69.94.142.250 - IPInfo

Basic Info

City: Sacramento

Region: California

Country: United States

Internet Service Provider: Lanset America Corporation

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspam	2020-06-01 15:08:02.775949-0500 localhost smtpd[98574]: NOQUEUE: reject: RCPT from unknown[69.94.142.250]: 554 5.7.1 Service unavailable; Client host [69.94.142.250] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo=	2020-06-02 06:33:50

Type

Details

Datetime

attackspam

2020-06-01 15:08:02.775949-0500  localhost smtpd[98574]: NOQUEUE: reject: RCPT from unknown[69.94.142.250]: 554 5.7.1 Service unavailable; Client host [69.94.142.250] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo=

2020-06-02 06:33:50

Comments on same subnet:

IP	Type	Details	Datetime
69.94.142.217	attack	Spam	2020-05-28 05:56:06
69.94.142.195	attackbotsspam	Brute force SMTP login attempts.	2020-01-08 17:30:52
69.94.142.191	attack	SASL Brute Force	2020-01-03 15:01:30
69.94.142.203	attackspambots	Spam	2019-10-25 07:15:43
69.94.142.179	attackbots	Postfix RBL failed	2019-07-10 11:07:40

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 69.94.142.250
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 27750
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;69.94.142.250.			IN	A

;; AUTHORITY SECTION:
.			373	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020060101 1800 900 604800 86400

;; Query time: 56 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jun 02 06:33:47 CST 2020
;; MSG SIZE  rcvd: 117

