Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Boardman

Region: Oregon

Country: United States

Internet Service Provider: Amazon Technologies Inc.

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackspam
11/10/2019-07:59:07.249201 54.149.121.232 Protocol: 6 SURICATA TLS invalid record/traffic
2019-11-10 19:57:50
attack
11/09/2019-18:39:02.172815 54.149.121.232 Protocol: 6 SURICATA TLS invalid record/traffic
2019-11-10 01:49:13
attack
11/09/2019-16:23:02.018782 54.149.121.232 Protocol: 6 SURICATA TLS invalid record/traffic
2019-11-09 23:28:26
attackspambots
11/09/2019-10:18:02.453513 54.149.121.232 Protocol: 6 SURICATA TLS invalid record/traffic
2019-11-09 17:19:08
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 54.149.121.232
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 34637
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;54.149.121.232.			IN	A

;; AUTHORITY SECTION:
.			470	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019110900 1800 900 604800 86400

;; Query time: 111 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Nov 09 17:19:04 CST 2019
;; MSG SIZE  rcvd: 118
Host info
232.121.149.54.in-addr.arpa domain name pointer ec2-54-149-121-232.us-west-2.compute.amazonaws.com.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
232.121.149.54.in-addr.arpa	name = ec2-54-149-121-232.us-west-2.compute.amazonaws.com.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
193.112.213.248 attackbotsspam
Dec 24 05:43:30 itv-usvr-02 sshd[7785]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.112.213.248  user=root
Dec 24 05:43:32 itv-usvr-02 sshd[7785]: Failed password for root from 193.112.213.248 port 34402 ssh2
Dec 24 05:46:08 itv-usvr-02 sshd[7791]: Invalid user admin from 193.112.213.248 port 59618
Dec 24 05:46:08 itv-usvr-02 sshd[7791]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.112.213.248
Dec 24 05:46:08 itv-usvr-02 sshd[7791]: Invalid user admin from 193.112.213.248 port 59618
Dec 24 05:46:10 itv-usvr-02 sshd[7791]: Failed password for invalid user admin from 193.112.213.248 port 59618 ssh2
2019-12-24 09:00:08
139.59.70.106 attackspambots
Dec 23 22:34:53 iago sshd[5920]: Invalid user fahostnameh from 139.59.70.106
Dec 23 22:34:53 iago sshd[5920]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.70.106 


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=139.59.70.106
2019-12-24 09:10:57
51.15.207.74 attack
Unauthorized connection attempt detected from IP address 51.15.207.74 to port 22
2019-12-24 08:59:12
84.254.57.45 attackspambots
Dec 23 22:46:11 *** sshd[3432]: User root from 84.254.57.45 not allowed because not listed in AllowUsers
2019-12-24 08:58:42
103.209.20.36 attack
Automatic report - Banned IP Access
2019-12-24 08:59:24
185.176.27.18 attackspam
12/24/2019-02:04:47.592489 185.176.27.18 Protocol: 6 ET DROP Dshield Block Listed Source group 1
2019-12-24 09:11:16
60.26.202.203 attack
Dec 24 05:55:17 vpn01 sshd[27025]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.26.202.203
Dec 24 05:55:19 vpn01 sshd[27025]: Failed password for invalid user shogren from 60.26.202.203 port 49342 ssh2
...
2019-12-24 13:01:06
112.85.42.173 attack
Dec 24 06:23:51 areeb-Workstation sshd[31318]: Failed password for root from 112.85.42.173 port 45978 ssh2
Dec 24 06:24:10 areeb-Workstation sshd[31318]: error: maximum authentication attempts exceeded for root from 112.85.42.173 port 45978 ssh2 [preauth]
...
2019-12-24 08:54:54
106.13.123.29 attack
Unauthorized connection attempt detected from IP address 106.13.123.29 to port 22
2019-12-24 13:13:40
165.22.112.45 attack
*Port Scan* detected from 165.22.112.45 (GB/United Kingdom/-). 4 hits in the last 180 seconds
2019-12-24 13:14:06
78.134.9.146 attack
Dec 24 05:55:13 raspberrypi sshd\[8970\]: Invalid user kepekci from 78.134.9.146
...
2019-12-24 13:06:05
128.199.154.60 attack
$f2bV_matches
2019-12-24 09:14:15
92.148.2.42 attackspambots
[portscan] Port scan
2019-12-24 09:01:34
193.70.0.93 attackspambots
Tried sshing with brute force.
2019-12-24 09:10:15
103.4.217.139 attackspam
Dec 24 05:55:18 sso sshd[18306]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.4.217.139
Dec 24 05:55:19 sso sshd[18306]: Failed password for invalid user sveinboerre from 103.4.217.139 port 56571 ssh2
...
2019-12-24 13:00:11

Recently Reported IPs

218.173.0.91 5.196.105.252 1.10.184.210 200.36.117.176
178.46.16.255 198.23.223.139 152.160.241.241 187.162.122.29
212.68.42.177 155.138.128.22 51.158.67.13 43.242.128.32
122.199.25.15 95.54.203.95 45.82.34.4 179.247.165.137
89.3.133.153 192.227.248.221 54.83.151.53 1.52.34.255