City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 18.214.6.218
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 43818
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;18.214.6.218. IN A
;; AUTHORITY SECTION:
. 105 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021800 1800 900 604800 86400
;; Query time: 15 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 18:58:14 CST 2022
;; MSG SIZE rcvd: 105
218.6.214.18.in-addr.arpa domain name pointer ec2-18-214-6-218.compute-1.amazonaws.com.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
218.6.214.18.in-addr.arpa name = ec2-18-214-6-218.compute-1.amazonaws.com.
Authoritative answers can be found from:
IP | Type | Details | Datetime |
---|---|---|---|
112.85.42.172 | attackspam | Feb 24 06:07:56 *host* sshd\[13249\]: Unable to negotiate with 112.85.42.172 port 50282: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 \[preauth\] |
2020-02-24 13:09:26 |
187.132.150.165 | attackbots | Scanning random ports - tries to find possible vulnerable services |
2020-02-24 09:42:31 |
188.26.125.47 | attack | Scanning random ports - tries to find possible vulnerable services |
2020-02-24 09:37:08 |
104.238.103.16 | attackspambots | Auto reported by IDS |
2020-02-24 13:22:04 |
223.71.167.164 | attackbotsspam | 223.71.167.164 was recorded 17 times by 3 hosts attempting to connect to the following ports: 69,8005,50070,623,1720,23023,6000,9003,2427,8004,37778,5632,3001,8161,2379,33338. Incident counter (4h, 24h, all-time): 17, 70, 2340 |
2020-02-24 13:20:40 |
60.249.208.164 | attack | port scan and connect, tcp 23 (telnet) |
2020-02-24 13:23:55 |
187.12.209.162 | attackspambots | Unauthorized connection attempt from IP address 187.12.209.162 on Port 445(SMB) |
2020-02-24 09:45:46 |
106.248.228.114 | attackspam | Feb 23 18:51:11 php1 sshd\[1039\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.248.228.114 user=lunalilo Feb 23 18:51:13 php1 sshd\[1039\]: Failed password for lunalilo from 106.248.228.114 port 41918 ssh2 Feb 23 18:55:11 php1 sshd\[1472\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.248.228.114 user=lunalilo Feb 23 18:55:13 php1 sshd\[1472\]: Failed password for lunalilo from 106.248.228.114 port 39732 ssh2 Feb 23 18:59:28 php1 sshd\[1784\]: Invalid user www from 106.248.228.114 Feb 23 18:59:28 php1 sshd\[1784\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.248.228.114 |
2020-02-24 13:04:26 |
103.111.15.94 | attackspambots | C1,WP GET /wp-login.php |
2020-02-24 13:14:51 |
187.32.90.81 | attackbotsspam | Scanning random ports - tries to find possible vulnerable services |
2020-02-24 09:45:00 |
148.243.151.219 | attack | Automatic report - Port Scan Attack |
2020-02-24 13:07:12 |
185.209.0.92 | attack | Feb 24 02:29:52 debian-2gb-nbg1-2 kernel: \[4766994.420496\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=185.209.0.92 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=65450 PROTO=TCP SPT=51872 DPT=23999 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-02-24 09:51:34 |
187.32.129.43 | attackbots | Scanning random ports - tries to find possible vulnerable services |
2020-02-24 09:44:30 |
188.93.243.244 | attackbots | Scanning random ports - tries to find possible vulnerable services |
2020-02-24 09:35:56 |
222.186.175.148 | attackbotsspam | Feb 24 07:09:01 ift sshd\[49871\]: Failed password for root from 222.186.175.148 port 63078 ssh2Feb 24 07:09:12 ift sshd\[49871\]: Failed password for root from 222.186.175.148 port 63078 ssh2Feb 24 07:09:14 ift sshd\[49871\]: Failed password for root from 222.186.175.148 port 63078 ssh2Feb 24 07:09:20 ift sshd\[49919\]: Failed password for root from 222.186.175.148 port 24528 ssh2Feb 24 07:09:24 ift sshd\[49919\]: Failed password for root from 222.186.175.148 port 24528 ssh2 ... |
2020-02-24 13:16:32 |