City: unknown
Region: unknown
Country: Singapore
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 18.142.199.245
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 20242
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;18.142.199.245. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020300 1800 900 604800 86400
;; Query time: 10 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 03 13:51:55 CST 2025
;; MSG SIZE rcvd: 107245.199.142.18.in-addr.arpa domain name pointer ec2-18-142-199-245.ap-southeast-1.compute.amazonaws.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
245.199.142.18.in-addr.arpa name = ec2-18-142-199-245.ap-southeast-1.compute.amazonaws.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 222.252.89.208 | attackspambots | Attempt to attack host OS, exploiting network vulnerabilities, on 07-10-2019 04:50:23. |
2019-10-07 14:55:52 |
| 128.71.137.99 | attackspambots | Attempt to attack host OS, exploiting network vulnerabilities, on 07-10-2019 04:50:19. |
2019-10-07 15:02:13 |
| 190.124.1.202 | attackspambots | firewall-block, port(s): 23/tcp |
2019-10-07 14:54:50 |
| 185.13.32.112 | attackspambots | B: Magento admin pass test (wrong country) |
2019-10-07 14:59:18 |
| 157.245.230.224 | attack | 157.245.230.224 - - [07/Oct/2019:08:15:19 +0400] "POST /GponForm/diag_Form?style/ HTTP/1.1" 502 157 "-" "curl/7.3.2" ... |
2019-10-07 15:16:14 |
| 183.82.118.131 | attack | SSH/22 MH Probe, BF, Hack - |
2019-10-07 15:15:02 |
| 5.212.50.139 | attackspambots | Attempt to attack host OS, exploiting network vulnerabilities, on 07-10-2019 04:50:24. |
2019-10-07 14:54:11 |
| 49.234.115.143 | attackspam | Oct 7 08:08:52 SilenceServices sshd[6677]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.115.143 Oct 7 08:08:54 SilenceServices sshd[6677]: Failed password for invalid user Admin@2013 from 49.234.115.143 port 49984 ssh2 Oct 7 08:14:01 SilenceServices sshd[8229]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.115.143 |
2019-10-07 14:50:56 |
| 159.65.62.216 | attackspambots | Oct 7 06:03:21 hcbbdb sshd\[27100\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.62.216 user=root Oct 7 06:03:24 hcbbdb sshd\[27100\]: Failed password for root from 159.65.62.216 port 46152 ssh2 Oct 7 06:07:02 hcbbdb sshd\[27486\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.62.216 user=root Oct 7 06:07:03 hcbbdb sshd\[27486\]: Failed password for root from 159.65.62.216 port 57182 ssh2 Oct 7 06:10:43 hcbbdb sshd\[27871\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.62.216 user=root |
2019-10-07 15:26:46 |
| 125.59.204.26 | attackspam | firewall-block, port(s): 8000/tcp |
2019-10-07 15:08:21 |
| 14.248.80.18 | attackspambots | Attempt to attack host OS, exploiting network vulnerabilities, on 07-10-2019 04:50:20. |
2019-10-07 15:01:04 |
| 179.191.49.4 | attackbotsspam | Automatic report - Port Scan Attack |
2019-10-07 15:10:47 |
| 201.235.19.122 | attackspam | Oct 7 04:07:58 www_kotimaassa_fi sshd[21963]: Failed password for root from 201.235.19.122 port 57449 ssh2 ... |
2019-10-07 15:25:01 |
| 142.44.162.232 | attackbots | www.handydirektreparatur.de 142.44.162.232 \[07/Oct/2019:05:50:28 +0200\] "POST /wp-login.php HTTP/1.1" 200 5665 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" www.handydirektreparatur.de 142.44.162.232 \[07/Oct/2019:05:50:28 +0200\] "POST /xmlrpc.php HTTP/1.1" 200 4114 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" |
2019-10-07 14:50:15 |
| 185.176.27.190 | attackspam | Oct 7 08:35:22 mc1 kernel: \[1716524.371601\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=185.176.27.190 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=18786 PROTO=TCP SPT=41770 DPT=4332 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 7 08:35:41 mc1 kernel: \[1716543.636278\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=185.176.27.190 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=14003 PROTO=TCP SPT=41770 DPT=4399 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 7 08:36:11 mc1 kernel: \[1716573.867152\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=185.176.27.190 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=30889 PROTO=TCP SPT=41770 DPT=4191 WINDOW=1024 RES=0x00 SYN URGP=0 ... |
2019-10-07 15:07:57 |