3.16.45.140 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: Amazon Technologies Inc.

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	Lines containing failures of 3.16.45.140 Aug 2 00:46:22 mailserver sshd[20122]: Invalid user test from 3.16.45.140 port 54846 Aug 2 00:46:22 mailserver sshd[20122]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=3.16.45.140 Aug 2 00:46:24 mailserver sshd[20122]: Failed password for invalid user test from 3.16.45.140 port 54846 ssh2 Aug 2 00:46:24 mailserver sshd[20122]: Received disconnect from 3.16.45.140 port 54846:11: Bye Bye [preauth] Aug 2 00:46:24 mailserver sshd[20122]: Disconnected from invalid user test 3.16.45.140 port 54846 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=3.16.45.140	2019-08-02 16:16:12

Type

Details

Datetime

attack

Lines containing failures of 3.16.45.140
Aug  2 00:46:22 mailserver sshd[20122]: Invalid user test from 3.16.45.140 port 54846
Aug  2 00:46:22 mailserver sshd[20122]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=3.16.45.140
Aug  2 00:46:24 mailserver sshd[20122]: Failed password for invalid user test from 3.16.45.140 port 54846 ssh2
Aug  2 00:46:24 mailserver sshd[20122]: Received disconnect from 3.16.45.140 port 54846:11: Bye Bye [preauth]
Aug  2 00:46:24 mailserver sshd[20122]: Disconnected from invalid user test 3.16.45.140 port 54846 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=3.16.45.140

2019-08-02 16:16:12

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 3.16.45.140
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 37467
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;3.16.45.140.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019080200 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Fri Aug 02 16:16:03 CST 2019
;; MSG SIZE  rcvd: 115

Host info

140.45.16.3.in-addr.arpa domain name pointer ec2-3-16-45-140.us-east-2.compute.amazonaws.com.

Nslookup info:

Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
140.45.16.3.in-addr.arpa	name = ec2-3-16-45-140.us-east-2.compute.amazonaws.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
171.22.254.109	attackbotsspam	May 7 16:10:59 mercury wordpress(www.learnargentinianspanish.com)[25907]: XML-RPC authentication failure for josh from 171.22.254.109 ...	2019-09-10 20:20:09
123.148.147.194	attackbotsspam	[Wed Jul 17 07:06:16.194976 2019] [access_compat:error] [pid 31788] [client 123.148.147.194:64663] AH01797: client denied by server configuration: /var/www/html/josh/wp-login.php ...	2019-09-10 20:09:41
210.245.33.77	attackspam	Sep 10 11:50:38 thevastnessof sshd[7756]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.245.33.77 ...	2019-09-10 19:55:05
120.195.162.71	attackbotsspam	Sep 10 14:12:55 ns41 sshd[15074]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.195.162.71	2019-09-10 20:13:27
173.249.35.163	attack	Sep 8 10:07:11 mercury wordpress(www.learnargentinianspanish.com)[30679]: XML-RPC authentication failure for josh from 173.249.35.163 ...	2019-09-10 19:47:39
173.54.193.242	attackbotsspam	May 21 21:25:15 mercury wordpress(lukegirvin.com)[3807]: XML-RPC authentication failure for luke from 173.54.193.242 ...	2019-09-10 19:43:04
113.172.131.241	attackbots	2019-07-24T01:47:46.137Z CLOSE host=113.172.131.241 port=52095 fd=4 time=20.017 bytes=17 ...	2019-09-10 20:11:34
209.105.233.228	attack	Jul 1 05:42:49 mercury smtpd[1186]: 46f215a20e08d3fd smtp event=failed-command address=209.105.233.228 host=209.105.233.228 command="RCPT TO:" result="550 Invalid recipient" ...	2019-09-10 20:15:09
159.203.203.234	attackspambots	Sep 6 11:26:47 mercury kernel: [UFW ALLOW] IN=eth0 OUT= MAC=f2:3c:91:bc:4d:f8:84:78:ac:5a:1a:41:08:00 SRC=159.203.203.234 DST=109.74.200.221 LEN=76 TOS=0x00 PREC=0x00 TTL=245 ID=54321 PROTO=UDP SPT=41818 DPT=123 LEN=56 ...	2019-09-10 20:20:44
208.100.26.236	attack	Aug 13 11:02:23 mercury smtpd[1187]: 17a8d4458a5b8b44 smtp event=bad-input address=208.100.26.236 host=ip236.208-100-26.static.steadfastdns.net result="500 5.5.1 Invalid command: Pipelining not supported" ...	2019-09-10 20:18:29
81.130.193.35	attack	Sep 10 13:30:22 mail sshd\[27397\]: Invalid user test1 from 81.130.193.35 Sep 10 13:30:22 mail sshd\[27397\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.130.193.35 Sep 10 13:30:24 mail sshd\[27397\]: Failed password for invalid user test1 from 81.130.193.35 port 37975 ssh2 ...	2019-09-10 20:16:29
171.22.254.103	attackspam	May 7 13:33:35 mercury wordpress(www.learnargentinianspanish.com)[25907]: XML-RPC authentication failure for josh from 171.22.254.103 ...	2019-09-10 20:27:12
117.50.92.160	attackspam	Sep 10 01:54:36 web1 sshd\[20188\]: Invalid user www from 117.50.92.160 Sep 10 01:54:36 web1 sshd\[20188\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.92.160 Sep 10 01:54:38 web1 sshd\[20188\]: Failed password for invalid user www from 117.50.92.160 port 45670 ssh2 Sep 10 01:56:33 web1 sshd\[20965\]: Invalid user 123 from 117.50.92.160 Sep 10 01:56:33 web1 sshd\[20965\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.92.160	2019-09-10 20:09:59
123.148.147.209	attackbotsspam	[Thu Jul 11 16:03:30.952884 2019] [access_compat:error] [pid 4920] [client 123.148.147.209:56438] AH01797: client denied by server configuration: /var/www/html/josh/wp-login.php ...	2019-09-10 20:07:47
103.80.117.214	attackspam	Sep 10 02:22:54 wbs sshd\[22860\]: Invalid user admin from 103.80.117.214 Sep 10 02:22:54 wbs sshd\[22860\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.80.117.214 Sep 10 02:22:56 wbs sshd\[22860\]: Failed password for invalid user admin from 103.80.117.214 port 37968 ssh2 Sep 10 02:29:32 wbs sshd\[23506\]: Invalid user csserver from 103.80.117.214 Sep 10 02:29:32 wbs sshd\[23506\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.80.117.214	2019-09-10 20:30:19

Recently Reported IPs

66.124.232.204	4.240.247.126	222.120.192.106	92.215.90.118
189.8.1.50	7.242.111.46	146.154.101.82	158.55.173.23
41.101.6.109	113.50.52.156	203.134.104.198	4.231.49.28
44.131.183.5	37.186.220.241	83.51.14.93	139.234.63.121
35.118.167.103	220.3.133.60	248.13.150.39	45.76.98.193