:20 |