City: Ashburn
Region: Virginia
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 52.5.2.148
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 17484
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;52.5.2.148. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025031201 1800 900 604800 86400
;; Query time: 11 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Mar 13 13:19:12 CST 2025
;; MSG SIZE rcvd: 103148.2.5.52.in-addr.arpa domain name pointer ec2-52-5-2-148.compute-1.amazonaws.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
148.2.5.52.in-addr.arpa name = ec2-52-5-2-148.compute-1.amazonaws.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 51.255.168.202 | attackspambots | fraudulent SSH attempt |
2019-12-17 03:38:16 |
| 156.212.146.210 | attackbots | Dec 16 15:28:52 pl3server sshd[12131]: reveeclipse mapping checking getaddrinfo for host-156.212.210.146-static.tedata.net [156.212.146.210] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 15:28:52 pl3server sshd[12131]: Invalid user admin from 156.212.146.210 Dec 16 15:28:52 pl3server sshd[12131]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=156.212.146.210 Dec 16 15:28:54 pl3server sshd[12131]: Failed password for invalid user admin from 156.212.146.210 port 58163 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=156.212.146.210 |
2019-12-17 03:24:39 |
| 222.186.173.180 | attackbots | Dec 16 20:28:55 localhost sshd\[31704\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.180 user=root Dec 16 20:28:57 localhost sshd\[31704\]: Failed password for root from 222.186.173.180 port 33798 ssh2 Dec 16 20:29:01 localhost sshd\[31704\]: Failed password for root from 222.186.173.180 port 33798 ssh2 |
2019-12-17 03:34:45 |
| 54.39.98.253 | attackspambots | $f2bV_matches |
2019-12-17 03:44:32 |
| 167.99.166.195 | attack | SSH Brute-Force reported by Fail2Ban |
2019-12-17 03:55:09 |
| 180.137.8.228 | attackbotsspam | Dec 16 15:41:45 debian-2gb-nbg1-2 kernel: \[160089.446669\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=180.137.8.228 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=13005 PROTO=TCP SPT=30704 DPT=23 WINDOW=54828 RES=0x00 SYN URGP=0 |
2019-12-17 03:52:04 |
| 93.175.193.132 | attackspam | Unauthorized connection attempt from IP address 93.175.193.132 on Port 445(SMB) |
2019-12-17 03:30:51 |
| 176.9.25.194 | attackbotsspam | Dec 16 20:20:34 minden010 sshd[28640]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.9.25.194 Dec 16 20:20:36 minden010 sshd[28640]: Failed password for invalid user larrazabal from 176.9.25.194 port 54154 ssh2 Dec 16 20:28:15 minden010 sshd[30073]: Failed password for root from 176.9.25.194 port 38632 ssh2 ... |
2019-12-17 03:41:10 |
| 51.83.41.120 | attack | Dec 16 21:56:11 microserver sshd[15082]: Invalid user frenchie from 51.83.41.120 port 42606 Dec 16 21:56:12 microserver sshd[15082]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.83.41.120 Dec 16 21:56:13 microserver sshd[15082]: Failed password for invalid user frenchie from 51.83.41.120 port 42606 ssh2 Dec 16 22:01:07 microserver sshd[15837]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.83.41.120 user=root Dec 16 22:01:10 microserver sshd[15837]: Failed password for root from 51.83.41.120 port 50184 ssh2 Dec 16 22:15:43 microserver sshd[18109]: Invalid user misson from 51.83.41.120 port 44690 Dec 16 22:15:43 microserver sshd[18109]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.83.41.120 Dec 16 22:15:45 microserver sshd[18109]: Failed password for invalid user misson from 51.83.41.120 port 44690 ssh2 Dec 16 22:20:47 microserver sshd[18884]: Invalid user hanako from 51.83.4 |
2019-12-17 03:56:09 |
| 222.186.173.154 | attack | Dec 16 20:42:36 herz-der-gamer sshd[16702]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.154 user=root Dec 16 20:42:37 herz-der-gamer sshd[16702]: Failed password for root from 222.186.173.154 port 36256 ssh2 ... |
2019-12-17 03:45:39 |
| 179.232.1.252 | attackspambots | 2019-12-16T16:33:39.798199centos sshd\[1867\]: Invalid user hariha from 179.232.1.252 port 42532 2019-12-16T16:33:39.803581centos sshd\[1867\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.232.1.252 2019-12-16T16:33:41.437358centos sshd\[1867\]: Failed password for invalid user hariha from 179.232.1.252 port 42532 ssh2 |
2019-12-17 03:19:55 |
| 45.153.32.122 | attackbots | Dec 16 15:28:37 mxgate1 postfix/postscreen[13181]: CONNECT from [45.153.32.122]:43574 to [176.31.12.44]:25 Dec 16 15:28:37 mxgate1 postfix/dnsblog[13508]: addr 45.153.32.122 listed by domain zen.spamhaus.org as 127.0.0.2 Dec 16 15:28:43 mxgate1 postfix/postscreen[13181]: DNSBL rank 2 for [45.153.32.122]:43574 Dec x@x Dec 16 15:28:43 mxgate1 postfix/postscreen[13181]: DISCONNECT [45.153.32.122]:43574 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=45.153.32.122 |
2019-12-17 03:21:09 |
| 51.77.148.87 | attack | Dec 16 20:05:24 MK-Soft-VM5 sshd[17998]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.148.87 Dec 16 20:05:25 MK-Soft-VM5 sshd[17998]: Failed password for invalid user sardo from 51.77.148.87 port 40028 ssh2 ... |
2019-12-17 03:45:05 |
| 40.92.71.51 | attack | Dec 16 20:29:24 debian-2gb-vpn-nbg1-1 kernel: [895733.685680] [UFW BLOCK] IN=eth0 OUT= MAC=96:00:00:38:96:44:d2:74:7f:6e:37:e3:08:00 SRC=40.92.71.51 DST=78.46.192.101 LEN=52 TOS=0x02 PREC=0x00 TTL=110 ID=17839 DF PROTO=TCP SPT=32353 DPT=25 WINDOW=8192 RES=0x00 CWR ECE SYN URGP=0 |
2019-12-17 03:29:26 |
| 190.151.105.182 | attackbotsspam | SSH bruteforce |
2019-12-17 03:42:38 |