City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 69.243.34.53
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 28753
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;69.243.34.53. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021100 1800 900 604800 86400
;; Query time: 12 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 11 17:54:01 CST 2025
;; MSG SIZE rcvd: 10553.34.243.69.in-addr.arpa domain name pointer c-69-243-34-53.hsd1.va.comcast.net.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
53.34.243.69.in-addr.arpa name = c-69-243-34-53.hsd1.va.comcast.net.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 157.230.88.60 | attackspam | Jul 11 21:15:40 mailserver sshd[7858]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.88.60 user=r.r Jul 11 21:15:42 mailserver sshd[7858]: Failed password for r.r from 157.230.88.60 port 46830 ssh2 Jul 11 21:15:42 mailserver sshd[7858]: Received disconnect from 157.230.88.60 port 46830:11: Bye Bye [preauth] Jul 11 21:15:42 mailserver sshd[7858]: Disconnected from 157.230.88.60 port 46830 [preauth] Jul 11 21:17:13 mailserver sshd[7965]: Invalid user bay from 157.230.88.60 Jul 11 21:17:13 mailserver sshd[7965]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.88.60 Jul 11 21:17:15 mailserver sshd[7965]: Failed password for invalid user bay from 157.230.88.60 port 37788 ssh2 Jul 11 21:17:15 mailserver sshd[7965]: Received disconnect from 157.230.88.60 port 37788:11: Bye Bye [preauth] Jul 11 21:17:15 mailserver sshd[7965]: Disconnected from 157.230.88.60 port 37788 [preauth] Ju........ ------------------------------- |
2019-07-12 08:27:34 |
| 185.178.84.126 | attackbots | scan r |
2019-07-12 08:16:08 |
| 152.168.137.2 | attackbotsspam | Jul 12 02:13:05 nextcloud sshd\[2836\]: Invalid user group1 from 152.168.137.2 Jul 12 02:13:05 nextcloud sshd\[2836\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.168.137.2 Jul 12 02:13:07 nextcloud sshd\[2836\]: Failed password for invalid user group1 from 152.168.137.2 port 34352 ssh2 ... |
2019-07-12 08:17:50 |
| 37.61.202.143 | attackbotsspam | Jul 11 21:49:37 nxxxxxxx0 sshd[12471]: Failed password for r.r from 37.61.202.143 port 53194 ssh2 Jul 11 21:49:37 nxxxxxxx0 sshd[12471]: Received disconnect from 37.61.202.143: 11: Bye Bye [preauth] Jul 11 21:52:49 nxxxxxxx0 sshd[12653]: Invalid user tomcat8 from 37.61.202.143 Jul 11 21:52:50 nxxxxxxx0 sshd[12653]: Failed password for invalid user tomcat8 from 37.61.202.143 port 44025 ssh2 Jul 11 21:52:50 nxxxxxxx0 sshd[12653]: Received disconnect from 37.61.202.143: 11: Bye Bye [preauth] Jul 11 21:54:12 nxxxxxxx0 sshd[12762]: Invalid user mauricio from 37.61.202.143 Jul 11 21:54:14 nxxxxxxx0 sshd[12762]: Failed password for invalid user mauricio from 37.61.202.143 port 52663 ssh2 Jul 11 21:54:14 nxxxxxxx0 sshd[12762]: Received disconnect from 37.61.202.143: 11: Bye Bye [preauth] Jul 11 21:55:34 nxxxxxxx0 sshd[12923]: Invalid user tommy from 37.61.202.143 Jul 11 21:55:36 nxxxxxxx0 sshd[12923]: Failed password for invalid user tommy from 37.61.202.143 port 33067 ssh2 Jul........ ------------------------------- |
2019-07-12 08:33:13 |
| 157.230.175.60 | attackbots | Lines containing failures of 157.230.175.60 auth.log:Jul 12 01:03:08 omfg sshd[9608]: Connection from 157.230.175.60 port 48236 on 78.46.60.16 port 22 auth.log:Jul 12 01:03:08 omfg sshd[9608]: Did not receive identification string from 157.230.175.60 auth.log:Jul 12 01:03:08 omfg sshd[9609]: Connection from 157.230.175.60 port 53308 on 78.46.60.42 port 22 auth.log:Jul 12 01:03:08 omfg sshd[9609]: Did not receive identification string from 157.230.175.60 auth.log:Jul 12 01:03:08 omfg sshd[9610]: Connection from 157.230.175.60 port 54934 on 78.46.60.40 port 22 auth.log:Jul 12 01:03:08 omfg sshd[9610]: Did not receive identification string from 157.230.175.60 auth.log:Jul 12 01:03:08 omfg sshd[9611]: Connection from 157.230.175.60 port 53002 on 78.46.60.41 port 22 auth.log:Jul 12 01:03:08 omfg sshd[9611]: Did not receive identification string from 157.230.175.60 auth.log:Jul 12 01:03:08 omfg sshd[9612]: Connection from 157.230.175.60 port 59140 on 78.46.60.50 port 22 auth.l........ ------------------------------ |
2019-07-12 08:27:12 |
