City: Tokyo
Region: Tokyo
Country: Japan
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 13.231.110.12
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 65126
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;13.231.110.12. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025122401 1800 900 604800 86400
;; Query time: 34 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Dec 25 10:30:46 CST 2025
;; MSG SIZE rcvd: 10612.110.231.13.in-addr.arpa domain name pointer ec2-13-231-110-12.ap-northeast-1.compute.amazonaws.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
12.110.231.13.in-addr.arpa name = ec2-13-231-110-12.ap-northeast-1.compute.amazonaws.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 176.31.182.125 | attackspam | $f2bV_matches |
2020-05-30 07:07:12 |
| 120.27.17.129 | attack | May 27 14:18:34 webmail sshd[13640]: Invalid user userftp from 120.27.17.129 May 27 14:18:34 webmail sshd[13640]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.27.17.129 May 27 14:18:36 webmail sshd[13640]: Failed password for invalid user userftp from 120.27.17.129 port 50188 ssh2 May 27 14:18:37 webmail sshd[13640]: Received disconnect from 120.27.17.129: 11: Normal Shutdown, Thank you for playing [preauth] May 27 14:19:08 webmail sshd[13645]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.27.17.129 user=r.r May 27 14:19:09 webmail sshd[13645]: Failed password for r.r from 120.27.17.129 port 60198 ssh2 May 27 14:19:09 webmail sshd[13645]: Received disconnect from 120.27.17.129: 11: Normal Shutdown, Thank you for playing [preauth] May 27 14:20:12 webmail sshd[13672]: Invalid user shoutcast from 120.27.17.129 May 27 14:20:12 webmail sshd[13672]: pam_unix(sshd:auth): authenticati........ ------------------------------- |
2020-05-30 07:21:38 |
| 51.91.8.222 | attackbotsspam | 1103. On May 29 2020 experienced a Brute Force SSH login attempt -> 1 unique times by 51.91.8.222. |
2020-05-30 06:49:29 |
| 106.225.211.193 | attack | 2020-05-29T23:52:52.176928vps773228.ovh.net sshd[3976]: Invalid user zabbix from 106.225.211.193 port 59451 2020-05-29T23:52:52.193408vps773228.ovh.net sshd[3976]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.225.211.193 2020-05-29T23:52:52.176928vps773228.ovh.net sshd[3976]: Invalid user zabbix from 106.225.211.193 port 59451 2020-05-29T23:52:53.924076vps773228.ovh.net sshd[3976]: Failed password for invalid user zabbix from 106.225.211.193 port 59451 ssh2 2020-05-29T23:55:10.392787vps773228.ovh.net sshd[4063]: Invalid user aguko from 106.225.211.193 port 48214 ... |
2020-05-30 06:48:16 |
| 116.87.59.48 | attackbotsspam | Hits on port : 443(x2) 8443 |
2020-05-30 06:53:42 |
| 187.207.141.187 | attackbots | 1590785341 - 05/29/2020 22:49:01 Host: 187.207.141.187/187.207.141.187 Port: 445 TCP Blocked |
2020-05-30 06:50:22 |
| 66.249.69.114 | attack | Automatic report - Banned IP Access |
2020-05-30 07:19:04 |
| 106.75.16.62 | attackspam | Unauthorised connection attempt detected at AUO NODE 4. System is sshd. Protected by AUO Stack Web Application Firewall (WAF) |
2020-05-30 07:15:55 |
| 89.36.210.121 | attack | May 30 00:55:29 vmi345603 sshd[13308]: Failed password for root from 89.36.210.121 port 36592 ssh2 ... |
2020-05-30 07:18:35 |
| 213.32.71.196 | attackspam | SASL PLAIN auth failed: ruser=... |
2020-05-30 07:14:27 |
| 162.243.138.128 | attack | " " |
2020-05-30 07:16:23 |
| 106.7.251.145 | attack | May 29 15:49:02 mailman postfix/smtpd[1859]: warning: unknown[106.7.251.145]: SASL PLAIN authentication failed: authentication failure |
2020-05-30 06:51:57 |
| 34.73.219.35 | attackbots | [Sat May 30 03:49:03.390929 2020] [:error] [pid 11471:tid 139843835184896] [client 34.73.219.35:47737] [client 34.73.219.35] ModSecurity: Access denied with code 403 (phase 1). Match of "within %{tx.allowed_http_versions}" against "REQUEST_PROTOCOL" required. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "972"] [id "920430"] [msg "HTTP protocol version is not allowed by policy"] [data "HTTP/1.0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/PROTOCOL_NOT_ALLOWED"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A6"] [tag "PCI/6.5.10"] [hostname "staklim-malang.info"] [uri "/robots.txt"] [unique_id "XtF1P2ItZxB53@y2NgqQdgAAAcI"]
... |
2020-05-30 06:52:27 |
| 79.120.193.211 | attack | Invalid user byy from 79.120.193.211 port 65093 |
2020-05-30 07:17:44 |
| 118.70.155.60 | attackbots | Invalid user admin from 118.70.155.60 port 46447 |
2020-05-30 07:17:15 |