18.139.217.29 - IPInfo

Basic Info

City: Singapore

Region: unknown

Country: Singapore

Internet Service Provider: Amazon Data Services Singapore

Hostname: unknown

Organization: Amazon.com, Inc.

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspam	Aug 29 16:49:36 saengerschafter sshd[4813]: Invalid user vijay from 18.139.217.29 Aug 29 16:49:36 saengerschafter sshd[4813]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=em3-18-139-217-29.ap-southeast-1.compute.amazonaws.com Aug 29 16:49:37 saengerschafter sshd[4813]: Failed password for invalid user vijay from 18.139.217.29 port 58696 ssh2 Aug 29 16:49:38 saengerschafter sshd[4813]: Received disconnect from 18.139.217.29: 11: Bye Bye [preauth] Aug 29 17:03:08 saengerschafter sshd[5764]: Invalid user debug from 18.139.217.29 Aug 29 17:03:08 saengerschafter sshd[5764]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=em3-18-139-217-29.ap-southeast-1.compute.amazonaws.com Aug 29 17:03:11 saengerschafter sshd[5764]: Failed password for invalid user debug from 18.139.217.29 port 37982 ssh2 Aug 29 17:03:11 saengerschafter sshd[5764]: Received disconnect from 18.139.217.29: 11: Bye Bye [preau........ -------------------------------	2019-08-31 01:32:01

Type

Details

Datetime

attackspam

Aug 29 16:49:36 saengerschafter sshd[4813]: Invalid user vijay from 18.139.217.29
Aug 29 16:49:36 saengerschafter sshd[4813]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=em3-18-139-217-29.ap-southeast-1.compute.amazonaws.com 
Aug 29 16:49:37 saengerschafter sshd[4813]: Failed password for invalid user vijay from 18.139.217.29 port 58696 ssh2
Aug 29 16:49:38 saengerschafter sshd[4813]: Received disconnect from 18.139.217.29: 11: Bye Bye [preauth]
Aug 29 17:03:08 saengerschafter sshd[5764]: Invalid user debug from 18.139.217.29
Aug 29 17:03:08 saengerschafter sshd[5764]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=em3-18-139-217-29.ap-southeast-1.compute.amazonaws.com 
Aug 29 17:03:11 saengerschafter sshd[5764]: Failed password for invalid user debug from 18.139.217.29 port 37982 ssh2
Aug 29 17:03:11 saengerschafter sshd[5764]: Received disconnect from 18.139.217.29: 11: Bye Bye [preau........
-------------------------------

2019-08-31 01:32:01

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 18.139.217.29
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11275
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;18.139.217.29.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019083001 1800 900 604800 86400

;; Query time: 6 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sat Aug 31 01:31:46 CST 2019
;; MSG SIZE  rcvd: 117

Host info

29.217.139.18.in-addr.arpa domain name pointer ec2-18-139-217-29.ap-southeast-1.compute.amazonaws.com.

Nslookup info:

Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
29.217.139.18.in-addr.arpa	name = ec2-18-139-217-29.ap-southeast-1.compute.amazonaws.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
210.83.70.66	attackbotsspam	port scan and connect, tcp 1433 (ms-sql-s)	2020-05-26 11:43:52
111.12.90.43	attackbotsspam	May 26 06:14:10 gw1 sshd[22604]: Failed password for root from 111.12.90.43 port 44380 ssh2 May 26 06:18:30 gw1 sshd[22818]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.12.90.43 ...	2020-05-26 11:40:47
223.240.81.251	attackbotsspam	May 26 01:58:16 marvibiene sshd[47139]: Invalid user unithkd from 223.240.81.251 port 54364 May 26 01:58:16 marvibiene sshd[47139]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.240.81.251 May 26 01:58:16 marvibiene sshd[47139]: Invalid user unithkd from 223.240.81.251 port 54364 May 26 01:58:18 marvibiene sshd[47139]: Failed password for invalid user unithkd from 223.240.81.251 port 54364 ssh2 ...	2020-05-26 11:51:32
14.248.108.35	attack	2020-05-2601:21:591jdMPv-0008Eg-0V\<=info@whatsup2013.chH=\(localhost\)[178.163.42.136]:43482P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=2167id=BBBE085B5084ABE8343178C004613E4D@whatsup2013.chT="Icanofferwhatmostwomensimplycannot"formdakyen@hotmail.com2020-05-2601:22:591jdMQs-0008JK-EC\<=info@whatsup2013.chH=\(localhost\)[186.179.180.72]:48996P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=2254id=5257E1B2B96D4201DDD89129ED21FA0D@whatsup2013.chT="Iwillremainnearwheneversomebodywillturntheirbackonyou"forbfeldwalker@gmail.com2020-05-2601:21:431jdMPf-0008Dh-BM\<=info@whatsup2013.chH=\(localhost\)[14.248.108.35]:56113P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=2171id=7174C2919A4E6122FEFBB20ACE8E8887@whatsup2013.chT="I'mabletoallowyoutobehappy"forwww.barryschroeder1@gmail.com2020-05-2601:23:301jdMRN-0008L5-Gj\<=info@whatsup2013.chH=\(localhost\)[14.162.205.83]:57673P=esmtpsa	2020-05-26 11:34:23
136.243.208.164	attackspam	[Mon May 25 23:26:54 2020] - Syn Flood From IP: 136.243.208.164 Port: 60000	2020-05-26 11:19:06
101.231.154.154	attackbotsspam	2020-05-25 20:57:24.625137-0500 localhost sshd[11145]: Failed password for invalid user avis from 101.231.154.154 port 7655 ssh2	2020-05-26 11:24:41
159.89.236.71	attackspam	May 26 05:37:43 vps647732 sshd[14399]: Failed password for root from 159.89.236.71 port 32810 ssh2 ...	2020-05-26 11:49:48
106.12.190.104	attack	Failed password for invalid user mongodb from 106.12.190.104 port 47374 ssh2	2020-05-26 11:48:24
209.242.220.111	attackspambots	Automatic report - Banned IP Access	2020-05-26 11:20:29
190.196.64.93	attack	SSH authentication failure x 6 reported by Fail2Ban ...	2020-05-26 11:29:14
223.223.190.130	attackspam	May 26 02:59:31 vps647732 sshd[9575]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.223.190.130 May 26 02:59:34 vps647732 sshd[9575]: Failed password for invalid user digital from 223.223.190.130 port 57584 ssh2 ...	2020-05-26 11:22:51
167.172.125.254	attackspam	"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:	2020-05-26 11:40:20
121.128.135.74	attack	(imapd) Failed IMAP login from 121.128.135.74 (KR/South Korea/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: May 26 03:54:43 ir1 dovecot[2885757]: imap-login: Disconnected (auth failed, 1 attempts in 7 secs): user=, method=PLAIN, rip=121.128.135.74, lip=5.63.12.44, TLS: Connection closed, session=	2020-05-26 11:16:39
14.160.9.126	attackspam	Dovecot Invalid User Login Attempt.	2020-05-26 11:30:22
96.36.8.12	attack	May 25 23:06:13 ny01 sshd[15605]: Failed password for root from 96.36.8.12 port 39424 ssh2 May 25 23:09:40 ny01 sshd[15996]: Failed password for root from 96.36.8.12 port 45786 ssh2 May 25 23:13:05 ny01 sshd[16411]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=96.36.8.12	2020-05-26 11:30:40

Recently Reported IPs

113.185.72.178	41.255.238.101	222.44.17.154	103.102.253.250
214.249.172.172	75.28.183.157	39.134.191.34	132.31.171.171
76.175.27.104	179.137.110.211	175.209.107.213	53.219.162.138
164.114.105.231	190.34.125.251	129.85.150.246	188.193.0.141
27.28.235.151	150.118.73.102	41.10.145.188	60.44.125.9