City: unknown
Region: unknown
Country: China
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.169.163.244
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 41688
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;42.169.163.244. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021700 1800 900 604800 86400
;; Query time: 191 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 17 20:05:47 CST 2025
;; MSG SIZE rcvd: 107Host 244.163.169.42.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 244.163.169.42.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 134.73.7.218 | attackspam | 2019-05-05 13:33:19 1hNFOQ-0006f1-Q7 SMTP connection from help.sandyfadadu.com \(help.maylamkemmoi.icu\) \[134.73.7.218\]:50121 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-05-05 13:36:15 1hNFRH-0006lH-7B SMTP connection from help.sandyfadadu.com \(help.maylamkemmoi.icu\) \[134.73.7.218\]:54549 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-05-05 13:36:45 1hNFRk-0006m0-P9 SMTP connection from help.sandyfadadu.com \(help.maylamkemmoi.icu\) \[134.73.7.218\]:47353 I=\[193.107.88.166\]:25 closed by DROP in ACL ... |
2020-02-05 02:15:06 |
| 190.85.6.90 | attackspam | Unauthorized connection attempt detected from IP address 190.85.6.90 to port 2220 [J] |
2020-02-05 02:13:35 |
| 134.73.7.225 | attackbots | 2019-04-29 10:36:10 1hL1lh-0004oy-OP SMTP connection from pupil.sandyfadadu.com \(pupil.somintstudio.icu\) \[134.73.7.225\]:55667 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-04-29 10:36:28 1hL1m0-0004pQ-HY SMTP connection from pupil.sandyfadadu.com \(pupil.somintstudio.icu\) \[134.73.7.225\]:53742 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-04-29 10:38:27 1hL1nv-0004sS-Ke SMTP connection from pupil.sandyfadadu.com \(pupil.somintstudio.icu\) \[134.73.7.225\]:59872 I=\[193.107.90.29\]:25 closed by DROP in ACL ... |
2020-02-05 02:08:29 |
| 196.61.38.138 | attackspam | Honeypot attack, port: 445, PTR: PTR record not found |
2020-02-05 02:29:56 |
| 134.73.27.46 | attackspambots | 2019-05-11 05:45:04 1hPIwa-0001Tf-DF SMTP connection from animated.proanimakers.com \(animated.sappmobile.icu\) \[134.73.27.46\]:50480 I=\[193.107.90.29\]:25 closed by DROP in ACL 2019-05-11 05:46:54 1hPIyM-0001Vg-DM SMTP connection from animated.proanimakers.com \(animated.sappmobile.icu\) \[134.73.27.46\]:36057 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-05-11 05:47:43 1hPIz9-0001WE-Dn SMTP connection from animated.proanimakers.com \(animated.sappmobile.icu\) \[134.73.27.46\]:60429 I=\[193.107.88.166\]:25 closed by DROP in ACL ... |
2020-02-05 02:42:25 |
| 177.69.50.49 | attackbotsspam | Feb 4 08:49:17 plusreed sshd[11688]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.69.50.49 user=root Feb 4 08:49:19 plusreed sshd[11688]: Failed password for root from 177.69.50.49 port 43020 ssh2 ... |
2020-02-05 02:42:45 |
| 222.128.15.208 | attackbots | Unauthorized connection attempt detected from IP address 222.128.15.208 to port 2220 [J] |
2020-02-05 02:22:48 |
| 62.231.7.221 | attackbots | 20/2/4@12:04:46: FAIL: Alarm-SSH address from=62.231.7.221 ... |
2020-02-05 02:36:06 |
| 134.73.7.220 | attackspam | 2019-04-10 11:17:26 1hE9ME-0008Hm-38 SMTP connection from seeming.sandyfadadu.com \(seeming.mobiusdecor.icu\) \[134.73.7.220\]:52084 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-04-10 11:17:34 1hE9ML-0008Hx-OZ SMTP connection from seeming.sandyfadadu.com \(seeming.mobiusdecor.icu\) \[134.73.7.220\]:47422 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-04-10 11:17:44 1hE9MW-0008IE-8m SMTP connection from seeming.sandyfadadu.com \(seeming.mobiusdecor.icu\) \[134.73.7.220\]:39174 I=\[193.107.90.29\]:25 closed by DROP in ACL ... |
