City: unknown
Region: unknown
Country: United Arab Emirates (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 3.29.56.42
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 6232
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;3.29.56.42. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020600 1800 900 604800 86400
;; Query time: 36 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 06 23:25:34 CST 2025
;; MSG SIZE rcvd: 10342.56.29.3.in-addr.arpa domain name pointer ec2-3-29-56-42.me-central-1.compute.amazonaws.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
42.56.29.3.in-addr.arpa name = ec2-3-29-56-42.me-central-1.compute.amazonaws.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 185.220.101.25 | attack | Automatic report - Banned IP Access |
2020-07-16 05:20:17 |
| 65.52.71.173 | attack | Jul 15 14:57:03 logopedia-1vcpu-1gb-nyc1-01 sshd[102568]: Failed password for root from 65.52.71.173 port 46498 ssh2 ... |
2020-07-16 05:11:34 |
| 92.63.197.70 | attackbotsspam | Jul 15 22:56:26 debian-2gb-nbg1-2 kernel: \[17105149.238690\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=92.63.197.70 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=6620 PROTO=TCP SPT=44665 DPT=1111 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-07-16 05:27:49 |
| 52.187.135.186 | attackbots | Lines containing failures of 52.187.135.186 Jul 14 01:12:51 shared12 sshd[29814]: Invalid user admin from 52.187.135.186 port 45204 Jul 14 01:12:51 shared12 sshd[29814]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.187.135.186 Jul 14 01:12:53 shared12 sshd[29814]: Failed password for invalid user admin from 52.187.135.186 port 45204 ssh2 Jul 14 01:12:53 shared12 sshd[29814]: Received disconnect from 52.187.135.186 port 45204:11: Client disconnecting normally [preauth] Jul 14 01:12:53 shared12 sshd[29814]: Disconnected from invalid user admin 52.187.135.186 port 45204 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=52.187.135.186 |
2020-07-16 05:18:40 |
| 114.141.55.178 | attackbotsspam | 2020-07-15T22:42:03+0200 Failed SSH Authentication/Brute Force Attack. (Server 9) |
2020-07-16 05:34:35 |
| 52.255.153.81 | attack | 2020-07-15 15:20:25.036851-0500 localhost sshd[9464]: Failed password for invalid user welcome from 52.255.153.81 port 54991 ssh2 |
2020-07-16 05:14:25 |
| 185.220.101.240 | attackbotsspam | (mod_security) mod_security (id:218420) triggered by 185.220.101.240 (DE/Germany/-): 5 in the last 3600 secs |
2020-07-16 05:10:00 |
| 23.129.64.217 | attackspam | [Wed Jul 15 20:54:17.074333 2020] [authz_core:error] [pid 21323] [client 23.129.64.217:39562] AH01630: client denied by server configuration: /srv/www/cgi-bin/php5 [Wed Jul 15 20:54:17.578420 2020] [authz_core:error] [pid 21323] [client 23.129.64.217:39562] AH01630: client denied by server configuration: /srv/www/cgi-bin/php.cgi [Wed Jul 15 20:54:18.050850 2020] [authz_core:error] [pid 21323] [client 23.129.64.217:39562] AH01630: client denied by server configuration: /srv/www/cgi-bin/php4.cgi ... |
2020-07-16 04:59:53 |
| 52.230.11.135 | attackspambots | Jul 15 23:08:01 host sshd[15103]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.230.11.135 user=root Jul 15 23:08:03 host sshd[15103]: Failed password for root from 52.230.11.135 port 56188 ssh2 ... |
2020-07-16 05:13:14 |
| 102.133.225.150 | attackspam | Jul 15 23:20:36 rancher-0 sshd[350080]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.133.225.150 user=root Jul 15 23:20:38 rancher-0 sshd[350080]: Failed password for root from 102.133.225.150 port 63494 ssh2 ... |
2020-07-16 05:21:37 |
| 185.233.100.23 | attackspam | $f2bV_matches |
2020-07-16 05:05:54 |
| 155.94.169.229 | attack | (sshd) Failed SSH login from 155.94.169.229 (US/United States/-): 5 in the last 3600 secs |
2020-07-16 05:20:49 |
| 203.192.204.168 | attackbotsspam | Jul 15 14:43:02 ovpn sshd\[21792\]: Invalid user gbase from 203.192.204.168 Jul 15 14:43:02 ovpn sshd\[21792\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.192.204.168 Jul 15 14:43:05 ovpn sshd\[21792\]: Failed password for invalid user gbase from 203.192.204.168 port 50042 ssh2 Jul 15 15:00:05 ovpn sshd\[25891\]: Invalid user hg from 203.192.204.168 Jul 15 15:00:05 ovpn sshd\[25891\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.192.204.168 |
2020-07-16 05:20:03 |
| 34.93.211.102 | attack | firewall-block, port(s): 21/tcp |
2020-07-16 05:37:47 |
| 52.249.250.131 | attackbots | Jul 15 09:17:52 main sshd[16855]: Failed password for invalid user admin from 52.249.250.131 port 5448 ssh2 Jul 15 13:15:04 main sshd[22970]: Failed password for invalid user admin from 52.249.250.131 port 41201 ssh2 Jul 15 19:46:57 main sshd[30606]: Failed password for invalid user eugenemolotov from 52.249.250.131 port 19948 ssh2 Jul 15 19:46:57 main sshd[30607]: Failed password for invalid user eugenemolotov.ru from 52.249.250.131 port 19949 ssh2 |
2020-07-16 05:01:28 |