| 211.198.228.123 | attackbots | Jul 11 22:23:56 plesk sshd[17910]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.198.228.123 user=r.r Jul 11 22:23:58 plesk sshd[17910]: Failed password for r.r from 211.198.228.123 port 48943 ssh2 Jul 11 22:23:58 plesk sshd[17910]: Received disconnect from 211.198.228.123: 11: Bye Bye [preauth] Jul 11 22:24:01 plesk sshd[17912]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.198.228.123 user=r.r Jul 11 22:24:02 plesk sshd[17912]: Failed password for r.r from 211.198.228.123 port 50220 ssh2 Jul 11 22:24:03 plesk sshd[17912]: Received disconnect from 211.198.228.123: 11: Bye Bye [preauth] Jul 11 22:24:05 plesk sshd[17914]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.198.228.123 user=r.r Jul 11 22:24:07 plesk sshd[17914]: Failed password for r.r from 211.198.228.123 port 51874 ssh2 Jul 11 22:24:07 plesk sshd[17914]: Received disconn........ ------------------------------- |
2019-07-12 08:36:19 |
| 164.52.24.164 | attackspam | Jul 12 02:06:47 vmi181237 sshd\[10171\]: refused connect from 164.52.24.164 \(164.52.24.164\) Jul 12 02:07:08 vmi181237 sshd\[10179\]: refused connect from 164.52.24.164 \(164.52.24.164\) Jul 12 02:07:13 vmi181237 sshd\[10187\]: refused connect from 164.52.24.164 \(164.52.24.164\) Jul 12 02:07:24 vmi181237 sshd\[10202\]: refused connect from 164.52.24.164 \(164.52.24.164\) Jul 12 02:07:39 vmi181237 sshd\[10209\]: refused connect from 164.52.24.164 \(164.52.24.164\) |
2019-07-12 08:15:08 |
| 175.6.77.235 | attackbots | Jul 12 02:00:10 SilenceServices sshd[15110]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.6.77.235 Jul 12 02:00:12 SilenceServices sshd[15110]: Failed password for invalid user xk from 175.6.77.235 port 36890 ssh2 Jul 12 02:06:17 SilenceServices sshd[19165]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.6.77.235 |
2019-07-12 08:54:44 |
| 223.87.178.246 | attackspambots | Jul 12 02:07:29 localhost sshd\[30103\]: Invalid user tina from 223.87.178.246 port 28442 Jul 12 02:07:29 localhost sshd\[30103\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.87.178.246 Jul 12 02:07:30 localhost sshd\[30103\]: Failed password for invalid user tina from 223.87.178.246 port 28442 ssh2 |
2019-07-12 08:19:22 |
| 51.15.107.220 | attackspam | Jul 12 02:09:07 core01 sshd\[20212\]: Invalid user builduser from 51.15.107.220 port 60034 Jul 12 02:09:07 core01 sshd\[20212\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.15.107.220 ... |
2019-07-12 08:18:52 |
| 5.196.75.178 | attack | Jul 11 19:26:28 aat-srv002 sshd[23608]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.196.75.178 Jul 11 19:26:30 aat-srv002 sshd[23608]: Failed password for invalid user web5 from 5.196.75.178 port 37476 ssh2 Jul 11 19:33:05 aat-srv002 sshd[23822]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.196.75.178 Jul 11 19:33:07 aat-srv002 sshd[23822]: Failed password for invalid user sebastian from 5.196.75.178 port 42318 ssh2 ... |
2019-07-12 08:45:42 |
| 49.89.189.22 | attackspambots | 2019-07-11T20:05:51.958755stt-1.[munged] kernel: [6921572.996593] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:97:36:58:84:78:ac:57:aa:c1:08:00 SRC=49.89.189.22 DST=[mungedIP1] LEN=40 TOS=0x00 PREC=0x00 TTL=48 ID=55294 PROTO=TCP SPT=51752 DPT=23 WINDOW=46168 RES=0x00 SYN URGP=0 2019-07-11T20:06:27.566595stt-1.[munged] kernel: [6921608.604312] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:97:36:58:84:78:ac:57:aa:c1:08:00 SRC=49.89.189.22 DST=[mungedIP1] LEN=40 TOS=0x00 PREC=0x00 TTL=48 ID=55294 PROTO=TCP SPT=51752 DPT=23 WINDOW=46168 RES=0x00 SYN URGP=0 2019-07-11T20:06:29.439267stt-1.[munged] kernel: [6921610.476969] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:97:36:58:84:78:ac:57:aa:c1:08:00 SRC=49.89.189.22 DST=[mungedIP1] LEN=40 TOS=0x00 PREC=0x00 TTL=48 ID=55294 PROTO=TCP SPT=51752 DPT=23 WINDOW=46168 RES=0x00 SYN URGP=0 |
2019-07-12 08:47:29 |
| 130.162.74.85 | attackspam | Jul 12 00:31:23 animalibera sshd[23829]: Invalid user update from 130.162.74.85 port 34750 ... |
2019-07-12 08:35:55 |
| 152.242.36.203 | attackspambots | 2019-07-12T07:06:32.485704enmeeting.mahidol.ac.th sshd\[25518\]: User root from 152.242.36.203 not allowed because not listed in AllowUsers 2019-07-12T07:06:33.770255enmeeting.mahidol.ac.th sshd\[25518\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.242.36.203 user=root 2019-07-12T07:06:35.802359enmeeting.mahidol.ac.th sshd\[25518\]: Failed password for invalid user root from 152.242.36.203 port 3837 ssh2 ... |
2019-07-12 08:44:13 |
| 43.252.144.254 | attackspambots | port scan and connect, tcp 80 (http) |
2019-07-12 08:56:26 |