Host info

250.142.94.69.in-addr.arpa domain name pointer 69-94-142-250.nca.datanoc.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
250.142.94.69.in-addr.arpa	name = 69-94-142-250.nca.datanoc.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
172.105.93.203	attack	Port Scan: UDP/389	2019-08-14 13:36:35
62.210.167.202	attackspam	\[2019-08-14 01:17:48\] SECURITY\[2326\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-08-14T01:17:48.910-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="946917193090102",SessionID="0x7ff4d0404308",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/62.210.167.202/64700",ACLName="no_extension_match" \[2019-08-14 01:18:00\] SECURITY\[2326\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-08-14T01:18:00.128-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="11414242671090",SessionID="0x7ff4d07952f8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/62.210.167.202/54592",ACLName="no_extension_match" \[2019-08-14 01:18:28\] SECURITY\[2326\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-08-14T01:18:28.185-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="01177716024836920",SessionID="0x7ff4d07e79a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/62.210.167.202/62577",ACLName="no	2019-08-14 13:28:16
49.232.37.191	attack	Aug 13 23:44:09 vps200512 sshd\[17639\]: Invalid user webplace from 49.232.37.191 Aug 13 23:44:09 vps200512 sshd\[17639\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.232.37.191 Aug 13 23:44:11 vps200512 sshd\[17639\]: Failed password for invalid user webplace from 49.232.37.191 port 51524 ssh2 Aug 13 23:49:16 vps200512 sshd\[17737\]: Invalid user guest123 from 49.232.37.191 Aug 13 23:49:16 vps200512 sshd\[17737\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.232.37.191	2019-08-14 12:51:12
93.113.134.133	attackbots	(Aug 14) LEN=40 TTL=246 ID=46204 DF TCP DPT=23 WINDOW=14600 SYN (Aug 14) LEN=40 TTL=246 ID=12530 DF TCP DPT=23 WINDOW=14600 SYN (Aug 14) LEN=40 TTL=246 ID=32471 DF TCP DPT=23 WINDOW=14600 SYN (Aug 13) LEN=40 TTL=246 ID=21372 DF TCP DPT=23 WINDOW=14600 SYN (Aug 13) LEN=40 TTL=246 ID=61237 DF TCP DPT=23 WINDOW=14600 SYN (Aug 13) LEN=40 TTL=246 ID=25305 DF TCP DPT=23 WINDOW=14600 SYN (Aug 13) LEN=40 TTL=246 ID=5096 DF TCP DPT=23 WINDOW=14600 SYN (Aug 13) LEN=40 TTL=246 ID=39290 DF TCP DPT=23 WINDOW=14600 SYN (Aug 13) LEN=40 TTL=246 ID=39834 DF TCP DPT=23 WINDOW=14600 SYN (Aug 13) LEN=40 TTL=246 ID=42381 DF TCP DPT=23 WINDOW=14600 SYN (Aug 13) LEN=40 TTL=246 ID=44683 DF TCP DPT=23 WINDOW=14600 SYN (Aug 13) LEN=40 TTL=246 ID=60355 DF TCP DPT=23 WINDOW=14600 SYN (Aug 13) LEN=40 TTL=246 ID=1352 DF TCP DPT=23 WINDOW=14600 SYN (Aug 13) LEN=40 TTL=246 ID=50575 DF TCP DPT=23 WINDOW=14600 SYN (Aug 13) LEN=40 TTL=246 ID=45382 DF TCP DPT=23 WINDOW=14600 SY...	2019-08-14 13:07:38
51.77.146.136	attack	Invalid user bandit from 51.77.146.136 port 52026	2019-08-14 13:05:41
199.243.155.99	attackspambots	Invalid user web1 from 199.243.155.99 port 33840	2019-08-14 13:06:24
159.65.242.16	attack	Invalid user user1 from 159.65.242.16 port 52670	2019-08-14 13:00:10
185.85.36.34	attack	Aug 14 00:38:47 vps200512 sshd\[18726\]: Invalid user webuser from 185.85.36.34 Aug 14 00:38:47 vps200512 sshd\[18726\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.85.36.34 Aug 14 00:38:49 vps200512 sshd\[18726\]: Failed password for invalid user webuser from 185.85.36.34 port 35295 ssh2 Aug 14 00:44:00 vps200512 sshd\[18887\]: Invalid user admin from 185.85.36.34 Aug 14 00:44:00 vps200512 sshd\[18887\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.85.36.34	2019-08-14 12:44:51
138.68.48.118	attackbotsspam	Aug 14 07:31:10 yabzik sshd[1630]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.48.118 Aug 14 07:31:12 yabzik sshd[1630]: Failed password for invalid user albert from 138.68.48.118 port 47916 ssh2 Aug 14 07:35:58 yabzik sshd[3678]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.48.118	2019-08-14 12:47:19
185.100.87.246	attackspambots	Unauthorized connection attempt from IP address 185.100.87.246 on Port 143(IMAP)	2019-08-14 13:22:52
159.89.38.26	attackbots	Aug 14 07:10:02 localhost sshd\[26525\]: Invalid user Cisco from 159.89.38.26 port 37038 Aug 14 07:10:02 localhost sshd\[26525\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.38.26 Aug 14 07:10:04 localhost sshd\[26525\]: Failed password for invalid user Cisco from 159.89.38.26 port 37038 ssh2	2019-08-14 13:12:22
14.170.19.52	attackbotsspam	Unauthorized connection attempt from IP address 14.170.19.52 on Port 445(SMB)	2019-08-14 13:42:57
206.81.10.230	attackspambots	Aug 14 04:42:50 XXX sshd[41902]: Invalid user temp1 from 206.81.10.230 port 59384	2019-08-14 13:23:32
34.73.39.215	attackbots	Aug 14 06:19:24 XXX sshd[45002]: Invalid user alex from 34.73.39.215 port 40922	2019-08-14 13:51:12
46.161.60.192	attack	B: zzZZzz blocked content access	2019-08-14 13:44:37

Recently Reported IPs

114.92.54.206	191.233.170.174	72.235.63.247	190.144.181.50
111.221.203.13	140.148.80.85	83.102.181.55	79.34.176.73
139.127.98.228	137.132.195.119	133.44.20.108	73.102.172.128
61.123.71.34	61.206.239.49	47.179.132.70	78.80.226.148
145.8.77.206	81.225.204.71	92.65.65.239	80.145.139.48