City: Genoa
Region: Liguria
Country: Italy
Internet Service Provider: unknown
Hostname: unknown
Organization: Leonardo S.p.A.
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 94.127.81.242
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 39046
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;94.127.81.242. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019062400 1800 900 604800 86400
;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Tue Jun 25 00:31:33 CST 2019
;; MSG SIZE rcvd: 117Host 242.81.127.94.in-addr.arpa. not found: 3(NXDOMAIN)Server: 67.207.67.2
Address: 67.207.67.2#53
** server can't find 242.81.127.94.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 81.22.45.219 | attackspam | 08/23/2019-19:47:33.893791 81.22.45.219 Protocol: 6 ET SCAN NMAP -sS window 1024 |
2019-08-24 08:02:57 |
| 176.221.122.246 | attackspambots | 2019-08-23 17:02:06 H=(host-176-221-122-246.dynamic.mm.pl) [176.221.122.246]:20410 I=[10.100.18.25]:25 F= |
2019-08-24 07:45:20 |
| 117.85.152.247 | attack | 3389/tcp 3389/tcp [2019-08-23]2pkt |
2019-08-24 07:40:53 |
| 62.210.149.30 | attackspambots | \[2019-08-23 19:04:18\] SECURITY\[1837\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-08-23T19:04:18.303-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="601179312342186069",SessionID="0x7f7b300ad968",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/62.210.149.30/58798",ACLName="no_extension_match" \[2019-08-23 19:04:34\] SECURITY\[1837\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-08-23T19:04:34.083-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="601179412342186069",SessionID="0x7f7b30000978",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/62.210.149.30/59087",ACLName="no_extension_match" \[2019-08-23 19:04:50\] SECURITY\[1837\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-08-23T19:04:50.641-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="601179512342186069",SessionID="0x7f7b300ad968",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/62.210.149.30/61135",ACLNam |
2019-08-24 07:23:44 |
| 114.44.144.220 | attack | : |
2019-08-24 08:01:21 |
| 200.44.254.34 | attackbots | 23/tcp [2019-08-23]1pkt |
2019-08-24 07:55:39 |
| 198.46.240.155 | attack | SSH bruteforce |
2019-08-24 07:31:23 |
| 23.100.125.65 | attackspam | Aug 23 21:16:23 ms-srv sshd[29994]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.100.125.65 Aug 23 21:16:25 ms-srv sshd[29994]: Failed password for invalid user sports from 23.100.125.65 port 60002 ssh2 |
2019-08-24 07:51:07 |
| 89.207.90.131 | attack | [portscan] Port scan |
2019-08-24 07:19:24 |
| 77.87.103.182 | attackbotsspam | 445/tcp [2019-08-23]1pkt |
2019-08-24 07:44:54 |
| 93.168.204.134 | attack | 2019-08-23 17:26:50 unexpected disconnection while reading SMTP command from ([93.168.204.134]) [93.168.204.134]:63768 I=[10.100.18.25]:25 (error: Connection reset by peer) 2019-08-23 17:27:14 unexpected disconnection while reading SMTP command from ([93.168.204.134]) [93.168.204.134]:62410 I=[10.100.18.25]:25 (error: Connection reset by peer) 2019-08-23 17:28:29 unexpected disconnection while reading SMTP command from ([93.168.204.134]) [93.168.204.134]:19297 I=[10.100.18.25]:25 (error: Connection reset by peer) ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=93.168.204.134 |
2019-08-24 07:22:55 |
| 95.58.194.143 | attackbotsspam | Aug 23 08:42:08 web9 sshd\[15816\]: Invalid user admin from 95.58.194.143 Aug 23 08:42:08 web9 sshd\[15816\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.58.194.143 Aug 23 08:42:11 web9 sshd\[15816\]: Failed password for invalid user admin from 95.58.194.143 port 42102 ssh2 Aug 23 08:46:54 web9 sshd\[16806\]: Invalid user cniac from 95.58.194.143 Aug 23 08:46:54 web9 sshd\[16806\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.58.194.143 |
2019-08-24 07:48:31 |
| 206.189.65.11 | attackspambots | Repeated brute force against a port |
2019-08-24 07:49:30 |
| 193.9.27.175 | attackspambots | Automatic report - Banned IP Access |
2019-08-24 07:42:53 |
| 54.39.151.22 | attackbots | Aug 24 00:27:52 h2177944 sshd\[4404\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.39.151.22 Aug 24 00:27:54 h2177944 sshd\[4404\]: Failed password for invalid user merlin from 54.39.151.22 port 42072 ssh2 Aug 24 01:28:22 h2177944 sshd\[7272\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.39.151.22 user=root Aug 24 01:28:24 h2177944 sshd\[7272\]: Failed password for root from 54.39.151.22 port 45378 ssh2 ... |
2019-08-24 07:54:12 |