City: unknown
Region: unknown
Country: None
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 35.95.61.138
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 63907
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;35.95.61.138. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021901 1800 900 604800 86400
;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 20 03:21:35 CST 2025
;; MSG SIZE rcvd: 105138.61.95.35.in-addr.arpa domain name pointer ec2-35-95-61-138.us-west-2.compute.amazonaws.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
138.61.95.35.in-addr.arpa name = ec2-35-95-61-138.us-west-2.compute.amazonaws.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 5.135.157.135 | attackbots | Aug 23 05:36:56 root sshd[16073]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.135.157.135 Aug 23 05:36:59 root sshd[16073]: Failed password for invalid user mcc from 5.135.157.135 port 43914 ssh2 Aug 23 05:42:16 root sshd[16156]: Failed password for root from 5.135.157.135 port 33226 ssh2 ... |
2019-08-23 11:45:59 |
| 203.129.226.99 | attack | Aug 23 05:43:13 legacy sshd[20973]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.129.226.99 Aug 23 05:43:16 legacy sshd[20973]: Failed password for invalid user cristina from 203.129.226.99 port 46343 ssh2 Aug 23 05:47:05 legacy sshd[21057]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.129.226.99 ... |
2019-08-23 11:58:24 |
| 159.65.148.115 | attack | Aug 23 00:20:40 ny01 sshd[21824]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.148.115 Aug 23 00:20:42 ny01 sshd[21824]: Failed password for invalid user addict from 159.65.148.115 port 37506 ssh2 Aug 23 00:26:22 ny01 sshd[22336]: Failed password for root from 159.65.148.115 port 54566 ssh2 |
2019-08-23 12:27:22 |
| 50.254.98.214 | attackspambots | *Port Scan* detected from 50.254.98.214 (US/United States/50-254-98-214-static.hfc.comcastbusiness.net). 4 hits in the last 10 seconds |
2019-08-23 12:21:36 |
| 61.216.13.170 | attackbots | Aug 22 13:48:26 hanapaa sshd\[3412\]: Invalid user fx@123 from 61.216.13.170 Aug 22 13:48:26 hanapaa sshd\[3412\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61-216-13-170.hinet-ip.hinet.net Aug 22 13:48:28 hanapaa sshd\[3412\]: Failed password for invalid user fx@123 from 61.216.13.170 port 26236 ssh2 Aug 22 13:52:56 hanapaa sshd\[3830\]: Invalid user 1q2w3e4r from 61.216.13.170 Aug 22 13:52:56 hanapaa sshd\[3830\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61-216-13-170.hinet-ip.hinet.net |
2019-08-23 12:24:44 |
| 218.202.234.66 | attack | Aug 22 12:30:04 *** sshd[20567]: Failed password for invalid user auditor from 218.202.234.66 port 47332 ssh2 Aug 22 13:03:13 *** sshd[21815]: Failed password for invalid user lex from 218.202.234.66 port 59587 ssh2 Aug 22 13:05:56 *** sshd[21915]: Failed password for invalid user am2 from 218.202.234.66 port 42296 ssh2 Aug 22 13:08:34 *** sshd[21975]: Failed password for invalid user mihaela from 218.202.234.66 port 53237 ssh2 Aug 22 13:11:14 *** sshd[22090]: Failed password for invalid user xiao from 218.202.234.66 port 35946 ssh2 Aug 22 13:13:54 *** sshd[22135]: Failed password for invalid user dafong from 218.202.234.66 port 46889 ssh2 Aug 22 13:16:37 *** sshd[22190]: Failed password for invalid user ftp_user from 218.202.234.66 port 57829 ssh2 Aug 22 13:19:22 *** sshd[22245]: Failed password for invalid user webadmin from 218.202.234.66 port 40537 ssh2 Aug 22 13:21:59 *** sshd[22331]: Failed password for invalid user wh from 218.202.234.66 port 51478 ssh2 Aug 22 13:30:03 *** sshd[22506]: Failed password |
2019-08-23 12:32:06 |
| 134.209.81.63 | attack | Aug 22 23:10:27 legacy sshd[9909]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.81.63 Aug 22 23:10:29 legacy sshd[9909]: Failed password for invalid user r from 134.209.81.63 port 33550 ssh2 Aug 22 23:15:11 legacy sshd[10006]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.81.63 ... |
2019-08-23 12:22:41 |
| 216.144.251.86 | attackspambots | Aug 23 04:08:34 MK-Soft-VM5 sshd\[23682\]: Invalid user oracle from 216.144.251.86 port 43540 Aug 23 04:08:34 MK-Soft-VM5 sshd\[23682\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=216.144.251.86 Aug 23 04:08:35 MK-Soft-VM5 sshd\[23682\]: Failed password for invalid user oracle from 216.144.251.86 port 43540 ssh2 ... |
2019-08-23 12:22:08 |
| 42.112.208.52 | attack | Splunk® : port scan detected: Aug 22 16:44:40 testbed kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=82:c6:52:d1:6e:53:64:c3:d6:0b:ef:f0:08:00 SRC=42.112.208.52 DST=104.248.11.191 LEN=40 TOS=0x00 PREC=0x00 TTL=101 ID=256 PROTO=TCP SPT=6000 DPT=8089 WINDOW=16384 RES=0x00 SYN URGP=0 |
2019-08-23 12:24:21 |
| 181.40.122.2 | attack | Invalid user school from 181.40.122.2 port 36663 |
2019-08-23 12:35:09 |
| 106.13.37.253 | attack | Aug 22 05:30:07 itv-usvr-01 sshd[25343]: Invalid user xiaojie from 106.13.37.253 Aug 22 05:30:07 itv-usvr-01 sshd[25343]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.37.253 Aug 22 05:30:07 itv-usvr-01 sshd[25343]: Invalid user xiaojie from 106.13.37.253 Aug 22 05:30:08 itv-usvr-01 sshd[25343]: Failed password for invalid user xiaojie from 106.13.37.253 port 45878 ssh2 Aug 22 05:37:11 itv-usvr-01 sshd[25582]: Invalid user tina from 106.13.37.253 |
2019-08-23 12:32:30 |
| 103.48.116.35 | attackspambots | www.handydirektreparatur.de 103.48.116.35 \[23/Aug/2019:04:44:11 +0200\] "POST /wp-login.php HTTP/1.1" 200 5665 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" www.handydirektreparatur.de 103.48.116.35 \[23/Aug/2019:04:44:12 +0200\] "POST /xmlrpc.php HTTP/1.1" 200 4114 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" |
2019-08-23 12:00:11 |
| 159.65.164.133 | attackspambots | Aug 22 13:14:55 php2 sshd\[9326\]: Invalid user hg from 159.65.164.133 Aug 22 13:14:55 php2 sshd\[9326\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.164.133 Aug 22 13:14:57 php2 sshd\[9326\]: Failed password for invalid user hg from 159.65.164.133 port 35946 ssh2 Aug 22 13:19:27 php2 sshd\[9744\]: Invalid user mara from 159.65.164.133 Aug 22 13:19:27 php2 sshd\[9744\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.164.133 |
2019-08-23 11:56:01 |
| 173.249.58.229 | attackbots | RDP Bruteforce |
2019-08-23 12:16:38 |
| 45.176.133.2 | attackbots | 2019-08-22 20:43:24 H=(45-176-133-2.clientes.nsystemtelecom.net.br) [45.176.133.2]:5605 I=[10.100.18.20]:25 F= |
2019-08-23 12:23:58 |