City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
        ; <<>> DiG 9.10.3-P4-Ubuntu <<>> 13.38.85.16
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 48257
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;13.38.85.16.			IN	A
;; AUTHORITY SECTION:
.			459	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021301 1800 900 604800 86400
;; Query time: 62 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 14 07:05:48 CST 2022
;; MSG SIZE  rcvd: 104
        16.85.38.13.in-addr.arpa domain name pointer ec2-13-38-85-16.eu-west-3.compute.amazonaws.com.
        Server:		183.60.83.19
Address:	183.60.83.19#53
Non-authoritative answer:
16.85.38.13.in-addr.arpa	name = ec2-13-38-85-16.eu-west-3.compute.amazonaws.com.
Authoritative answers can be found from:
        | IP | Type | Details | Datetime | 
|---|---|---|---|
| 79.8.86.148 | attackbotsspam | 5,03-02/01 [bc01/m68] PostRequest-Spammer scoring: brussels  | 
                    2020-01-01 00:14:28 | 
| 45.120.69.82 | attack | Dec 31 15:52:39 amit sshd\[27165\]: Invalid user shortall from 45.120.69.82 Dec 31 15:52:39 amit sshd\[27165\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.120.69.82 Dec 31 15:52:41 amit sshd\[27165\]: Failed password for invalid user shortall from 45.120.69.82 port 34614 ssh2 ...  | 
                    2020-01-01 00:07:26 | 
| 110.77.246.210 | attackbots | $f2bV_matches  | 
                    2020-01-01 00:07:48 | 
| 193.70.88.213 | attackbots | 2019-12-31T14:42:48.099880abusebot-4.cloudsearch.cf sshd[23661]: Invalid user uucp from 193.70.88.213 port 35592 2019-12-31T14:42:48.106416abusebot-4.cloudsearch.cf sshd[23661]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.ip-193-70-88.eu 2019-12-31T14:42:48.099880abusebot-4.cloudsearch.cf sshd[23661]: Invalid user uucp from 193.70.88.213 port 35592 2019-12-31T14:42:50.121634abusebot-4.cloudsearch.cf sshd[23661]: Failed password for invalid user uucp from 193.70.88.213 port 35592 ssh2 2019-12-31T14:52:29.983645abusebot-4.cloudsearch.cf sshd[24132]: Invalid user uploader from 193.70.88.213 port 39374 2019-12-31T14:52:29.990759abusebot-4.cloudsearch.cf sshd[24132]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.ip-193-70-88.eu 2019-12-31T14:52:29.983645abusebot-4.cloudsearch.cf sshd[24132]: Invalid user uploader from 193.70.88.213 port 39374 2019-12-31T14:52:31.765445abusebot-4.cloudsearch.cf sshd ...  | 
                    2020-01-01 00:12:39 | 
| 116.58.186.101 | attackspambots | Dec 31 15:49:31 extapp sshd[917]: Invalid user pi from 116.58.186.101 Dec 31 15:49:31 extapp sshd[918]: Invalid user pi from 116.58.186.101 Dec 31 15:49:33 extapp sshd[917]: Failed password for invalid user pi from 116.58.186.101 port 58154 ssh2 Dec 31 15:49:33 extapp sshd[918]: Failed password for invalid user pi from 116.58.186.101 port 58152 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=116.58.186.101  | 
                    2020-01-01 00:25:55 | 
| 125.227.191.105 | attack | 1577803878 - 12/31/2019 15:51:18 Host: 125.227.191.105/125.227.191.105 Port: 445 TCP Blocked  | 
                    2020-01-01 00:54:01 | 
| 95.85.12.25 | attack | Dec 31 16:53:06 MK-Soft-Root1 sshd[13656]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.85.12.25 Dec 31 16:53:08 MK-Soft-Root1 sshd[13656]: Failed password for invalid user admin from 95.85.12.25 port 59830 ssh2 ...  | 
                    2020-01-01 00:44:51 | 
| 45.136.109.122 | attackspambots | Dec 31 17:16:19 mc1 kernel: \[1967762.768647\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=45.136.109.122 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=21255 PROTO=TCP SPT=40231 DPT=4055 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 31 17:20:04 mc1 kernel: \[1967987.200184\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=45.136.109.122 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=45956 PROTO=TCP SPT=40231 DPT=4076 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 31 17:21:47 mc1 kernel: \[1968090.173717\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=45.136.109.122 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=2630 PROTO=TCP SPT=40231 DPT=3405 WINDOW=1024 RES=0x00 SYN URGP=0 ...  | 
                    2020-01-01 00:22:00 | 
| 49.234.10.122 | attackbotsspam | Dec 31 15:48:36 haigwepa sshd[14004]: Failed password for root from 49.234.10.122 port 60576 ssh2 ...  | 
                    2020-01-01 00:39:53 | 
| 182.71.127.250 | attackbotsspam | Dec 31 10:54:03 plusreed sshd[2767]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.71.127.250 user=root Dec 31 10:54:05 plusreed sshd[2767]: Failed password for root from 182.71.127.250 port 50406 ssh2 ...  | 
                    2020-01-01 00:09:16 | 
| 188.165.24.200 | attack | Dec 31 17:20:59 minden010 sshd[15628]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.165.24.200 Dec 31 17:21:01 minden010 sshd[15628]: Failed password for invalid user ident from 188.165.24.200 port 52564 ssh2 Dec 31 17:23:07 minden010 sshd[16267]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.165.24.200 ...  | 
                    2020-01-01 00:37:32 | 
| 195.177.241.147 | attackbots | port scan and connect, tcp 1433 (ms-sql-s)  | 
                    2020-01-01 00:27:01 | 
| 41.80.35.78 | attackspambots | failed root login  | 
                    2020-01-01 00:47:36 | 
| 122.4.241.6 | attackspam | SSH login attempts.  | 
                    2020-01-01 00:30:50 | 
| 201.168.130.218 | attackspam | RDP Brute-Force (Grieskirchen RZ1)  | 
                    2020-01-01 00:50:43 |