City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 34.222.124.2
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 42605
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;34.222.124.2. IN A
;; AUTHORITY SECTION:
. 265 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021202 1800 900 604800 86400
;; Query time: 20 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 13 11:11:02 CST 2022
;; MSG SIZE rcvd: 1052.124.222.34.in-addr.arpa domain name pointer ec2-34-222-124-2.us-west-2.compute.amazonaws.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
2.124.222.34.in-addr.arpa name = ec2-34-222-124-2.us-west-2.compute.amazonaws.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 188.251.181.239 | attack | Feb 23 13:10:28 server sshd[307776]: Failed password for invalid user sunlei from 188.251.181.239 port 59055 ssh2 Feb 23 13:49:06 server sshd[330105]: Failed password for invalid user wangqiang from 188.251.181.239 port 52872 ssh2 Feb 23 14:28:03 server sshd[352606]: Failed password for invalid user zabbix from 188.251.181.239 port 63347 ssh2 |
2020-02-23 23:12:42 |
| 115.84.91.85 | attack | lfd: (smtpauth) Failed SMTP AUTH login from 115.84.91.85 (LA/Laos/-): 5 in the last 3600 secs - Mon Jun 25 08:03:17 2018 |
2020-02-23 23:05:49 |
| 142.0.37.168 | attackspam | lfd: (smtpauth) Failed SMTP AUTH login from 142.0.37.168 (have.low-costtowers.com): 5 in the last 3600 secs - Tue Jun 26 11:51:13 2018 |
2020-02-23 22:49:10 |
| 189.228.109.172 | attackbotsspam | Honeypot attack, port: 81, PTR: dsl-189-228-109-172-dyn.prod-infinitum.com.mx. |
2020-02-23 23:11:46 |
| 14.232.214.14 | attackbots | Feb 23 14:28:29 MK-Root1 kernel: [48590.224418] [UFW BLOCK] IN=enp35s0 OUT=vmbr105 MAC=a8:a1:59:0e:9e:7d:80:7f:f8:79:1c:25:08:00 SRC=14.232.214.14 DST=5.9.239.244 LEN=52 TOS=0x00 PREC=0x00 TTL=112 ID=2198 DF PROTO=TCP SPT=61988 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 Feb 23 14:28:30 MK-Root1 kernel: [48591.275505] [UFW BLOCK] IN=enp35s0 OUT=vmbr106 MAC=a8:a1:59:0e:9e:7d:80:7f:f8:79:1c:25:08:00 SRC=14.232.214.14 DST=5.9.239.245 LEN=52 TOS=0x00 PREC=0x00 TTL=112 ID=2258 DF PROTO=TCP SPT=62106 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 Feb 23 14:28:31 MK-Root1 kernel: [48592.333122] [UFW BLOCK] IN=enp35s0 OUT=vmbr107 MAC=a8:a1:59:0e:9e:7d:80:7f:f8:79:1c:25:08:00 SRC=14.232.214.14 DST=5.9.239.246 LEN=52 TOS=0x00 PREC=0x00 TTL=112 ID=2283 DF PROTO=TCP SPT=62220 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 |
2020-02-23 22:44:12 |
| 129.204.240.42 | attackbots | Feb 23 04:33:29 hpm sshd\[11843\]: Invalid user b from 129.204.240.42 Feb 23 04:33:29 hpm sshd\[11843\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.240.42 Feb 23 04:33:31 hpm sshd\[11843\]: Failed password for invalid user b from 129.204.240.42 port 46872 ssh2 Feb 23 04:37:56 hpm sshd\[12242\]: Invalid user lry from 129.204.240.42 Feb 23 04:37:56 hpm sshd\[12242\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.240.42 |
2020-02-23 22:45:57 |
| 79.85.2.163 | attack | Feb 23 14:28:03 ovpn sshd\[25181\]: Invalid user test from 79.85.2.163 Feb 23 14:28:03 ovpn sshd\[25181\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.85.2.163 Feb 23 14:28:03 ovpn sshd\[25182\]: Invalid user test from 79.85.2.163 Feb 23 14:28:03 ovpn sshd\[25182\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.85.2.163 Feb 23 14:28:05 ovpn sshd\[25181\]: Failed password for invalid user test from 79.85.2.163 port 36522 ssh2 |
2020-02-23 23:09:51 |
| 133.130.98.177 | attackspam | Feb 23 08:45:08 plusreed sshd[13766]: Invalid user gzq from 133.130.98.177 ... |
2020-02-23 23:12:04 |
| 5.188.207.9 | attackspambots | Brute force blocker - service: dovecot1 - aantal: 25 - Wed Jun 27 04:50:14 2018 |
2020-02-23 22:42:06 |
| 125.38.182.118 | attackbotsspam | Brute force blocker - service: proftpd1, proftpd2 - aantal: 155 - Tue Jun 26 04:10:15 2018 |
2020-02-23 23:01:29 |
| 118.44.185.4 | attack | Honeypot attack, port: 81, PTR: PTR record not found |
2020-02-23 22:56:28 |
| 59.115.202.129 | attack | Unauthorized connection attempt detected from IP address 59.115.202.129 to port 23 |
2020-02-23 22:59:16 |
| 112.85.42.188 | attack | 02/23/2020-10:07:18.750143 112.85.42.188 Protocol: 6 ET SCAN Potential SSH Scan |
2020-02-23 23:07:40 |
| 171.241.133.232 | attack | 1582464494 - 02/23/2020 14:28:14 Host: 171.241.133.232/171.241.133.232 Port: 445 TCP Blocked |
2020-02-23 22:57:08 |
| 1.206.243.235 | attackbots | Brute force blocker - service: proftpd1, proftpd2 - aantal: 61 - Tue Jun 26 12:45:18 2018 |
2020-02-23 22:40:43 |