City: Tokyo
Region: Tokyo
Country: Japan
Internet Service Provider: NTT docomo
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 3.114.85.54
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 53475
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;3.114.85.54. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012301 1800 900 604800 86400
;; Query time: 9 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jan 24 08:29:41 CST 2025
;; MSG SIZE rcvd: 10454.85.114.3.in-addr.arpa domain name pointer ec2-3-114-85-54.ap-northeast-1.compute.amazonaws.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
54.85.114.3.in-addr.arpa name = ec2-3-114-85-54.ap-northeast-1.compute.amazonaws.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 122.161.192.206 | attack | Sep 11 20:33:17 MK-Soft-Root1 sshd\[30473\]: Invalid user support from 122.161.192.206 port 57446 Sep 11 20:33:17 MK-Soft-Root1 sshd\[30473\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.161.192.206 Sep 11 20:33:20 MK-Soft-Root1 sshd\[30473\]: Failed password for invalid user support from 122.161.192.206 port 57446 ssh2 ... |
2019-09-12 02:38:18 |
| 82.221.105.6 | attackbots | Portscan or hack attempt detected by psad/fwsnort |
2019-09-12 02:29:17 |
| 184.105.139.78 | attack | Portscan or hack attempt detected by psad/fwsnort |
2019-09-12 02:25:58 |
| 81.22.45.239 | attack | Sep 11 20:27:50 lumpi kernel: INPUT:DROP:SPAMHAUS_EDROP:IN=eth0 OUT= MAC=52:54:a2:01:a5:04:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.239 DST=172.31.1.100 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=52397 PROTO=TCP SPT=57325 DPT=2018 WINDOW=1024 RES=0x00 SYN URGP=0 ... |
2019-09-12 02:29:45 |
| 198.108.67.95 | attack | 09/11/2019-09:52:41.592844 198.108.67.95 Protocol: 6 ET DROP Dshield Block Listed Source group 1 |
2019-09-12 01:43:18 |
| 185.176.27.114 | attackbots | 09/11/2019-13:44:35.334193 185.176.27.114 Protocol: 6 ET DROP Dshield Block Listed Source group 1 |
2019-09-12 01:51:06 |
| 185.176.27.102 | attack | 09/11/2019-12:58:39.024112 185.176.27.102 Protocol: 6 ET DROP Dshield Block Listed Source group 1 |
2019-09-12 02:22:00 |
| 66.250.218.82 | attack | 445/tcp 445/tcp 445/tcp... [2019-07-11/09-11]12pkt,1pt.(tcp) |
2019-09-12 01:35:20 |
| 71.6.232.5 | attack | Unauthorised access (Sep 11) SRC=71.6.232.5 LEN=40 TOS=0x10 PREC=0x40 TTL=234 ID=54321 TCP DPT=139 WINDOW=65535 SYN Unauthorised access (Sep 11) SRC=71.6.232.5 LEN=40 TOS=0x10 PREC=0x40 TTL=234 ID=54321 TCP DPT=137 WINDOW=65535 SYN Unauthorised access (Sep 10) SRC=71.6.232.5 LEN=40 TOS=0x10 PREC=0x40 TTL=234 ID=54321 TCP DPT=135 WINDOW=65535 SYN |
2019-09-12 02:33:08 |
| 125.133.98.194 | attack | Fail2Ban - FTP Abuse Attempt |
2019-09-12 02:42:39 |
| 71.6.135.131 | attack | Sep 10 18:38:41 lenivpn01 kernel: \[366326.320534\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:2f:6c:1b:d2:74:7f:6e:37:e3:08:00 SRC=71.6.135.131 DST=195.201.121.15 LEN=44 TOS=0x10 PREC=0x00 TTL=110 ID=4740 PROTO=TCP SPT=24858 DPT=21025 WINDOW=37828 RES=0x00 SYN URGP=0 Sep 11 06:21:53 lenivpn01 kernel: \[408516.379204\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:2f:6c:1b:d2:74:7f:6e:37:e3:08:00 SRC=71.6.135.131 DST=195.201.121.15 LEN=44 TOS=0x10 PREC=0x00 TTL=110 ID=49206 PROTO=UDP SPT=18020 DPT=6969 LEN=24 Sep 11 08:06:55 lenivpn01 kernel: \[414818.314875\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:2f:6c:1b:d2:74:7f:6e:37:e3:08:00 SRC=71.6.135.131 DST=195.201.121.15 LEN=44 TOS=0x10 PREC=0x00 TTL=110 ID=47697 PROTO=TCP SPT=15485 DPT=6666 WINDOW=57221 RES=0x00 SYN URGP=0 Sep 11 11:46:23 lenivpn01 kernel: \[427985.520365\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:2f:6c:1b:d2:74:7f:6e:37:e3:08:00 SRC=71.6.135.131 DST=195.201.121.15 LEN=44 TOS=0x10 PREC=0x00 TTL=110 ID=36030 PROTO=TCP SPT=25932 D ... |
2019-09-12 02:34:52 |
| 1.161.243.234 | attack | firewall-block, port(s): 23/tcp |
2019-09-12 02:35:46 |
| 94.20.55.169 | attack | [SMB remote code execution attempt: port tcp/445] *(RWIN=1024)(09111103) |
2019-09-12 02:01:18 |
| 49.83.150.148 | attackbotsspam | Sep 11 20:55:34 www1 sshd\[54705\]: Invalid user admin from 49.83.150.148Sep 11 20:55:36 www1 sshd\[54705\]: Failed password for invalid user admin from 49.83.150.148 port 35210 ssh2Sep 11 20:55:38 www1 sshd\[54705\]: Failed password for invalid user admin from 49.83.150.148 port 35210 ssh2Sep 11 20:55:40 www1 sshd\[54705\]: Failed password for invalid user admin from 49.83.150.148 port 35210 ssh2Sep 11 20:55:42 www1 sshd\[54705\]: Failed password for invalid user admin from 49.83.150.148 port 35210 ssh2Sep 11 20:55:45 www1 sshd\[54705\]: Failed password for invalid user admin from 49.83.150.148 port 35210 ssh2 ... |
2019-09-12 02:46:45 |
| 209.141.58.87 | attackbotsspam | Sep 11 19:42:16 rotator sshd\[23248\]: Failed password for root from 209.141.58.87 port 41108 ssh2Sep 11 19:42:18 rotator sshd\[23250\]: Invalid user ubnt from 209.141.58.87Sep 11 19:42:20 rotator sshd\[23250\]: Failed password for invalid user ubnt from 209.141.58.87 port 45866 ssh2Sep 11 19:42:23 rotator sshd\[23252\]: Failed password for root from 209.141.58.87 port 50798 ssh2Sep 11 19:42:27 rotator sshd\[23254\]: Failed password for root from 209.141.58.87 port 55848 ssh2Sep 11 19:42:31 rotator sshd\[23256\]: Failed password for root from 209.141.58.87 port 60604 ssh2Sep 11 19:42:32 rotator sshd\[23259\]: Invalid user admin from 209.141.58.87 ... |
2019-09-12 02:16:32 |