City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 44.200.214.115
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 44968
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;44.200.214.115. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021400 1800 900 604800 86400
;; Query time: 10 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 14 19:36:03 CST 2025
;; MSG SIZE rcvd: 107115.214.200.44.in-addr.arpa domain name pointer ec2-44-200-214-115.compute-1.amazonaws.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
115.214.200.44.in-addr.arpa name = ec2-44-200-214-115.compute-1.amazonaws.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 185.176.27.18 | attack | Feb 22 01:25:37 debian-2gb-nbg1-2 kernel: \[4590344.325307\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=185.176.27.18 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=44889 PROTO=TCP SPT=45747 DPT=12834 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-02-22 08:46:52 |
| 23.99.176.168 | attack | Invalid user chocolate from 23.99.176.168 port 3264 |
2020-02-22 08:31:01 |
| 116.203.250.168 | attack | Feb 21 22:11:45 mxgate1 postfix/postscreen[22756]: CONNECT from [116.203.250.168]:56426 to [176.31.12.44]:25 Feb 21 22:11:45 mxgate1 postfix/dnsblog[22771]: addr 116.203.250.168 listed by domain b.barracudacentral.org as 127.0.0.2 Feb 21 22:11:51 mxgate1 postfix/postscreen[22756]: PASS NEW [116.203.250.168]:56426 Feb 21 22:11:51 mxgate1 postfix/smtpd[22757]: connect from static.168.250.203.116.clients.your-server.de[116.203.250.168] Feb x@x Feb x@x Feb x@x Feb 21 22:11:53 mxgate1 postfix/smtpd[22757]: disconnect from static.168.250.203.116.clients.your-server.de[116.203.250.168] ehlo=1 mail=3 rcpt=0/3 data=0/3 eclipset=2 quhostname=1 commands=7/13 Feb 21 22:14:33 mxgate1 postfix/anvil[22760]: statistics: max message rate 3/60s for (smtpd:116.203.250.168) at Feb 21 22:11:53 Feb 21 22:19:51 mxgate1 postfix/postscreen[22965]: CONNECT from [116.203.250.168]:39977 to [176.31.12.44]:25 Feb 21 22:19:51 mxgate1 postfix/postscreen[22965]: PASS OLD [116.203.250.168]:39977 Feb 21 ........ ------------------------------- |
2020-02-22 08:37:58 |
| 189.4.28.99 | attackspam | Feb 22 00:30:25 pornomens sshd\[24051\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.4.28.99 user=root Feb 22 00:30:28 pornomens sshd\[24051\]: Failed password for root from 189.4.28.99 port 36724 ssh2 Feb 22 00:34:40 pornomens sshd\[24069\]: Invalid user mysql from 189.4.28.99 port 37830 Feb 22 00:34:40 pornomens sshd\[24069\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.4.28.99 ... |
2020-02-22 08:44:51 |
| 125.212.207.205 | attackbotsspam | Invalid user jira from 125.212.207.205 port 46940 |
2020-02-22 08:52:59 |
| 218.94.37.22 | attackspam | port scan and connect, tcp 1433 (ms-sql-s) |
2020-02-22 08:23:53 |
| 218.92.0.189 | attack | Feb 22 01:12:25 legacy sshd[5639]: Failed password for root from 218.92.0.189 port 12546 ssh2 Feb 22 01:12:28 legacy sshd[5639]: Failed password for root from 218.92.0.189 port 12546 ssh2 Feb 22 01:12:30 legacy sshd[5639]: Failed password for root from 218.92.0.189 port 12546 ssh2 ... |
2020-02-22 08:34:55 |
| 51.38.224.84 | attackspambots | Feb 22 01:19:34 vpn01 sshd[5117]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.224.84 Feb 22 01:19:36 vpn01 sshd[5117]: Failed password for invalid user jayendra from 51.38.224.84 port 38242 ssh2 ... |
2020-02-22 08:30:09 |
| 122.114.109.112 | attackbots | port scan and connect, tcp 80 (http) |
2020-02-22 08:26:18 |
| 69.167.19.230 | attack | Sql/code injection probe |
2020-02-22 08:53:18 |
| 132.232.90.20 | attackbotsspam | Feb 22 00:30:53 host sshd[24289]: Invalid user steve from 132.232.90.20 port 34464 ... |
2020-02-22 08:22:22 |
| 5.135.101.228 | attack | SASL PLAIN auth failed: ruser=... |
2020-02-22 08:34:39 |
| 49.69.166.125 | attackbots | Feb 21 23:27:22 localhost sshd\[36016\]: Invalid user openhabian from 49.69.166.125 port 58485 Feb 21 23:27:22 localhost sshd\[36016\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.69.166.125 Feb 21 23:27:25 localhost sshd\[36016\]: Failed password for invalid user openhabian from 49.69.166.125 port 58485 ssh2 Feb 21 23:27:26 localhost sshd\[36018\]: Invalid user support from 49.69.166.125 port 58604 Feb 21 23:27:26 localhost sshd\[36018\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.69.166.125 ... |
2020-02-22 08:50:33 |
| 118.25.105.121 | attack | Feb 21 22:28:25 MK-Soft-VM6 sshd[24848]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.105.121 Feb 21 22:28:28 MK-Soft-VM6 sshd[24848]: Failed password for invalid user user5 from 118.25.105.121 port 38095 ssh2 ... |
2020-02-22 08:31:29 |
| 168.196.42.122 | attackspambots | Feb 21 15:55:26 cumulus sshd[26053]: Invalid user gmodserver from 168.196.42.122 port 45377 Feb 21 15:55:26 cumulus sshd[26053]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.196.42.122 Feb 21 15:55:28 cumulus sshd[26053]: Failed password for invalid user gmodserver from 168.196.42.122 port 45377 ssh2 Feb 21 15:55:28 cumulus sshd[26053]: Received disconnect from 168.196.42.122 port 45377:11: Bye Bye [preauth] Feb 21 15:55:28 cumulus sshd[26053]: Disconnected from 168.196.42.122 port 45377 [preauth] Feb 21 16:06:52 cumulus sshd[26360]: Invalid user akazam from 168.196.42.122 port 49222 Feb 21 16:06:52 cumulus sshd[26360]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.196.42.122 Feb 21 16:06:53 cumulus sshd[26360]: Failed password for invalid user akazam from 168.196.42.122 port 49222 ssh2 Feb 21 16:06:54 cumulus sshd[26360]: Received disconnect from 168.196.42.122 port 49222:11: B........ ------------------------------- |
2020-02-22 08:25:49 |