2020-02-05 02:14:18 |
| 134.73.7.195 | attack | 2019-04-10 01:21:21 1hE03N-0007pr-Jg SMTP connection from economic.sandyfadadu.com \(economic.despinamu.icu\) \[134.73.7.195\]:50892 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-04-10 01:21:30 1hE03W-0007px-AH SMTP connection from economic.sandyfadadu.com \(economic.despinamu.icu\) \[134.73.7.195\]:46169 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-04-10 01:24:41 1hE06b-0007tc-KO SMTP connection from economic.sandyfadadu.com \(economic.despinamu.icu\) \[134.73.7.195\]:55274 I=\[193.107.88.166\]:25 closed by DROP in ACL ... |
2020-02-05 02:28:33 |
| 134.73.7.209 | attack | 2019-04-28 11:35:29 1hKgDZ-0007fu-Ck SMTP connection from showplace.sandyfadadu.com \(showplace.ajayelectricals.icu\) \[134.73.7.209\]:46108 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-04-28 11:37:13 1hKgFF-0007ie-38 SMTP connection from showplace.sandyfadadu.com \(showplace.ajayelectricals.icu\) \[134.73.7.209\]:42591 I=\[193.107.90.29\]:25 closed by DROP in ACL 2019-04-28 11:39:03 1hKgH1-0007mb-7L SMTP connection from showplace.sandyfadadu.com \(showplace.ajayelectricals.icu\) \[134.73.7.209\]:33503 I=\[193.107.88.166\]:25 closed by DROP in ACL ... |
2020-02-05 02:19:15 |
| 134.73.27.49 | attackspambots | 2019-05-09 16:55:14 1hOkS2-00064q-6A SMTP connection from peasant.proanimakers.com \(peasant.neverovski.icu\) \[134.73.27.49\]:55239 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-05-09 16:55:37 1hOkSP-00065T-5e SMTP connection from peasant.proanimakers.com \(peasant.neverovski.icu\) \[134.73.27.49\]:48132 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-05-09 16:58:49 1hOkVV-0006C0-5s SMTP connection from peasant.proanimakers.com \(peasant.neverovski.icu\) \[134.73.27.49\]:40979 I=\[193.107.90.29\]:25 closed by DROP in ACL ... |
2020-02-05 02:35:07 |
| 134.73.7.201 | attackspam | 2019-05-07 10:21:18 1hNvLi-00067G-KA SMTP connection from full.sandyfadadu.com \(full.atashbaar.icu\) \[134.73.7.201\]:50865 I=\[193.107.90.29\]:25 closed by DROP in ACL 2019-05-07 10:21:35 1hNvLz-00067a-HC SMTP connection from full.sandyfadadu.com \(full.atashbaar.icu\) \[134.73.7.201\]:52728 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-05-07 10:23:44 1hNvO4-0006A8-2L SMTP connection from full.sandyfadadu.com \(full.atashbaar.icu\) \[134.73.7.201\]:47012 I=\[193.107.88.166\]:25 closed by DROP in ACL ... |
2020-02-05 02:25:16 |
| 134.73.7.211 | attackspam | 2019-04-07 05:27:42 1hCyT7-0004KG-Oq SMTP connection from busy.sandyfadadu.com \(busy.loveischallenge.icu\) \[134.73.7.211\]:52210 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-04-07 05:30:05 1hCyVR-0004Os-GU SMTP connection from busy.sandyfadadu.com \(busy.loveischallenge.icu\) \[134.73.7.211\]:38539 I=\[193.107.90.29\]:25 closed by DROP in ACL 2019-04-07 05:31:21 1hCyWf-0004QF-1b SMTP connection from busy.sandyfadadu.com \(busy.loveischallenge.icu\) \[134.73.7.211\]:53635 I=\[193.107.88.166\]:25 closed by DROP in ACL ... |
2020-02-05 02:18:36 |
| 72.69.106.21 | attackbotsspam | Feb 4 18:17:55 srv01 sshd[4490]: Invalid user gary from 72.69.106.21 port 42002 Feb 4 18:17:55 srv01 sshd[4490]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=72.69.106.21 Feb 4 18:17:55 srv01 sshd[4490]: Invalid user gary from 72.69.106.21 port 42002 Feb 4 18:17:56 srv01 sshd[4490]: Failed password for invalid user gary from 72.69.106.21 port 42002 ssh2 Feb 4 18:20:52 srv01 sshd[4782]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=72.69.106.21 user=root Feb 4 18:20:54 srv01 sshd[4782]: Failed password for root from 72.69.106.21 port 60881 ssh2 ... |
2020-02-05 02:29:36 |