City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 13.239.94.238
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 25214
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;13.239.94.238. IN A
;; AUTHORITY SECTION:
. 148 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022022701 1800 900 604800 86400
;; Query time: 26 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 28 05:54:18 CST 2022
;; MSG SIZE rcvd: 106238.94.239.13.in-addr.arpa domain name pointer ec2-13-239-94-238.ap-southeast-2.compute.amazonaws.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
238.94.239.13.in-addr.arpa name = ec2-13-239-94-238.ap-southeast-2.compute.amazonaws.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 178.62.37.168 | attackbotsspam | *Port Scan* detected from 178.62.37.168 (GB/United Kingdom/-). 4 hits in the last 270 seconds |
2019-12-25 17:59:55 |
| 86.105.53.166 | attack | Dec 25 13:25:25 itv-usvr-02 sshd[26381]: Invalid user hara from 86.105.53.166 port 48065 Dec 25 13:25:25 itv-usvr-02 sshd[26381]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=86.105.53.166 Dec 25 13:25:25 itv-usvr-02 sshd[26381]: Invalid user hara from 86.105.53.166 port 48065 Dec 25 13:25:27 itv-usvr-02 sshd[26381]: Failed password for invalid user hara from 86.105.53.166 port 48065 ssh2 |
2019-12-25 17:51:06 |
| 27.79.187.29 | attackspam | DATE:2019-12-25 07:25:09, IP:27.79.187.29, PORT:1433 - MSSQL brute force auth on a honeypot server (epe-dc) |
2019-12-25 18:17:16 |
| 49.234.17.109 | attack | Dec 25 06:25:23 prox sshd[4853]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.17.109 Dec 25 06:25:26 prox sshd[4853]: Failed password for invalid user pfifferling from 49.234.17.109 port 57310 ssh2 |
2019-12-25 17:52:43 |
| 27.254.194.99 | attackbotsspam | Dec 25 09:50:38 *** sshd[4453]: User root from 27.254.194.99 not allowed because not listed in AllowUsers |
2019-12-25 18:24:05 |
| 42.101.34.122 | attackspambots | --- report --- Dec 25 04:59:38 sshd: Connection from 42.101.34.122 port 54862 Dec 25 04:59:40 sshd: Invalid user gpadmin from 42.101.34.122 Dec 25 04:59:42 sshd: Failed password for invalid user gpadmin from 42.101.34.122 port 54862 ssh2 |
2019-12-25 18:22:56 |
| 52.247.223.210 | attack | Dec 25 09:16:07 l02a sshd[10879]: Invalid user server from 52.247.223.210 Dec 25 09:16:07 l02a sshd[10879]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.247.223.210 Dec 25 09:16:07 l02a sshd[10879]: Invalid user server from 52.247.223.210 Dec 25 09:16:09 l02a sshd[10879]: Failed password for invalid user server from 52.247.223.210 port 52852 ssh2 |
2019-12-25 17:57:08 |
| 117.50.122.81 | attack | port scan and connect, tcp 1433 (ms-sql-s) |
2019-12-25 18:24:35 |
| 149.202.55.18 | attack | *Port Scan* detected from 149.202.55.18 (FR/France/18.ip-149-202-55.eu). 4 hits in the last 261 seconds |
2019-12-25 18:03:45 |
| 54.37.229.92 | attackbotsspam | Dec 25 09:08:14 core sshd\[23904\]: Invalid user qw from 54.37.229.92 Dec 25 09:10:47 core sshd\[23953\]: Invalid user roserver from 54.37.229.92 Dec 25 09:13:29 core sshd\[23959\]: Invalid user roserver from 54.37.229.92 Dec 25 09:15:52 core sshd\[24026\]: Invalid user ro from 54.37.229.92 Dec 25 09:18:14 core sshd\[24033\]: Invalid user ro from 54.37.229.92 ... |
2019-12-25 18:20:19 |
| 185.153.197.139 | attackspambots | 12/25/2019-04:32:49.124863 185.153.197.139 Protocol: 6 ET SCAN NMAP -sS window 1024 |
2019-12-25 18:21:37 |
| 182.71.188.10 | attack | Dec 25 06:24:45 *** sshd[6635]: Invalid user lumb from 182.71.188.10 |
2019-12-25 18:25:43 |
| 112.85.42.229 | attackspam | --- report --- Dec 25 06:39:34 sshd: Connection from 112.85.42.229 port 58824 |
2019-12-25 17:58:09 |
| 112.85.42.182 | attackbots | $f2bV_matches |
2019-12-25 18:04:09 |
| 185.232.67.6 | attack | [portscan] tcp/22 [SSH] [scan/connect: 142 time(s)] in blocklist.de:'listed [ssh]' *(RWIN=29200)(12251243) |
2019-12-25 18:01:42 |