City: unknown
Region: unknown
Country: India
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 13.234.140.195
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 37986
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;13.234.140.195. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025013101 1800 900 604800 86400
;; Query time: 16 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 01 03:21:07 CST 2025
;; MSG SIZE rcvd: 107195.140.234.13.in-addr.arpa domain name pointer ec2-13-234-140-195.ap-south-1.compute.amazonaws.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
195.140.234.13.in-addr.arpa name = ec2-13-234-140-195.ap-south-1.compute.amazonaws.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 175.141.220.169 | attack | *Port Scan* detected from 175.141.220.169 (MY/Malaysia/-). 4 hits in the last 250 seconds |
2019-08-13 23:25:25 |
| 54.39.104.30 | attack | Aug 13 14:50:37 XXX sshd[53954]: Invalid user ghost from 54.39.104.30 port 41674 |
2019-08-14 00:13:38 |
| 148.70.26.85 | attack | $f2bV_matches |
2019-08-14 00:23:46 |
| 89.132.102.142 | attackspam | DATE:2019-08-13 11:42:37, IP:89.132.102.142, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc-bis) |
2019-08-14 00:06:20 |
| 34.219.28.27 | attack | 2019-08-13T09:28:02.7109241240 sshd\[30099\]: Invalid user iraf from 34.219.28.27 port 50908 2019-08-13T09:28:02.7150941240 sshd\[30099\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.219.28.27 2019-08-13T09:28:04.7777291240 sshd\[30099\]: Failed password for invalid user iraf from 34.219.28.27 port 50908 ssh2 ... |
2019-08-13 23:46:56 |
| 111.230.54.226 | attack | $f2bV_matches |
2019-08-13 23:12:13 |
| 179.232.1.254 | attackbotsspam | $f2bV_matches |
2019-08-13 23:41:24 |
| 40.73.34.44 | attack | Aug 13 22:32:01 webhost01 sshd[3235]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.73.34.44 Aug 13 22:32:04 webhost01 sshd[3235]: Failed password for invalid user dai from 40.73.34.44 port 32790 ssh2 ... |
2019-08-13 23:44:29 |
| 59.124.28.195 | attackspam | postfix-gen jail [ma] |
2019-08-13 23:50:29 |
| 106.13.52.247 | attackbots | Aug 13 20:24:26 itv-usvr-02 sshd[19216]: Invalid user support from 106.13.52.247 port 36214 Aug 13 20:24:26 itv-usvr-02 sshd[19216]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.52.247 Aug 13 20:24:26 itv-usvr-02 sshd[19216]: Invalid user support from 106.13.52.247 port 36214 Aug 13 20:24:28 itv-usvr-02 sshd[19216]: Failed password for invalid user support from 106.13.52.247 port 36214 ssh2 Aug 13 20:29:52 itv-usvr-02 sshd[19231]: Invalid user user1 from 106.13.52.247 port 41808 |
2019-08-13 23:55:15 |
| 210.255.82.235 | attackbots | Web App Attack |
2019-08-14 00:03:20 |
| 175.150.255.37 | attackspambots | Automatic report - Port Scan Attack |
2019-08-13 23:34:53 |
| 81.22.45.29 | attackspam | Splunk® : port scan detected: Aug 13 11:21:45 testbed kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=82:c6:52:d1:6e:53:64:c3:d6:0b:ef:f0:08:00 SRC=81.22.45.29 DST=104.248.11.191 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=58773 PROTO=TCP SPT=53742 DPT=3258 WINDOW=1024 RES=0x00 SYN URGP=0 |
2019-08-14 00:12:29 |
| 14.35.249.205 | attack | 2019-08-13T15:21:31.357318abusebot-5.cloudsearch.cf sshd\[2464\]: Invalid user ftpuser from 14.35.249.205 port 46653 |
2019-08-13 23:33:33 |
| 128.1.138.242 | attack | SSH Brute Force, server-1 sshd[2275]: Failed password for invalid user secretaria from 128.1.138.242 port 46934 ssh2 |
2019-08-14 00:08:49 |