City: unknown
Region: unknown
Country: Australia
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 13.54.210.30
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 60154
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;13.54.210.30. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020400 1800 900 604800 86400
;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 04 23:58:47 CST 2025
;; MSG SIZE rcvd: 10530.210.54.13.in-addr.arpa domain name pointer ec2-13-54-210-30.ap-southeast-2.compute.amazonaws.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
30.210.54.13.in-addr.arpa name = ec2-13-54-210-30.ap-southeast-2.compute.amazonaws.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 134.119.179.255 | attackspambots | Dec 20 20:18:11 h2177944 kernel: \[68307.508469\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=134.119.179.255 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=20962 PROTO=TCP SPT=46670 DPT=44391 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 20 20:18:11 h2177944 kernel: \[68307.508482\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=134.119.179.255 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=20962 PROTO=TCP SPT=46670 DPT=44391 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 20 20:21:43 h2177944 kernel: \[68519.192852\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=134.119.179.255 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=18851 PROTO=TCP SPT=46670 DPT=30443 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 20 20:21:43 h2177944 kernel: \[68519.192866\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=134.119.179.255 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=18851 PROTO=TCP SPT=46670 DPT=30443 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 20 20:27:50 h2177944 kernel: \[68886.098089\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=134.119.179.255 DST=85.214.1 |
2019-12-21 03:40:20 |
| 40.92.11.108 | attackbotsspam | Dec 20 17:50:12 debian-2gb-vpn-nbg1-1 kernel: [1231771.259221] [UFW BLOCK] IN=eth0 OUT= MAC=96:00:00:38:96:44:d2:74:7f:6e:37:e3:08:00 SRC=40.92.11.108 DST=78.46.192.101 LEN=40 TOS=0x00 PREC=0x00 TTL=232 ID=6369 DF PROTO=TCP SPT=24321 DPT=25 WINDOW=0 RES=0x00 ACK RST URGP=0 |
2019-12-21 04:04:30 |
| 149.56.141.197 | attackspambots | Dec 20 19:03:18 server sshd\[24447\]: Invalid user skubby from 149.56.141.197 Dec 20 19:03:18 server sshd\[24447\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=niravjadav.com Dec 20 19:03:20 server sshd\[24447\]: Failed password for invalid user skubby from 149.56.141.197 port 50658 ssh2 Dec 20 19:08:37 server sshd\[25942\]: Invalid user egeberg from 149.56.141.197 Dec 20 19:08:37 server sshd\[25942\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=niravjadav.com ... |
2019-12-21 03:56:57 |
| 14.183.31.111 | attackbots | Attempt to attack host OS, exploiting network vulnerabilities, on 20-12-2019 14:50:37. |
2019-12-21 03:37:39 |
| 58.56.32.238 | attack | Dec 20 20:35:05 loxhost sshd\[26267\]: Invalid user guest from 58.56.32.238 port 8923 Dec 20 20:35:05 loxhost sshd\[26267\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.56.32.238 Dec 20 20:35:07 loxhost sshd\[26267\]: Failed password for invalid user guest from 58.56.32.238 port 8923 ssh2 Dec 20 20:40:22 loxhost sshd\[26660\]: Invalid user test from 58.56.32.238 port 8925 Dec 20 20:40:22 loxhost sshd\[26660\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.56.32.238 ... |
2019-12-21 03:44:46 |
| 118.70.42.121 | attack | Attempt to attack host OS, exploiting network vulnerabilities, on 20-12-2019 14:50:33. |
2019-12-21 03:44:20 |
| 145.255.67.122 | attackspambots | Attempt to attack host OS, exploiting network vulnerabilities, on 20-12-2019 14:50:39. |
2019-12-21 03:33:44 |
| 123.26.105.42 | attack | Attempt to attack host OS, exploiting network vulnerabilities, on 20-12-2019 14:50:34. |
2019-12-21 03:41:02 |
| 176.174.8.13 | attack | port scan and connect, tcp 22 (ssh) |
2019-12-21 03:48:15 |
| 86.238.30.51 | attackbotsspam | Lines containing failures of 86.238.30.51 Dec 17 19:37:50 HOSTNAME sshd[9510]: Failed password for invalid user r.r from 86.238.30.51 port 48840 ssh2 Dec 17 19:37:50 HOSTNAME sshd[9510]: Received disconnect from 86.238.30.51 port 48840:11: Bye Bye [preauth] Dec 17 19:37:50 HOSTNAME sshd[9510]: Disconnected from 86.238.30.51 port 48840 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=86.238.30.51 |
2019-12-21 03:52:26 |
| 14.163.145.225 | attackspam | Attempt to attack host OS, exploiting network vulnerabilities, on 20-12-2019 14:50:36. |
2019-12-21 03:37:59 |
| 14.253.158.168 | attack | Tried sshing with brute force. |
2019-12-21 03:51:24 |
| 125.162.77.242 | attackspam | Attempt to attack host OS, exploiting network vulnerabilities, on 20-12-2019 14:50:35. |
2019-12-21 03:39:41 |
| 113.23.91.192 | attack | Attempt to attack host OS, exploiting network vulnerabilities, on 20-12-2019 14:50:22. |
2019-12-21 03:54:40 |
| 125.161.143.161 | attackbotsspam | Attempt to attack host OS, exploiting network vulnerabilities, on 20-12-2019 14:50:34. |
2019-12-21 03:40:37 |