City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 13.52.248.53
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 1586
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;13.52.248.53. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020500 1800 900 604800 86400
;; Query time: 22 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 06 01:47:56 CST 2025
;; MSG SIZE rcvd: 10553.248.52.13.in-addr.arpa domain name pointer ec2-13-52-248-53.us-west-1.compute.amazonaws.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
53.248.52.13.in-addr.arpa name = ec2-13-52-248-53.us-west-1.compute.amazonaws.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 104.248.237.238 | attack | Jun 30 04:58:30 mail sshd\[29463\]: Failed password for invalid user allison from 104.248.237.238 port 56996 ssh2 Jun 30 05:13:45 mail sshd\[29618\]: Invalid user hou from 104.248.237.238 port 40650 ... |
2019-06-30 12:23:53 |
| 178.62.117.82 | attackbots | Jun 30 06:06:24 nginx sshd[3290]: Invalid user zabbix from 178.62.117.82 Jun 30 06:06:24 nginx sshd[3290]: Received disconnect from 178.62.117.82 port 49604:11: Normal Shutdown, Thank you for playing [preauth] |
2019-06-30 12:21:44 |
| 193.112.19.168 | attack | 30.06.2019 02:15:39 SSH access blocked by firewall |
2019-06-30 11:42:19 |
| 162.243.145.44 | attackspambots | 21/tcp 8123/tcp 34275/tcp... [2019-04-30/06-28]49pkt,39pt.(tcp),5pt.(udp) |
2019-06-30 12:01:03 |
| 123.207.96.242 | attackspambots | Jun 29 21:19:04 sshgateway sshd\[9488\]: Invalid user joomla from 123.207.96.242 Jun 29 21:19:04 sshgateway sshd\[9488\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.207.96.242 Jun 29 21:19:06 sshgateway sshd\[9488\]: Failed password for invalid user joomla from 123.207.96.242 port 60893 ssh2 |
2019-06-30 11:39:30 |
| 63.240.240.74 | attack | 2019-06-30T03:47:00.237124abusebot-4.cloudsearch.cf sshd\[23337\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=63.240.240.74 user=root |
2019-06-30 12:20:02 |
| 51.68.72.174 | attackbotsspam | Port scan on 2 port(s): 139 445 |
2019-06-30 12:25:34 |
| 189.173.149.121 | attack | Honeypot attack, port: 23, PTR: dsl-189-173-149-121-dyn.prod-infinitum.com.mx. |
2019-06-30 11:48:22 |
| 80.211.87.46 | attackbots | NAME : IT-TECHNORAIL-20011212 CIDR : 80.211.0.0/17 DDoS attack Italy - block certain countries :) IP: 80.211.87.46 Denial-of-Service Attack (DoS) Detected and Blocked by ADMIN - data recovery https://help-dysk.pl |
2019-06-30 12:12:14 |
| 104.199.137.183 | attack | 23/tcp [2019-06-30]1pkt |
2019-06-30 12:24:11 |
| 111.93.180.194 | attackspambots | 23/tcp [2019-06-30]1pkt |
2019-06-30 12:17:18 |
| 66.70.188.25 | attack | Jun 30 03:47:55 *** sshd[23732]: User root from 66.70.188.25 not allowed because not listed in AllowUsers |
2019-06-30 11:50:51 |
| 218.11.223.146 | attack | 23/tcp [2019-06-30]1pkt |
2019-06-30 12:11:44 |
| 220.178.107.242 | attackbots | 'IP reached maximum auth failures for a one day block' |
2019-06-30 12:17:49 |
| 148.72.212.161 | attackspambots | Jun 30 04:47:51 mail sshd\[29391\]: Invalid user ling from 148.72.212.161 port 47412 Jun 30 04:47:51 mail sshd\[29391\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.72.212.161 ... |
2019-06-30 11:53:45 |