City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 44.240.96.85
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 9489
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;44.240.96.85. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020401 1800 900 604800 86400
;; Query time: 41 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 05 11:23:24 CST 2025
;; MSG SIZE rcvd: 105
85.96.240.44.in-addr.arpa domain name pointer ec2-44-240-96-85.us-west-2.compute.amazonaws.com.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
85.96.240.44.in-addr.arpa name = ec2-44-240-96-85.us-west-2.compute.amazonaws.com.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 49.234.98.155 | attack | ... |
2020-06-02 00:48:11 |
| 182.122.69.29 | attack | Lines containing failures of 182.122.69.29 Jun 1 00:34:42 shared01 sshd[21754]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.122.69.29 user=r.r Jun 1 00:34:44 shared01 sshd[21754]: Failed password for r.r from 182.122.69.29 port 49286 ssh2 Jun 1 00:34:44 shared01 sshd[21754]: Received disconnect from 182.122.69.29 port 49286:11: Bye Bye [preauth] Jun 1 00:34:44 shared01 sshd[21754]: Disconnected from authenticating user r.r 182.122.69.29 port 49286 [preauth] Jun 1 00:40:38 shared01 sshd[24156]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.122.69.29 user=r.r Jun 1 00:40:41 shared01 sshd[24156]: Failed password for r.r from 182.122.69.29 port 56192 ssh2 Jun 1 00:40:41 shared01 sshd[24156]: Received disconnect from 182.122.69.29 port 56192:11: Bye Bye [preauth] Jun 1 00:40:41 shared01 sshd[24156]: Disconnected from authenticating user r.r 182.122.69.29 port 56192 [preauth........ ------------------------------ |
2020-06-02 00:47:03 |
| 64.202.189.187 | attack | 64.202.189.187 - - [01/Jun/2020:17:21:42 +0100] "POST /wp-login.php HTTP/1.1" 200 1875 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 64.202.189.187 - - [01/Jun/2020:17:21:43 +0100] "POST /wp-login.php HTTP/1.1" 200 1860 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 64.202.189.187 - - [01/Jun/2020:17:21:43 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-06-02 00:25:07 |
| 66.70.160.187 | attackspam | CMS (WordPress or Joomla) login attempt. |
2020-06-02 00:22:10 |
| 185.143.74.108 | attack | Jun 1 18:19:30 srv01 postfix/smtpd\[18696\]: warning: unknown\[185.143.74.108\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jun 1 18:19:48 srv01 postfix/smtpd\[14690\]: warning: unknown\[185.143.74.108\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jun 1 18:20:03 srv01 postfix/smtpd\[18696\]: warning: unknown\[185.143.74.108\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jun 1 18:20:16 srv01 postfix/smtpd\[14690\]: warning: unknown\[185.143.74.108\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jun 1 18:21:08 srv01 postfix/smtpd\[14690\]: warning: unknown\[185.143.74.108\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2020-06-02 00:24:06 |
| 95.218.92.244 | attack | Icarus honeypot on github |
2020-06-02 00:47:28 |
| 134.209.12.115 | attackspambots | Jun 1 16:26:14 vps687878 sshd\[30538\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.12.115 user=root Jun 1 16:26:15 vps687878 sshd\[30538\]: Failed password for root from 134.209.12.115 port 33678 ssh2 Jun 1 16:30:08 vps687878 sshd\[30746\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.12.115 user=root Jun 1 16:30:10 vps687878 sshd\[30746\]: Failed password for root from 134.209.12.115 port 39100 ssh2 Jun 1 16:33:56 vps687878 sshd\[31089\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.12.115 user=root ... |
2020-06-02 00:23:15 |
| 14.23.81.42 | attackspambots | Jun 1 14:01:25 * sshd[5454]: Failed password for root from 14.23.81.42 port 53510 ssh2 |
2020-06-02 00:51:58 |
| 222.186.169.194 | attackspambots | Jun 1 18:29:39 abendstille sshd\[28609\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.169.194 user=root Jun 1 18:29:39 abendstille sshd\[28607\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.169.194 user=root Jun 1 18:29:41 abendstille sshd\[28609\]: Failed password for root from 222.186.169.194 port 49194 ssh2 Jun 1 18:29:41 abendstille sshd\[28607\]: Failed password for root from 222.186.169.194 port 35826 ssh2 Jun 1 18:29:44 abendstille sshd\[28609\]: Failed password for root from 222.186.169.194 port 49194 ssh2 ... |
2020-06-02 00:35:23 |
| 118.34.12.35 | attackbotsspam | Jun 1 15:28:13 marvibiene sshd[3559]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.34.12.35 user=root Jun 1 15:28:15 marvibiene sshd[3559]: Failed password for root from 118.34.12.35 port 33680 ssh2 Jun 1 15:38:51 marvibiene sshd[3730]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.34.12.35 user=root Jun 1 15:38:53 marvibiene sshd[3730]: Failed password for root from 118.34.12.35 port 48952 ssh2 ... |
2020-06-02 00:25:36 |
| 1.144.234.60 | attackbots | 2019-07-08 10:32:16 1hkP4I-0001GK-Pw SMTP connection from \(\[1.144.110.26\]\) \[1.144.234.60\]:41555 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-07-08 10:32:30 1hkP4X-0001GZ-FA SMTP connection from \(\[1.144.110.26\]\) \[1.144.234.60\]:48433 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-07-08 10:32:37 1hkP4e-0001Gt-GW SMTP connection from \(\[1.144.110.26\]\) \[1.144.234.60\]:44108 I=\[193.107.88.166\]:25 closed by DROP in ACL ... |
2020-06-02 00:46:30 |
| 180.76.190.251 | attack | Failed password for root from 180.76.190.251 port 48078 ssh2 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.190.251 user=root Failed password for root from 180.76.190.251 port 41404 ssh2 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.190.251 user=root Failed password for root from 180.76.190.251 port 34720 ssh2 |
2020-06-02 00:26:31 |
| 103.249.100.196 | attackspambots | ENG,WP GET /oldsite/wp-includes/wlwmanifest.xml |
2020-06-02 00:11:35 |
| 222.186.175.202 | attackspambots | Jun 1 18:32:03 vpn01 sshd[16442]: Failed password for root from 222.186.175.202 port 27008 ssh2 Jun 1 18:32:13 vpn01 sshd[16442]: Failed password for root from 222.186.175.202 port 27008 ssh2 ... |
2020-06-02 00:37:18 |
| 142.93.46.172 | attack | CMS (WordPress or Joomla) login attempt. |
2020-06-02 00:54:27 |