69.94.143.10 - IPInfo

Basic Info

City: Sacramento

Region: California

Country: United States

Internet Service Provider: Lanset America Corporation

Hostname: unknown

Organization: Lanset America Corporation

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	TCP src-port=42619 dst-port=25 zen-spamhaus spam-sorbs unsubscore (320)	2019-06-21 23:19:17

Comments on same subnet:

IP	Type	Details	Datetime
69.94.143.223	attack	TCP src-port=38654 dst-port=25 Listed on dnsbl-sorbs spamcop zen-spamhaus (91)	2020-06-12 01:45:13
69.94.143.9	attackspambots	Email spam message	2020-06-08 02:03:39
69.94.143.16	attackspambots	spam	2020-06-04 23:20:28
69.94.143.219	attack	TCP src-port=48845 dst-port=25 Listed on spamcop zen-spamhaus spam-sorbs (109)	2020-05-27 06:36:23
69.94.143.254	attack	May 26 06:56:25 mail postfix/smtpd[10351]: connect from tomatoes.nabhaa.com[69.94.143.254] May x@x May x@x May x@x May 26 06:56:26 mail postfix/smtpd[10351]: disconnect from tomatoes.nabhaa.com[69.94.143.254] ehlo=1 mail=1 rcpt=0/1 data=0/1 quhostname=1 commands=3/5 May 26 07:09:40 mail postfix/smtpd[21060]: connect from tomatoes.nabhaa.com[69.94.143.254] May x@x May x@x May x@x May 26 07:09:41 mail postfix/smtpd[21060]: disconnect from tomatoes.nabhaa.com[69.94.143.254] ehlo=1 mail=1 rcpt=0/1 data=0/1 quhostname=1 commands=3/5 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=69.94.143.254	2020-05-26 22:41:12
69.94.143.13	attackbotsspam	May 22 06:24:59 web01.agentur-b-2.de postfix/smtpd[1372004]: NOQUEUE: reject: RCPT from unknown[69.94.143.13]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo= May 22 06:25:09 web01.agentur-b-2.de postfix/smtpd[1374519]: NOQUEUE: reject: RCPT from unknown[69.94.143.13]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo= May 22 06:25:29 web01.agentur-b-2.de postfix/smtpd[1375394]: NOQUEUE: reject: RCPT from unknown[69.94.143.13]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo= May 22 06:33:51 web01.agentur-b-2.de postfix/smtpd[1376036]: NOQUEUE: reject: RCPT from unknown[69.94.143.13]: 45	2020-05-22 13:09:18
69.94.143.19	attackbotsspam	May 13 05:52:03 mail.srvfarm.net postfix/smtpd[358053]: NOQUEUE: reject: RCPT from unknown[69.94.143.19]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= May 13 05:52:11 mail.srvfarm.net postfix/smtpd[360934]: NOQUEUE: reject: RCPT from unknown[69.94.143.19]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= May 13 05:57:53 mail.srvfarm.net postfix/smtpd[357734]: NOQUEUE: reject: RCPT from unknown[69.94.143.19]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= May 13 05:59:23 mail.srvfarm.net postfix/smtpd[358049]: NOQUEUE: reject: RCPT from unknown[69.94.	2020-05-13 18:15:37
69.94.143.9	attackspam	Apr 3 05:47:25 exim[15444]: [1\51] 1jKDIi-000416-K9 H=gamy.nabhaa.com (gamy.redfesse.com) [69.94.143.9] F= rejected after DATA: This message scored 103.6 spam points.	2020-04-03 18:45:22
69.94.143.24	attack	SpamScore above: 10.0	2020-03-17 02:57:41
69.94.143.13	attack	Jan 12 06:57:09 grey postfix/smtpd\[17134\]: NOQUEUE: reject: RCPT from chop.nabhaa.com\[69.94.143.13\]: 554 5.7.1 Service unavailable\; Client host \[69.94.143.13\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[69.94.143.13\]\; from=\ to=\ proto=ESMTP helo=\ ...	2020-01-12 16:36:53
69.94.143.11	attackspambots	Jan 10 14:56:58 grey postfix/smtpd\[20773\]: NOQUEUE: reject: RCPT from rhyme.nabhaa.com\[69.94.143.11\]: 554 5.7.1 Service unavailable\; Client host \[69.94.143.11\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[69.94.143.11\]\; from=\ to=\ proto=ESMTP helo=\ ...	2020-01-11 04:27:37
69.94.143.199	attackspambots	Dec 27 16:47:22 grey postfix/smtpd\[24120\]: NOQUEUE: reject: RCPT from scarecrow.nabhaa.com\[69.94.143.199\]: 554 5.7.1 Service unavailable\; Client host \[69.94.143.199\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[69.94.143.199\]\; from=\ to=\ proto=ESMTP helo=\ ...	2019-12-28 02:47:09
69.94.143.17	attackspambots	Dec 26 16:48:11 grey postfix/smtpd\[2043\]: NOQUEUE: reject: RCPT from tatter.nabhaa.com\[69.94.143.17\]: 554 5.7.1 Service unavailable\; Client host \[69.94.143.17\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[69.94.143.17\]\; from=\ to=\ proto=ESMTP helo=\ ...	2019-12-27 05:21:44
69.94.143.194	attackbots	Dec 19 16:37:32 grey postfix/smtpd\[23251\]: NOQUEUE: reject: RCPT from stile.nabhaa.com\[69.94.143.194\]: 554 5.7.1 Service unavailable\; Client host \[69.94.143.194\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[69.94.143.194\]\; from=\ to=\ proto=ESMTP helo=\ ...	2019-12-20 02:32:46
69.94.143.12	attackspam	2019-12-14T15:42:32.103685stark.klein-stark.info postfix/smtpd\[21510\]: NOQUEUE: reject: RCPT from tasteful.nabhaa.com\[69.94.143.12\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\ ...	2019-12-15 02:56:00

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 69.94.143.10
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11703
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;69.94.143.10.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019062100 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Fri Jun 21 23:18:55 CST 2019
;; MSG SIZE  rcvd: 116

Host info

10.143.94.69.in-addr.arpa domain name pointer cofferdams.healthlite.co.

