City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 52.44.143.49
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 34725
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;52.44.143.49. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021100 1800 900 604800 86400
;; Query time: 13 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 11 14:26:04 CST 2025
;; MSG SIZE rcvd: 105
49.143.44.52.in-addr.arpa domain name pointer ec2-52-44-143-49.compute-1.amazonaws.com.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
49.143.44.52.in-addr.arpa name = ec2-52-44-143-49.compute-1.amazonaws.com.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 116.255.196.135 | attackbotsspam | Jun 2 14:40:24 vps639187 sshd\[5033\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.255.196.135 user=root Jun 2 14:40:27 vps639187 sshd\[5033\]: Failed password for root from 116.255.196.135 port 37176 ssh2 Jun 2 14:43:12 vps639187 sshd\[5073\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.255.196.135 user=root ... |
2020-06-02 21:13:36 |
| 187.138.39.45 | attackbotsspam | Lines containing failures of 187.138.39.45 Jun 2 13:53:13 kmh-wsh-001-nbg01 sshd[25919]: Invalid user pi from 187.138.39.45 port 49552 Jun 2 13:53:13 kmh-wsh-001-nbg01 sshd[25920]: Invalid user pi from 187.138.39.45 port 49550 Jun 2 13:53:13 kmh-wsh-001-nbg01 sshd[25919]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.138.39.45 Jun 2 13:53:13 kmh-wsh-001-nbg01 sshd[25920]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.138.39.45 Jun 2 13:53:15 kmh-wsh-001-nbg01 sshd[25919]: Failed password for invalid user pi from 187.138.39.45 port 49552 ssh2 Jun 2 13:53:15 kmh-wsh-001-nbg01 sshd[25920]: Failed password for invalid user pi from 187.138.39.45 port 49550 ssh2 Jun 2 13:53:15 kmh-wsh-001-nbg01 sshd[25919]: Connection closed by invalid user pi 187.138.39.45 port 49552 [preauth] Jun 2 13:53:15 kmh-wsh-001-nbg01 sshd[25920]: Connection closed by invalid user pi 187.138.39.45 por........ ------------------------------ |
2020-06-02 21:13:55 |
| 223.18.227.3 | attackspambots | Jun 2 14:08:34 fhem-rasp sshd[7981]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.18.227.3 user=root Jun 2 14:08:36 fhem-rasp sshd[7981]: Failed password for root from 223.18.227.3 port 57591 ssh2 ... |
2020-06-02 20:47:49 |
| 81.133.142.45 | attackbots | 20 attempts against mh-ssh on cloud |
2020-06-02 21:00:55 |
| 140.249.20.167 | attackbots | 1591099728 - 06/02/2020 19:08:48 Host: 140.249.20.167/140.249.20.167 Port: 6379 TCP Blocked ... |
2020-06-02 20:35:55 |
| 118.70.185.229 | attack | Jun 2 14:24:21 buvik sshd[13803]: Failed password for root from 118.70.185.229 port 34974 ssh2 Jun 2 14:28:11 buvik sshd[14374]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.70.185.229 user=root Jun 2 14:28:13 buvik sshd[14374]: Failed password for root from 118.70.185.229 port 35262 ssh2 ... |
2020-06-02 20:38:36 |
| 187.120.0.22 | attackbots | 2020-06-02T12:41:27.623786shield sshd\[27285\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.120.0.22 user=root 2020-06-02T12:41:28.889212shield sshd\[27285\]: Failed password for root from 187.120.0.22 port 14530 ssh2 2020-06-02T12:45:36.571070shield sshd\[27909\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.120.0.22 user=root 2020-06-02T12:45:38.684836shield sshd\[27909\]: Failed password for root from 187.120.0.22 port 52929 ssh2 2020-06-02T12:49:53.693168shield sshd\[28443\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.120.0.22 user=root |
2020-06-02 21:09:56 |
| 222.186.30.218 | attackbots | Jun 2 02:30:18 web9 sshd\[25830\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.218 user=root Jun 2 02:30:20 web9 sshd\[25830\]: Failed password for root from 222.186.30.218 port 26333 ssh2 Jun 2 02:30:30 web9 sshd\[25844\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.218 user=root Jun 2 02:30:31 web9 sshd\[25844\]: Failed password for root from 222.186.30.218 port 50524 ssh2 Jun 2 02:30:37 web9 sshd\[25859\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.218 user=root |
2020-06-02 20:32:40 |
| 211.224.148.159 | attackbotsspam | Jun 2 14:08:35 fhem-rasp sshd[7963]: Failed password for root from 211.224.148.159 port 59126 ssh2 Jun 2 14:08:37 fhem-rasp sshd[7963]: Connection closed by authenticating user root 211.224.148.159 port 59126 [preauth] ... |
2020-06-02 20:47:00 |
| 122.160.45.4 | attackspambots | Jun 2 12:35:28 db01 sshd[10243]: reveeclipse mapping checking getaddrinfo for abts-north-static-004.45.160.122.airtelbroadband.in [122.160.45.4] failed - POSSIBLE BREAK-IN ATTEMPT! Jun 2 12:35:28 db01 sshd[10243]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.160.45.4 user=r.r Jun 2 12:35:30 db01 sshd[10243]: Failed password for r.r from 122.160.45.4 port 46198 ssh2 Jun 2 12:35:30 db01 sshd[10243]: Received disconnect from 122.160.45.4: 11: Bye Bye [preauth] Jun 2 12:37:30 db01 sshd[10352]: reveeclipse mapping checking getaddrinfo for abts-north-static-004.45.160.122.airtelbroadband.in [122.160.45.4] failed - POSSIBLE BREAK-IN ATTEMPT! Jun 2 12:37:30 db01 sshd[10352]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.160.45.4 user=r.r Jun 2 12:37:32 db01 sshd[10352]: Failed password for r.r from 122.160.45.4 port 39878 ssh2 Jun 2 12:37:32 db01 sshd[10352]: Received disconne........ ------------------------------- |
2020-06-02 20:40:01 |
| 125.99.46.49 | attack | Jun 2 12:48:38 localhost sshd[45081]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.99.46.49 user=root Jun 2 12:48:40 localhost sshd[45081]: Failed password for root from 125.99.46.49 port 56684 ssh2 Jun 2 12:52:38 localhost sshd[45558]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.99.46.49 user=root Jun 2 12:52:40 localhost sshd[45558]: Failed password for root from 125.99.46.49 port 60938 ssh2 Jun 2 12:56:39 localhost sshd[46019]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.99.46.49 user=root Jun 2 12:56:41 localhost sshd[46019]: Failed password for root from 125.99.46.49 port 36952 ssh2 ... |
2020-06-02 20:58:09 |
| 222.186.175.169 | attack | Jun 2 15:04:07 legacy sshd[29405]: Failed password for root from 222.186.175.169 port 64204 ssh2 Jun 2 15:04:20 legacy sshd[29405]: Failed password for root from 222.186.175.169 port 64204 ssh2 Jun 2 15:04:20 legacy sshd[29405]: error: maximum authentication attempts exceeded for root from 222.186.175.169 port 64204 ssh2 [preauth] ... |
2020-06-02 21:04:41 |
| 140.143.16.248 | attack | Bruteforce detected by fail2ban |
2020-06-02 20:38:18 |
| 45.138.102.25 | attack | This address is a hacker - they attempted to access my account |
2020-06-02 21:11:23 |
| 223.16.51.140 | attack | Jun 2 14:08:37 fhem-rasp sshd[8020]: Invalid user guest from 223.16.51.140 port 47030 ... |
2020-06-02 20:48:23 |