City: San Jose
Region: California
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 52.53.148.45
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 19135
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;52.53.148.45. IN A
;; AUTHORITY SECTION:
. 252 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022102000 1800 900 604800 86400
;; Query time: 21 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Oct 20 21:48:04 CST 2022
;; MSG SIZE rcvd: 10545.148.53.52.in-addr.arpa domain name pointer ec2-52-53-148-45.us-west-1.compute.amazonaws.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
45.148.53.52.in-addr.arpa name = ec2-52-53-148-45.us-west-1.compute.amazonaws.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 92.86.33.126 | attackspam | Jun 19 06:58:05 our-server-hostname postfix/smtpd[4374]: connect from unknown[92.86.33.126] Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun 19 06:58:15 our-server-hostname postfix/smtpd[4374]: too many errors after RCPT from unknown[92.86.33.126] Jun 19 06:58:15 our-server-hostname postfix/smtpd[4374]: disconnect from unknown[92.86.33.126] Jun 19 13:18:07 our-server-hostname postfix/smtpd[6582]: connect from unknown[92.86.33.126] Jun x@x Jun 19 13:18:09 our-server-hostname postfix/smtpd[6582]: lost connection after RCPT from unknown[92.86.33.126] Jun 19 13:18:09 our-server-hostname postfix/smtpd[6582]: disconnect from unknown[92.86.33.126] Jun 19 20:15:41 our-server-hostname postfix/smtpd[13107]: connect from unknown[92.86.33.126] Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun 19 20:15:45 our-server-hostname postfix/smtpd[13107]: lost connecti........ ------------------------------- |
2019-06-21 21:05:00 |
| 132.255.29.228 | attackbotsspam | 'Fail2Ban' |
2019-06-21 21:06:08 |
| 114.69.232.194 | attackspam | Jun 19 06:35:52 our-server-hostname postfix/smtpd[387]: connect from unknown[114.69.232.194] Jun x@x Jun x@x Jun 19 06:35:54 stew .... truncated .... own[114.69.232.194]: x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun 19 19:33:13 our-server-hostname postfix/smtpd[22625]: too many errors after RCPT from unknown[114.69.232.194] Jun 19 19:33:13 our-server-hostname postfix/smtpd[22625]: disconnect from unknown[114.69.232.194] Jun 19 20:07:05 our-server-hostname postfix/smtpd[6996]: connect from unknown[114.69.232.194] Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun 19 20:07:16 our-server-hostname postfix/smtpd[6996]: too many errors after RCPT from unknown[114.69.232.194] Jun 19 20:07:16 our-server-hostname postfix/smtpd[6996]: disconnect from unknown[114.69.232.194] Jun 19 20:11........ ------------------------------- |
2019-06-21 20:56:43 |
| 110.140.0.81 | attack | Looking for resource vulnerabilities |
2019-06-21 21:45:29 |
| 177.81.25.228 | attackspam | Jun 20 11:17:43 our-server-hostname postfix/smtpd[8551]: connect from unknown[177.81.25.228] Jun x@x Jun x@x Jun 20 11:17:46 our-server-hostname postfix/smtpd[8551]: lost connection after RCPT from unknown[177.81.25.228] Jun 20 11:17:46 our-server-hostname postfix/smtpd[8551]: disconnect from unknown[177.81.25.228] Jun 20 11:19:09 our-server-hostname postfix/smtpd[10351]: connect from unknown[177.81.25.228] Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun 20 11:19:18 our-server-hostname postfix/smtpd[10351]: lost connection after RCPT from unknown[177.81.25.228] Jun 20 11:19:18 our-server-hostname postfix/smtpd[10351]: disconnect from unknown[177.81.25.228] Jun 20 12:37:05 our-server-hostname postfix/smtpd[9427]: connect from unknown[177.81.25.228] Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun 20 12:37:14 our-server-hostname postfix/smtpd[9427]: lost connection after RCPT from unkno........ ------------------------------- |
2019-06-21 21:22:00 |
| 151.252.157.195 | attackspam | 5555/tcp [2019-06-21]1pkt |
2019-06-21 21:24:34 |
| 139.59.79.56 | attackbotsspam | SSH Brute Force |
2019-06-21 21:20:52 |
| 67.27.153.126 | attack | TCP Port: 80 _ invalid blocked zen-spamhaus rbldns-ru _ _ Client xx.xx.7.214 _ _ (328) |
2019-06-21 20:57:00 |
| 134.175.181.138 | attack | Jun 21 10:01:38 MK-Soft-VM7 sshd\[19420\]: Invalid user cloud from 134.175.181.138 port 52916 Jun 21 10:01:38 MK-Soft-VM7 sshd\[19420\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.181.138 Jun 21 10:01:39 MK-Soft-VM7 sshd\[19420\]: Failed password for invalid user cloud from 134.175.181.138 port 52916 ssh2 ... |
2019-06-21 21:08:33 |
| 123.178.134.34 | attackbotsspam | DATE:2019-06-21_11:13:32, IP:123.178.134.34, PORT:1433 MSSQL brute force auth on honeypot server (honey-neo-dc) |
2019-06-21 21:58:40 |
| 110.55.109.42 | attack | Jun 21 15:38:39 bouncer sshd\[28732\]: Invalid user banet from 110.55.109.42 port 45957 Jun 21 15:38:39 bouncer sshd\[28732\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.55.109.42 Jun 21 15:38:41 bouncer sshd\[28732\]: Failed password for invalid user banet from 110.55.109.42 port 45957 ssh2 ... |
2019-06-21 21:50:28 |
| 142.93.3.219 | attackspam | /new_license.php.suspected?check=1 |
2019-06-21 21:39:37 |
| 84.205.241.5 | attackbots | 1433/tcp [2019-06-21]1pkt |
2019-06-21 21:11:36 |
| 70.123.54.150 | attackspam | 22/tcp [2019-06-21]1pkt |
2019-06-21 21:08:08 |
| 1.160.198.13 | attackspam | 445/tcp [2019-06-21]1pkt |
2019-06-21 21:36:58 |