Nslookup info:

Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
10.143.94.69.in-addr.arpa	name = cofferdams.healthlite.co.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
172.81.235.131	attackbotsspam	Aug 24 14:50:47 lukav-desktop sshd\[10404\]: Invalid user usuario from 172.81.235.131 Aug 24 14:50:47 lukav-desktop sshd\[10404\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.81.235.131 Aug 24 14:50:49 lukav-desktop sshd\[10404\]: Failed password for invalid user usuario from 172.81.235.131 port 38840 ssh2 Aug 24 14:53:50 lukav-desktop sshd\[10420\]: Invalid user lxc from 172.81.235.131 Aug 24 14:53:50 lukav-desktop sshd\[10420\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.81.235.131	2020-08-24 20:00:55
122.114.183.18	attackspambots	Invalid user tracy from 122.114.183.18 port 43326	2020-08-24 20:02:24
45.176.208.50	attack	2020-08-24T14:07:26.932671galaxy.wi.uni-potsdam.de sshd[32257]: Invalid user ngdc from 45.176.208.50 port 56355 2020-08-24T14:07:26.934544galaxy.wi.uni-potsdam.de sshd[32257]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.176.208.50 2020-08-24T14:07:26.932671galaxy.wi.uni-potsdam.de sshd[32257]: Invalid user ngdc from 45.176.208.50 port 56355 2020-08-24T14:07:29.198424galaxy.wi.uni-potsdam.de sshd[32257]: Failed password for invalid user ngdc from 45.176.208.50 port 56355 ssh2 2020-08-24T14:09:10.799688galaxy.wi.uni-potsdam.de sshd[32457]: Invalid user test1 from 45.176.208.50 port 40021 2020-08-24T14:09:10.804320galaxy.wi.uni-potsdam.de sshd[32457]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.176.208.50 2020-08-24T14:09:10.799688galaxy.wi.uni-potsdam.de sshd[32457]: Invalid user test1 from 45.176.208.50 port 40021 2020-08-24T14:09:12.681475galaxy.wi.uni-potsdam.de sshd[32457]: Failed password f ...	2020-08-24 20:11:49
199.30.185.127	attack	tcp 37777	2020-08-24 20:35:05
89.248.174.3	attack	Port Scan ...	2020-08-24 20:28:48
206.189.178.171	attack	Aug 24 13:51:10 home sshd[7412]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.178.171 Aug 24 13:51:10 home sshd[7412]: Invalid user jessie from 206.189.178.171 port 58898 Aug 24 13:51:12 home sshd[7412]: Failed password for invalid user jessie from 206.189.178.171 port 58898 ssh2 Aug 24 13:53:39 home sshd[8088]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.178.171 user=root Aug 24 13:53:41 home sshd[8088]: Failed password for root from 206.189.178.171 port 43524 ssh2 ...	2020-08-24 20:08:20
14.169.119.176	attackbotsspam	Unauthorized IMAP connection attempt	2020-08-24 20:32:10
93.149.214.234	attackbots	DATE:2020-08-24 13:53:21, IP:93.149.214.234, PORT:telnet - Telnet brute force auth on a honeypot server (epe-dc)	2020-08-24 20:25:09
87.246.7.11	attackspambots	MAIL: User Login Brute Force Attempt	2020-08-24 20:30:00
240f:64:6939:1:999c:f97a:b7ba:3e3f	attackbotsspam	Wordpress attack	2020-08-24 20:31:11
112.21.188.235	attackbotsspam	Invalid user virus from 112.21.188.235 port 58884	2020-08-24 20:12:57
85.209.0.131	attackspam	[portscan] tcp/22 [SSH] [scan/connect: 4 time(s)] in blocklist.de:'listed [unkn]' *(RWIN=65535)(08241057)	2020-08-24 19:51:32
37.193.123.110	attack	Port scan: Attack repeated for 24 hours	2020-08-24 20:11:28
79.136.70.159	attackbots	Aug 24 13:53:37 vps647732 sshd[26899]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.136.70.159 Aug 24 13:53:39 vps647732 sshd[26899]: Failed password for invalid user tinashe from 79.136.70.159 port 36152 ssh2 ...	2020-08-24 20:10:27
122.224.237.234	attackspambots	2020-08-24T11:34:27.788330shield sshd\[30785\]: Invalid user scott from 122.224.237.234 port 56657 2020-08-24T11:34:27.810645shield sshd\[30785\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.224.237.234 2020-08-24T11:34:29.061230shield sshd\[30785\]: Failed password for invalid user scott from 122.224.237.234 port 56657 ssh2 2020-08-24T11:39:41.992318shield sshd\[31370\]: Invalid user oracle from 122.224.237.234 port 57738 2020-08-24T11:39:42.005904shield sshd\[31370\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.224.237.234	2020-08-24 19:52:50

Recently Reported IPs

80.103.28.225	24.86.140.6	152.58.197.39	80.55.122.160
58.13.242.43	34.203.30.83	109.239.20.78	186.238.208.244
93.4.33.61	204.92.17.140	58.22.194.44	202.202.126.237
196.45.208.138	94.205.161.90	167.240.1.248	196.54.65.166
193.48.61.38	114.233.106.171	8.53.70.157	34.94.56.10