City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 3.144.99.13
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11107
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;3.144.99.13. IN A
;; AUTHORITY SECTION:
. 473 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022020702 1800 900 604800 86400
;; Query time: 83 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 08 10:09:08 CST 2022
;; MSG SIZE rcvd: 10413.99.144.3.in-addr.arpa domain name pointer ec2-3-144-99-13.us-east-2.compute.amazonaws.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
13.99.144.3.in-addr.arpa name = ec2-3-144-99-13.us-east-2.compute.amazonaws.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 5.149.202.108 | attackspam | SMB Server BruteForce Attack |
2020-05-16 02:31:56 |
| 178.33.216.187 | attack | SSH brute-force attempt |
2020-05-16 02:06:27 |
| 104.239.136.8 | attackspam | May 13 20:59:57 ns sshd[3515]: Connection from 104.239.136.8 port 37264 on 134.119.39.98 port 22 May 13 20:59:58 ns sshd[3515]: Invalid user postgres from 104.239.136.8 port 37264 May 13 20:59:58 ns sshd[3515]: Failed password for invalid user postgres from 104.239.136.8 port 37264 ssh2 May 13 20:59:58 ns sshd[3515]: Received disconnect from 104.239.136.8 port 37264:11: Bye Bye [preauth] May 13 20:59:58 ns sshd[3515]: Disconnected from 104.239.136.8 port 37264 [preauth] May 13 21:07:10 ns sshd[23139]: Connection from 104.239.136.8 port 40782 on 134.119.39.98 port 22 May 13 21:07:17 ns sshd[23139]: Connection closed by 104.239.136.8 port 40782 [preauth] May 13 21:09:28 ns sshd[19026]: Connection from 104.239.136.8 port 32796 on 134.119.39.98 port 22 May 13 21:09:33 ns sshd[19026]: Invalid user eom from 104.239.136.8 port 32796 May 13 21:09:33 ns sshd[19026]: Failed password for invalid user eom from 104.239.136.8 port 32796 ssh2 May 13 21:09:33 ns sshd[19026]: Received d........ ------------------------------- |
2020-05-16 02:33:23 |
| 202.29.80.133 | attackspambots | May 15 15:24:31 vps639187 sshd\[3942\]: Invalid user analy from 202.29.80.133 port 44895 May 15 15:24:31 vps639187 sshd\[3942\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.80.133 May 15 15:24:33 vps639187 sshd\[3942\]: Failed password for invalid user analy from 202.29.80.133 port 44895 ssh2 ... |
2020-05-16 01:50:02 |
| 107.170.20.247 | attackbots | 2020-05-15T15:21:22.719462abusebot-4.cloudsearch.cf sshd[27640]: Invalid user git from 107.170.20.247 port 45619 2020-05-15T15:21:22.726309abusebot-4.cloudsearch.cf sshd[27640]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.170.20.247 2020-05-15T15:21:22.719462abusebot-4.cloudsearch.cf sshd[27640]: Invalid user git from 107.170.20.247 port 45619 2020-05-15T15:21:25.009498abusebot-4.cloudsearch.cf sshd[27640]: Failed password for invalid user git from 107.170.20.247 port 45619 ssh2 2020-05-15T15:24:44.571816abusebot-4.cloudsearch.cf sshd[27860]: Invalid user pfs from 107.170.20.247 port 38403 2020-05-15T15:24:44.578293abusebot-4.cloudsearch.cf sshd[27860]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.170.20.247 2020-05-15T15:24:44.571816abusebot-4.cloudsearch.cf sshd[27860]: Invalid user pfs from 107.170.20.247 port 38403 2020-05-15T15:24:46.926603abusebot-4.cloudsearch.cf sshd[27860]: Failed pa ... |
2020-05-16 02:27:44 |
| 211.81.20.138 | attackspam | Dovecot Invalid User Login Attempt. |
2020-05-16 02:04:11 |
| 180.242.154.145 | attackbotsspam | 1589545345 - 05/15/2020 14:22:25 Host: 180.242.154.145/180.242.154.145 Port: 445 TCP Blocked |
2020-05-16 01:52:32 |
| 111.229.196.144 | attack | Invalid user opus from 111.229.196.144 port 53366 |
2020-05-16 01:50:25 |
| 177.84.21.1 | attack | Automatic report - Port Scan Attack |
2020-05-16 02:14:55 |
| 106.13.90.133 | attack | 2020-05-15T13:10:32.226155shield sshd\[10013\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.90.133 user=root 2020-05-15T13:10:34.174130shield sshd\[10013\]: Failed password for root from 106.13.90.133 port 41566 ssh2 2020-05-15T13:15:40.223503shield sshd\[11860\]: Invalid user fop2 from 106.13.90.133 port 36024 2020-05-15T13:15:40.227710shield sshd\[11860\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.90.133 2020-05-15T13:15:42.125450shield sshd\[11860\]: Failed password for invalid user fop2 from 106.13.90.133 port 36024 ssh2 |
2020-05-16 02:21:37 |
| 209.17.97.26 | attackspam | The IP has triggered Cloudflare WAF. CF-Ray: 593d2a2cf81673d9 | WAF_Rule_ID: 4c344d8609cf47c88674e7c5f743a22c | WAF_Kind: firewall | CF_Action: drop | Country: US | CF_IPClass: unknown | Protocol: HTTP/1.1 | Method: GET | Host: ts.wevg.org | User-Agent: Mozilla/5.0 (compatible; Nimbostratus-Bot/v1.3.2; http://cloudsystemnetworks.com) | CF_DC: IAD. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB). |
2020-05-16 02:18:53 |
| 23.142.80.0 | attackbots | Lines containing failures of 23.142.80.0 May 15 13:12:50 expertgeeks postfix/smtpd[4594]: connect from unknown[23.142.80.0] May 15 13:12:51 expertgeeks policyd-spf[4601]: None; identhostnamey=helo; client-ip=23.142.80.0; helo=vmi377987.contaboserver.net; envelope-from=x@x May 15 13:12:51 expertgeeks policyd-spf[4601]: Fail; identhostnamey=mailfrom; client-ip=23.142.80.0; helo=vmi377987.contaboserver.net; envelope-from=x@x May x@x May 15 13:12:52 expertgeeks policyd-spf[4601]: None; identhostnamey=helo; client-ip=23.142.80.0; helo=vmi377987.contaboserver.net; envelope-from=x@x May 15 13:12:52 expertgeeks policyd-spf[4601]: Fail; identhostnamey=mailfrom; client-ip=23.142.80.0; helo=vmi377987.contaboserver.net; envelope-from=x@x May x@x May 15 13:12:52 expertgeeks policyd-spf[4601]: None; identhostnamey=helo; client-ip=23.142.80.0; helo=vmi377987.contaboserver.net; envelope-from=x@x May 15 13:12:52 expertgeeks policyd-spf[4601]: Fail; identhostnamey=mailfrom; client-ip=23.1........ ------------------------------ |
2020-05-16 02:10:41 |
| 211.103.154.6 | attack |
|
2020-05-16 01:51:55 |
| 206.189.3.176 | attack | "fail2ban match" |
2020-05-16 02:24:58 |
| 150.164.110.164 | attackbotsspam | May 15 14:54:49 firewall sshd[19760]: Invalid user welerson from 150.164.110.164 May 15 14:54:51 firewall sshd[19760]: Failed password for invalid user welerson from 150.164.110.164 port 39246 ssh2 May 15 15:02:32 firewall sshd[19904]: Invalid user welinton from 150.164.110.164 ... |
2020-05-16 02:12:39 |