City: Boardman
Region: Oregon
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: Amazon.com, Inc.
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 52.27.201.98
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 32255
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;52.27.201.98. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019071701 1800 900 604800 86400
;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Thu Jul 18 06:07:00 CST 2019
;; MSG SIZE rcvd: 116
98.201.27.52.in-addr.arpa domain name pointer ec2-52-27-201-98.us-west-2.compute.amazonaws.com.
Server: 67.207.67.2
Address: 67.207.67.2#53
Non-authoritative answer:
98.201.27.52.in-addr.arpa name = ec2-52-27-201-98.us-west-2.compute.amazonaws.com.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 45.55.243.124 | attack | 2019-11-27T08:45:12.905018shield sshd\[12138\]: Invalid user tha from 45.55.243.124 port 49098 2019-11-27T08:45:12.909172shield sshd\[12138\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.243.124 2019-11-27T08:45:14.732484shield sshd\[12138\]: Failed password for invalid user tha from 45.55.243.124 port 49098 ssh2 2019-11-27T08:51:27.301752shield sshd\[13354\]: Invalid user mysql from 45.55.243.124 port 58814 2019-11-27T08:51:27.305958shield sshd\[13354\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.243.124 |
2019-11-27 20:12:08 |
| 112.29.172.224 | attack | Nov 27 12:13:56 server2 sshd\[25926\]: User root from 112.29.172.224 not allowed because not listed in AllowUsers Nov 27 12:13:57 server2 sshd\[25939\]: User root from 112.29.172.224 not allowed because not listed in AllowUsers Nov 27 12:14:10 server2 sshd\[25967\]: User root from 112.29.172.224 not allowed because not listed in AllowUsers Nov 27 12:18:04 server2 sshd\[26266\]: User root from 112.29.172.224 not allowed because not listed in AllowUsers Nov 27 12:19:08 server2 sshd\[26273\]: User root from 112.29.172.224 not allowed because not listed in AllowUsers Nov 27 12:21:53 server2 sshd\[26522\]: User root from 112.29.172.224 not allowed because not listed in AllowUsers |
2019-11-27 20:23:50 |
| 51.68.123.192 | attackbots | Nov 27 09:49:34 lnxded63 sshd[28480]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.123.192 |
2019-11-27 20:22:13 |
| 122.114.79.35 | attackbots | 2019-11-27T11:58:37.522183abusebot-5.cloudsearch.cf sshd\[12784\]: Invalid user slapnik from 122.114.79.35 port 33866 |
2019-11-27 20:30:46 |
| 36.155.114.151 | attack | Nov 27 11:44:21 srv206 sshd[29071]: Invalid user baughan from 36.155.114.151 Nov 27 11:44:21 srv206 sshd[29071]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.155.114.151 Nov 27 11:44:21 srv206 sshd[29071]: Invalid user baughan from 36.155.114.151 Nov 27 11:44:23 srv206 sshd[29071]: Failed password for invalid user baughan from 36.155.114.151 port 39129 ssh2 ... |
2019-11-27 20:15:02 |
| 177.10.151.66 | attackspambots | Honeypot attack, port: 23, PTR: 177.10.151.66.fibra.plimtelecom.com.br. |
2019-11-27 20:11:12 |
| 27.100.26.45 | attackbots | Honeypot attack, port: 445, PTR: PTR record not found |
2019-11-27 20:24:50 |
| 80.82.64.127 | attackspambots | 11/27/2019-13:27:31.198374 80.82.64.127 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 82 |
2019-11-27 20:29:33 |
| 81.16.124.9 | attackspam | Honeypot attack, port: 23, PTR: PTR record not found |
2019-11-27 20:32:28 |
| 209.17.97.26 | attackbots | Automatic report - Banned IP Access |
2019-11-27 20:27:11 |
| 113.165.166.72 | attack | Honeypot attack, port: 445, PTR: static.vdc.vn. |
2019-11-27 20:34:44 |
| 114.67.79.2 | attackspambots | Nov 27 12:34:34 host sshd[18968]: Invalid user contents from 114.67.79.2 port 46780 ... |
2019-11-27 20:13:01 |
| 201.46.28.100 | attackspambots | postfix (unknown user, SPF fail or relay access denied) |
2019-11-27 20:03:50 |
| 175.143.127.73 | attackbotsspam | Nov 27 12:19:25 vpn01 sshd[25091]: Failed password for root from 175.143.127.73 port 51420 ssh2 ... |
2019-11-27 20:32:54 |
| 121.136.167.50 | attackspam | Nov 27 10:42:31 XXX sshd[11539]: Invalid user ofsaa from 121.136.167.50 port 56530 |
2019-11-27 20:04:10 |