City: unknown
Region: unknown
Country: None
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 13.212.45.68
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 17640
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;13.212.45.68. IN A
;; AUTHORITY SECTION:
. 311 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022030802 1800 900 604800 86400
;; Query time: 68 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 04:55:49 CST 2022
;; MSG SIZE rcvd: 10568.45.212.13.in-addr.arpa domain name pointer ec2-13-212-45-68.ap-southeast-1.compute.amazonaws.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
68.45.212.13.in-addr.arpa name = ec2-13-212-45-68.ap-southeast-1.compute.amazonaws.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 155.4.141.88 | attack | Honeypot attack, port: 5555, PTR: h-141-88.A197.priv.bahnhof.se. |
2020-02-05 06:19:03 |
| 199.249.230.115 | attack | 02/04/2020-21:18:46.603188 199.249.230.115 Protocol: 6 ET TOR Known Tor Exit Node Traffic group 47 |
2020-02-05 06:47:43 |
| 112.85.42.174 | attack | Feb 5 03:28:29 gw1 sshd[5230]: Failed password for root from 112.85.42.174 port 15823 ssh2 Feb 5 03:28:42 gw1 sshd[5230]: error: maximum authentication attempts exceeded for root from 112.85.42.174 port 15823 ssh2 [preauth] ... |
2020-02-05 06:30:47 |
| 132.145.196.193 | attackbots | Unauthorized connection attempt detected from IP address 132.145.196.193 to port 2220 [J] |
2020-02-05 06:52:14 |
| 31.186.170.19 | attackspambots | WordPress brute force |
2020-02-05 06:34:18 |
| 212.83.175.149 | attack | firewall-block, port(s): 3389/tcp |
2020-02-05 06:30:19 |
| 45.74.207.200 | attackbotsspam | Honeypot attack, port: 5555, PTR: broadband-user.acndigital.net. |
2020-02-05 06:32:32 |
| 104.236.61.100 | attackspam | 2020-02-04T16:41:18.8616411495-001 sshd[31368]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.61.100 user=root 2020-02-04T16:41:20.5707451495-001 sshd[31368]: Failed password for root from 104.236.61.100 port 50987 ssh2 2020-02-04T16:43:49.6525891495-001 sshd[31827]: Invalid user wksys from 104.236.61.100 port 33469 2020-02-04T16:43:49.6634631495-001 sshd[31827]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.61.100 2020-02-04T16:43:49.6525891495-001 sshd[31827]: Invalid user wksys from 104.236.61.100 port 33469 2020-02-04T16:43:51.7691691495-001 sshd[31827]: Failed password for invalid user wksys from 104.236.61.100 port 33469 ssh2 2020-02-04T16:46:28.2194781495-001 sshd[31923]: Invalid user doug from 104.236.61.100 port 44164 2020-02-04T16:46:28.2229061495-001 sshd[31923]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.61.100 2020-02-04T ... |
2020-02-05 06:29:20 |
| 189.212.112.16 | attackbotsspam | Fail2Ban Ban Triggered |
2020-02-05 06:31:35 |
| 116.196.72.226 | attackspam | Feb 4 21:16:11 srv01 sshd[16657]: Invalid user sgyuri from 116.196.72.226 port 45113 Feb 4 21:16:11 srv01 sshd[16657]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.196.72.226 Feb 4 21:16:11 srv01 sshd[16657]: Invalid user sgyuri from 116.196.72.226 port 45113 Feb 4 21:16:13 srv01 sshd[16657]: Failed password for invalid user sgyuri from 116.196.72.226 port 45113 ssh2 Feb 4 21:19:18 srv01 sshd[16853]: Invalid user steven1 from 116.196.72.226 port 55876 ... |
2020-02-05 06:19:35 |
| 54.39.98.253 | attackbots | Unauthorized connection attempt detected from IP address 54.39.98.253 to port 2220 [J] |
2020-02-05 06:32:12 |
| 80.48.68.201 | attackspambots | Telnet/23 MH Probe, BF, Hack - |
2020-02-05 06:59:41 |
| 38.95.167.13 | attackspambots | Unauthorized connection attempt detected from IP address 38.95.167.13 to port 2220 [J] |
2020-02-05 06:54:53 |
| 80.82.78.100 | attackbots | 80.82.78.100 was recorded 20 times by 12 hosts attempting to connect to the following ports: 512,162. Incident counter (4h, 24h, all-time): 20, 64, 17252 |
2020-02-05 06:59:07 |
| 80.111.231.252 | attack | Honeypot attack, port: 5555, PTR: cm-80.111.231.252.ntlworld.ie. |
2020-02-05 06:48:05 |