City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 18.196.213.57
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 36842
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;18.196.213.57. IN A
;; AUTHORITY SECTION:
. 439 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021800 1800 900 604800 86400
;; Query time: 56 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 18:53:56 CST 2022
;; MSG SIZE rcvd: 10657.213.196.18.in-addr.arpa domain name pointer ec2-18-196-213-57.eu-central-1.compute.amazonaws.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
57.213.196.18.in-addr.arpa name = ec2-18-196-213-57.eu-central-1.compute.amazonaws.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 164.52.24.165 | attackspambots | 21/tcp 21/tcp 21/tcp... [2019-09-05/10-31]16pkt,1pt.(tcp) |
2019-11-01 12:45:01 |
| 79.143.28.113 | attackspambots | 34450/tcp 52205/tcp 15535/tcp... [2019-09-30/11-01]21pkt,21pt.(tcp) |
2019-11-01 12:31:51 |
| 139.59.64.118 | attack | Automatic report - Banned IP Access |
2019-11-01 12:35:05 |
| 81.22.45.190 | attackbots | Nov 1 05:50:30 h2177944 kernel: \[5459547.395224\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=81.22.45.190 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=39733 PROTO=TCP SPT=46310 DPT=38676 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 1 05:51:40 h2177944 kernel: \[5459617.218922\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=81.22.45.190 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=12201 PROTO=TCP SPT=46310 DPT=39240 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 1 05:55:10 h2177944 kernel: \[5459827.748916\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=81.22.45.190 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=41250 PROTO=TCP SPT=46310 DPT=39213 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 1 06:03:37 h2177944 kernel: \[5460334.451515\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=81.22.45.190 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=27202 PROTO=TCP SPT=46310 DPT=38703 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 1 06:04:58 h2177944 kernel: \[5460415.157915\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=81.22.45.190 DST=85.214.117.9 |
2019-11-01 13:09:25 |
| 92.222.88.22 | attack | Nov 1 05:41:33 localhost sshd\[17601\]: Invalid user idchy from 92.222.88.22 port 36562 Nov 1 05:41:33 localhost sshd\[17601\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.222.88.22 Nov 1 05:41:35 localhost sshd\[17601\]: Failed password for invalid user idchy from 92.222.88.22 port 36562 ssh2 |
2019-11-01 12:47:00 |
| 101.254.192.54 | attackspam | 1433/tcp 1433/tcp [2019-10-20/11-01]2pkt |
2019-11-01 13:02:07 |
| 51.159.22.125 | attackspambots | Nov 1 04:52:45 mail postfix/smtpd[31987]: warning: unknown[51.159.22.125]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 1 04:53:46 mail postfix/smtpd[356]: warning: unknown[51.159.22.125]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 1 04:53:51 mail postfix/smtpd[31944]: warning: unknown[51.159.22.125]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 |
2019-11-01 12:34:00 |
| 89.35.57.214 | attackspambots | Nov 1 05:01:59 cvbnet sshd[17246]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.35.57.214 Nov 1 05:02:01 cvbnet sshd[17246]: Failed password for invalid user idc!@#$%ASDFG from 89.35.57.214 port 39880 ssh2 ... |
2019-11-01 12:42:03 |
| 103.80.117.214 | attackspam | 2019-11-01T04:28:44.309042abusebot-7.cloudsearch.cf sshd\[25011\]: Invalid user gigacrap1 from 103.80.117.214 port 53814 |
2019-11-01 12:41:13 |
| 109.202.117.35 | attackbots | ET SCAN Potential SSH Scan - port: 22 proto: TCP cat: Attempted Information Leak |
2019-11-01 12:56:10 |
| 109.202.117.99 | attack | ET SCAN Potential SSH Scan - port: 22 proto: TCP cat: Attempted Information Leak |
2019-11-01 12:58:42 |
| 218.153.159.198 | attack | 2019-11-01T03:56:22.535596abusebot-5.cloudsearch.cf sshd\[8435\]: Invalid user bjorn from 218.153.159.198 port 56312 2019-11-01T03:56:22.540928abusebot-5.cloudsearch.cf sshd\[8435\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.153.159.198 |
2019-11-01 12:48:56 |
| 109.202.117.79 | attack | ET SCAN Potential SSH Scan - port: 22 proto: TCP cat: Attempted Information Leak |
2019-11-01 12:57:40 |
| 79.137.34.248 | attackbotsspam | Nov 1 06:03:09 cvbnet sshd[17536]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.137.34.248 Nov 1 06:03:11 cvbnet sshd[17536]: Failed password for invalid user 123456 from 79.137.34.248 port 33742 ssh2 ... |
2019-11-01 13:05:51 |
| 117.201.250.194 | attackbotsspam | Nov 1 05:37:17 SilenceServices sshd[26294]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.201.250.194 Nov 1 05:37:19 SilenceServices sshd[26294]: Failed password for invalid user td from 117.201.250.194 port 52900 ssh2 Nov 1 05:41:54 SilenceServices sshd[27580]: Failed password for root from 117.201.250.194 port 35530 ssh2 |
2019-11-01 12:53:22 |