52.34.99.157 - IPInfo

Basic Info

City: Boardman

Region: Oregon

Country: United States

Internet Service Provider: Amazon Technologies Inc.

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspam	As always with amazon web services	2019-10-14 03:38:49

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 52.34.99.157
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 64972
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;52.34.99.157.			IN	A

;; AUTHORITY SECTION:
.			435	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019101300 1800 900 604800 86400

;; Query time: 429 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Oct 14 03:38:47 CST 2019
;; MSG SIZE  rcvd: 116

Host info

157.99.34.52.in-addr.arpa domain name pointer ec2-52-34-99-157.us-west-2.compute.amazonaws.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
157.99.34.52.in-addr.arpa	name = ec2-52-34-99-157.us-west-2.compute.amazonaws.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
51.77.135.89	attack	DATE:2020-07-19 08:24:01,IP:51.77.135.89,MATCHES:10,PORT:ssh	2020-07-19 15:39:11
161.35.61.229	attack	Jul 19 07:51:44 vps-51d81928 sshd[82380]: Invalid user admin from 161.35.61.229 port 34930 Jul 19 07:51:44 vps-51d81928 sshd[82380]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.35.61.229 Jul 19 07:51:44 vps-51d81928 sshd[82380]: Invalid user admin from 161.35.61.229 port 34930 Jul 19 07:51:47 vps-51d81928 sshd[82380]: Failed password for invalid user admin from 161.35.61.229 port 34930 ssh2 Jul 19 07:56:00 vps-51d81928 sshd[82466]: Invalid user hori from 161.35.61.229 port 51962 ...	2020-07-19 16:02:36
159.89.47.115	attackspambots	Port Scan ...	2020-07-19 15:31:05
162.243.169.57	attack	Port Scan detected from 162.243.169.57 (US/United States/New Jersey/North Bergen/-). 4 hits in the last 275 seconds	2020-07-19 15:29:02
178.215.175.188	attackspam	Automatic report - Banned IP Access	2020-07-19 15:43:16
5.135.181.53	attack	$f2bV_matches	2020-07-19 15:51:31
167.71.209.2	attackbotsspam	invalid user maemi from 167.71.209.2 port 39630 ssh2	2020-07-19 15:41:25
222.186.175.202	attackspambots	Jul 19 08:39:43 ajax sshd[1908]: Failed password for root from 222.186.175.202 port 62660 ssh2 Jul 19 08:39:48 ajax sshd[1908]: Failed password for root from 222.186.175.202 port 62660 ssh2	2020-07-19 15:52:10
61.177.172.54	attackbotsspam	Jul 19 09:33:21 roki-contabo sshd\[12410\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.54 user=root Jul 19 09:33:23 roki-contabo sshd\[12410\]: Failed password for root from 61.177.172.54 port 22336 ssh2 Jul 19 09:33:42 roki-contabo sshd\[12423\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.54 user=root Jul 19 09:33:44 roki-contabo sshd\[12423\]: Failed password for root from 61.177.172.54 port 37783 ssh2 Jul 19 09:34:05 roki-contabo sshd\[12426\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.54 user=root ...	2020-07-19 15:38:42
185.176.27.26	attackspambots	TCP (SYN) 185.176.27.26:58282 -> port 3100, len 44	2020-07-19 15:52:39
94.102.49.65	attack	Jul 19 06:34:14 WHD8 dovecot: pop3-login: Aborted login $auth failed, 1 attempts in 2 secs$: user=\, method=PLAIN, rip=94.102.49.65, lip=10.64.89.208, session=\ Jul 19 06:41:21 WHD8 dovecot: pop3-login: Aborted login $auth failed, 1 attempts in 2 secs$: user=\, method=PLAIN, rip=94.102.49.65, lip=10.64.89.208, session=\ Jul 19 07:05:50 WHD8 dovecot: pop3-login: Aborted login $auth failed, 1 attempts in 2 secs$: user=\, method=PLAIN, rip=94.102.49.65, lip=10.64.89.208, session=\ Jul 19 07:12:57 WHD8 dovecot: pop3-login: Aborted login $auth failed, 1 attempts in 2 secs$: user=\, method=PLAIN, rip=94.102.49.65, lip=10.64.89.208, session=\ Jul 19 07:37:27 WHD8 dovecot: pop3-login: Aborted login $auth failed, 1 attempts in 2 secs$: user=\, method=PLAIN, rip=94.102.49.65, lip=10.64.89.208, s ...	2020-07-19 15:55:04
174.64.176.144	attackspam	2020-07-19T05:54:36.981783mail2.broermann.family sshd[12105]: Failed password for invalid user admin from 174.64.176.144 port 56745 ssh2 2020-07-19T05:54:38.713375mail2.broermann.family sshd[12115]: Invalid user admin from 174.64.176.144 port 57056 2020-07-19T05:54:38.912802mail2.broermann.family sshd[12115]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip174-64-176-144.lf.br.cox.net 2020-07-19T05:54:38.713375mail2.broermann.family sshd[12115]: Invalid user admin from 174.64.176.144 port 57056 2020-07-19T05:54:40.593604mail2.broermann.family sshd[12115]: Failed password for invalid user admin from 174.64.176.144 port 57056 ssh2 2020-07-19T05:54:42.238676mail2.broermann.family sshd[12123]: Invalid user admin from 174.64.176.144 port 57180 2020-07-19T05:54:42.428181mail2.broermann.family sshd[12123]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip174-64-176-144.lf.br.cox.net 2020-07-19T05:54:42.238676ma ...	2020-07-19 15:49:18
81.68.103.135	attackbotsspam	Jul 19 09:27:19 ns392434 sshd[21386]: Invalid user squid from 81.68.103.135 port 49802 Jul 19 09:27:19 ns392434 sshd[21386]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.68.103.135 Jul 19 09:27:19 ns392434 sshd[21386]: Invalid user squid from 81.68.103.135 port 49802 Jul 19 09:27:22 ns392434 sshd[21386]: Failed password for invalid user squid from 81.68.103.135 port 49802 ssh2 Jul 19 09:33:06 ns392434 sshd[21517]: Invalid user alex from 81.68.103.135 port 52098 Jul 19 09:33:06 ns392434 sshd[21517]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.68.103.135 Jul 19 09:33:06 ns392434 sshd[21517]: Invalid user alex from 81.68.103.135 port 52098 Jul 19 09:33:08 ns392434 sshd[21517]: Failed password for invalid user alex from 81.68.103.135 port 52098 ssh2 Jul 19 09:35:13 ns392434 sshd[21653]: Invalid user madhu from 81.68.103.135 port 44910	2020-07-19 15:42:53
176.10.99.200	attackspam	"POST /php?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%30+%2D%6E HTTP/1.1"%2	2020-07-19 15:35:06
162.219.124.167	attackspambots	SSH Brute-Forcing (server1)	2020-07-19 15:30:10

Recently Reported IPs

219.107.66.18	149.56.97.251	86.134.18.6	35.242.136.57
114.97.96.88	126.199.5.30	194.61.24.126	189.178.37.141
189.40.84.95	141.123.94.152	106.124.72.77	49.190.202.14
186.149.67.2	221.12.175.223	40.80.57.47	154.78.0.222
23.104.80.197	152.41.137.33	123.235.132.11	115.54.69.146