City: Ashburn
Region: Virginia
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 34.200.134.168
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 20948
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;34.200.134.168. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022602 1800 900 604800 86400
;; Query time: 175 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 27 08:43:42 CST 2025
;; MSG SIZE rcvd: 107168.134.200.34.in-addr.arpa domain name pointer ec2-34-200-134-168.compute-1.amazonaws.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
168.134.200.34.in-addr.arpa name = ec2-34-200-134-168.compute-1.amazonaws.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 79.137.84.144 | attack | Jul 20 05:41:57 localhost sshd\[27469\]: Invalid user akash from 79.137.84.144 port 39016 Jul 20 05:41:57 localhost sshd\[27469\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.137.84.144 ... |
2019-07-20 13:00:46 |
| 110.251.125.147 | attackspam | Telnet/23 MH Probe, BF, Hack - |
2019-07-20 12:54:54 |
| 47.72.84.128 | attack | Jul 20 04:33:19 server sshd\[11927\]: Invalid user pi from 47.72.84.128 port 41024 Jul 20 04:33:19 server sshd\[11929\]: Invalid user pi from 47.72.84.128 port 41030 Jul 20 04:33:20 server sshd\[11927\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.72.84.128 Jul 20 04:33:20 server sshd\[11929\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.72.84.128 Jul 20 04:33:22 server sshd\[11929\]: Failed password for invalid user pi from 47.72.84.128 port 41030 ssh2 |
2019-07-20 12:45:34 |
| 143.0.63.183 | attack | Automatic report - Port Scan Attack |
2019-07-20 12:58:23 |
| 89.109.11.209 | attack | Jul 20 07:03:37 dedicated sshd[31453]: Invalid user katie from 89.109.11.209 port 57613 |
2019-07-20 13:08:55 |
| 191.53.254.141 | attackspam | failed_logins |
2019-07-20 13:04:23 |
| 185.195.201.148 | attack | Splunk® : port scan detected: Jul 19 21:32:01 testbed kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=82:c6:52:d1:6e:53:c0:42:d0:39:2c:30:08:00 SRC=185.195.201.148 DST=104.248.11.191 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=TCP SPT=57239 DPT=27017 WINDOW=65535 RES=0x00 SYN URGP=0 |
2019-07-20 13:18:02 |
| 142.93.39.181 | attackspambots | 2019-07-20T05:06:32.869393abusebot-5.cloudsearch.cf sshd\[15035\]: Invalid user aan from 142.93.39.181 port 58230 |
2019-07-20 13:09:37 |
| 171.227.34.57 | attack | Honeypot attack, port: 445, PTR: dynamic-ip-adsl.viettel.vn. |
2019-07-20 12:25:10 |
| 45.227.253.213 | attack | Jul 20 06:22:43 relay postfix/smtpd\[11118\]: warning: unknown\[45.227.253.213\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 20 06:25:50 relay postfix/smtpd\[11122\]: warning: unknown\[45.227.253.213\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 20 06:25:58 relay postfix/smtpd\[11118\]: warning: unknown\[45.227.253.213\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 20 06:31:41 relay postfix/smtpd\[11121\]: warning: unknown\[45.227.253.213\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 20 06:31:49 relay postfix/smtpd\[11122\]: warning: unknown\[45.227.253.213\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2019-07-20 12:44:01 |
| 41.214.139.226 | attack | 2019-07-20T10:43:47.055051enmeeting.mahidol.ac.th sshd\[21752\]: User root from 41.214.139.226 not allowed because not listed in AllowUsers 2019-07-20T10:43:47.176482enmeeting.mahidol.ac.th sshd\[21752\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.214.139.226 user=root 2019-07-20T10:43:48.602616enmeeting.mahidol.ac.th sshd\[21752\]: Failed password for invalid user root from 41.214.139.226 port 52262 ssh2 ... |
2019-07-20 12:33:52 |
| 51.83.72.108 | attackspam | Jul 20 01:01:47 vps200512 sshd\[18349\]: Invalid user gogs from 51.83.72.108 Jul 20 01:01:47 vps200512 sshd\[18349\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.83.72.108 Jul 20 01:01:49 vps200512 sshd\[18349\]: Failed password for invalid user gogs from 51.83.72.108 port 50660 ssh2 Jul 20 01:06:13 vps200512 sshd\[18430\]: Invalid user matteo from 51.83.72.108 Jul 20 01:06:13 vps200512 sshd\[18430\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.83.72.108 |
2019-07-20 13:07:24 |
| 91.65.188.76 | attackspambots | 2019-07-20T03:33:59.596654centos sshd\[19309\]: Invalid user pi from 91.65.188.76 port 37552 2019-07-20T03:33:59.596655centos sshd\[19311\]: Invalid user pi from 91.65.188.76 port 37558 2019-07-20T03:33:59.637662centos sshd\[19311\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip5b41bc4c.dynamic.kabel-deutschland.de |
2019-07-20 12:33:07 |
| 58.214.9.102 | attackbots | Jul 20 04:41:03 MK-Soft-VM7 sshd\[10144\]: Invalid user amine from 58.214.9.102 port 55530 Jul 20 04:41:03 MK-Soft-VM7 sshd\[10144\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.214.9.102 Jul 20 04:41:04 MK-Soft-VM7 sshd\[10144\]: Failed password for invalid user amine from 58.214.9.102 port 55530 ssh2 ... |
2019-07-20 12:55:50 |
| 54.36.148.39 | attackspambots | Automatic report - Banned IP Access |
2019-07-20 12:28:19 |