City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 13.249.38.22
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 780
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;13.249.38.22. IN A
;; AUTHORITY SECTION:
. 290 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021702 1800 900 604800 86400
;; Query time: 61 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 11:20:11 CST 2022
;; MSG SIZE rcvd: 105
22.38.249.13.in-addr.arpa domain name pointer server-13-249-38-22.iad89.r.cloudfront.net.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
22.38.249.13.in-addr.arpa name = server-13-249-38-22.iad89.r.cloudfront.net.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 106.12.71.159 | attackbots | " " |
2020-08-15 19:50:25 |
| 51.178.28.196 | attackbots | Failed password for root from 51.178.28.196 port 33310 ssh2 |
2020-08-15 19:41:17 |
| 122.227.160.110 | attack | Port scan: Attack repeated for 24 hours |
2020-08-15 19:48:27 |
| 62.234.68.31 | attack | Lines containing failures of 62.234.68.31 Aug 12 05:14:06 shared02 sshd[2635]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.68.31 user=r.r Aug 12 05:14:09 shared02 sshd[2635]: Failed password for r.r from 62.234.68.31 port 52492 ssh2 Aug 12 05:14:09 shared02 sshd[2635]: Received disconnect from 62.234.68.31 port 52492:11: Bye Bye [preauth] Aug 12 05:14:09 shared02 sshd[2635]: Disconnected from authenticating user r.r 62.234.68.31 port 52492 [preauth] Aug 12 05:25:01 shared02 sshd[6122]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.68.31 user=r.r Aug 12 05:25:03 shared02 sshd[6122]: Failed password for r.r from 62.234.68.31 port 39424 ssh2 Aug 12 05:25:04 shared02 sshd[6122]: Received disconnect from 62.234.68.31 port 39424:11: Bye Bye [preauth] Aug 12 05:25:04 shared02 sshd[6122]: Disconnected from authenticating user r.r 62.234.68.31 port 39424 [preauth] Aug 12 05:29:16........ ------------------------------ |
2020-08-15 19:36:28 |
| 141.144.61.39 | attackbotsspam | Aug 15 04:49:24 serwer sshd\[5320\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.144.61.39 user=root Aug 15 04:49:27 serwer sshd\[5320\]: Failed password for root from 141.144.61.39 port 15189 ssh2 Aug 15 04:57:35 serwer sshd\[10784\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.144.61.39 user=root ... |
2020-08-15 19:35:58 |
| 190.210.62.45 | attack | frenzy |
2020-08-15 19:31:28 |
| 106.12.46.179 | attackspambots | frenzy |
2020-08-15 19:25:13 |
| 116.85.66.200 | attackbots | Aug 15 06:33:35 serwer sshd\[17477\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.85.66.200 user=root Aug 15 06:33:37 serwer sshd\[17477\]: Failed password for root from 116.85.66.200 port 32918 ssh2 Aug 15 06:39:09 serwer sshd\[21464\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.85.66.200 user=root ... |
2020-08-15 19:49:55 |
| 112.85.42.174 | attack | Aug 15 11:29:38 rush sshd[31180]: Failed password for root from 112.85.42.174 port 5221 ssh2 Aug 15 11:29:41 rush sshd[31180]: Failed password for root from 112.85.42.174 port 5221 ssh2 Aug 15 11:29:45 rush sshd[31180]: Failed password for root from 112.85.42.174 port 5221 ssh2 Aug 15 11:29:48 rush sshd[31180]: Failed password for root from 112.85.42.174 port 5221 ssh2 ... |
2020-08-15 19:32:34 |
| 85.93.20.150 | attackspambots | 200815 1:16:11 [Warning] Access denied for user 'root'@'85.93.20.150' (using password: YES) 200815 1:45:51 [Warning] Access denied for user 'root'@'85.93.20.150' (using password: YES) 200815 4:37:57 [Warning] Access denied for user 'root'@'85.93.20.150' (using password: YES) ... |
2020-08-15 19:46:38 |
| 67.82.195.36 | attack | Hits on port : 30096 |
2020-08-15 19:23:09 |
| 58.33.107.221 | attackspambots | Aug 15 05:37:12 server sshd[15169]: Failed password for invalid user qazwsxedc!@#123 from 58.33.107.221 port 47383 ssh2 Aug 15 05:42:54 server sshd[23069]: Failed password for invalid user cysoft from 58.33.107.221 port 45390 ssh2 Aug 15 05:48:36 server sshd[30874]: Failed password for invalid user !@#321qweASD from 58.33.107.221 port 43408 ssh2 |
2020-08-15 19:38:33 |
| 36.226.128.95 | attackbots | [N10.H2.VM2] Port Scanner Detected Blocked by UFW |
2020-08-15 19:49:02 |
| 74.193.12.156 | attack | Aug 15 05:47:13 vps2 sshd[3042320]: Invalid user pi from 74.193.12.156 port 55388 Aug 15 05:47:20 vps2 sshd[3042342]: Invalid user pi from 74.193.12.156 port 60194 Aug 15 05:47:26 vps2 sshd[3042362]: Invalid user pi from 74.193.12.156 port 36536 Aug 15 05:47:32 vps2 sshd[3042382]: Invalid user osboxes from 74.193.12.156 port 41344 Aug 15 05:47:38 vps2 sshd[3042404]: Invalid user support from 74.193.12.156 port 46444 Aug 15 05:47:45 vps2 sshd[3042442]: Invalid user netscreen from 74.193.12.156 port 52444 Aug 15 05:47:50 vps2 sshd[3042462]: Invalid user nexthink from 74.193.12.156 port 56616 Aug 15 05:47:56 vps2 sshd[3042482]: Invalid user admin from 74.193.12.156 port 60594 Aug 15 05:48:03 vps2 sshd[3042503]: Invalid user admin from 74.193.12.156 port 37024 Aug 15 05:48:09 vps2 sshd[3042525]: Invalid user admin from 74.193.12.156 port 43278 ... |
2020-08-15 19:52:30 |
| 71.6.146.130 | attackspambots | Unauthorized connection attempt from IP address 71.6.146.130 on port 110 |
2020-08-15 19:38:10 |