City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
        ; <<>> DiG 9.10.3-P4-Ubuntu <<>> 13.248.172.93
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 472
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;13.248.172.93.			IN	A
;; AUTHORITY SECTION:
.			116	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021702 1800 900 604800 86400
;; Query time: 61 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 11:18:40 CST 2022
;; MSG SIZE  rcvd: 106
        93.172.248.13.in-addr.arpa domain name pointer aa5dacf57429c8adc.awsglobalaccelerator.com.
        Server:		183.60.83.19
Address:	183.60.83.19#53
Non-authoritative answer:
93.172.248.13.in-addr.arpa	name = aa5dacf57429c8adc.awsglobalaccelerator.com.
Authoritative answers can be found from:
        | IP | Type | Details | Datetime | 
|---|---|---|---|
| 193.32.163.123 | attackbotsspam | Jul 10 21:09:12 rpi sshd[12647]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.32.163.123 Jul 10 21:09:13 rpi sshd[12647]: Failed password for invalid user admin from 193.32.163.123 port 46889 ssh2  | 
                    2019-07-11 03:49:39 | 
| 160.153.234.236 | attack | Jul 10 21:06:05 MainVPS sshd[23897]: Invalid user wl from 160.153.234.236 port 47610 Jul 10 21:06:05 MainVPS sshd[23897]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=160.153.234.236 Jul 10 21:06:05 MainVPS sshd[23897]: Invalid user wl from 160.153.234.236 port 47610 Jul 10 21:06:07 MainVPS sshd[23897]: Failed password for invalid user wl from 160.153.234.236 port 47610 ssh2 Jul 10 21:09:00 MainVPS sshd[24166]: Invalid user postgres from 160.153.234.236 port 40484 ...  | 
                    2019-07-11 03:56:04 | 
| 213.6.16.226 | attackspam | Tried sshing with brute force.  | 
                    2019-07-11 03:12:03 | 
| 157.230.119.235 | attack | firewall-block, port(s): 28017/tcp  | 
                    2019-07-11 03:09:18 | 
| 46.107.169.159 | attackspam | Jul 10 21:32:52 dns01 sshd[30776]: Invalid user john from 46.107.169.159 Jul 10 21:32:52 dns01 sshd[30776]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.107.169.159 Jul 10 21:32:54 dns01 sshd[30776]: Failed password for invalid user john from 46.107.169.159 port 57160 ssh2 Jul 10 21:32:54 dns01 sshd[30776]: Received disconnect from 46.107.169.159 port 57160:11: Bye Bye [preauth] Jul 10 21:32:54 dns01 sshd[30776]: Disconnected from 46.107.169.159 port 57160 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=46.107.169.159  | 
                    2019-07-11 03:54:08 | 
| 85.209.0.115 | attackspambots | Port scan on 18 port(s): 19906 23288 23413 24283 30098 31159 33656 35287 38544 40310 40950 41096 41825 44374 44492 45523 47624 48220  | 
                    2019-07-11 03:22:54 | 
| 188.93.235.226 | attackbots | Jul 10 14:06:29 aat-srv002 sshd[11994]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.93.235.226 Jul 10 14:06:31 aat-srv002 sshd[11994]: Failed password for invalid user admin from 188.93.235.226 port 50051 ssh2 Jul 10 14:09:54 aat-srv002 sshd[12087]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.93.235.226 Jul 10 14:09:56 aat-srv002 sshd[12087]: Failed password for invalid user klaus from 188.93.235.226 port 43289 ssh2 ...  | 
                    2019-07-11 03:24:54 | 
| 112.234.22.248 | attackspam | " "  | 
                    2019-07-11 03:08:13 | 
| 139.219.107.11 | attackbotsspam | k+ssh-bruteforce  | 
                    2019-07-11 03:27:19 | 
| 92.118.160.17 | attack | Scanning random ports - tries to find possible vulnerable services  | 
                    2019-07-11 03:47:09 | 
| 118.24.90.64 | attack | Jul 10 21:36:17 giegler sshd[29073]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.90.64 Jul 10 21:36:17 giegler sshd[29073]: Invalid user anna from 118.24.90.64 port 45502 Jul 10 21:36:18 giegler sshd[29073]: Failed password for invalid user anna from 118.24.90.64 port 45502 ssh2 Jul 10 21:38:02 giegler sshd[29100]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.90.64 user=root Jul 10 21:38:04 giegler sshd[29100]: Failed password for root from 118.24.90.64 port 33602 ssh2  | 
                    2019-07-11 03:45:05 | 
| 45.70.3.30 | attackspambots | Jul 10 22:09:32 server01 sshd\[9179\]: Invalid user xbmc from 45.70.3.30 Jul 10 22:09:32 server01 sshd\[9179\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.70.3.30 Jul 10 22:09:34 server01 sshd\[9179\]: Failed password for invalid user xbmc from 45.70.3.30 port 51101 ssh2 ...  | 
                    2019-07-11 03:37:38 | 
| 159.65.175.37 | attack | Jul 10 21:10:12 vmd17057 sshd\[3290\]: Invalid user norbert from 159.65.175.37 port 49048 Jul 10 21:10:12 vmd17057 sshd\[3290\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.175.37 Jul 10 21:10:13 vmd17057 sshd\[3290\]: Failed password for invalid user norbert from 159.65.175.37 port 49048 ssh2 ...  | 
                    2019-07-11 03:12:27 | 
| 190.18.14.209 | attack | Jul 10 20:52:55 shared10 sshd[28933]: Invalid user katharina from 190.18.14.209 Jul 10 20:52:55 shared10 sshd[28933]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.18.14.209 Jul 10 20:52:57 shared10 sshd[28933]: Failed password for invalid user katharina from 190.18.14.209 port 41636 ssh2 Jul 10 20:52:58 shared10 sshd[28933]: Received disconnect from 190.18.14.209 port 41636:11: Bye Bye [preauth] Jul 10 20:52:58 shared10 sshd[28933]: Disconnected from 190.18.14.209 port 41636 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=190.18.14.209  | 
                    2019-07-11 03:41:31 | 
| 118.27.32.189 | attack | [ssh] SSH attack  | 
                    2019-07-11 03:48:45 |