City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
        ; <<>> DiG 9.10.3-P4-Ubuntu <<>> 13.204.43.114
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 43222
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;13.204.43.114.			IN	A
;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025012700 1800 900 604800 86400
;; Query time: 9 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jan 27 19:35:05 CST 2025
;; MSG SIZE  rcvd: 106
        114.43.204.13.in-addr.arpa domain name pointer ec2-13-204-43-114.ap-south-1.compute.amazonaws.com.
        Server:		183.60.83.19
Address:	183.60.83.19#53
Non-authoritative answer:
114.43.204.13.in-addr.arpa	name = ec2-13-204-43-114.ap-south-1.compute.amazonaws.com.
Authoritative answers can be found from:
        | IP | Type | Details | Datetime | 
|---|---|---|---|
| 198.108.66.236 | attack | 5903/tcp 9200/tcp 16993/tcp... [2019-12-14/2020-02-11]10pkt,9pt.(tcp)  | 
                    2020-02-12 06:24:35 | 
| 189.63.221.80 | attackbots | DATE:2020-02-11 19:01:33, IP:189.63.221.80, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc)  | 
                    2020-02-12 06:04:48 | 
| 39.108.123.4 | attackspambots | Automatic report - XMLRPC Attack  | 
                    2020-02-12 06:03:15 | 
| 180.241.44.218 | attack | 1581428341 - 02/11/2020 14:39:01 Host: 180.241.44.218/180.241.44.218 Port: 445 TCP Blocked  | 
                    2020-02-12 05:46:02 | 
| 154.8.209.24 | attack | Feb 11 07:15:45 auw2 sshd\[26277\]: Invalid user qdt from 154.8.209.24 Feb 11 07:15:45 auw2 sshd\[26277\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.8.209.24 Feb 11 07:15:47 auw2 sshd\[26277\]: Failed password for invalid user qdt from 154.8.209.24 port 51756 ssh2 Feb 11 07:19:52 auw2 sshd\[26629\]: Invalid user fru from 154.8.209.24 Feb 11 07:19:52 auw2 sshd\[26629\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.8.209.24  | 
                    2020-02-12 06:25:23 | 
| 170.106.36.178 | attackbotsspam | 161/udp 5803/tcp 32753/udp... [2019-12-18/2020-02-11]5pkt,3pt.(tcp),2pt.(udp)  | 
                    2020-02-12 05:55:01 | 
| 203.195.159.135 | attackbotsspam | SSH bruteforce  | 
                    2020-02-12 05:54:22 | 
| 94.102.56.215 | attack | 94.102.56.215 was recorded 29 times by 13 hosts attempting to connect to the following ports: 4070,4099,4353. Incident counter (4h, 24h, all-time): 29, 161, 3466  | 
                    2020-02-12 05:48:59 | 
| 59.115.228.93 | attackspam | Port probing on unauthorized port 23  | 
                    2020-02-12 05:43:40 | 
| 106.12.192.129 | attackspam | Feb 11 05:48:18 hpm sshd\[6645\]: Invalid user wwd from 106.12.192.129 Feb 11 05:48:18 hpm sshd\[6645\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.192.129 Feb 11 05:48:20 hpm sshd\[6645\]: Failed password for invalid user wwd from 106.12.192.129 port 38584 ssh2 Feb 11 05:52:10 hpm sshd\[7017\]: Invalid user tmc from 106.12.192.129 Feb 11 05:52:10 hpm sshd\[7017\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.192.129  | 
                    2020-02-12 06:10:38 | 
| 198.108.67.110 | attackbots | 23184/tcp 8037/tcp 86/tcp... [2019-12-12/2020-02-11]101pkt,97pt.(tcp)  | 
                    2020-02-12 05:44:30 | 
| 156.222.216.52 | attackbots | 20/2/11@08:39:14: FAIL: Alarm-Network address from=156.222.216.52 ...  | 
                    2020-02-12 05:45:35 | 
| 187.17.180.17 | attackbots | Automatic report - Port Scan Attack  | 
                    2020-02-12 06:25:02 | 
| 82.67.110.93 | attackspambots | Invalid user mvf from 82.67.110.93 port 53602  | 
                    2020-02-12 06:21:50 | 
| 156.222.151.213 | attackbotsspam | Unauthorized connection attempt from IP address 156.222.151.213 on Port 445(SMB)  | 
                    2020-02-12 05:55:40 |