City: unknown
Region: unknown
Country: None
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 52.48.102.57
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 30234
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;52.48.102.57. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022400 1800 900 604800 86400
;; Query time: 32 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 24 21:22:23 CST 2025
;; MSG SIZE rcvd: 10557.102.48.52.in-addr.arpa domain name pointer ec2-52-48-102-57.eu-west-1.compute.amazonaws.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
57.102.48.52.in-addr.arpa name = ec2-52-48-102-57.eu-west-1.compute.amazonaws.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 34.96.224.46 | attackspam | Lines containing failures of 34.96.224.46 Aug 19 05:12:53 shared07 sshd[14039]: Invalid user mcserv from 34.96.224.46 port 45822 Aug 19 05:12:53 shared07 sshd[14039]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.96.224.46 Aug 19 05:12:55 shared07 sshd[14039]: Failed password for invalid user mcserv from 34.96.224.46 port 45822 ssh2 Aug 19 05:12:56 shared07 sshd[14039]: Received disconnect from 34.96.224.46 port 45822:11: Bye Bye [preauth] Aug 19 05:12:56 shared07 sshd[14039]: Disconnected from invalid user mcserv 34.96.224.46 port 45822 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=34.96.224.46 |
2020-08-20 23:19:45 |
| 139.155.68.58 | attackbotsspam | 2020-08-20T18:01:37.244006mail.standpoint.com.ua sshd[24943]: Failed password for invalid user integral from 139.155.68.58 port 53251 ssh2 2020-08-20T18:03:04.007789mail.standpoint.com.ua sshd[25131]: Invalid user yseo from 139.155.68.58 port 58313 2020-08-20T18:03:04.010551mail.standpoint.com.ua sshd[25131]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.68.58 2020-08-20T18:03:04.007789mail.standpoint.com.ua sshd[25131]: Invalid user yseo from 139.155.68.58 port 58313 2020-08-20T18:03:06.099754mail.standpoint.com.ua sshd[25131]: Failed password for invalid user yseo from 139.155.68.58 port 58313 ssh2 ... |
2020-08-20 23:35:44 |
| 54.37.158.218 | attackspam | Aug 20 20:13:52 dhoomketu sshd[2518476]: Invalid user boss from 54.37.158.218 port 35420 Aug 20 20:13:52 dhoomketu sshd[2518476]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.158.218 Aug 20 20:13:52 dhoomketu sshd[2518476]: Invalid user boss from 54.37.158.218 port 35420 Aug 20 20:13:54 dhoomketu sshd[2518476]: Failed password for invalid user boss from 54.37.158.218 port 35420 ssh2 Aug 20 20:17:53 dhoomketu sshd[2518519]: Invalid user 123456 from 54.37.158.218 port 40537 ... |
2020-08-20 22:59:24 |
| 114.124.132.214 | attackspambots | port scan and connect, tcp 443 (https) |
2020-08-20 23:36:45 |
| 158.69.110.31 | attack | 2020-08-20 13:01:22,854 fail2ban.actions [937]: NOTICE [sshd] Ban 158.69.110.31 2020-08-20 13:36:55,425 fail2ban.actions [937]: NOTICE [sshd] Ban 158.69.110.31 2020-08-20 14:14:13,482 fail2ban.actions [937]: NOTICE [sshd] Ban 158.69.110.31 2020-08-20 14:51:29,558 fail2ban.actions [937]: NOTICE [sshd] Ban 158.69.110.31 2020-08-20 15:26:06,049 fail2ban.actions [937]: NOTICE [sshd] Ban 158.69.110.31 ... |
2020-08-20 23:14:41 |
| 138.68.221.125 | attackbotsspam | 2020-08-20T12:36:47.747281vps-d63064a2 sshd[4303]: Invalid user webapp from 138.68.221.125 port 58738 2020-08-20T12:36:49.917369vps-d63064a2 sshd[4303]: Failed password for invalid user webapp from 138.68.221.125 port 58738 ssh2 2020-08-20T12:40:34.439328vps-d63064a2 sshd[4356]: User root from 138.68.221.125 not allowed because not listed in AllowUsers 2020-08-20T12:40:34.457321vps-d63064a2 sshd[4356]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.221.125 user=root 2020-08-20T12:40:34.439328vps-d63064a2 sshd[4356]: User root from 138.68.221.125 not allowed because not listed in AllowUsers 2020-08-20T12:40:36.111770vps-d63064a2 sshd[4356]: Failed password for invalid user root from 138.68.221.125 port 40020 ssh2 ... |
2020-08-20 23:06:21 |
| 117.247.238.10 | attackbots | Aug 20 17:29:50 cosmoit sshd[1955]: Failed password for root from 117.247.238.10 port 56784 ssh2 |
2020-08-20 23:38:24 |
| 222.186.30.57 | attack | Aug 20 10:54:21 NPSTNNYC01T sshd[9132]: Failed password for root from 222.186.30.57 port 36477 ssh2 Aug 20 10:54:32 NPSTNNYC01T sshd[9141]: Failed password for root from 222.186.30.57 port 40159 ssh2 ... |
2020-08-20 23:02:13 |
| 144.202.73.241 | attack | Automatic report - Banned IP Access |
2020-08-20 23:13:30 |
| 138.68.4.8 | attackspambots | SSH Brute-Forcing (server2) |
2020-08-20 23:31:24 |
| 220.189.192.2 | attackbotsspam | Aug 20 16:28:51 fhem-rasp sshd[16044]: Invalid user rtm from 220.189.192.2 port 45608 ... |
2020-08-20 23:15:11 |
| 176.31.252.148 | attackspambots | prod11 ... |
2020-08-20 23:36:05 |
| 213.6.8.38 | attackspambots | Aug 20 17:03:08 db sshd[6346]: Invalid user user8 from 213.6.8.38 port 40049 ... |
2020-08-20 23:22:00 |
| 101.69.200.162 | attack | Aug 20 17:08:44 ns381471 sshd[31681]: Failed password for proxy from 101.69.200.162 port 60202 ssh2 |
2020-08-20 23:29:23 |
| 1.193.160.164 | attackspambots | Aug 20 17:34:30 lunarastro sshd[14699]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.193.160.164 Aug 20 17:34:32 lunarastro sshd[14699]: Failed password for invalid user jboss from 1.193.160.164 port 33615 ssh2 |
2020-08-20 23:39:48 |